privacy policy

§ 1 General

Your personal data (e.g. title, name, address, email address, telephone number, bank details, credit card number) will be processed by us exclusively in accordance with the provisions of German data protection law and the General Data Protection Regulation of the European Union (GDPR).

The following regulations inform you about:

• processing purposes,
• recipient of the data,
• legal basis,
• storage periods, as well as
• Your rights and those responsible for data processing.

This privacy policy applies exclusively to our websites. If you are redirected to other websites via links on our site, please inform yourself about the respective privacy policy and data processing there.

§ 2 Data processing for contract performance

(1) Purpose of processing

The personal data you provide to us during the ordering process are necessary to conclude the contract with you.

We cannot send you the goods without providing your address. For certain payment methods (e.g. PayPal) we transmit your payment details to payment service providers commissioned by us. The data entered during the ordering process is processed exclusively for the purpose of fulfilling the contract.

If you contact us before concluding a contract (e.g. by e-mail or contact form), we process the data provided in order to carry out pre-contractual measures, such as answering questions about our products.

When you open a customer account, we process your data (in particular name, address, email, payment method and password) for registration and login. With a customer account, you can shop faster and view your orders. The account can be deleted at any time by sending us a message or using the delete function.

(2) Legal basis

The processing is carried out on the basis of Art. 6 para. 1 lit. b) GDPR (performance of the contract and pre-contractual measures).

(3) Recipient of the data

Your personal data may be passed on to the following recipients:

• payment service providers,
• shipping service providers,
• hosting provider,
• if necessary, inventory management system,
• if applicable, suppliers in the context of dropshipping.

(4) Storage period

• Contractual data: Until the expiry of the statutory warranty and, if applicable, contractual guarantee periods.
• Commercial and tax retention periods: Ten years in accordance with Sections 257 HGB and 147 AO.
• Data for pre-contractual measures: Will be deleted as soon as it is clear that a contract will not be concluded.

§ 3 Further information

§ 4 PayPal transactions

Please note that all PayPal transactions are subject to PayPal's privacy policy. For more information, see here:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full .​​​​​​​​

§ 5 Web analysis with Google Analytics

(1) Purpose of processing

This website uses Google Analytics with activated IP anonymization, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies that are stored on your device and enable an analysis of website usage make possible.

The information generated by cookies (including your anonymized IP address) is usually transferred to Google servers in the USA and stored there. Only in exceptional cases will the full IP address be transmitted and shortened there.

Google uses this information on behalf of the website operator to evaluate your use of the website and to compile reports on website activity.

(2) Legal basis

The processing is carried out on the basis of your consent in accordance with Art. 6 (1) lit. a) GDPR.

(3) Recipient of the data

Google and, where applicable, Google's partner companies.

(4) Transfer to third countries

The data is transferred to Google servers in the USA. Google is subject to the EU-US Data Privacy Framework to ensure an appropriate level of data protection.

(5) Storage period

The data will be stored for a period of 14 months.

(6) Right of objection

You can prevent Google Analytics from collecting your data as follows:

• Browser plug-in: Install the opt-out plug - in at https://tools.google.com/dlpage/gaoptout .
• Opt-out cookie: Activate an opt-out cookie that excludes your data from collection in the future.

§ 6 Cookies

(1) Purpose of processing

We use technically necessary cookies to ensure the functionality of our website (e.g. shopping cart). Non-necessary cookies (e.g. for analysis purposes) are only set with your consent.

(2) Legal basis

• Technically necessary cookies: Art. 6 para. 1 lit. f) GDPR.
• Analysis and marketing cookies: Art. 6 para. 1 lit. a) GDPR.

(3) Right of objection

You can prevent cookies from being saved using the settings on your browser. You can deactivate non-essential cookies at any time. However, this may limit the functionality of the website.

§ 7 Newsletter

(1) Purpose of processing

If you sign up for our newsletter, we will use your email address solely to send you our newsletter. This will inform you regularly about our products, offers and promotions. For statistical purposes, we can evaluate which links in the newsletter are clicked. These evaluations are carried out anonymously and cannot be traced back to you personally.

(2) Legal basis

Your email address will be processed for sending the newsletter based on your consent in accordance with Art. 6 (1) (a) GDPR.

(3) Recipient of the data

We may use an external service provider (e.g. newsletter distribution provider) to send the newsletter. Your data will only be used for this purpose and will not be passed on to third parties.

(4) Storage period

Your data will be stored for newsletter delivery as long as you are subscribed to the newsletter. After you unsubscribe, your data will be deleted within 30 days.

(5) Right of withdrawal

You can revoke your consent to receive the newsletter at any time with effect for the future. To do so, you can:

• use the “unsubscribe link” at the end of each newsletter or
• contact us via email at Hey @choosehappiness -clothing .com .

After you unsubscribe, your email address will be deleted from our mailing list.

(6) Frequency of the newsletter

The newsletter is sent at regular intervals, but not more often than once a week.

8 Your rights as a data subject

If your personal data is processed, you as the data subject have the following rights vis-à-vis the controller in accordance with the GDPR:

1. Right to information (Article 15 GDPR)
   You have the right to request information about the personal data we process. This includes information about processing purposes, categories of personal data, recipients or categories of recipients, planned storage period and your other rights.

2. Right to rectification (Article 16 GDPR)
   If your personal data is incomplete or incorrect, you can request that it be corrected or completed.

3. Right to erasure (Article 17 GDPR)
   You have the right to request the deletion of your personal data, provided that there is no legal obligation or legitimate interest on our part that prevents deletion.

4. Right to restriction of processing (Article 18 GDPR)
   You can request that the processing of your personal data be restricted if:

   • you dispute the accuracy of the data,
   • the processing is unlawful but you oppose its erasure,
   • we no longer need the data, but you require it to assert, exercise or defend legal claims, or
   • You have objected to the processing and it has not yet been determined whether our legitimate reasons prevail.

5. Right to data portability (Article 20 GDPR)
   You have the right to receive the personal data concerning you that you have made available to us in a structured, common and machine-readable format. You can also request that the data be transferred to another controller, provided that this is technically feasible.

6. Right to withdraw consent (Article 7, Paragraph 3 of the GDPR)
   If you have given us your consent to process your personal data, you can revoke this consent at any time with effect for the future. The revocation does not affect the legality of the processing up to the time of revocation.

7. Right to lodge a complaint with a supervisory authority (Article 77 GDPR)
   If you believe that the processing of your personal data violates the GDPR, you can lodge a complaint with a supervisory authority. This may in particular be the authority in your place of residence, your place of work or the place of the alleged infringement.

Right of objection according to Art. 21 GDPR

a) General: justified objection
If we process your personal data on the basis of Art. 6 (1) (e) or (f) GDPR (e.g. to protect legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. This also applies to profiling based on these provisions.

In the event of a justified objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

b) Objection to direct marketing
If we process your personal data for direct marketing purposes, you can object to this processing at any time without having to provide any specific reasons. This also applies to profiling insofar as it is related to direct marketing.

If you object, your personal data will no longer be used for direct marketing purposes.