PRIVACY POLICY

1. Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how we handle your personal data when you use our website. Personal data means any data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Anna Karpentier, Irenenstraße 24, 10317 Berlin, Germany, email: contact@spiritual-outlaw.com. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content, for example orders or inquiries sent to the controller, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser bar.

1. Data Collection When Visiting Our Website

When you use our website for informational purposes only, meaning when you do not register or otherwise submit information to us, we only collect data that your browser transmits to our server, known as server log files.

When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• the website visited

• date and time of access

• amount of data sent in bytes

• source/reference from which you reached the page

• browser used

• operating system used

• IP address used, where applicable in anonymized form

Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

1. Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies on various pages. Cookies are small text files that are stored on your device.

Some of the cookies we use are deleted again after the end of the browser session, meaning after you close your browser. These are known as session cookies. Other cookies remain on your device and allow us or our partner companies to recognize your browser on your next visit. These are known as persistent cookies.

When cookies are set, they collect and process certain user information to an individual extent, such as browser data, location data and IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

Some cookies are used to simplify the use of our website by storing settings. If personal data is also processed by individual cookies used by us, the processing is carried out pursuant to Art. 6(1)(b) GDPR for the performance of a contract or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the functionality of the website as well as a customer-friendly and effective design of the site visit.

We may work with advertising partners who help us make our online offering more interesting. For this purpose, cookies from partner companies may also be stored on your device when you visit our website.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or exclude the acceptance of cookies for certain cases or in general.

You can find the cookie settings for the respective browsers at the following links:

Internet Explorer:
https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox:
https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome:
https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari:
https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera:
https://help.opera.com/en/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

1. Contacting Us

When you contact us, for example via contact form or email, personal data is collected. The data collected in the case of a contact form can be seen from the respective contact form.

This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the related technical administration.

The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR.

If your contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR.

Your data will be deleted after your request has been finally processed. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

1. Data Processing When Opening a Customer Account and for Contract Processing

Pursuant to Art. 6(1)(b) GDPR, personal data is collected and processed if you provide it to us for the performance of a contract or when opening a customer account.

The data collected can be seen from the respective input forms.

Deletion of your customer account is possible at any time and can be requested by sending a message to the address of the controller stated above.

We store and use the data you provide for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or legally permitted further use of data has been reserved by us.

1. Use of Your Data for Direct Advertising

6.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers.

The only mandatory information required for sending the newsletter is your email address. Providing further data is voluntary and is used to address you personally.

For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving the newsletter.

We will then send you a confirmation email asking you to confirm that you wish to receive the newsletter in the future by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR.

When you subscribe to the newsletter, we store the IP address entered by your internet service provider as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date.

The data collected by us when you subscribe to the newsletter is used exclusively for the purpose of advertising communication via the newsletter.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller named at the beginning.

After unsubscribing, your email address will be deleted immediately from our newsletter mailing list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this where legally permitted.

6.2 Sending the Email Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email.

Pursuant to Section 7(3) of the German Act Against Unfair Competition (UWG), we do not need to obtain separate consent from you for this.

In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6(1)(f) GDPR.

If you initially objected to the use of your email address for this purpose, we will not send you emails.

You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by sending a message to the controller named at the beginning.

After receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.

1. Data Processing for Order and Appointment Processing

7.1 For the processing of orders, appointments or inquiries, we may work with service providers who support us in the performance of concluded contracts.

Only personal data that is necessary for the respective processing is transmitted to these service providers.

The legal basis for the transfer of data is Art. 6(1)(b) GDPR.

7.2 If goods are shipped, we pass on your name and delivery address exclusively for the purpose of delivering the goods to the selected shipping service provider.

The transfer takes place only insofar as this is necessary for the delivery of goods.

7.3 Transfer of Personal Data to Shipping Service Providers

If the goods are delivered by DHL, Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, we pass on the data required for delivery to DHL.

If you have expressly consented to this during the ordering process, your email address may also be passed on for the purpose of delivery notification or coordination of a delivery date.

Consent may be revoked at any time with effect for the future vis-à-vis the controller named above or vis-à-vis DHL.

7.4 Payment Processing

When payment is made through a payment service provider offered on our website, the data required for payment processing is transmitted to the respective provider.

The transfer takes place exclusively for the purpose of payment processing and only insofar as it is necessary for this purpose.

The legal basis is Art. 6(1)(b) GDPR.

For further information on data processing by the respective payment service provider, please refer to the privacy information of the respective provider.

1. Use of Social Media: Videos

Use of YouTube Videos

This website uses the YouTube embedding function to display and play videos from the provider YouTube, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

The extended privacy mode is used, which, according to the provider, only starts storing user information when the video is played.

When embedded YouTube videos are played, YouTube may use cookies to collect information about user behavior. This information may be used, among other things, to compile video statistics, improve user-friendliness and prevent abusive behavior.

If you are logged in to Google, your data may be directly assigned to your account when you click on a video.

If you do not want the data to be associated with your YouTube profile, you must log out before activating the button.

Google may store and evaluate your data as user profiles. Such evaluation is carried out in particular pursuant to Art. 6(1)(f) GDPR on the basis of legitimate interests in displaying personalized advertising, market research or designing offers to meet demand.

You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

When using YouTube, personal data may also be transmitted to Google servers outside the European Union.

Further information on data protection at YouTube can be found in the provider’s privacy policy at:
https://www.google.de/intl/de/policies/privacy

1. Rights of the Data Subject

9.1 Applicable data protection law grants you comprehensive rights as a data subject vis-à-vis the controller regarding the processing of your personal data, about which we inform you below:

Right of access pursuant to Art. 15 GDPR:
In particular, you have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, and the origin of your data if it was not collected from you by us.

Right to rectification pursuant to Art. 16 GDPR:
You have the right to immediate rectification of inaccurate data concerning you and/or completion of incomplete data stored by us.

Right to erasure pursuant to Art. 17 GDPR:
You have the right to request the erasure of your personal data if the requirements of Art. 17(1) GDPR are met.

This right does not apply in particular if processing is necessary for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.

Right to restriction of processing pursuant to Art. 18 GDPR:
You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data is being verified, if you refuse deletion of your data and instead request restriction of processing, if you need your data for the establishment, exercise or defense of legal claims, or if you have objected for reasons relating to your particular situation.

Right to notification pursuant to Art. 19 GDPR:
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification, erasure or restriction of processing, unless this proves impossible or involves disproportionate effort.

You have the right to be informed about these recipients.

Right to data portability pursuant to Art. 20 GDPR:
You have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller, where technically feasible.

Right to withdraw consent granted pursuant to Art. 7(3) GDPR:
You have the right to withdraw consent once granted for the processing of data at any time with effect for the future.

In the event of withdrawal, we will delete the data concerned, unless there is a legal basis for further processing.

The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint pursuant to Art. 77 GDPR:
If you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority.

9.2 Right to Object

If we process your personal data on the basis of our overriding legitimate interest as part of a balancing of interests, you have the right at any time, for reasons arising from your particular situation, to object to this processing with effect for the future.

If you exercise your right to object, we will stop processing the data concerned.

Further processing is reserved if compelling legitimate grounds for processing can be demonstrated or if the processing serves the establishment, exercise or defense of legal claims.

If your personal data is processed by us for direct advertising purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising.

If you exercise your right to object, we will stop processing the data concerned for direct advertising purposes.

1. Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective statutory retention period, for example retention periods under commercial and tax law.

After expiry of the period, the corresponding data is routinely deleted, provided that it is no longer required for the performance or initiation of a contract and there is no legitimate interest on our part in further storage.