Privacy policy
Privacy Policy
1) Introduction and Contact Details of the Data Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data refers to all data that can personally identify you.
1.2 The responsible party for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is IITR Datenschutz GmbH, Sebastian Kraska, Email: dskit@iitr.de, Germany, Tel. +49 (0)89-18917360. The person responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
2) Data Collection When Visiting Our Website
2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data that is technically necessary to display the website:
- The website visited
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you accessed the page
- Browser used
- Operating system used
- IP address used (if applicable, in anonymized form)
Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used otherwise. However, we reserve the right to retrospectively review server log files if there are concrete indications of illegal use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the lock symbol in your browser’s address bar.
3) Cookies
To make visiting our website attractive and enable the use of certain functions, we use cookies—small text files stored on your device. Some cookies are automatically deleted when you close your browser (so-called "session cookies"), while others remain on your device longer and enable the storage of page settings (so-called "persistent cookies"). You can find the storage duration in your web browser’s cookie settings.
If personal data is processed by individual cookies, processing occurs in accordance with Art. 6(1)(b) GDPR for contract fulfillment, Art. 6(1)(a) GDPR for consent given, or Art. 6(1)(f) GDPR to protect our legitimate interest in the best possible functionality of the website and a customer-friendly visit experience.
You can configure your browser to inform you about the setting of cookies and allow you to decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general. Please note that disabling cookies may limit the functionality of our website.
4) Contacting Us
When you contact us (e.g., via contact form or email), your personal data will be processed solely to handle and respond to your request, only to the extent necessary for this purpose.
The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted when it is evident that the matter has been conclusively resolved, provided that statutory retention obligations do not prevent deletion.
5) Comment Function
When using the comment function on this website, your comment, as well as details on the time of comment submission and the name you have chosen as a commenter, will be stored and published. Additionally, your IP address will be recorded for security reasons, allowing for assignment to the author in case of unlawful comments. Your email address is stored for contact purposes in case a third party considers your published content to be illegal.
The legal basis for storing your data is Art. 6(1)(b) and (f) GDPR. We reserve the right to delete comments if they are deemed illegal by third parties.
6) Data Processing When Creating a Customer Account
Personal data will be collected and processed in accordance with Art. 6(1)(b) GDPR if you provide it when creating a customer account. Required data for account creation is indicated in the corresponding input fields on our website.
You may delete your customer account at any time by sending a message to the data controller at the address provided above. After deleting your account, your data will be erased unless necessary for fulfilling contracts or retention obligations, or if a legitimate interest in continued storage exists.
7) Data Processing for Order Processing
7.1 Submission of Image Files for Order Processing via Email
On our website, customers have the option to submit image files via email for product customization. The submitted image will serve as a template for the selected product. The files are collected, stored, and used exclusively for fulfilling the order according to the service description on our website.
If submitted files contain personal data (such as identifiable persons), processing occurs solely for processing your order in accordance with Art. 6(1)(b) GDPR. After completion, the submitted image files are automatically and completely deleted.
7.2 Transmission of Personal Data for Shipping and Payment Processing
To the extent necessary for contract fulfillment, personal data collected will be transferred to the contracted shipping company and payment institution according to Art. 6(1)(b) GDPR.
7.3 Use of Payment Service Providers
- PayPal: If you choose PayPal as a payment method, payment data is transmitted to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
- PAYONE: Payment data is processed via PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt/Main, Germany.
Data is transmitted only to the extent necessary for payment processing.
8) Web Analytics Services
Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited. Google Analytics uses cookies to collect data, including anonymized IP addresses, about user behavior. The information is stored on Google servers, and data may be transferred to Google LLC in the U.S. Processing occurs based on Art. 6(1)(a) GDPR, provided explicit consent has been given.
You can prevent Google Analytics from collecting data by disabling it via the "cookie consent tool" provided on our website.
9) User Rights
You have the following rights under GDPR:
- Right to access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restrict processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
You also have the right to file a complaint with a supervisory authority if you believe your data protection rights have been violated.
For full details, please contact the responsible party listed in section 1.2.