Privacy Policy Bellona Frankfurt GmbH

Below, we inform you about what data we collect when you use our website and online shop at www.pashmina.de (hereinafter also referred to as "Pashmina.de") and when you use the services offered there, for what purpose, and how we use this data. The protection of your personal data and your privacy is of particular importance to us. We comply with the provisions of German data protection law.

1. Responsible body and contact

The responsible body within the meaning of the GDPR is the operator of the website www.pashmina.de:

Bellona Cashmere & Horn GmbH
Richard-Wagner-Weg 40
64287 Darmstadt

Telephone: +49 (0)6151 394 63 40
Fax: +49 (0)6151 394 63 44
Email: info@pashmina.de

If you have any questions about data protection or if you wish to exercise your rights (see section 7) or claims regarding your personal data, you can contact us using the contact details provided above.

2. Encryption

For security reasons and to protect the transmission of data that you send to us as the website operator, our website uses TLS encryption. You can recognize the encrypted connection in your browser's address bar by the fact that the address begins with "https://" and by the padlock icon.

With TLS encryption enabled, the data you send to us cannot be read by third parties.

3. Data collection, processing and use of personal data

1. Personal data
   “Personal data” within the meaning of the GDPR is any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
   
   
2. Automatically collected data
   When you visit the website www.pashmina.de, the web server automatically records so-called log files based on our legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR.
   
   This data includes the

• Browser type and version,
• operating system used,
• Referrer URL (the previously visited page),
• IP address of the requesting computer,
• Date, time, and duration of the server request,
• the client's file request (filename and URL) and
• the websites you visit on our site.
  
  This data is collected solely for statistical analysis and security purposes (e.g., to investigate misuse or fraud) and is stored for 7 days. After this period, it is deleted. If longer retention of the data is required for evidentiary purposes, it will be exempt from deletion until the respective incident is fully resolved.

3. Order
   You can generally visit the Pashmina.de website without having to provide any personal data yourself.
   
   However, when you place an order, we collect, process, and use the personal data you provide in accordance with Article 6(1)(b) GDPR to fulfill our contractual obligations and services. In the form fields, the information we require for the services you have requested is marked as mandatory. Providing other information is voluntary.
   
   To conclude and process contracts and orders, we require contact information such as your name, delivery and billing address, and email address, as well as details of your chosen payment method, depending on the specific case. We also use your data to maintain our customer database, ensuring that only accurate information is stored. To prevent typos and guarantee that your ordered items arrive correctly, we verify the completeness and accuracy of your address during entry.

4. Customer account
   You can register as a customer and create a customer account on our website. To do this, you must fill out the form under "My Account." Required fields are marked with an asterisk. Your complete contact details will then be automatically filled in for each order and will not need to be re-entered for every subsequent order. You can view your order status on our website at any time. The collection and use of your data is based on your consent in accordance with Article 6 Paragraph 1 Letter a of the GDPR. We guarantee that your data will only be processed and used by us for this purpose.
   
   You can revoke your consent to data storage at any time with effect for the future.

5. Using a contact form
   When you use our contact form, we collect your email address and name based on Article 6 Paragraph 1 Letter b) of the GDPR for the purpose of fulfilling (pre-)contractual obligations or carrying out measures. This personal data, which you provide to us in connection with this contact request, is only required for responding to your inquiry or contacting you and for the associated technical administration. It will not be shared with third parties.
   
   If you have given us your consent to store your data, you have the right to revoke this consent at any time with effect for the future. In this case, your personal data will be deleted immediately.
   
   Your personal data will also be deleted without your explicit request if we have processed your inquiry or if you revoke the consent to storage granted here. This also applies if storage is inadmissible for other legal reasons.
   

6. Newsletter
   We will regularly inform you via email, upon your request, about current price trends and other interesting offers from the product and service comparison on Pashmina.de. Registration is voluntary and uses the double opt-in procedure. After registering, you will receive an email asking you to confirm your registration. This is necessary to prevent third parties from registering with someone else's email address. To document the registration in accordance with legal requirements, the registration time, confirmation time, and IP address are logged based on our legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR.
   
   By registering, you consent to the processing of the data you provide for sending and receiving emails (Art. 6 para. 1 lit. a) GDPR). Furthermore, you consent to Pashmina.de collecting and processing data about your usage behavior (namely, opening and clicking on links in the email) in order to tailor the content of the mailings to your needs. For example, if you repeatedly click on links related to topic x but not to topic y, you will only receive links related to topic x in future mailings.

4. Disclosure of personal data to third parties and data processors

1. Your personal data will be shared in accordance with Article 6(1)(b) GDPR if this is necessary for processing and fulfilling contractual obligations, e.g., with parcel delivery services such as DHL, Hermes, DPD, or payment service providers such as PayPal, Amazon Pay, VISA, or Mastercard. In these cases, we strictly adhere to the provisions of data protection laws. The scope of data transfer is limited to the minimum necessary (e.g., name, delivery address for delivery services). Our contractual partners may use the data transmitted in this way exclusively for order fulfillment.

2. Furthermore, we only disclose data based on your explicit consent (Art. 6 para. 1 lit. a) GDPR), if a legal obligation requires it (Art. 6 para. 1 lit. c) GDPR) or based on our legitimate interests (Art. 6 para. 1 lit. f) GDPR, e.g. when using agents, web hosts, etc.).
   
   Hosting services serve to provide infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services. We, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, prospective customers, and visitors to this online service based on our legitimate interests in the efficient and secure provision of this online service pursuant to Art. 6 para. 1 lit. f GDPR. Data processing by third parties based on a data processing agreement is carried out in accordance with Art. 28 GDPR.

3. If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)), or if this occurs in the context of using third-party services or disclosing or transferring data to third parties, this will only be done if it is necessary for the performance of our (pre-)contractual obligations (Art. 6 para. 1 lit. b) GDPR), based on your consent (Art. 6 para. 1 lit. a) GDPR), due to a legal obligation (Art. 6 para. 1 lit. c) GDPR), or based on our legitimate interests (Art. 6 para. 1 lit. f) GDPR). Subject to legal or contractual permissions, we will only process or have data processed in a third country if the special requirements of Art. 44 et seq. GDPR are met. The processing is carried out, for example, on the basis of special guarantees, such as the officially recognized finding of a level of data protection equivalent to that of the EU (e.g. for the USA through the “Privacy Shield” agreement) or compliance with officially recognized specific contractual obligations (so-called “standard contractual clauses”).

5. Cookies
To make the use of the websites more user-friendly and effective overall, Pashmina.de itself or through third parties commissioned by us, stores so-called cookies on the customer's hard drive.

A cookie is a small text file used, among other things, to collect information about website usage. It contains a unique string of characters that allows the browser to be identified when the website is visited again. These cookies cannot execute programs or transmit viruses to your computer. Unless otherwise specified, they are automatically deleted after one year at the latest. This data is not combined with other data sources.

Our website can also be used without cookies. You can disable the storage of cookies in your browser, restrict it to certain websites, or configure your browser to notify you as soon as a cookie is sent. You can also delete cookies from your computer's hard drive at any time. Some elements of our website require that the requesting browser can be identified even after a page change. This applies in particular to the shopping cart and wish list. These functions cannot be offered without the use of cookies.

6. Use of web analytics, remarketing and retargeting tools Based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f) GDPR, we use tools or plugins for web analytics, remarketing and retargeting to optimize our online presence and to be able to compile more targeted offers for you.

This involves the use of cookies, the transmission of IP addresses, and/or the collection and analysis of various types of data. This includes, for example, the number of website visitors, visit duration, average page load time, and visitor origin.

In detail:

1. Google Analytics
   We use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies, which enable an analysis of website usage by users. The information generated by the cookie about your use of this website (including your IP address) is generally transmitted to and stored on a Google server in the USA. [Insert operator name] has activated IP anonymization by adding the code "gat._anonymizeIp();" to the websites, so that your IP address is shortened by Google within member states of the EU or in other contracting states of the Agreement on the European Economic Area before being transmitted (so-called IP masking). Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity for [insert operator's name], and to provide other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
   
   Google offers a browser extension (add-on) that can prevent Google Analytics from collecting and processing data. The add-on can be downloaded and installed at your own risk from https://tools.google.com/dlpage/gaoptout .
   
   Further information can be found at http://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection).
   
   Google is certified under the Privacy Shield agreement and thus guarantees compliance with European data protection law ( https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active )

2. Google Adwords
   We use Google AdWords on our website and, within this framework, conversion tracking (visit action evaluation). This is an analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
   
   When you click on an ad served by Google, a conversion tracking cookie is placed on your computer. These cookies have a limited lifespan and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google AdWords customer receives a different cookie. It is not possible to track cookies across the websites of different AdWords customers.
   
   The information collected using the conversion cookie is used to generate conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can personally identify users.
   
   If you do not wish to have this data processed, you can prevent the storage of cookies by adjusting the corresponding technical settings in your internet browser. You will then not be included in the conversion tracking statistics. However, please note that in this case you may not be able to fully utilize all the functions of this website. Furthermore, you can deactivate personalized advertising in your Google ad settings. Instructions for this can be found at https://support.google.com/ads/answer/2662922?hl=de
   
   You can also disable the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: https://www.google.com/settings/ads/plugin
   
   Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/

7. Your rights
For information about your rights and any further questions regarding personal data, you can contact us at any time using the contact details provided above under point 1.

You have the following rights:

1. Right to information

   You have the right at any time to request free information about your personal data stored by us, its origin and recipients, the purpose of the data processing, the planned duration of data storage including a copy of the personal data undergoing processing (Art. 15 GDPR).

2. Right to rectification
   Furthermore, you have the right at any time to have inaccurate personal data rectified without undue delay or to have incomplete personal data completed (Art. 16 GDPR).

3. Right to withdraw consent
   You have the right to withdraw your consent to data processing at any time with effect for the future, without having to provide a reason for withdrawal (Art. 7 para. 3 GDPR).

6. Right to erasure
   You have the right to have your personal data erased without undue delay if it is no longer necessary for the purposes for which it was collected or otherwise processed, or if you withdraw your consent to its lawful processing and there are no other legal grounds for its storage. Your data will also be erased if you object to the processing and there are no overriding legitimate interests for the processing. Finally, the data will be erased if the processing is unlawful for other legal reasons (Art. 17 GDPR).

7. Right to restriction of processing
   You have the right to restrict the processing of your personal data if you contest the accuracy of your personal data, for a period that allows us to verify its accuracy.
   
   A restriction also applies if the processing is unlawful, but you object to the erasure of your personal data and request a restriction of its use instead; if we no longer need your personal data for the purposes for which it was collected, but you require it for the establishment, exercise or defense of legal claims; or if you have objected to the processing, but it is not yet clear whether there are legitimate grounds for data storage at Pashmina.de that override your interests (Art. 18 GDPR).

8. Right to data portability
   You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to transmit it to another controller, provided that the processing is based on consent and the processing is carried out by automated means (Art. 20 GDPR).

9. Right to object
   You have the right to object at any time to the creation of user profiles and to the processing of your personal data, provided that the processing is based on Article 6(1)(e) or (f) GDPR. Your personal data will no longer be processed unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms. If your personal data is used for direct marketing purposes, you naturally have the right to object to such processing at any time (Article 21 GDPR).

10. Right to complain
    You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

8. Data deletion
We will delete your personal data immediately if it is no longer necessary for the purposes for which it was collected or otherwise processed, or if you withdraw your consent to lawful processing and there are no other legal grounds for storage.

If the data cannot be deleted because it is required for other legally permissible purposes, its processing will be restricted. The data will be blocked and not processed for any other purpose. This includes, for example, data that must be retained for commercial or tax law reasons.