Privacy policy
We, 1C1Y GmbH, Schlossstrasse 18, 74638 Waldenburg, Germany (Imprint), are the operator of the website https://1c1y-shop.com/. We are therefore responsible for the collection, processing and use of your personal data in terms of Data Privacy provisions, when visiting our website.
Our data protection officer can be reached under studio@1c1y.de.
We use your personal data in compliance with the applicable data privacy provisions. Below we will describe what data we collect, how we use it and what rights you have in terms of our use of your data:
I. Scope & Purpose of Collection, Processing and Use of personal Data
1. When visiting our Website
When you visit our website, our servers temporarily save every access in a log file. The following data are automatically recorded without any action on your part and stored until automatic deletion:
- the IP address of the accessing computer,
- the date and time of access,
- the name and URL of the accessed file,
- the website from which you accessed our website (referrer),
- your computer’s operating system and the browser used by you,
- the name of your Internet access provider.
These data are collected and processed for the purposes of facilitating use of our website (creating the connection), guaranteeing long-term system security and stability and optimising our web service, as well as for internal statistical purposes. This will not allow us to identify you as an individual person.
Legal basis is Art. 6 Abs. 1 Satz 1 lit. f) DSGVO. Your data is being deleted as soon as there is no need for fulfilling their initial purpose. When gathering data for providing the page, this will be the case, then closing the browser session.
In addition, we also set cookies and use web analytics during visits to our website. You can find more detailed information on this in Sections III, IV and V.
2. When signing up for our newsletter
Sending of Newsletters / Content
We only send out newsletters, E-Mails and further electronical messages with commercial purpose (hereby “newsletter”) only with your explicit consent. Our newsletter contains information about our products, frequent offers and campaigns.
Double-Opt-In and Logging
Subscribing to our newsletter works with the double-opt-in process. This means, after entering your email-address you will receive an email with a confirmation link. The subscription is being logged in order to adhere to legal requirements. This includes logging the subscription and confirmation time as well as the IP-address. Furthermore your data changed within Klaviyo will be logged.
Sign-up Data
To subscribe to our newsletter, it is sufficient to provide your email-address.
Statistical Analysis
The newsletter contains so-called “web-beacons”. That is a pixel-sized file, which is called by the Klaviyo server when opening the newsletter. With this call, technical information as to the used browser, your system, IP-address and point of time are stored. This data is used to improve the technical services and distribution quality. Furthermore, the information is stored, if and when the newsletter was opened by the user and which links have been clicked. This information can indeed be related to a specific user, but we as 1C1Y will not track and explicitly insist with klaviyo on not tracking a single user. This information only helps us to identify general user behaviour due to the usage of our newsletter and to improve the contents towards the optimal user experience.
Online-Call and Data Management
There are scenarios, where we redirect the customer to webpages of Klaviyo. E.g. our newsletter contains a link which allows the user to view the newsletter online whereas this page is hosted on Klaviyo servers. Furthermore, users are able to correct their data, e.g. email-address, later. We want to point out, that Klaviyo uses Cookies on their sites which allows the data collection of personal data through Klaviyo, their partners and used service providers (e.g. Google Analytics). We do not have any impact on that process. You can get more information on Klaviyo data privacy statement.
Right of Withdrawal
You can withdraw your consent to the newsletter subscription at any time via the un-subscription link contained in every newsletter.
Legal Basis data Protection Law
Your subscription to our newsletter is based Art. 6 Abs. 1 lit. a, Art. 7 the General Data Protection Regulation (GDPR) as of 25th of May 2018 GDPR as well as § 7 Abs. 2 Nr. 3,. Abs. 3 UWG. Using Klaviyo, applying statistical analysis as well logging the subscription process are based on our legitimate interest as per 6 Abs. 1 lit. f GDPR. Our interest goes towards using a both user-friendly as well as secure service provider that adheres both to our commercial needs as well as our customer’s expectations.
Recipients outside the EU
With the exception of the processing described above, we do not pass on your data to recipients based outside the European Union or the European Economic Area. The aforementioned processing operations include data transfer to the servers of the providers of tracking or targeting technologies commissioned by us. These servers are located in the USA. The data transfer takes place on the basis of so-called standard contractual clauses of the EU Commission.
3. When using the Contact Form
You can use the contact form on our website for general requests. Your name, a valid e-mail-address and the reason for the request are required. Additional data is non-mandatory. We collect this data to know the author of the request and to reply individually and through whichever method you have specified (via mail, phone or e-mail).
4. When creating a Customer Account
When registering as customer we persist data only in the most necessary extent. Data processing happens for the purpose of improving your shopping experience as well as optimising our fulfilment processes. The data processing happens as per Art. 6 Absatz 1 lit. a DSGVO with your explicit consent. You can withdraw your consent at any time without touching the legitimacy of the data processing based on your consent until your withdrawal. Your account will be deleted subsequently.
Legal Basis data Protection Law
Your subscription to our newsletter is based Art. 6 Abs. 1 lit. a, Art. 7 the General Data Protection Regulation (GDPR) as of 25th of May 2018 GDPR as well as § 7 Abs. 2 Nr. 3,. Abs. 3 UWG.
Using Klaviyo, applying statistical analysis as well logging the subscription process are based on our legitimate interest as per 6 Abs. 1 lit. f GDPR. Our interest goes towards using a both user-friendly as well as secure service provider that adheres both to our commercial needs as well as our customer’s expectations.
II. Disclosure of Data to third Parties For Contractual Purposes
We will share your personal data with third parties only if you have expressly agreed to this, if we are under a legal obligation to do so, or if this is required in order to assert our rights, in particular to enforce claims arising from the contractual relationship.
Beyond this, we will pass your data on to third parties to the extent that this is necessary for processing the contract. We collaborate with external companies for the purpose of processing our various payment transactions: This is Paypal Deutschland GmbH, Am Marktplatz 1, 14532 Kleinmachnow, Germany when paying via Paypal and Stripe, 510 Townsend Street, San Francisco, CA 94103, USA when paying via Stripe. Stripe reviews and evaluates the data you provided and in case of legitimate interest performs a data exchange with other companies and credit rating agencies. Your personal data will be processed in accordance with applicable data protection law as described in Stripe’s privacy statement.
Further third party providers, that are necessary for carrying out the contracts are: shipping provider, logistics fulfilment provider, service provider for processing our orders as well as webhoster. In any case we strictly adhere to legal requirements. Persisted data limits to the necessary minimum.
Personal data will not be disclosed to third parties for any other purpose.
III. Cookies
When you visit our Internet pages, we may store information on your computer in the form of cookies. Cookies are small files that are transferred from an Internet server to your browser and stored on its hard drive. The legal basis for the use of cookies is Art. 6 para. 1 lit f DSGVO. Only the Internet protocol address is saved during this process – but no other personal data. This information, which is stored in the cookies, enables us to recognise you automatically the next time you visit our website, thereby making it easier for you to use our website.
You can of course also visit our Internet pages without accepting cookies. If you do not want your computer to be recognised upon your next visit, you can also refuse the use of cookies by changing the settings in your browser to "Reject cookies". You can find out how to do this in the operating instructions of your browser. However, if you reject the use of cookies, there may be restrictions on the use of some areas of our Internet pages.
IV. Web Analytics
Google Analytics
For the purpose of demand-responsive design and ongoing optimisation of our sites we use Google Analytics, a web analytics service of the Google Inc., 1600 Amphitheatrae Parkway, Mountain View, CA 94043 USA. The information generated by the Cookie about your use of this website (including your IP address) is transferred to a server by Google in the USA and is stored there. IP addresses are anonymised to exclude all possibility of such association (IP masking). The information is used to evaluate use of the website, to compile reports on website activity and to provide further services associated with website and Internet use for the purposes of market research and needs-based design of these web pages. Your data will not in any case be associated with other data from Google. This information may be forwarded to third parties only, insofar as this is prescribed by law or insofar as these parties process the data on behalf of the commissioning party. You can prevent the installation of cookies by adjusting your browser accordingly; in this case, however, not all functions of the website may be available to the user to their full extent. You can also prevent the data generated by the cookie and relating to your use of the website (including your IP address) and the processing of these data by Google, by downloading and installing a browser-add-on. As an alternative to a browser add-on, especially for browsers on mobile devices, you can also avoid the information collection by Google Analytics by clicking on this link. An opt-out cookie is then put in place, which will prevent future collection of your information whenever you visit this website. The opt-out cookie applies only to this browser and our website, and this cookie will be stored on your device. Should you delete the cookies in this browser, you will need to set the opt-out cookie again. Further information about Google Universal Analytics can be found in the Google Analytics help pages. We trust in the reliability of Google’s IT and data security. Google is certified under the US-EU-data protection agreement „Privacy Shield“ and hereby commits to comply with European data protection law.
V. Social Plug Ins
1. Instagram
On our website, so-called social plugins (“plugins”) by the social network Instagram are used, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an “Instagram button” on our website. When you click on the “Instagram-button” while you are logged into your Instagram-profile, you can link the content of our sites to your Instagram profile. This enables Instagram to connect your visit to our sites to your user account. Instagram does not inform us about which information is transmitted and how it is used. For more information, please see the Privacy Statement of Instagram.
2. Facebook
Our website uses social plugins provided by the social network facebook.com, operated by Facebook Inc. The plugins are identifiable by a Facebook logo or the notice “Facebook Social Plugin”. For a full list of all social plugins and their appearance please see the website of Facebook. When you visit a page of our website that contains a social plugin, your browser establishes a direct connection to Facebook servers. Facebook directly transfers the plugin content to your browser which embeds the latter into the website, enabling Facebook to receive information about you having accessed the respective page of our website. For this purpose, the internet address of the visited site (your IP address included) is transferred to a USA-based Facebook server where the data are stored. This occurs even if you do not have a Facebook account or are not logged into Facebook at the time. If you are logged into Facebook, your visit can be assigned to your Facebook account. If you interact with the plugins, for example by clicking “Like”, or entering a comment, the corresponding information is transmitted from your browser directly to Facebook and stored by it. The information can also be published on Facebook and shown to your Facebook friends. For information on the purpose and scope of data collection by Facebook and how it is processed and used, as well as your rights in this respect and settings options for protecting your privacy please visit Facebook’s privacy policy. If you are a Facebook member and do not want Facebook to connect the data concerning your visit to our website with your member data already stored by Facebook, please log off Facebook before entering our website. You can also block Facebook social Plugins by using add-ons for your browser, like the “Facebook Blocker”. Facebook is certified under the US-EU-data protection agreement „Privacy Shield“ and hereby commits to comply with European data protection law.
3. Pinterest
Our website uses plugins provided by the social network Pinterest, operated by Pinterest, Inc., 808 Brannan St, San Francisco, CA 94103, USA (“Pinterest”). When you visit a page of our website that contains a social plugin, your browser establishes a direct connection to Pinterest servers. Pinterest directly transfers the plugin content to your browser which embeds the latter into the website. By embedding the plugins Pinterest receives information that your browser has loaded this specific site of our web presence even if you do not have a Pinterest account or are currently not logged into your Pinterest account. This information (including your IP-address) will be transferred directly to Pinterest’s servers in the USA and stored there. If you are logged into your Pinterest account and click on the “pin it” button, Pinterest receives information that you loaded the respective site of our web presence and may connect data concerning your visit to our website to your Pinterest account. If you do not want that, please log off Pinterest before clicking the “Pin it” Button. For the information on the purpose and scope of data collection and procession by Pinterest, as well as your rights in this respect and settings options for protecting your privacy please visit Pinterest’s privacy policy.
4. Twitter
Within our online offering, features and content of the Twitter service offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, may be incorporated. For this, e.g. content such as images, videos, or text and buttons that users use to promote their content, subscribe to content creators, or subscribe to our posts. If the users are members of the platform Twitter, Twitter can assign the aforementioned contents and functions to the profiles of the users there. Twitter is certified under the Privacy Shield Agreement, which provides a certain guarantee to comply with European privacy legislation. You can find the Privacy Policy of Twitter here.
VI. Right to Information, Correction, Blocking & Deletion
Where permitted by applicable law or regulation, you have the right to:
- Access your personal data held about you and to learn the origin of the data, the purposes and means of the processing, the details of the data controller(s), the data processor(s) and the parties to whom the data may be disclosed;
- Withdraw your consent at any time where your personal data is processed with your consent;
- Update and correct your personal data so that it is accurate;
- Delete your personal data from our records if it is no longer needed for the purposes indicated above;
- Restrict the processing of your personal data in certain circumstances, e.g. where you have contested the accuracy of your personal data, for the period enabling us to verify its accuracy;
- Obtain your personal data in an electronic format;
- File a complaint with us and/or the relevant data protection authority; and
- Object to us processing your personal data or tell us to stop processing it (including for purposes of direct marketing)
VII. Data Security
Your connection to our website is TLS-secured. We use appropriate technical and organisational security measures to protect your stored personal data against manipulation, partial or complete loss and against unauthorised access by third parties. Our security measures are continuously enhanced as new technology becomes available.
VIII. Other
Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.
Through further development of the website or due to changes in legal or regulatory requirements, it might be necessary to make amendments to this privacy policy. The current privacy policy can always be retrieved and printed by you from the website https://1c1y-shop.com.
