Datenschutzerklärung

Introduction

This Privacy Policy describes how constantlyvariedgear.shop collects, uses, stores, discloses and otherwise processes personal information when individuals visit our website, purchase products, communicate with us or otherwise interact with our services.

We take privacy seriously and seek to process personal data fairly, lawfully and transparently.

Where the General Data Protection Regulation applies, personal information is processed in accordance with applicable data-protection principles and legal bases.

For privacy-related enquiries:

Email: info@constantlyvariedgear.shop

Scope

This Privacy Policy applies to personal data processed in connection with:

• Visiting constantlyvariedgear.shop;
• Browsing products;
• Creating or using customer functionality where available;
• Adding products to a cart;
• Completing checkout;
• Placing an order;
• Making a payment;
• Receiving an order;
• Requesting customer support;
• Requesting a return or refund;
• Exercising consumer rights;
• Subscribing to marketing where available;
• Using website features; and
• Communicating with us.

Categories of Personal Data

Depending on how a customer uses the website, we may process categories of information including:

Identification Information

This may include:

• Name;
• Account information;
• Customer identifier; and
• Order-related identifiers.

Contact Information

This may include:

• Email address;
• Telephone number where provided;
• Billing information; and
• Shipping information.

Order Information

This may include:

• Products purchased;
• Product variations;
• Quantity;
• Purchase date;
• Order value;
• Order status;
• Shipping status;
• Returns;
• Refunds; and
• Customer-service history.

Payment and Transaction Information

Payments may be processed through Shopify and third-party payment-service providers.

We may receive transaction-related information necessary to confirm or administer payment.

Full payment-card information may be processed directly by authorised payment providers rather than being stored directly by constantlyvariedgear.shop.

Device and Technical Information

Depending on website configuration, information may include:

• Internet Protocol address;
• Browser type;
• Device type;
• Operating system;
• Language settings;
• Time zone;
• Website interaction information;
• Referring page;
• Session information; and
• Cookie or similar technology identifiers.

Communications

If a customer contacts us, we may process:

• Email correspondence;
• Customer-service requests;
• Complaint information;
• Return requests;
• Refund requests;
• Product photographs;
• Feedback; and
• Other information voluntarily provided.

How Personal Data Is Collected

Personal data may be collected:

• Directly from customers;
• Through website interactions;
• During checkout;
• Through cookies and similar technologies where permitted;
• Through Shopify;
• Through payment providers;
• Through delivery providers;
• Through fraud-prevention providers;
• Through customer-support communications; and
• Through other service providers supporting our ecommerce operations.

Purposes of Processing

We may process personal data for purposes including:

• Providing our online store;
• Processing orders;
• Processing payments;
• Confirming transactions;
• Fulfilling orders;
• Arranging delivery;
• Providing shipping updates;
• Preventing fraud;
• Responding to customer enquiries;
• Managing returns;
• Processing refunds;
• Handling complaints;
• Exercising or defending legal rights;
• Complying with accounting and tax obligations;
• Maintaining website security;
• Diagnosing technical problems;
• Improving website functionality;
• Understanding website usage;
• Providing marketing where legally permitted; and
• Complying with applicable legal requirements.

Legal Bases

Where the GDPR applies, processing may rely on one or more legal bases.

Performance of a Contract

We process information where necessary to:

• Take steps requested before a purchase;
• Process an order;
• Receive payment;
• Arrange delivery;
• Manage the customer relationship;
• Process returns; and
• Perform contractual obligations.

Legal Obligations

We may process personal data where necessary to comply with applicable legal duties, including:

• Tax obligations;
• Accounting obligations;
• Consumer-law obligations;
• Fraud-related obligations;
• Regulatory requirements; and
• Obligations relating to legal claims.

Legitimate Interests

Where permitted, we may process information where necessary for legitimate interests such as:

• Operating the website;
• Maintaining security;
• Preventing fraud;
• Improving services;
• Protecting our rights;
• Managing customer enquiries; and
• Understanding general website performance.

Where processing relies on legitimate interests, we consider applicable rights and interests of affected individuals.

Consent

Where legally required, we may request consent for particular processing activities, including certain marketing or non-essential cookie activities.

Consent may be withdrawn subject to applicable law.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Shopify

constantlyvariedgear.shop uses Shopify ecommerce infrastructure.

Accordingly, Shopify may process information necessary to host and operate the online store, provide checkout functionality, maintain security and provide other ecommerce services.

Shopify's own privacy documentation may also apply to processing carried out by Shopify in accordance with its role.

Payment Providers

Payment transactions may involve third-party payment processors.

Information necessary to process payments may be shared with the applicable payment provider.

Payment providers may process personal data according to their own privacy terms and regulatory obligations.

Shipping and Delivery Providers

To fulfil orders, relevant information may be disclosed to:

• Carriers;
• Postal operators;
• Fulfilment partners;
• Logistics providers; and
• Other parties involved in delivery.

Such information is limited to what is reasonably necessary for delivery and related operational purposes.

Service Providers

We may use third parties to support functions including:

• Website hosting;
• Ecommerce infrastructure;
• Payment processing;
• Fraud prevention;
• Order fulfilment;
• Shipping;
• Analytics;
• Customer support;
• Email communications;
• Information technology;
• Security; and
• Professional services.

Service providers may receive personal data only to the extent reasonably required for the relevant function and subject to applicable contractual and legal requirements.

Cookies and Similar Technologies

constantlyvariedgear.shop may use cookies and similar technologies.

These technologies may be used for purposes such as:

• Maintaining website functionality;
• Remembering cart information;
• Security;
• Fraud prevention;
• Checkout functionality;
• Website preferences;
• Analytics; and
• Advertising or marketing where permitted.

Where consent is legally required for non-essential technologies, such technologies should be used in accordance with the applicable consent requirements.

Marketing Communications

Where permitted by applicable law, customers may receive marketing communications if they have provided valid consent or another lawful basis applies.

Customers may unsubscribe using an unsubscribe mechanism contained in applicable communications or by contacting:

info@constantlyvariedgear.shop

Unsubscribing from marketing will not prevent necessary transactional communications concerning an existing order.

Data Retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected or as required by applicable law.

Retention periods may depend on factors including:

• Whether an active customer relationship exists;
• The nature of the transaction;
• Tax and accounting obligations;
• Consumer-law obligations;
• Legal limitation periods;
• Fraud-prevention requirements;
• Security requirements; and
• Actual or potential legal disputes.

When personal information is no longer required, it may be deleted, anonymised or otherwise handled in accordance with applicable requirements.

International Data Transfers

Because ecommerce services, technology providers, payment providers and infrastructure providers may operate internationally, personal data may in some circumstances be processed outside Germany or the European Economic Area.

Where GDPR requirements apply to international transfers, appropriate transfer mechanisms or safeguards will be used where legally required.

These may include an applicable adequacy decision, standard contractual clauses or another legally recognised transfer mechanism.

Security

We use reasonable organisational and technical measures intended to protect personal information against:

• Unauthorised access;
• Unlawful use;
• Accidental loss;
• Improper disclosure;
• Alteration; and
• Destruction.

However, no internet transmission or electronic storage method can be guaranteed to be completely secure.

Customers should also take reasonable steps to protect their own accounts, devices and credentials.

GDPR Rights

Subject to applicable conditions and exceptions, individuals may have rights including:

• The right of access;
• The right to rectification;
• The right to erasure;
• The right to restriction of processing;
• The right to data portability;
• The right to object to certain processing;
• The right to withdraw consent where processing is based on consent; and
• The right to lodge a complaint with a competent supervisory authority.

Requests may be submitted to:

info@constantlyvariedgear.shop

We may need to verify identity before processing a request.

Automated Decision-Making

Where automated systems are used for functions such as fraud detection or transaction screening, they may analyse transactional or technical information.

Where Article 22 GDPR or another mandatory legal requirement applies, affected individuals will retain the applicable legal rights.

Children's Privacy

constantlyvariedgear.shop is not intended to knowingly collect unnecessary personal information from children.

Where consent of a person with parental responsibility is required under applicable law for a particular online service, we seek to comply with that requirement.

Third-Party Websites

Our website may contain links to websites operated by third parties.

We are not responsible for the privacy practices of independent third-party websites.

Customers should review the privacy policies of third parties before providing personal information to them.

Legal Disclosure

We may disclose information where reasonably necessary to:

• Comply with applicable law;
• Respond to valid legal process;
• Protect customers;
• Protect the website;
• Investigate fraud;
• Enforce contractual rights; or
• Establish, exercise or defend legal claims.

Business Changes

If the business or relevant assets are reorganised, transferred or acquired, information may be transferred as part of that transaction where permitted by applicable law and subject to applicable privacy requirements.

Changes to This Privacy Policy

We may update this Privacy Policy where necessary to reflect:

• Changes to our practices;
• Changes to website functionality;
• New service providers;
• Legal developments;
• Regulatory requirements; or
• Operational changes.

The current version will be published on constantlyvariedgear.shop with an updated revision date.

Contact

For privacy questions or requests:

constantlyvariedgear.shop
Email: info@constantlyvariedgear.shop

The GDPR requires a privacy notice to identify the controller and provide relevant contact details, legal bases, purposes, retention information and data-subject rights