Data and Privacy

The following data protection declaration applies to the use of our website and informs you as a data subject within the meaning of data protection law and user of this website about the processing of personal data. Personal data is individual information about personal or factual circumstances of a specific or identifiable natural person.
Responsible person in the sense of the GDPRNeuling+König+Kühn GbR – ThuwooCreative Unterdorf 6 D-98547 Kühndorf
Cookies (general)We use cookies on our website. Cookies are small (text) files that are created and stored on your terminal device (e.g. smartphone, notebook, tablet, PC). Most cookies are so-called “session cookies” that are deleted after the end of the visit. In individual cases, however, these cookies provide information to automatically recognize the user. By means of a so-called cookie ID, Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. Cookies serve to improve the user-friendliness of our Internet presence and to enable a technically error-free and optimised state for our Internet presence. If you do not agree to the use of cookies, you have the option of restricting or completely deactivating their use in your browser settings. In the event of restriction or deactivation, the use of this website may be restricted. The legal basis for data processing is Art. 6 (1) p. 1 lit. f GDPR, insofar as the cookies are technically necessary for the provision of our offer.  Our legitimate interest follows from the above-mentioned purposes for data collection. If we use cookies that are not technically necessary, this will only be done on the basis of your express consent. Some of the cookies are deleted as soon as you close your browser (transient cookies). Other cookies (persistent cookies) remain on your terminal device and allow us to recognize your browser. These cookies are automatically deleted after a predefined period of time.
What access data do we collect?When you visit our website, the provider of this platform (or its web space provider) collects data about each access to the offer. This access data includes: – the name of the requested web page, – IP address of the requesting computer, – the date and time of the retrieval, – the amount of data transferred, – the browser type and version, – the operating system used by the user, – the website from which the user visits this website (referrer URL), – the IP address of the requesting computer and – the requesting provider   This data, which we collect solely for the purpose of enabling you to visit our website, is generally stored for 90 days, unless special retention periods prevent deletion or the processing is necessary for other reasons, e.g. for the purpose of criminal prosecution or defense against claims for damages. If we have to continue processing your data due to special retention periods or for another reason, we delete the data as soon as the reason for processing no longer exists.
Your rights as a data subjectAs a data subject, you have various rights with regard to the personal data concerning you. You have the following rights vis-à-vis us as the controller within the meaning of data protection law: – Withdrawal of consent – Information (Art. 15 GDPR); – rectification (Art. 16 GDPR); – Deletion (Art. 17 GDPR); – Restriction of processing (Art. 18 GDPR); – Data portability (Art. 20 GDPR); – Right to object (Art. 21 GDPR)   To assert your rights, it is sufficient to notify us.   You also have the right to complain to a supervisory authority (Art. 77 GDPR). To assert this right, it is sufficient to notify the respective supervisory authority.
Data security (SSL/TSL)When visiting this website, the SSL (Secure Socket Layer) procedure is used in conjunction with the highest level of encryption supported by the user’s browser. This is usually a 256-bit encryption. If the browser used by the user does not support 256-bit encryption, 128-bit v3 technology is used. The encrypted transmission of a page of this website can be recognized by the key or lock symbol in the status bar of the browser. In addition to SSL encryption, technical and organizational security measures are used to protect the data against accidental or intentional manipulation, loss, destruction or unauthorized access by third parties. These security measures are continuously improved according to the technological development.

Contact and communication

Contact us (incl. contact form)You have the possibility to contact us via various communication channels such as e-mail, telephone, mail or via a contact form. In case of contact we store your data for the purpose of processing the request. The data will not be passed on to third parties. The processing of personal data is carried out in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. The legitimate interest here is the processing of your request. If your contact is directed towards the conclusion of a contract, the legal basis for the data processing is Art. 6 para. 1 p. 1 lit. b GDPR. We delete this data as soon as your inquiry has been conclusively clarified and insofar as there are no legal storage obligations to the contrary and processing of the data cannot be based on another legal basis.
RegistrationYou have the option of registering on our website. If personal data is collected during registration > e.g. name, e-mail address<, it will be used exclusively for the use of the offer. If desired, the user can request information about information relevant to the offer or registration from the provider. The processing of the data entered during registration is based on your consent >Art. 6 para. 1 lit. a GDPR<. You can revoke your consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing already carried out remains unaffected by the revocation. If the registration is for the purpose of ordering goods in our online shop, the legal basis for the processing is Art. 6 para. 1 lit. a GDPR.
What data is collected during registration?During registration, the following data is collected >address, first name, last name, date of birth, email, address, country, phone(optional)<.
NewsletterIf you have registered for a newsletter, we process your data in order to send you regular news via newsletter. To send you the newsletter, we store and process your e-mail address and, if you voluntarily provide us with additional data, we also store this data. When you register to receive the newsletter, your IP address and the date of registration are stored. The storage serves exclusively as a safeguard in case a third party has misused the address and has registered for the newsletter without the knowledge of the owner or authorized person. We store the data you provide to us for subscribing to the newsletter until you unsubscribe from the newsletter. After unsubscribing from the newsletter, we delete the data from our servers as well as from the servers of the newsletter service provider. If we have stored data from you for other purposes – e.g. e-mail addresses for contract processing – these remain unaffected by this. The legal basis for data processing within the scope of the newsletter is your consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke this consent at any time. To do so, you only need to unsubscribe from the newsletter. You will find a corresponding unsubscribe link in the respective newsletter or on the website. A simple e-mail to us is also sufficient to revoke your consent. The legality of the data processing operations already carried out until the revocation remains unaffected by the revocation. The same applies if you do not want any analysis. In this case, you must unsubscribe from the newsletter. For this, too, it is sufficient to click on the link in the respective message, send us a short e-mail, or unsubscribe via the website. The email to unsubscribe can be sent to any of our email addresses and sent to: info@thuwoocreative.com
MailchimpThe newsletter is sent using “MailChimp”, a platform of The Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. We share the data with MailChimp for newsletter creation and delivery. Mailchimp will use this data in pseudonymized form, if necessary, for the technical optimization of the dispatch and display of the newsletters or for statistical purposes to determine from which countries the recipients come. For more information on the processing of personal data by MailChimp, please visit: https://mailchimp.com/legal/privacy/.

Messenger services

Facebook MessengerUsers have the option of contacting us via the Facebook Messenger service. This is a service of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. The service can be recognised by the >Facebook Messenger symbol<.  If the user calls up the service, a direct connection to the Facebook servers is established. Detailed information >in particular on the purpose and scope of data collection, processing and use of data, rights and settings options for protecting privacy< can be found in Facebook’s privacy policy under the following link https://www.facebook.com/policy.php.

Online shop

  Customer account and contractYou have the possibility to create a customer account on our website or to buy and order goods in our online shop. To process the purchase contract or the order, we need a number of personal data. These are primarily your name and the delivery address or, if applicable, the clothing size for clothing.  You can see which data is collected in the respective input form. You can delete your customer account at any time. To delete your account, it is sufficient to send us a message by e-mail or post. We will then no longer process and delete your data, unless it is necessary for the processing of an order, to secure warranty and guarantee rights or due to other statutory provisions >such as tax retention obligations<. If you have placed an order with us, we will delete your data after processing an order and expiry of guarantee and warranty periods, unless longer processing is necessary due to other statutory provisions >such as tax retention obligations<. he processing of your data is carried out in accordance with Art. 6 para. lit. a GDPR, provided that you only create a customer account. In the case of a chargeable order via our online shop, the processing also takes place in accordance with Art. 6 Para. 1 lit. b GDPR.
Other shipping service provider?

Payment service provider

PayPalAmong other things, we offer payment via PayPal. Provider of this payment service is PayPal >Europe< S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg >in the following >PayPal<. If you select payment via PayPal, the payment data you entered will be transmitted to PayPal.Legal basis for the transmission of your data to PayPal Art. 6 para 1 lit. a GDPR >consent< and Art. 6 para 1 lit. b GDPR >processing for the performance of a contract<. You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.
SofortüberweisungWe offer the payment by means of >Sofortüberweisung<, a payment service of Sofort GmbH, Theresienhöhe 12, 80339 Munich >in the following >Sofort GmbH<. When paying via >Sofortüberweisung<, a PIN, a valid TAN, the payment data entered and your personal data, such as first and last name, address, telephone number, e-mail and IP address and, if necessary, other data required for payment processing, are transmitted to Sofort GmbH. With the help of PIN and TAN Sofort GmbH can log into your online banking account and check your account balance. Then the Sofort GmbH carries out the transfer to us and immediately sends us a confirmation of the payment. Sofort GmbH also checks your sales, the credit limit of the overdraft facility and the existence of other accounts automatically. The transmission of this data is necessary to establish your identity beyond doubt and to prevent fraud attempts. The legal basis for the transmission of your data to Sofort GmbH is Art. 6 para. 1 lit. a GDPR >consent< and Art. 6 para. 1 lit. b GDPR >processing for the performance of a contract<. You can revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations. You can find further information on payment with Sofortüberweisung at: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/
TRACKING/ WEB ANALYSISWe use web tracking and web analysis services. These are services that allow an analysis of the use of our website. We use this data to improve the website and to make our offer more interesting for you. The legal basis for the use of web analysis tools and the associated data processing is Art. 6 para. 1 lit. a GDPR. The processing is carried out exclusively on the basis of the consent given by you. This consent is voluntary and can be revoked by you at any time for the future by simply notifying us. The revocation of consent for the future does not affect the lawfulness of the processing until the revocation.

E-tracker

Facebook Custom Audience via the pixel processWe use the Facebook Pixel, a tool provided by Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland >Facebook<. The Facebook Pixel allows us to track users’ behaviour after they have seen or clicked on a Facebook ad. It allows us to evaluate the effectiveness of our Facebook ads for statistical and market research purposes and thus optimize future advertising efforts. The use of the Facebook Pixel only takes place after your explicit consent. The legal basis for the processing is Art. 6 (1) lit. a GDPR. To give effective consent, you must be at least 13 years old. If you are younger, please ask your legal guardian for permission.   All data that is collected is anonymous for us. We ourselves cannot draw any conclusions about your identity. However, the data is also stored and processed by Facebook. Facebook can thus establish a connection to your user profile and use the data for its own advertising purposes. Facebook’s data policy can be found at: https://www.facebook.com/about/privacy/ . If applicable, Facebook will set a cookie on your terminal device.   You can deactivate the use of cookies on your computer for the future by setting your browser accordingly. Cookies that have already been stored will then be deleted. More information on cookies in general can be found above under the heading Cookies.
Google Analytics (with anonymization function)This website uses Google Analytics, a web analytics service provided by Google Ireland Limited Gordon House, Barrow Street Dublin 4, Ireland. Google Analytics uses so-called <cookies<. These are text files which are stored on the user’s computer and which enable an analysis of the use of the website by the user. The information generated by the cookie about the use of this website >including the IP address< is transmitted to a Google server in the USA and stored there. Your IP address will be processed anonymously shortened using the _anonymizeIp>< method if access to this website is from a member state of the European Union or another state party to the Agreement on the European Economic Area. A personal reference can thus be excluded. As far as the collected data of the user is related to a person, this will be excluded immediately. The personal data will be deleted immediately. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate the user’s IP address with any other data held by Google. Users may refuse the use of cookies by selecting the appropriate settings on their browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, the user consents to the processing of data about him/her by Google in the manner and for the purposes set out above. By downloading and installing the browser plug-in at https://tools.google.com/dlpage/gaoptout?hl=de, users can prevent the collection and transmission of their usage-related data, including their IP address, to Google and the processing of this data by Google. Further information on Google Analytics and the applicable Google privacy policy can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail under this link https://www.google.com/intl/de_de/analytics/. This website uses Google Universal Analytics. This enables a cross-device analysis of user behaviour. The analysis is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under >My data<, >personal data<. The legal basis for the processing is Art. 6 para. 1 lit. a GDPR. The processing is carried out exclusively on the basis of the consent given by you. This consent is voluntary and can be revoked by you at any time for the future by simply notifying us. The revocation of consent for the future does not affect the lawfulness of the processing until the revocation.
JetpackWe use Jetpack. This is a program for statistical analysis of visitor traffic to our website. Jetpack is operated by Automattic Inc, 60 29th Street #343, San Francisco, CA 94110-4929, USA, using tracking technology provided by Quantcast Inc, 201 3rd St, Floor 2, San Francisco, CA 94103-3153, USA. Automattic Inc. subject to the EU-US Privacy Shield, https://www.privacyshield.gov. We use Jetpack to make statistics to improve our service and to protect the website. Jetpack uses so-called <cookies<. For more information on cookies, please see the Cookie section above. The information generated by the cookie about your use of this website is stored on a server in the USA. We use Jetpack with an extension that shortens IP addresses immediately after they are collected. This is to exclude the reference to a person. You can generally prevent the installation of cookies by setting your browser software accordingly. You can object to the processing of data by Quantcast for the future by setting an opt-out cookie in your browser at this point by clicking on the link <Click here to opt-out<: http://www.quantcast.com/opt-out. If you delete all cookies on your computer, you must set the opt-out cookie again. The legal basis for the processing is Art. 6 para. 1 lit. A GDPR. The processing is carried out exclusively on the basis of the consent given by you. This consent is voluntary and can be revoked by you at any time for the future by simply notifying us. The revocation of consent for the future does not affect the lawfulness of the processing until the revocation. For more information, please click on the following links >Automattic – https://automattic.com/privacy >Quantcast Inc. – https://www.quantcast.com/privacy.

Marketing

Google Adwords with Conversion TrackingWe use the service Google Adwords with Conversion Tracking. Google Remarketing is a function of Google AdWords and is operated by Google Ireland Limited Gordon House, Barrow Street Dublin 4, Ireland >>Google<<. In the context of conversion tracking, a cookie is set on your terminal device as soon as you click on a Google advertisement. You can find more detailed explanations on cookies above under the heading Cookies. The cookies used lose their validity after 30 days. If you visit a particular page of our website, we and Google can recognize that you have clicked on an ad, provided that the cookie is still valid. The purpose of conversion tracking is to create conversion statistics. In doing so, we learn the total number of users who clicked on our ad and were redirected to a page that is tagged with a Conversion.Tracking tag.  We do not receive any information with which we can identify a natural person. You can object to the use of the conversion tracking tag by deactivating the cookie via your browser. The legal basis for the processing is Art. 6 (1) lit. a GDPR. We only process the data if you have given us your consent to do so. Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/.
Google Adwords / Google RemarketingWe use the service Google Remarketing. Google Remarketing is a function of Google AdWords and is operated by Google Ireland Limited Gordon House, Barrow Street Dublin 4, Ireland >>Google<<. The remarketing service allows us to display targeted and user-related advertising to you via the Google advertising network or other websites if you have previously visited our website. The purpose of Google Remarketing is the display of interest-relevant advertising that is tailored to the individual needs and interests of users. The legal basis for the processing is Art. 6 para. 1 lit. a GDPR. We only process the data if you have given us your consent to do so. Google Remarketing sets a cookie on device >e.g. PC, laptop, smartphone<. You can find more information about cookies above under the heading Cookie. The cookie allows Google to recognise the user when they visit another website that is also a member of the Google advertising network after visiting our website. Your internet browser automatically identifies itself to Google each time you visit a website on which the Google Remarketing service has been integrated. Google thereby obtains knowledge of various personal data >e.g. IP address<. Google uses this data to display interest-relevant advertising. Whenever you visit our website, personal data is transferred to Google in the United States of America and stored. It is not excluded that Google may pass on data to third parties. You can prevent the setting of cookies as described above under >Cookies<.  If you do not wish to receive interest-based advertising, you can object to this by clicking on www.google.de/settings/ads. Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/.
Social media plug-ins
Use of YouTube videosWe embed YouTube videos on our website via the embedding function of YouTube. YouTube Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland.The embedding of the videos takes place in the extended data protection mode. According to YouTube, user information is only stored when the video(s) is/are started. At the start of the video, >YouTube< uses cookies to collect information about user behavior. The cookie is only set after you have consented to this. This consent is voluntary, and can be revoked by you at any time. The legality of the processing of the data until the revocation of consent remains unaffected. According to >Youtube<, the cookies are used to record video statistics, improve user-friendliness and prevent abusive behaviour. In the process, data, including your IP address, is passed on to Google servers. Google stores your data and evaluates it. This happens regardless of whether you are logged in or not. If you click on a video and are logged in to Google, your data will be directly assigned to your Google account. You can prevent this by logging out before activating the button. The evaluation of the data is based in particular on the interests of Google in the display of personalized advertising, market research and / or design of its website. You can object to the creation of these user profiles. Each time you visit this website, a connection to the Google network >DoubleClick< is established. This happens independently of a playback of the embedded videos. This may trigger further data processing operations over which we have no control.For more information on data protection at >YouTube<, please refer to the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy.
Special instructions for online presences on social networks / platformsWe use online presences on social networks and platforms, such as Facebook fan pages on the Facebook platform. The online presence is technically provided by a service provider, the social network or the platform – hereinafter platform – itself. The platform itself may process personal data, such as your IP address. If you are logged into the social network, the platform may establish a link between your user profile and your visit. A processing of personal data by the platform occurs in particular when you visit the social media presence or when you interact with it, e.g. mark a post with >like<. The processing of data by the platform can be found in the respective privacy policy of the platform. As a rule, the data is processed for market research purposes and advertising. The platform may use this data to create user profiles and generate personalized ads. Further and detailed information on processing by the respective platform and objection options >Opt-Out<, can be found on the respective platform under the specified links. When visiting our respective social media presence, among other things, your IP address is transmitted to the operator and processed. Often, this IP address is anonymized >at German IP addresses< and deleted after a certain time. The operator also stores information about the end devices of its users >e.g. as part of the registration notification function; if necessary, this makes it possible to assign IP addresses to individual users. The platform operators do not conclusively state how the data from the visit is used for their own purposes, to what extent activities are assigned to individual users, how long the operator stores this data and/or whether data from a visit to the Facebook page is passed on to third parties. If you are currently logged in with a profile when visiting our social media presence, cookies with your identifier may be stored on your device. This enables the operator to track that you have visited the page and how you have used it. This also applies to all other pages on the platform. You can avoid attribution of your profile and interactions by logging out of the respective social network or deactivating the “stay logged in” function, deleting the cookies present on your device and exiting and restarting your browser.  Which platforms do we use:
Facebook:Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, Privacy Policy: http://de-de.facebook.com/about/privacy, Facebook Privacy Policy: https://de-de.facebook.com/full_data_use_policy
Instagram:a service of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, Privacy Policy: https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram Help Center&bc[1]=Privacy%20and%20Security
TikTokTikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Privacy Policy; https://www.tiktok.com/legal/privacy-policy?lang=de
YouTubeGoogle Ireland Limited Gordon House, Barrow Street Dublin 4 Ireland
TwitterTwitter International Company One Cumberland Place Fenian Street Dublin 2 D02 AX07 Ireland,Privacy: https://twitter.com/de/privacy
TwitchTwitch Interactive, Inc. located at 350 Bush Street, 2nd Floor, San Francisco, CA 94104, Privacy Policy: https://www.twitch.tv/p/de-de/legal/privacy-notice/
RedditReddit, Inc., 548 Market St. #16093, San Francisco, California 94104 Or: Reddit Ireland Limited, Attn: Reddit EU Data Inquiries, Fitzwilliam Hall, Fitzwilliam Place, Dublin 2, D02 T292, Ireland Data policy: www.redditinc.com/policies/privacy-policy
Manage your Cookie Settings here.