privacy policy

privacy policy

§ 1 Information about the collection of personal data

(1) Below we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behavior.

(2) The controller pursuant to Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is
ESPARTO ® Yoga Fashion
owner Kirsten Kaack
Steindamm 3
23881 Lankau
E-Mail: info@esparto.de
Management: Tel. +49-4543-888610

(3) When you contact us by email or via a contact form, the data you provide
We will store the data you provide (your email address, if applicable your name and telephone number) in order to answer your questions. We will delete the data collected in this context once storage is no longer required or restrict processing if
statutory retention obligations exist.

(4) If we use commissioned service providers for individual functions of our offer
or would like to use your data for advertising purposes, we will inform you in detail below about
the respective processes. We also state the defined criteria for the storage period.

(5) The processing of orders via some marketplaces such as Avocadostore, OTTO and eBay is handled by Billbee GmbH, Arolser Str. 10, 34477 Twistetal.

(6) Shipping processing with sender address transfer is handled online via the DHL portal (DHL Paket GmbH, Sträßchensweg 10; 53113 Bonn).

§ 2 Your Rights

(1) You have the following rights with regard to the personal data concerning you:
– Right to information,
– Right to rectification or erasure,
– Right to restriction of processing,
– Right to object to processing,
– Right to data portability.

(2) You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

§ 3 Collection of personal data when visiting our website

(1) If you use the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you would like to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (the legal basis is Art. 6 Para. 1 Clause 1 Letter f of GDPR):
– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status/HTTP status code
– amount of data transferred in each case
– Website from which the request comes
– Browser
– Operating system and its interface
– Language and version of the browser software.

(2) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk and associated with the browser you use. They allow certain information to be sent to the location that placed the cookies (here, this is us). Cookies can
do not run programs or transmit viruses to your computer. They are designed to make the Internet more user-friendly and effective.

(3) Use of cookies:

a) This website uses the following types of cookies, the scope and functionality of which are explained below:
– Transient cookies (see b)
– Persistent cookies (see c).

b) Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

d) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all functions of this website.

§ 4 Additional functions and offers of our website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you must usually provide additional personal data that we use to provide the respective service and for which the aforementioned
Principles for data processing apply.

(2) We sometimes use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

(3) We may also pass on your personal data to third parties if we offer participation in promotions, competitions, contract conclusions or similar services together with partners. You will receive further information about this when you provide your personal data or in the description of the offer below.

(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.

(7) On our website, we offer users the opportunity to register by specifying
personal data. The data is entered into an input mask and transmitted to us and stored. The data will only be passed on to third parties if and to the extent that this is necessary to fulfil our contractual obligations to you (Art. 6 Para. 1 Clause 1 Letter b GDPR), for example the transmission of your address as a delivery address to our shipping service provider in order to send you ordered goods. As part of the registration process, the information resulting from the registration form is requested and stored by us. The legal basis for the processing of the data is Art. 6 Para. 1 Letter a GDPR if the user has given their consent. If the
Registration serves to fulfill a contract to which the data subject is a party or to carry out pre-contractual measures. If the registration serves to fulfill a contract to which the user is a party or to carry out pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 Para. 1 lit. b GDPR.

§ 5 Objection or revocation against the processing of your data

(1) If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation affects the legality of the processing of your personal data after you have expressed it to us.

(2) If we base the processing of your personal data on the balance of interests, you can object to the processing. This is the case if the processing is not necessary to fulfill a contract with you, which we will explain in the following description of the functions. If you exercise such an objection, we ask you to explain the reasons why we should not process your personal data as we do. If your objection is justified, we will examine the situation and either stop or adapt the data processing or show you our compelling legitimate reasons on the basis of which we continue the processing.

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the contact details provided above.

§ 6 Newsletter and email reminders

(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

(2) We use the so-called double opt-in procedure to register for our newsletter. This means that after you register, we will send you an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

(3) The only mandatory information required to send the newsletter is your email address. Providing additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your email address for the purpose of sending you the newsletter. The legal basis is Art. 6 Para. 1 Clause 1 Letter a of GDPR.

(4) You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in each newsletter email or by sending a message to the contact details provided in the imprint.

§ 7 Use of Google Analytics,

(1) This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.

(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google.

(3) You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website.
Data (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in a shortened form, which means that they cannot be linked to a person. If the data collected about you is personally identifiable, this will be immediately excluded and the personal data will be deleted immediately.

(5) We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and
more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 Para. 1 Clause 1 Letter f of GDPR.

(6) Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use:
http://www.google.com/analytics/terms/de.html, Overview of data protection:
http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy:
http://www.google.de/intl/de/policies/privacy.

§ 8 Linked content / sharing functions

Our website contains links to our presence on social networks and the option to share content from our website via social networks. When providing these functions, no personal data is collected until you use the corresponding function after logging in to the respective provider. The respective data protection declarations and data protection notices of the respective platform operators apply. We would like to point out that we are not responsible for the data processing practices on third-party platforms outside of our own sphere of influence.
Addresses of the providers and URL with their data protection information:

a) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

b) Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA:
https://about.pinterest.com/de/privacy-policy. Pinterest has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

§ 9 Payment Methods

The legal basis for the processing of payments is Art. 6 Para. 1 Sentence 1 lit. b) and, if you have given your consent, lit. a) GDPR.
The controller has integrated PayPal components on this website. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which are virtual private or business accounts. PayPal also offers the option of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no traditional account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also performs escrow functions and offers buyer protection services.
The European operating company of PayPal is PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
If the data subject selects “PayPal” as a payment option during the ordering process in our online shop, the data subject’s data will be automatically transmitted to PayPal. By selecting this payment option, the person consents to the transmission of personal data required for payment processing.
The personal data transmitted to PayPal is usually first name, last name, address, email address, IP address, telephone number, mobile phone number or other data that is necessary for payment processing. To process the purchase contract
Personal data that is related to the respective order is also necessary.
The purpose of transmitting the data is to process payments and prevent fraud. The controller will transmit personal data to PayPal in particular if
if there is a legitimate interest in the transmission. The personal data exchanged between PayPal and the controller may be transmitted by PayPal to credit reporting agencies. This transmission is for the purpose of identity and creditworthiness checks.
PayPal may pass on personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfil contractual obligations or if the data is to be processed on their behalf.
The data subject has the option of revoking his or her consent to PayPal handling personal data at any time. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing. PayPal's applicable data protection provisions can be found at http://www.paypal.com/de/webapps/mpp/ua/privacy-full.

§ 10 Data protection in applications and in the application process

The controller collects and processes the personal data of applicants for the purpose of processing the application process. Processing can also be carried out electronically. This is particularly the case if an applicant submits the relevant application documents to the controller electronically, for example by email or via a web form on the website. If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents will be stored three months after the rejection decision is announced.
automatically deleted, provided that there are no other legitimate interests of the controller that conflict with deletion. Other legitimate interests in this sense include, for example, the burden of proof in proceedings under the General Equal Treatment Act (AGG).

Lankau, July 2024, Kirsten Kaack