This privacy policy explains the nature, scope, and purpose of the processing of personal data (hereinafter referred to as "data") within our online offering and the associated websites, functions, and content, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as the "online offering"). With regard to the terms used, such as "processing" or "controller," we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

1. Information about the collection of personal data and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data refers to all data that can be used to personally identify you.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Alexo GbR, Eversbuschstr. 171, 80999 Munich, Germany, Tel.: +49 (0)1577 1818140, Email: hello@streetsoup.shop. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser bar.

2. Data collection when visiting our website
If you use our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
– Our visited website
– Date and time of access
– Amount of data sent in bytes
– Source/reference from which you came to the page
– Browser used
– Operating system used
– IP address used (if applicable: in anonymized form)
Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used for any other purpose. However, we reserve the right to subsequently review the server log files if there are concrete indications of illegal use.

3. Cookies
To make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser the next time you visit (persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period of time, which can vary depending on the cookie.
In some cases, cookies are used to simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed through individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) (b) GDPR either to execute the contract or in accordance with Art. 6 (1) (f) GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
We may work with advertising partners who help us make our website more interesting for you. For this purpose, cookies from partner companies will also be stored on your hard drive when you visit our website (third-party cookies). If we work with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case in the paragraphs below.
Please note that you can set your browser to inform you about the use of cookies and to decide individually whether to accept them or to reject cookies in certain cases or generally. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find these settings for each browser at the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehne
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html
Please note that if you do not accept cookies, the functionality of our website may be limited.

4. Contact
When you contact us (e.g. via contact form, email, telephone or social media), personal data is collected. Which data is collected when you use a contact form can be seen in the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted after your request has been finally processed. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention periods to the contrary.

5. Data processing when opening a customer account and for contract processing
We process our customers' data as part of the ordering process in our online shop in order to enable them to select and order the selected products and services, as well as to pay for them and to deliver or execute them.
The data processed includes inventory data, communication data, contract data, and payment data. The data subjects include our customers, prospective customers, and other business partners. The processing is carried out for the purpose of providing contractual services within the scope of operating an online shop, billing, delivery, and customer services. We use session cookies to store the shopping cart contents and permanent cookies to store the login status.

Processing is based on Art. 6 (1) (b) (execution of order transactions) and (c) (legally required archiving) GDPR. The information marked as required is necessary to establish and fulfill the contract. We only disclose this data to third parties in the context of delivery, payment, or within the scope of legal permissions and obligations to legal advisors and authorities. Data will only be processed in third countries if this is necessary to fulfill the contract (e.g., at the customer's request during delivery or payment).

Users can optionally create a user account, which allows them to view their orders, in particular. During registration, the required information is communicated to users. User accounts are not public and cannot be indexed by search engines. If users cancel their user account, their data will be deleted, unless retention is necessary for commercial or tax law reasons in accordance with Art. 6 (1) (c) GDPR. Information in the customer account remains until it is deleted and subsequently archived in the event of a legal obligation. It is the user's responsibility to back up their data before the end of the contract if the contract is terminated.

During registration and subsequent registrations, as well as during use of our online services, we store the IP address and the time of the respective user action. This storage is based on our legitimate interests, as well as the user's interest in protection against misuse and other unauthorized use. This data will generally not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Art. 6 (1) (c) GDPR.

Deletion occurs after expiry of statutory warranty and similar obligations; the necessity of retaining the data is reviewed every three years; in the case of statutory archiving obligations, deletion occurs after their expiry (end of commercial (6 years) and tax (10 years) retention period).

6. Use of your data for direct marketing
6.1 Registration for our email newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to receive the newsletter is your email address. Providing any other data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm that you wish to receive future newsletters by clicking on a corresponding link.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) (a) GDPR. When you register for the newsletter, we save your IP address entered by your Internet service provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your email address at a later date. The data we collect when you register for the newsletter will be used exclusively for the purposes of advertising via the newsletter. You can unsubscribe from the newsletter at any time using the link provided for this purpose in the newsletter or by sending a corresponding message to the person responsible named above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we inform you in this declaration.
6.2 Sending the email newsletter to existing customers
If you provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for goods or services from our range that are similar to those you have already purchased. According to Section 7 (3) of the German Unfair Competition Act (UWG), we do not need to obtain your separate consent for this. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 (1) (f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with future effect by notifying the person responsible named at the beginning. Upon receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.
6.3 Newsletter dispatch via Omnisend
Our email newsletter is sent via the technical service provider Omnisend (www.omnisend.com), to whom we share the data you provided when registering for the newsletter. This sharing occurs in accordance with Art. 6 (1) (f) GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. Please note that your data is generally transferred to an Omnisend server in the USA and stored there.
Omnisend uses this information to send and statistically evaluate the newsletter on our behalf. For evaluation purposes, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links have been clicked. Technical information is also recorded (e.g., time of retrieval, IP address, browser type, and operating system). The data is collected exclusively in pseudonymous form and is not linked to your other personal data; direct personal reference is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients.
If you wish to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
Furthermore, Omnisend may use this data itself, in accordance with Art. 6 (1) (f) GDPR, based on its own legitimate interest in tailoring and optimizing the service to meet customer needs, as well as for market research purposes, for example, to determine which countries the recipients come from. However, Omnisend does not use the data of our newsletter recipients to contact them directly or to share it with third parties.
To protect your data in the USA, we have entered into a data processing agreement with Omnisend based on the European Commission's standard contractual clauses to enable the transfer of your personal data to Omnisend. This data processing agreement can be viewed at the following internet address: https://www.omnisend.privacy
Omnisend is also certified under the US-European data protection agreement “Privacy Shield” and is therefore committed to complying with EU data protection regulations.
6.4 Advertising by post
Based on our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address and – if we have received this additional information from you as part of the contractual relationship – your title, academic degree, year of birth and your professional, industry or business name in accordance with Art. 6 (1) (f) GDPR and to use it to send you interesting offers and information about our products by post.
You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the person responsible.

7. Data processing for order processing
7.1 To process your order, we work with the following service providers, who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information. The personal data we collect will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods.
To fulfill contracts, we use payment service providers on the basis of Art. 6 (1) (b) GDPR. Furthermore, we use external payment service providers based on our legitimate interests in accordance with Art. 6 (1) (b) GDPR to offer our users effective and secure payment options.
The data processed by the payment service providers includes inventory data such as name and address, bank details such as account numbers or credit card numbers, passwords, TANs and checksums as well as contract, amount and recipient-related information. This information is required to carry out the transactions. However, the data entered is only processed and stored by the payment service providers. This means that we do not receive any account- or credit card-related information, only information confirming or rejecting the payment. Under certain circumstances, the payment service providers will transmit the data to credit agencies. This transmission is for the purpose of identity and credit checks. For more information, please refer to the terms and conditions and data protection information of the payment service providers.
Payment transactions are subject to the terms and conditions and privacy policy of the respective payment service providers, which are available on the respective websites or transaction applications. We also refer to these for further information and to assert your rights of withdrawal, information, and other data subjects.
7.2 To fulfill our contractual obligations to our customers, we work with external shipping partners. We will only pass on your name and delivery address to a shipping partner selected by us for the purpose of delivering the goods in accordance with Art. 6 (1) (b) GDPR.
7.3 Use of special service providers for order processing and execution

LSM Fulfillment GmbH
Shipping is handled by "LSM Fulfillment GmbH" (LSM Fulfillment GmbH, Europaring 11, 94315 Straubing). Pursuant to Art. 6 (1) (b) GDPR, we will only pass on your data to LSM Fulfillment GmbH for the purpose of processing your online order. Data will only be passed on to the extent absolutely necessary for processing. Details on data protection at LSM Fulfillment GmbH can be found on the LSM Fulfillment GmbH website at https://www.fulfillment-ecommerce.de/datenschutz/.
7.4 Transfer of personal data to shipping service providers
DHL
If the goods are delivered by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will pass on your email address to DHL in accordance with Art. 6 (1) (a) GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or to provide delivery notification, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Art. 6 (1) (b) GDPR. This information will only be passed on to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or the delivery notification is not possible.
Consent can be revoked at any time with future effect by contacting the person responsible named above or the transport service provider DHL.
UPS
If the goods are delivered by the transport service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we will pass on your email address to UPS prior to delivery of the goods in accordance with Art. 6 (1) (a) GDPR for the purpose of coordinating a delivery date or to provide delivery notification, provided that you have given your express consent to this during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 (1) (b) GDPR, we will only pass on the name of the recipient and the delivery address to UPS. This information will only be passed on to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with UPS or the transmission of status information on the shipment delivery is not possible.
Consent can be revoked at any time with future effect by contacting the person responsible named above or the transport service provider UPS.
7.5 Use of payment service providers
Amazon Pay
If you select the "Amazon Pay" payment method, payment processing will be carried out by the payment service provider Amazon Payments Europe sca, 5 Rue Plaetis, L-2338 Luxembourg (hereinafter: "Amazon Payments"), to whom we will forward the information you provided during the ordering process, along with information about your order, in accordance with Art. 6 (1) (b) GDPR. Your data will be forwarded exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. You can find further information about Amazon Payments' privacy policy at the following internet address: https://pay.amazon.com/de/help/201751600
Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "payment by installments" via PayPal, we will pass your payment data on to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. This transfer takes place in accordance with Art. 6 (1) (b) GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “installment payment” via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) (f) GDPR on the basis of PayPal’s legitimate interest in determining your ability to pay. PayPal uses the result of the credit check with regard to the statistical probability of default to decide whether to provide the respective payment method. The credit check may contain probability values ​​(so-called score values). If score values ​​are included in the result of the credit check, these are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values ​​includes, among other things, but not exclusively, address data. For further information on data protection, including information on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
Klarna (purchase on account)
In order to offer you Klarna's payment options, we will transmit personal data, such as contact details and order data, to Klarna. This allows Klarna to assess whether you are eligible for the payment options offered through Klarna and to adapt the payment options to your needs. General information about Klarna can be found at: https://www.klarna.com/de/. Your personal data will be treated by Klarna in accordance with applicable data protection regulations and in accordance with the information in Klarna's privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

8. Use of social media: social plugins
8.1 Facebook as standard plugin
Our website uses so-called social plugins ("plugins") from the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). The plugins are marked with a Facebook logo or the addition "Facebook Social Plugin" or "Facebook Social Plugin." An overview of Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins
When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged into Facebook. This information (including your IP address) is transmitted from your browser directly to a Facebook server in the USA and stored there.
If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook profile. If you interact with the plug-ins, for example, by clicking the "Like" button or leaving a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.
The data processing operations described are carried out in accordance with Art. 6 (1) (f) GDPR on the basis of Facebook's legitimate interests in displaying personalized advertising in order to inform other users of the social network about your activities on our website and to tailor the service to meet your needs.
If you do not want Facebook to directly associate the data collected through our website with your Facebook profile, you must log out of Facebook before visiting our website. You can also prevent the loading of Facebook plugins and thus the data processing described above in the future using add-ons for your browser, e.g., the script blocker "NoScript" (http://noscript.net/).
Facebook Inc., based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.
For information on the purpose and scope of data collection and further processing and use of data by Facebook, as well as your rights and settings options for protecting your privacy, please refer to Facebook's privacy policy: http://www.facebook.com/policy.php
8.2 Instagram as default plugin
Our website uses so-called social plugins ("plugins") from the online service Instagram, which is operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram"). The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera." An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges
When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page on our website, even if you do not have an Instagram profile or are not currently logged into Instagram. This information (including your IP address) is transmitted from your browser directly to an Instagram server in the USA and stored there.
If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plug-ins, for example, by clicking the "Instagram Camera" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there.
The data processing operations described are carried out in accordance with Art. 6 (1) (f) GDPR on the basis of Instagram's legitimate interests in displaying personalized advertising in order to inform other users of the social network about your activities on our website and to tailor the service to meet your needs.
If you do not want Instagram to directly associate the data collected through our website with your Instagram account, you must log out of Instagram before visiting our website. You can also prevent the loading of Instagram plugins and thus the data processing described above in the future using add-ons for your browser, e.g., the script blocker "NoScript" (http://noscript.net/).
Instagram LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield,” which guarantees compliance with the data protection level applicable in the EU.
For information on the purpose and scope of data collection and the further processing and use of data by Instagram, as well as your rights and setting options for protecting your privacy, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/

9. Online marketing
Use of Google AdWords Conversion Tracking
This website uses the online advertising program "Google AdWords" and, as part of Google AdWords, conversion tracking from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use Google AdWords to draw attention to our attractive offers with the help of advertising materials (so-called Google AdWords) on external websites. We can determine the success of individual advertising measures in relation to the data from the advertising campaigns. In doing so, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you, and achieving a fair calculation of advertising costs.
The cookie for conversion tracking is set when a user clicks on an AdWords ad placed by Google. Cookies are small text files that are stored on your computer system. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. The information collected using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can block this use by deactivating the Google Conversion Tracking cookie in your internet browser's user settings. You will then not be included in the conversion tracking statistics. We use Google Adwords based on our legitimate interest in targeted advertising in accordance with Art. 6 (1) (f) GDPR.
Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.
You can find further information about Google's privacy policy at the following internet address: http://www.google.de/policies/privacy/. You can permanently deactivate cookies for ad preferences by selecting the appropriate settings in your browser software or by downloading and installing the browser plug-in available at the following link:
http://www.google.com/settings/ads/plugin?hl=de. Please note that certain features of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.

10. Web analysis services
10.1 Google (Universal) Analytics
This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your shortened IP address) is generally transmitted to and stored by Google on servers in the United States.
This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures that the IP address is anonymized by shortening it and prevents it from being directly linked to a person. This extension means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent cookies from being saved by selecting the appropriate settings in your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore, you can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link:
http://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data on this website in the future (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you must click this link again): Deactivate Google Analytics
Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.
This website also uses Google Analytics for cross-device analysis of visitor traffic, which is carried out using a user ID. You can deactivate cross-device analysis of your usage in your customer account under "My Data," "Personal Data."
For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de
Users’ personal data will be deleted or anonymized after 14 months.

11. Retargeting/ Remarketing/ Recommendation Advertising
11.1 Facebook Custom Audience via the pixel process
Within our online offering, the so-called “Facebook Pixel” of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), is used due to our legitimate interests in the analysis, optimization and economic operation of our online offering and for these purposes.

Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

With the help of the Facebook pixel, Facebook is able to determine the visitors to our online offering as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to only display the Facebook ads we place to Facebook users who have shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined based on the websites visited) that we transmit to Facebook (so-called "custom audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interests of users and do not appear annoying. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

Facebook processes data in accordance with Facebook's data usage policy. Accordingly, general information on the display of Facebook ads can be found in Facebook's data usage policy: https://www.facebook.com/policy.php. Specific information and details about the Facebook pixel and how it works can be found in Facebook's help section: https://www.facebook.com/business/help/651294705016616.

You can opt out of the Facebook pixel's collection and use of your data to display Facebook ads. To control which types of ads are displayed to you within Facebook, you can visit the page set up by Facebook and follow the instructions for settings for usage-based advertising: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, meaning they apply to all devices, such as desktop computers and mobile devices.

You can also object to the use of cookies for reach measurement and advertising purposes via the Network Advertising Initiative deactivation page (http://optout.networkadvertising.org/) and additionally the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
Furthermore, when using the Facebook pixel, we use the additional "extended matching" function (this involves transmitting data such as users' telephone numbers, email addresses, or Facebook IDs) to Facebook (encrypted) to create target groups ("Custom Audiences" or "Look Alike Audiences"). Further information on "extended matching": https://www.facebook.com/business/help/611774685654668).
We also use the "Custom Audiences from File" process of the social network Facebook, Inc. In this case, the email addresses of newsletter recipients are uploaded to Facebook. The upload process is encrypted. The upload serves solely to determine recipients of our Facebook ads. We want to ensure that the ads are only displayed to users who are interested in our information and services.
11.2 Facebook Messenger Chat
If you send us a personal message via Facebook and grant us permission, we will use personal messages to inform you about STREET SOUP news, such as new products and special offers. If you choose to use this channel to communicate with our support team, we will only share with you the personal information necessary to process your request.
We would like to point out that Facebook may have access to this data in accordance with the Facebook Terms of Use, to which every Facebook user has agreed. Learn more here: https://www.facebook.com/about/privacy/
To exercise your right of objection: You can object to the use of your personal data for advertising purposes at any time, either in whole or specifically for selected communication channels (e.g., only for SMS messages), without incurring any costs other than the transmission costs according to the basic rates. A notification in text form (e.g., email, fax, letter, chat message) is sufficient for this purpose. You can also use our email settings to select which information we send you by email and how often.
11.3 Google AdWords Remarketing
Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 (1) (f) GDPR), we use the marketing and remarketing services (shortly “Google Marketing Services”) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”).

Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google Marketing Services allow us to display advertisements for and on our website in a more targeted manner in order to only present users with ads that potentially match their interests. If, for example, a user is shown ads for products they were interested in on other websites, this is referred to as "remarketing". For these purposes, when you visit our website and other websites on which Google Marketing Services are active, Google immediately executes a code from Google and so-called (re)marketing tags (invisible graphics or code, also known as "web beacons") are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (similar technologies can also be used instead of cookies). The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file records which websites the user has visited, which content they are interested in and which offers they have clicked on, as well as technical information about the browser and operating system, referring websites, time of visit and other information about the use of the online service. The user's IP address is also recorded. Within the framework of Google Analytics, we inform you that the IP address is shortened within member states of the European Union or in other contracting states to the Agreement on the European Economic Area and only in exceptional cases is it transmitted in full to a Google server in the USA and shortened there. The IP address is not merged with user data within other Google offerings. Google may also combine the above-mentioned information with information from other sources. If the user subsequently visits other websites, advertisements tailored to their interests can be displayed.

User data is processed pseudonymously within the framework of Google Marketing Services. This means that Google does not store and process the user's name or email address, for example, but processes the relevant data cookie-related within pseudonymous user profiles. This means that from Google's perspective, the ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is. This does not apply if a user has expressly permitted Google to process the data without this pseudonymization. The information collected about users by Google Marketing Services is transmitted to Google and stored on Google's servers in the USA.

The Google marketing services we use include the online advertising program "Google AdWords." With Google AdWords, each AdWords customer receives a different "conversion cookie." Cookies cannot be tracked across AdWords customers' websites. The information collected with the help of the cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

We may integrate third-party advertisements based on the Google AdSense marketing service. AdSense uses cookies to enable Google and its partner websites to serve ads based on users' visits to this website and other websites on the Internet.

We may also use the “Google Tag Manager” to integrate and manage Google analytics and marketing services on our website.

For more information about Google's use of data for marketing purposes, please visit the overview page: https://www.google.com/policies/technologies/ads, and Google's privacy policy is available at https://www.google.com/policies/privacy.

If you wish to object to interest-based advertising through Google Marketing Services, you can use the settings and opt-out options provided by Google: http://www.google.com/ads/preferences.

12) Rights of the data subject
12.1 The applicable data protection law grants you comprehensive rights as a data subject (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we will inform you below:
In particular, pursuant to Art. 15 GDPR, you have the right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed of the guarantees in place pursuant to Art. 46 GDPR when your data is transferred to third countries;
According to Art. 16 GDPR, you have the right to request that the data concerning you be completed or that inaccurate data concerning you be corrected.
In accordance with Art. 17 GDPR, you have the right to request that the data in question be deleted immediately or, alternatively, to request that the processing of the data be restricted in accordance with Art. 18 GDPR.
You have the right to request that we receive the data concerning you that you have provided to us in accordance with Art. 20 GDPR and to request that it be transmitted to other responsible parties.
Furthermore, pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the competent supervisory authority.
12.2 RIGHT OF OBJECTION
If we process your personal data based on our overriding legitimate interest within the framework of a balancing of interests, you have the right to object to this processing at any time with future effect for reasons arising from your particular situation.
If you exercise your right of objection, we will stop processing the data in question. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such advertising purposes. You can exercise your objection as described above.
If you exercise your right of objection, we will stop processing the data concerned for direct marketing purposes.

13. Duration of storage of personal data
The data we process will be deleted or restricted in accordance with Articles 17 and 18 of the GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and there are no statutory retention periods that prevent deletion. If the data is not deleted because it is required for other legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
According to legal requirements in Germany, storage takes place in particular for 10 years in accordance with Sections 147 Para. 1 AO, 257 Para. 1 Nos. 1 and 4, Para. 4 HGB (books, records, management reports, accounting documents, commercial books, documents relevant for taxation, etc.) and 6 years in accordance with Section 257 Para. 1 Nos. 2 and 3, Para. 4 HGB (commercial letters).
According to legal requirements in Austria, storage takes place in particular for 7 years in accordance with Section 132 Paragraph 1 BAO (accounting documents, receipts/invoices, accounts, receipts, business papers, statements of income and expenditure, etc.), for 22 years in connection with real estate and for 10 years for documents in connection with electronically provided services, telecommunications, radio and television services that are provided to non-entrepreneurs in EU member states and for which the Mini One Stop Shop (MOSS) is used.

14. Administration, financial accounting, office organization, contact management
We process data as part of administrative tasks and to organize our operations, financial accounting, and to comply with legal obligations, such as archiving. In doing so, we process the same data that we process as part of providing our contractual services. The processing is based on Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Customers, interested parties, business partners, and website visitors are affected by the processing. The purpose of and our interest in the processing lies in administration, financial accounting, office organization, and data archiving—i.e., tasks that serve to maintain our business activities, perform our duties, and provide our services. The deletion of data for contractual services and contractual communication corresponds to the information provided for these processing activities.
We disclose or transmit data to the tax authorities, consultants such as tax consultants or auditors as well as other fee offices and payment service providers.

Furthermore, based on our business interests, we store information about suppliers, event organizers, and other business partners, e.g., for the purpose of later contact. We generally store this mostly company-related data permanently.

15. Business analyses and market research
In order to operate our business economically and to identify market trends and customer and user wishes, we analyze the data available to us on business transactions, contracts, inquiries, etc. In doing so, we process inventory data, communication data, contract data, payment data, usage data and metadata on the basis of Art. 6 (1) (f) GDPR, whereby the data subjects include customers, interested parties, business partners, visitors and users of the online offer.
The analyses are conducted for the purposes of business evaluations, marketing, and market research. We may consider the profiles of registered users with information, for example, about the services they have used. The analyses help us increase user-friendliness, optimize our offerings, and improve business efficiency. The analyses serve our sole purpose and will not be disclosed externally unless they are anonymous analyses with summarized values.
If these analyses or profiles are personal, they will be deleted or anonymized upon user termination, otherwise after two years from the conclusion of the contract. Otherwise, the overall business analyses and general trend determinations are created anonymously wherever possible.

16. Changes to the privacy policy and contact
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. If you have any questions about this Privacy Policy, you can contact us by email: hello@streetsoup.shop