Privacy policy
Note
The contract language is German. If these legal texts are made available in other languages, this is for informational purposes only. Only the German version is authoritative and legally binding.
Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data will have no consequences. This applies only insofar as no other information is provided in the following processing operations.
"Personal data" is any information relating to an identified or identifiable natural person.
The processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our offering.
Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
Contact
Responsible
Please contact us if you wish. The person responsible for data processing is: Rafael von Briel, Altengraben 11, 56068 Koblenz Germany, +49 160 99873201, support@coastertees.com
Proactive contact by the customer via email
If you contact us by email on your own initiative, we will only collect your personal data (name, email address, message text) to the extent that you provide it. The data processing serves to process and respond to your contact request.
If the contact serves to carry out pre-contractual measures (e.g., advice on purchase interest, preparation of an offer) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object to the processing of your personal data based on Art. 6 (1) lit. f GDPR at any time for reasons arising from your particular situation.
We only use your email address to process your inquiry. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent that you provide it. The data processing serves the purpose of establishing contact.
If the purpose of establishing contact is to carry out pre-contractual measures (e.g., advice on purchase interest, preparation of an offer) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to the processing of personal data concerning you based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation.
We only use your email address to process your request. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
Customer account Orders
Customer account
When you open a customer account, we collect your personal data to the extent specified there. The purpose of data processing is to improve your shopping experience and simplify order processing. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent until revocation. Your customer account will then be deleted.
Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
Reviews Advertising
Use of Judge.me
We use the “Judge.me” rating system from Judge.me Ltd (c/o Buckworths 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB; “Judge.me”) on our website.
Judge.me enables us to collect customer reviews and display them on our website to give you an insight into the quality of our services.
After placing an order, you may receive an invitation from us or Judge.me to submit a review, which you can then do. In doing so, the following data may be processed by us or Judge.me: Email address, name, phone number, address, information about your device (IP address, information about your web browser and the operating system you use), information about the product you purchased or the service you used (order number, product details), the content of your review and the star rating you gave, your product photos or videos (if you have attached these to your product review). This data may also be used for the purpose of verifying your review.
Judge.me uses technologies such as cookies.
Your data may be transferred outside the EU to the United Kingdom. An adequacy decision by the EU Commission exists for the United Kingdom.
Your data may be transferred to the US. An adequacy decision by the EU Commission is in place for the US, the Trans-Atlantic Data Privacy Framework (TADPF). Judge.me is not certified under the TADPF. This data transfer is based on special contracts that have been approved for use in the United Kingdom and offer the same protection that personal data has in the United Kingdom.
The use of cookies or similar technologies is based on your consent in accordance with § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) (a) GDPR, provided that you have expressly consented to the transfer of your data and the receipt of the evaluation request. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until revocation.
Further information on data protection when using Judge.me can be found at: https://judge.me/privacy.
Use of your email address for sending newsletters
We use your email address to send you information and offers via newsletter, provided you have expressly consented to this. Data processing is used exclusively for advertising purposes. For this purpose, we process your email address and, if applicable, other data that you have voluntarily provided when registering for our newsletter.
Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until revocation.
You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list. Despite removal from the distribution list, we may continue to store your email address in a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is based on Art. 6 (1) lit. f GDPR from our and your legitimate interest in preventing the reuse of your email address for sending our newsletter. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.
Payment service provider Credit check
Use of PayPal Express
We use the PayPal Express payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”) on our website. The purpose of data processing is to offer you payment via the PayPal Express payment service. In order to integrate this payment service, it is necessary for PayPal to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when you visit the website. Cookies may also be used for this purpose. Cookies enable your browser to be recognized.
Your personal data is processed on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in offering customer-oriented payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.
When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) lit. b GDPR. For more information on data processing when using the PayPal Express payment service, please refer to the corresponding privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Use of PayPal Check-Out
We use the PayPal Check-Out payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”) on our website. The purpose of data processing is to enable us to offer you payment via the payment service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) lit. b GDPR.
Cookies may be stored in this process, which enable your browser to be recognized. The resulting data processing is carried out on the basis of Art. 6 (1) lit. f GDPR from our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.
Credit card via PayPal, direct debit via PayPal & “Pay later” via PayPal
For individual payment methods such as credit card via PayPal, direct debit via PayPal or “Pay later” via PayPal, PayPal reserves the right to obtain credit information based on mathematical-statistical methods using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default to make a balanced decision on the establishment, executing or terminating the contractual relationship. The credit check may include probability values (score values) that are calculated on the basis of scientifically recognized mathematical-statistical methods and whose calculation includes, among other things, address data. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR from our overriding legitimate interest in protection against payment default if PayPal makes advance payments.
You have the right to object to the processing of your personal data based on Art. 6 (1) lit. f GDPR at any time for reasons arising from your particular situation by notifying PayPal. The provision of data is necessary for the conclusion of the contract with your desired payment method. Failure to provide this data will result in the contract not being concluded with your chosen payment method.
Third-party providers
When paying via a third-party provider, the data required for payment processing is transmitted to PayPal. This processing is based on Art. 6 (1) lit. b GDPR. In order to carry out this payment method, the data may then be passed on by PayPal to the respective provider. This processing is based on Art. 6 (1) lit. b GDPR. Local third-party providers may include, for example:
- Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
Purchase on account via PayPal
When paying by purchase on account, the data required for payment processing is first transmitted to PayPal. To execute this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; “Ratepay”) in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR. Ratepay may carry out a credit check on the basis of mathematical-statistical methods (probability or score values) using credit agencies in accordance with the procedure described above. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protection against payment default if Ratepay makes advance payments. Further information on data protection and which credit agencies Ratpay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
For more information on data processing when using PayPal, please refer to the relevant privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Cookies may be stored in this process to enable your browser to be recognized. The resulting data processing is based on Art. 6 (1) (f) GDPR due to our overriding legitimate interest in offering customer-oriented payment methods. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.
Cookies
Our website uses cookies. Cookies are small text files that are stored in or by the Internet browser on a user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Use of the Shopify Consent Tool (Shopify Privacy & Compliance)
We use the “Shopify Privacy & Compliance” consent tool from Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) on our website. Shopify is an affiliate of Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool allows you to give your consent to data processing via the website, in particular the setting of cookies, and to exercise your right of withdrawal for consents already given. The purpose of data processing is to obtain and document the necessary consent to data processing and thus comply with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify.
Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
Data processing is carried out to fulfill a legal obligation based on Art. 6 (1) (c) GDPR.
For more information on data protection at Shopify, please visit https://www.shopify.com/de/legal/datenschutz.
Analysis Advertising tracking
Use of Shopify statistics
We use the statistics and analysis functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") as part of order processing. Shopify is an affiliate of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The data processing serves the purpose of analyzing this website and its visitors. Dazu werden Daten zu Marketing- und Optimierungszwecken gespeichert und in Berichten, Analysen und Statistiken bereitgestellt. Dabei werden u.a. folgende Geräteinformationen erhoben und verarbeitet: Informationen zum Webbrowser, der IP-Adresse, der Zeitzone und einigen der Cookies, die auf Ihrem Gerät installiert sind. Wenn Sie auf der Website navigieren, werden zudem Informationen zu aufgerufenen Webseiten oder Produkten, zur Referrer-URL (Webseite, über die Sie unsere Webseite aufgerufen haben), sowie Informationen darüber, wie Sie mit der Website interagieren, erfasst. Hierfür werden Technologien wie Cookies sowie Web-Beacons, Tags und Pixel (elektronische Dateien zur Erfassung von Informationen dazu, wie Sie auf der Website navigieren) genutzt.
Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. For Canada, there is an adequacy decision by the EU Commission. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent until revocation.
You can find more information about data protection at Shopify at https://www.shopify.com/de/legal/datenschutz, information about the data processing agreement at https://www.shopify.com/de/legal/dpa as well as information to the used cookies under https://www.shopify.com/de/legal/cookies.
Sie können die Remarketing-Funktion „Custom Audiences“ hier deaktivieren. For more information on the collection and use of data by Meta, your rights in this regard, and options for protecting your privacy, please refer to Meta's privacy policy at https://www.facebook.com/about/privacy/.
Plug-ins and other
Integration of the Händlerbund member logo
The Händlerbund member logo (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig) is integrated into our website. Beim Aufrufen unserer Website werden durch den auf Ihrem Endgerät zum Einsatz kommenden Browser automatisch Informationen an den Server des Händlerbund e.V. gesendet. Diese Informationen werden temporär in einem sog. Server-Logfile für 7 Tage gespeichert. Folgende Informationen werden dabei ohne Ihr Zutun erfasst und bis zur automatisierten Löschung gespeichert:
- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the file accessed,
- Website from which access is made (referrer URL),
- Browser used and, if applicable, the operating system of your computer and the name of your access provider.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered. Dafür muss die IP-Adresse für die Dauer der Sitzung gespeichert bleiben. Die Speicherung in Logfiles erfolgt, um die Funktionsfähigkeit der Webseite sicherzustellen. Zudem dienen die Daten zur Optimierung der Webseite und zur Sicherstellung der Sicherheit der informationstechnischen Systeme. Eine Speicherung dieser Daten zusammen mit anderen personenbezogenen Daten erfolgt nicht. Rechtsgrundlage für die Datenverarbeitung ist Art. 6 Abs. 1 S. 1 lit. f DSGVO.
Your data may be transferred to the USA. An adequacy decision by the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and is therefore committed to complying with European data protection principles.
Rights of data subjects and storage period
Duration of storage
After complete contract processing, the data will initially be stored for the duration of the warranty period, then in accordance with statutory retention periods, in particular tax and commercial law retention periods, and then deleted after the expiry of the retention period, unless you have consented to further processing and use.
Rights of the data subject
If the legal requirements are met, you are entitled to the following rights under Articles 15 to 20 of the GDPR: Right to information, correction, deletion, restriction of processing, data portability.
In addition, pursuant to Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) f GDPR and to processing for the purpose of direct marketing.
Right to lodge a complaint with the supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
You can lodge a complaint with the supervisory authority responsible for us, which you can reach at the following contact details:
State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate
P.O. Box 30 40
55020 Mainz
Tel.: +49 6131 89200
Fax: +49 6131 8920299
Email: poststelle@datenschutz.rlp.de
Right to object
If the processing of personal data listed here is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation.
Once you have objected, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.
last update: 22.10.2024