Privacy Policy

This data protection declaration informs you about the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offering and the websites, functions and content associated with it as well as external online presences, such as our social media profiles (hereinafter collectively referred to as “online offering”). With regard to the terms used, such as “processing” or “responsible person”, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

1. Information about the collection of personal data and contact details of the person responsible

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we will inform you about how your personal data is handled when you use our website. Personal data is all data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Alexo GbR, Eversbuschstr. 171, 80999 Munich, Tel.: +49 (0) 1577 1818140, Email: hello@streetsoup.shop. The person responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible). You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser bar.

2. Data collection when you visit our website

If you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time at the time of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Operating system used
• IP address used (if necessary: in anonymized form)

Processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

3. Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values ​​on an individual basis. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie.

In some cases, cookies are used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed through individual cookies implemented by us, the processing takes place in accordance with Art.

We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we work with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case in the paragraphs below.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.

Please note that if you do not accept cookies, the functionality of our website may be restricted.

4. Contact us

When you contact us (e.g. via contact form, email, telephone or via social media), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6 (1) (b) GDPR. Your data will be deleted after your request has been finally processed; this is the case if it can be seen from the circumstances that the matter in question has been finally clarified and provided that there are no legal retention obligations to the contrary.

5. Data processing when opening a customer account and for contract processing

We process our customers' data as part of the ordering process in our online shop in order to enable them to select and order the selected products and services, as well as their payment and delivery or execution.

The data processed includes inventory data, communication data, contract data, payment data and the persons affected by the processing include our customers, interested parties and other business partners. The processing takes place for the purpose of providing contractual services as part of the operation of an online shop, billing, delivery and customer services. We use session cookies to store the contents of the shopping cart and permanent cookies to store the login status.

Processing is carried out on the basis of Article 6 Paragraph 1 Letter b (Execution of ordering processes) and c (Lawfully required archiving) GDPR. The information marked as necessary is required to establish and fulfill the contract. We only disclose the data to third parties as part of delivery, payment or within the scope of legal permissions and obligations towards legal advisors and authorities. The data will only be processed in third countries if this is necessary to fulfill the contract.

Users can optionally create a user account. As part of registration, the required mandatory information is provided to users. The user accounts are not public. If users have canceled their user account, their data will be deleted, unless their retention is necessary for commercial or tax reasons in accordance with Article 6 Paragraph 1 Letter c GDPR.

The storage of the IP address during registration and login is based on our legitimate interests in protecting against misuse (Art. 6 Para. 1 lit. f GDPR).

6. Use of your data for direct advertising

6.1 Registration for our email newsletter

If you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory information is your email address. We use the double opt-in procedure for shipping. By activating the confirmation link, you give us your consent to use your data in accordance with Art. 6 Para. 1 lit. a GDPR. You can unsubscribe from the newsletter at any time.

6.2 Sending the email newsletter to existing customers

If you provided us with your email address when purchasing, we reserve the right to regularly send you offers for similar goods by email (§ 7 Para. 3 UWG; Art. 6 Para. 1 lit. f GDPR). You can object to this use at any time.

6.3 Newsletter dispatch via Omnisend

Our email newsletters are sent via the technical service provider Omnisend, to whom we pass on the data you provided when registering for the newsletter (Art. 6 Para. 1 lit. f GDPR). Please note that your data is usually transferred to an Omnisend server in the USA and stored there.

Omnisend uses this information for shipping and statistical analysis. The data is only collected pseudonymously.

To protect your data in the USA, we have concluded a data processing agreement with Omnisend based on the European Commission's standard contractual clauses. Omnisend is also compliant with the EU-U.S. Data Privacy Framework (DPF) certified, which ensures compliance with European data protection levels. Omnisend's privacy policy can be found at: https://www.omnisend.com/privacy/

6.4 Advertising by post

Based on our legitimate interest in personalized direct advertising, we reserve the right to store your name and postal address (in accordance with Art. 6 Para. 1 lit. f GDPR) and use them to send you interesting offers by post. You can object to the storage at any time.

7. Data processing for order processing

7.1 To process your order, we work with service providers (e.g. transport companies and payment service providers) (Art. 6 Para. 1 lit. b and f GDPR). For payment transactions, we refer to the terms and conditions and data protection information of the respective providers.

7.2 We pass on your name and delivery address to a shipping partner exclusively for the purpose of delivering goods (Art. 6 Para. 1 lit. b GDPR).

7.3 Use of special service providers for order processing

Shipping takes place via “LSM Fulfillment GmbH” (Straßäcker 2, 94330 Salching). The transfer takes place in accordance with Article 6 Paragraph 1 Letter b GDPR. (Data protection: https://www.fulfillment-ecommerce.de/datenschutz/)

7.4 Transfer to shipping service providers (DHL / UPS)

If you have expressly consented (Art. 6 Para. 1 lit. a GDPR), we will pass on your email address to DHL (Deutsche Post AG) or UPS (United Parcel Service Deutschland Inc. & Co. OHG) for delivery notification. Otherwise, we will only pass on your name and delivery address (Art. 6 Para. 1 lit. b GDPR). Consent can be revoked at any time.

7.5 Use of payment service providers

Amazon Pay: Payment processing via Amazon Payments Europe s.c.a. (Art. 6 para. 1 lit. b GDPR). Data protection regulations: https://pay.amazon.com/de/help/201751600

PayPal: Payment processing via PayPal (Europe) S.a.r.l. et Cie, S.C.A. (Art. 6 para. 1 lit. b GDPR). For certain payment methods, PayPal reserves the right to provide credit information (Art. 6 Para. 1 lit. f GDPR). Data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Klarna (purchase on account): Transmission of contact and order details to Klarna to assess the payment options. Data protection declaration: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

8. Use of social media: Social plugins

8.1 Facebook as standard plugin

Social plugins from the social network Facebook are used on our website. The provider for users in the EU is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The parent company is Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA.

When you visit a page that contains a plugin, your browser establishes a connection to Meta's servers. Through this integration, Meta receives the information that you have accessed the page, even if you do not have a profile. This information is transmitted directly to a Meta server in the USA.

Data processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR (or Art. 6 Para. 1 lit. a GDPR if consent is given) in order to design the service according to needs.

Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework (DPF) certified, which ensures compliance with the data protection level applicable in the EU when data is transferred to the USA.

Data protection information from Meta (Facebook): http://www.facebook.com/policy.php

8.2 Instagram as default plugin

Our website uses social plugins from the Instagram service. The provider for the EU is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (parent company: Meta Platforms, Inc., USA).

By integrating the plugin, Meta receives the information that your browser has accessed the page. This information is transmitted to a server in the USA. Processing takes place in accordance with Article 6 Paragraph 1 Letter f of the GDPR (or Article 6 Paragraph 1 Letter a of the GDPR).

Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework (DPF) certified, which guarantees an adequate level of data protection.

Data protection information from Instagram: https://help.instagram.com/155833707900388/

9. Online marketing (Google Ads conversion tracking)

This website uses the online advertising program “Google Ads” (formerly AdWords) and conversion tracking from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA).

The cookie for conversion tracking is set when a user clicks on an ad placed by Google (validity: usually 30 days). The information collected is used to create conversion statistics. We use Google Ads based on our legitimate interest in targeted advertising in accordance with Art. 6 Para. 1 lit. f GDPR (or in accordance with Art. 6 Para. 1 lit. a GDPR if consent has been given).

Google LLC is registered under the EU-U.S. Data Privacy Framework (DPF) certified, which ensures compliance with European data protection levels.

Further information: http://www.google.de/policies/privacy/

10. Web analysis services (Google Analytics 4)

This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics 4 uses “cookies”. The information generated is usually transferred to a Google server in the USA and stored there. Google Analytics 4 does not process full IP addresses; By default, IP addresses are shortened and anonymized before storage.

The processing is carried out on the basis of our legitimate interest (Art. 6 Para. 1 lit. f GDPR) or, if obtained, on the basis of your consent (Art. 6 Para. 1 lit. a GDPR).

Google LLC is registered under the EU-U.S. Data Privacy Framework (DPF) certifies and thus ensures an appropriate level of data protection when data is transferred to the USA.

You can prevent Google Analytics from collecting data by installing the Google Analytics deactivation browser add-on: http://tools.google.com/dlpage/gaoptout?hl=de

Users' personal data is regularly deleted or anonymized after 14 months.

11. Retargeting / Remarketing / Referral Advertising

11.1 Meta (Facebook) Custom Audience via the pixel process

We use the so-called “meta pixel” for analysis and optimization purposes. The provider for users in the EU is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Meta Platforms, Inc. (USA) is certified according to the EU-U.S. Data Privacy Framework (DPF) certified and thereby offers the guarantee of compliance with European data protection law.

With the help of the meta pixel, we can understand the effectiveness of Facebook/Instagram advertisements and display targeted advertising (custom audiences). The processing takes place within the framework of Meta's data use policy: https://www.facebook.com/policy.php

You can object to the collection and use of your data: https://www.facebook.com/settings?tab=ads

11.2 Meta (Facebook) Messenger Chat

If you write to us via Messenger, we will inform you about news with your permission. If you use this channel for support, we only exchange necessary data. We would like to point out that Meta (Meta Platforms Ireland Limited) has access to this data. Data protection information: https://www.facebook.com/about/privacy/

11.3 Google Ads Remarketing

We use the remarketing services of Google Ireland Limited (or Google LLC, USA). Google LLC is registered under the EU-U.S. Data Privacy Framework (DPF) certified.

These services allow us to display advertisements for and on our website in a more targeted manner (Art. 6 Para. 1 lit. f and lit. a GDPR). For this purpose, when our website is accessed, codes are executed and remarketing tags are integrated, which store a cookie. User data is processed pseudonymously.

You can object to interest-based advertising: http://www.google.com/ads/preferences

12. Rights of the person concerned

12.1 The applicable data protection law grants you comprehensive data subject rights vis-à-vis the person responsible (Art. 15 ff. GDPR):

• Right to information (Art. 15 GDPR)
• Right to rectification (Article 16 GDPR)
• Right to deletion (Article 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to complain to a supervisory authority (Article 77 GDPR)

12.2 RIGHT TO OBJECT

If we process your data based on our overriding legitimate interest, you have the right to object to this processing with future effect at any time for reasons arising from your particular situation.

If your data is processed for the purpose of direct advertising, you have the right to object to this processing for the purpose of such advertising at any time.

13. Duration of storage of personal data

The data we process will be deleted in accordance with Articles 17 and 18 of the GDPR or its processing will be restricted as soon as they are no longer necessary for their intended purpose and there are no legal retention obligations (e.g. 10 years for tax-relevant documents in accordance with the AO/HGB, 6 years for commercial letters).

14. Administration, financial accounting, office organization

We process data as part of administrative tasks, financial accounting and compliance with legal obligations (Art. 6 Para. 1 lit. c and f GDPR). We disclose or transmit data to the tax authorities, consultants (e.g. tax advisors) and payment service providers. We generally store company-related data from business partners permanently.

15. Business analyzes and market research

In order to be able to identify market trends and customer wishes, we analyze existing data (Art. 6 Para. 1 lit. f GDPR). If these analyzes or profiles are personal, they will be deleted or anonymized when the user terminates their contract, otherwise usually after two years from the conclusion of the contract.

16. Changes to the privacy policy and contacting us

We may update our privacy policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. If you have any questions about this privacy policy, you can contact us by email: hello@streetsoup.shop