Privacy Policy

TABLE OF CONTENTS (8 8 SECTIONS)

Pursuant to Article 13 of the General Data Protection Regulation (GDPR)

Unless otherwise specified below, the provision of your personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are not obligated to provide the data. Failure to provide it will have no consequences. This applies only to the extent that no other information is provided regarding the processing operations described below.

"Personal data" refers to any information relating to an identified or identifiable natural person.

1. CATEGORIES OF PERSONAL DATA COLLECTED, PURPOSES, AND LEGAL BASES FOR PROCESSING

a) Server Log Files

You can visit our websites without providing any personal information. Each time you access our website, usage data is transmitted to us or our web host/IT service provider via your internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting Internet service provider. Processing is based on Article 6 (1) (f) of the GDPR, which permits processing based on a legitimate interest in ensuring the smooth operation of our website.

b) Collection and Processing When Using the Contact Form

When you use the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The data is processed for the purpose of establishing contact. By submitting your message, you consent to the processing of the data you have provided. Processing is based on Article 6 (1) (a) of the GDPR with your consent. You may revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent prior to revocation. We use your email address solely to process your inquiry. Your data will then be deleted unless you have consented to further processing and use.

c) Customer Account

When you open a customer account, we collect your personal data to the extent specified there. The purpose of data processing is to improve your shopping experience and simplify order processing. Processing is based on Article 6 (1) (a) of the GDPR with your consent. You may revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent prior to revocation. Your customer account will then be deleted.

d) Collection, Processing, and Disclosure of Personal Data When Placing Orders

When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Providing this data is necessary for the conclusion of the contract. Failure to provide this data means that no contract can be concluded. Processing is based on Article 6 (1) (b) of the GDPR and is necessary for the performance of a contract with you.

Your data may be disclosed, for example, to the shipping companies, payment service providers, order processing service providers, and IT service providers you have selected. In all cases, we strictly comply with legal requirements. The scope of data transfer is limited to the minimum necessary.

After the contract has been fulfilled, we store your data in accordance with Article 6 (1) (c) of the GDPR to fulfill legal documentation and disclosure obligations arising from the contract concluded with you, but not beyond the scope of Section 257 of the German Commercial Code (HGB) in conjunction with Section 14b of the German Sales Tax Act (UStG).

2. DURATION OF STORAGE OF PERSONAL DATA

Your data will be stored after collection for as long as this

is required in accordance with the statutory retention periods under § 257 of the German Commercial Code (HGB) in conjunction with § 14b of the German Sales Tax Act (UStG),
is necessary to fulfill the purposes mentioned above and based on legitimate interests, but no longer than the statutory retention periods.

3. DATA SUBJECT RIGHTS

Under the EU General Data Protection Regulation (GDPR), you have the following rights:

a) To obtain information regarding the personal data processed or the categories thereof, the purposes of processing, the categories of recipients to whom your data has been or will be disclosed, the intention to transfer data to a third country or an international organization—including appropriate safeguards for such transfers—the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or the right to object; the existence of a right to lodge a complaint; the origin of your data, if it was not collected by us; and the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details,
b) to request the rectification, supplementation, or erasure of your personal data that is inaccurate or is being processed in violation of the law,
c) to request that we restrict the processing of your personal data,
d) under certain circumstances, to object to the processing of your personal data or to withdraw the consent previously given for such processing,
e) to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transferred to another data controller
f) to file a complaint with the competent data protection supervisory authority.

If you wish to exercise your rights, please notify us by email at info@odins-wolves.com or contact us at the following address: