Privacy Policy
This privacy policy explains the kind of personal data lettersoup collects and saves, and how this information is used.
Responsible bodies
The responsible body for our website, i.e. the person responsible for determining the purposes and means of the processing of personal data, is:
Botio Nikoltchev
Malmöer Str. 14
10439 Berlin
E-Mail: info[at]lettersoup.de
USE OF PERSONAL DATA
What is personal data?
According to the law, personal data comprises all information related to an identified or identifiable natural person. A natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Specifically, this means that, for example, apart from the name, address or email address of a person, the IP address or cookies may constitute personal data if they allow inferences to a specific person.
Cookies
Cookies are text files web servers send to the user’s browser, where they are stored and can be retrieved at a later date. Cookies may contain various information that is mostly related to simplifying the use of a website. This may, for example, be the simple storage of individual page settings (font size, language, or other), so that the user does not need to select the same settings again if he or she revisits the web page (so-called “session” or “temporary” cookies); it may also be the storage of user data for user identification purposes, for example, during an order process in an online shop, to ensure that the content of the shopping cart remains intact if the user changes to another web page (so-called “permanent” or “persistent” cookies). Session cookies are only stored for the duration of the session and are deleted automatically when the browser is closed. Permanent cookies are either automatically deleted according to the set expiration date, or manually deleted by the user.
Both types of aforementioned cookies are used on our website.
Google Analytics
Moreover, we use the web analysis provider Google Analytics (Provider: Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA – referred to in the following as “Google”). Google Analytics uses cookies to transfer information about the usage of our website to a Google server in the USA, where the information is then stored. Among the information transmitted to Google is usually the user’s curtailed IP address. In exceptional cases only, the full IP address is transmitted to Google, where it is then curtailed. The IP address transmitted from your browser with Google Analytics will not be associated with other Google data. For more information about the terms and conditions and privacy policy, visit https://www.google.com/analytics/terms/de.html
or at https://www.google.de/intl/de/policies/.
In so far as we are using cookies or processing your personal data through Google Analytics, we justify this with our legitimate interest within the means of Article 6, Par. 1 lit. f. of the General Data Protection Regulation (GDPR). We require the use of cookies to allow easy handling and the cost-effective operation of our online offer and our online shop. We require the use of Google Analytics to analyze the user behavior of the visitors to our website, in order to improve our online offer and for cost-effective operation.
If desired, you can prevent the storage of cookies with a setting in your browser software. This may, under particular circumstances, limit the functionality of the website. Moreover, you can prevent the collection of data (including the IP address) generated with the cookie and related to your use of the website, by downloading and installing the browser plugin from the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Collecting access data and logfiles
Our hosting provider collects data (so-called server logs) about every access to the server hosting our offer, among which is also the IP address. The legal basis for this is our legitimate interest within the meaning of Article 6, Par. 1 lit. f. GDPR. These data are stored for a period not exceeding seven days and are erased afterwards. Data that require further storage for evidential purposes are exempt from erasure until the final clarification of the respective case.
Online shop
When you make a purchase in our online shop, we collect, process and use the following information in order to process your order:
- Salutation
- First name
- Name
- Company
- Address
- Phone
- Payment method
The legal basis for processing this data is Article 6, Par. 1 lit. b. GDPR.
For payment processing, we collaborate with the following payment service providers:
- PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”).
- Stripe, Inc., 185 Berry Street, Suite 550, San Francisco, CA 94107, USA (“Stripe”)
During the order process, you are requested to enter your payment data into a window, i.e. a website of the payment service provider (PayPal) or into an embedded entry field of one of the payment service providers (Stripe) on our website.
When entering and confirming your data, your payment information is transmitted to the respective payment services provider for the purpose of payment processing.
Please note the respective privacy policy of the payment service provider:
PayPal: www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
Stripe: https://stripe.com/de/privacy
We revise the personal information you transmit through our online shop on an annual basis with regard to the requirements according to the aforementioned legal basis. If the storage of your data is no longer required and if there is no legal obligation to retain such data, the data are erased within two years of their collection.
Collaboration with processors and third parties
In so far as we are obliged to make the data available to other persons or companies (processors or third parties) within the data processing process, this occurs only on the basis of a legal permission (e.g. if the transmission of data to shipment or payment services providers according to Article 6, Par. 1 lit. b. GDPR is required to execute pre-contractual measures or to fulfill the contract) with your consent, due to legal obligation or on the basis of our legitimate interests according to Article 6, Par. 1 lit. f. GDPR (for example, when transmitting data to the hosting provider).
Contact
You have the possibility to contact us through our email address (info[at]lettersoup.de). The personal data transmitted during this process will be used exclusively for the purposes for which you provide your data when contacting us. In as far as you transmit personal data with your message, we assume that you consent to the use of this data for the purpose of processing your request. The legal basis for processing this data is thus your consent according to Article 6, Par. 1, lit. a) GDPR. You may revoke this permission at any time.
We revise the personal data you transmit to us through the contact form or via email on an annual basis with regards to the necessity of further storage according to the aforementioned legal bases. If there is no such necessity, the data are erased within a further month.
Right to access, rectification, erasure and objection
You have the right to be provided with information about data relating to your person according to Article 15 GDPR. Moreover, you may demand the rectification of inaccurate data relating to your person (Article 16 GDPR). According to Article 17 GDPR, you may request the erasure of data relating to your person, and according to Article 18 GDPR you may demand the restriction of processing data relating to your person. You may also object to the processing of your data.
To exercise the aforementioned rights, please contact the above-mentioned “Responsible Body” in the contact data.
You also have the right to lodge a complaint with a supervisory authority.
Erasure of personal data
Unless otherwise described in this privacy policy for a specific case, the personal data we store will be erased as soon as we no longer require the data for their purpose and there are no legal obligations to retain the data. As far as the data are not erased because they are used for other legally permitted purposes, the processing of this data is restricted, i.e. the data are blocked and not processed for other purposes. This, for example, applies to data which must be retained according to trade or tax law.
Status: May 2018