Privacy Policy
Unless otherwise specified below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This only applies as long as the processing procedures below do not state otherwise. "Personal data" is all information that relates to an identified or identifiable natural person.
Server Log Files You can visit our websites without giving any personal information. Every time you access our website, usage data is transmitted to us or our web host / IT service provider through your Internet browser and stored in log data (so-called server log files). This stored data includes e.g., the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider. The processing is based on Art. 6 (1) lit. f DSGVO due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our services.
Contact
Responsible Party Please contact us on request. The responsible party for data processing is: Thomas Nickel, Pastorenpatt 6, 31609 Balge Germany, +49 4257 8873933, info@aleoncases.de
Customer Contact Initiation via Email If you initiate business contact with us via email, we will collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of handling and answering your contact request. If the contact aims at carrying out pre-contractual measures (e.g., advice in case of purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing takes place based on Art. 6 (1) lit. b DSGVO. If the contact is made for other reasons, this data processing is carried out based on Art. 6 (1) lit. f DSGVO due to our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons that arise from your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6 (1) lit. f DSGVO. We use your email address only to process your request. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.
Collection and Processing when Using the Contact Form When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of making contact. If the contact aims at carrying out pre-contractual measures (e.g., advice in case of purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing takes place based on Art. 6 (1) lit. b DSGVO. If the contact is made for other reasons, this data processing is carried out based on Art. 6 (1) lit. f DSGVO due to our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons that arise from your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6 (1) lit. f DSGVO. We use your email address only to process your request. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.
Collection and Processing when Sending Images via Upload We provide an upload function for image files on our website. There is the possibility to send images to us using encrypted data transmission. With the transmission of your images, we may collect your personal data (depiction of identifiable persons) only to the extent provided by you. The data processing serves the purpose of creating personalized products. The sent image serves as a template for the product and is used for this purpose (e.g., T-shirt print). The processing takes place based on Art. 6 (1) lit. b DSGVO and is necessary for the fulfillment of a contract with you. Your data may be passed on to service providers that we use as part of order processing. No other third parties will receive your data. We use the image you sent only in the course of providing the service. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.
Collection and Processing when Sending Images via Email You have the possibility to send us images via email in connection with the order of a personalized product. With the transmission of your images, we may collect your personal data (depiction of identifiable persons) only to the extent provided by you. The data processing serves the purpose of creating personalized products. The sent image serves as a template for the product and is used for this purpose (e.g., T-shirt print). The processing takes place based on Art. 6 (1) lit. b DSGVO and is necessary for the fulfillment of a contract with you. Your data will not be passed on. We use the image you sent only in the course of providing the service. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.
Customer Account and Orders
Customer Account When you open a customer account, we collect your personal data to the extent specified there. The data processing is intended to improve your shopping experience and simplify the order process. The processing is based on Art. 6 (1) lit. a DSGVO with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until the revocation. Your customer account will then be deleted.
Collection, Processing, and Transfer of Personal Data in Orders When ordering, we collect and process your personal data only as far as it is necessary to fulfill and process your order and to process your inquiries. The provision of the data is necessary for the conclusion of the contract. Non-provisioning means that no contract can be concluded. The processing is based on Art. 6 (1) lit. b DSGVO and is necessary for the fulfillment of a contract with you. Your data is passed on, for example, to the shipping companies and dropshipping providers you have chosen, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly observe the legal requirements. The extent of data transmission is limited to a minimum.
Reviews and Advertising
Data Collection When Writing a Comment or Review When commenting/reviewing an article or a post, we collect your personal data (name, email address, comment text) only to the extent provided by you. The processing serves the purpose of enabling commenting/reviewing and displaying comments/reviews. By submitting the comment/review, you consent to the processing of the transmitted data. The processing is based on Art. 6 (1) lit. a DSGVO with your consent. You can revoke the consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until the revocation. Your personal data will then be deleted.
When your comment is published, only the name you provided is published.
Use of the Email Address for Sending Newsletters We use your email address, regardless of the contract execution, exclusively for our own advertising purposes for newsletter dispatch, provided you have expressly agreed to this. The processing is based on Art. 6 (1) lit. a DSGVO with your consent. You can revoke the consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation. You can unsubscribe from the newsletter at any time using the relevant link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.
Use of CleverReach We use the CleverReach GmbH & Co. KG (Schafjückenweg 2, 26180 Rastede; "CleverReach") service for the newsletter dispatch as part of order processing. We pass on the information you provided during the newsletter registration (email address, possibly first and last name) to CleverReach. The data processing serves the purpose of newsletter dispatch and its statistical evaluation. To evaluate newsletter campaigns, the sent newsletters contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This way, we can determine whether you have opened the newsletter and whether you have clicked on any integrated links. Through conversion tracking, we can analyze, for example, whether a purchase was made after clicking a link in the newsletter or if you registered on our website. In this context, we collect your personal data such as IP address, browser type and device, and the time. Usage profiles can be created from this data under a pseudonym. The collected data is not used to identify you personally. The collected data is only used for statistical evaluation to improve newsletter campaigns. The processing of your personal data is based on Art. 6 (1) lit. f DSGVO from our predominant legitimate interest in a targeted, effective and user-friendly newsletter system. You have the right to object to this processing of your personal data for reasons arising from your particular situation at any time. Further information and Cleverreach's data protection declaration can be found at: https://www.cleverreach.com/de-de/datenschutz/ and https://www.cleverreach.com/de-de/newsletter-tool/newsletter-reporting/.
Payment Service Providers
Use of PayPal Express We use the payment service PayPal Express on our website provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The purpose of data processing is to offer you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store and analyze data (e.g. IP address, device type, operating system, browser type, location of your device) when you visit the website. Cookies may also be used. The cookies allow your browser to be recognized. The processing of your personal data is based on Art. 6 (1) lit. f DSGVO due to our predominant legitimate interest in offering various payment methods tailored to the customer. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation. By choosing and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you with the chosen payment method. This processing is based on Art. 6 (1) lit. b DSGVO. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Use of PayPal Check-Out We use the payment service PayPal Check-Out on our website provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The purpose of data processing is to offer you payment via the payment service. By choosing and using payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay later" via PayPal, the data necessary for payment processing is transmitted to PayPal in order to fulfill the contract with you with the chosen payment method. This processing is based on Art. 6 (1) lit. b DSGVO.
Credit Card via PayPal, Direct Debit via PayPal & "Pay Later" via PayPal For individual payment methods such as credit card via PayPal, direct debit via PayPal or "Pay later" via PayPal, PayPal reserves the right to possibly obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data necessary for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision about the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) which are calculated on the basis of scientifically recognized mathematical-statistical procedures and in the calculation of which address data, among other things, are included. Your legitimate interests will be taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for a contract initiation. The processing is based on Art. 6 (1) lit. f DSGVO due to our overriding legitimate interest in protection against payment default when PayPal is in advance. You have the right to object to this processing of your personal data based on Art. 6 (1) lit. f DSGVO for reasons arising from your particular situation by notifying PayPal at any time. The provision of data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide it means that the contract cannot be concluded with the payment method you have chosen.
Third Party Providers When paying via a third party's payment method, the necessary data for payment processing is transmitted to PayPal. This processing is based on Art. 6 (1) lit. b DSGVO. For the execution of this payment method, the data may then be passed on by PayPal to the respective provider. This processing is based on Art. 6 (1) lit. b DSGVO. Local third party providers could include:
Invoice Purchase via PayPal When paying via the payment method purchase on account, the necessary data for payment processing is first transmitted to PayPal. To execute this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") to fulfill the contract with you with the chosen payment method. This processing is based on Art. 6 (1) lit. b DSGVO. Ratepay may conduct a credit check based on mathematical-statistical procedures (probability or score values) using credit agencies, following the previously described process. The data processing serves the purpose of credit assessment for a contract initiation. The processing is based on Art. 6 (1) lit. f DSGVO due to our overriding legitimate interest in protection against payment default when Ratepay is in advance. Further information on data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
Further information on data processing when using PayPal can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that enables a unique identification of the browser when the website is called up again.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before setting cookies and individually decide on their acceptance, as well as prevent the storage of cookies and transmission of the data they contain. Already saved cookies can be deleted at any time. However, we point out that in this case you may not be able to fully use all functions of this website.
You can find out how to manage cookies (including deactivation) for the main browsers via the following links: Chrome: https://support.google.com/accounts/answer/61416?hl=en Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09 Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically Necessary Cookies Unless otherwise stated in the privacy policy, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective, and secure. Furthermore, cookies allow our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
The use of cookies or similar technologies is based on § 25 (2) TTDSG. The processing of your personal data is based on Art. 6 (1) lit. f DSGVO from our predominant legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer. You have the right to object to this processing of your personal data for reasons that arise from your particular situation at any time.
Use of the Cookie Consent Tool by Gambio We use the Cookie Consent Tool of Gambio GmbH (Parallelweg 30, 28219 Bremen; "Gambio") on our website. The tool allows you to give consent to data processing via the website, particularly the setting of cookies, as well as to exercise your right of revocation for already given consents. The data processing serves the purpose of obtaining required consents for data processing and documenting these, and thus complying with legal obligations. For this purpose, cookies may be used. User information, including your IP address, is collected and transmitted to Gambio. No further transmission of this data to other third parties takes place. The data processing is carried out to fulfill a legal obligation based on Art. 6 (1) lit. c DSGVO. You can find more detailed information on data protection at Gambio at: https://www.gambio.de/rechtliches/datenschutz
Ad Tracking
Use of Facebook Pixel We use the remarketing function "Custom Audiences" of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland "Facebook") on our website. Meta Platforms Ireland and we are jointly responsible for the collection of your data and the transmission of this data to Facebook when the service is integrated. The basis for this is an agreement between us and Meta Platforms Ireland on the joint processing of personal data, in which the respective responsibilities are defined. The agreement can be accessed at https://www.facebook.com/legal/controller_addendum. According to this, we are in particular responsible for fulfilling the information obligations pursuant to Art. 13, 14 DSGVO, for complying with the security provisions of Art. 32 DSGVO with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Art. 33, 34 DSGVO, insofar as a breach of the protection of personal data affects our obligations under the agreement on joint processing. Meta Platforms Ireland is responsible for enabling the rights of data subjects in accordance with Art. 15 - 20 DSGVO, for complying with the security provisions of Art. 32 DSGVO with regard to the security of the service, and for the obligations under Art. 33, 34 DSGVO, insofar as a breach of the protection of personal data affects the obligations of Meta Platforms Ireland under the agreement on joint processing. The application serves the purpose of addressing the visitors of the website with interest-based advertising in the social network Facebook. For this purpose, the Facebook remarketing tag was implemented on the website. Through this tag, a direct connection to the Facebook servers is established when visiting the website. This transmits to the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the social network Facebook, you are then shown personalized, interest-based Facebook ads. Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer takes place, among other things, based on standard contractual clauses as suitable guarantees for the protection of personal data, viewable at: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32010D0087&from=en. The use of cookies or comparable technologies is done with your consent based on § 25 (1) sentence 1 TTDSG i.V.m. Art. 6 (1) lit. a DSGVO. The processing of your personal data is done with your consent based on Art. 6 (1) lit. a DSGVO. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation. For more information about Facebook's collection and use of data, your rights in this regard, and ways to protect your privacy, please see Facebook's Privacy Policy at https://www.facebook.com/about/privacy/.
We use the online advertising program "Google Ads" and Conversion Tracking (visit action evaluation) within its framework on our website. Google Conversion Tracking is an analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
When you click on an ad placed by Google, a cookie for Conversion Tracking is stored on your computer. These cookies have a limited validity, contain no personal data and thus do not serve personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you have clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Thus, there is no possibility that cookies can be tracked across the websites of Ads customers.
The information collected with the help of the Conversion cookie is used to generate Conversion statistics. This way, we learn the total number of users who have clicked on one of our ads and were redirected to a page tagged with a Conversion Tracking tag. However, we do not receive information that personally identifies users.
Your data may be transferred to the servers of Google LLC in the USA. There is an adequacy decision by the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is not certified under the TADPF. The data transfer is based, among other things, on standard contractual clauses as suitable guarantees for the protection of personal data, viewable at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adscontrollerterms/.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR from our predominant legitimate interest to address site visitors with interest-based advertising. You have the right to object at any time to this processing of personal data concerning you for reasons arising from your particular situation.
You can deactivate personalized advertising for you in the Google advertising settings. Instructions can be found at https://support.google.com/ads/answer/2662922?hl=en
Alternatively, you can prevent the use of cookies by third parties by visiting the deactivation page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/ and implementing the further information mentioned there for opt-out. You will then not be included in the Conversion Tracking statistics.
Further information and Google's privacy policy can be found at: https://www.google.com/policies/privacy/
Plug-ins and Other Features
Use of Google reCAPTCHA We use the service reCAPTCHA provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This query is designed to distinguish whether an input is made by a human or by automated, machine processing. To this end, your input is sent to Google and used further. In addition, the IP address and any other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and, if necessary, also transferred to servers of Google LLC in the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer takes place, among other things, based on standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks. The use of cookies or similar technologies is done with your consent based on § 25 (1) sentence 1 TTDSG in conjunction with Art. 6 (1) lit. a DSGVO. The processing of your personal data is done with your consent based on Art. 6 (1) lit. a DSGVO. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation. For more information about Google reCAPTCHA and the associated privacy policy, please visit: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.
Use of YouTube We use the function to embed YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The function displays videos stored on YouTube in an iFrame on the website. The option "Extended Privacy Mode" is activated. As a result, YouTube does not store any information about the visitors to the website. Only when you watch a video is information about this transmitted to and stored by YouTube. Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer takes place, among other things, based on standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks. The processing of your personal data is based on Art. 6 (1) lit. f DSGVO due to our overriding legitimate interest in a needs-based and targeted design of the website. You have the right to object at any time to this processing of your personal data based on Art. 6 (1) lit. f DSGVO for reasons arising from your particular situation. For more information on the collection and use of data by YouTube and Google, your rights in this regard, and ways to protect your privacy, please see YouTube's privacy policy at https://www.youtube.com/t/privacy.
Use of Google Fonts We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of a uniform display of fonts on our website. To load the fonts, a connection to Google servers is established when you call up the site. Cookies may be used in the process. Your IP address and information about the browser you are using, among other things, are processed and transmitted to Google. This data is not linked to your Google account. Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer takes place, among other things, based on standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks. The processing of your personal data is based on Art. 6 (1) lit. f DSGVO due to our predominant legitimate interest in a user-friendly and aesthetic design of our website. You have the right to object at any time to this processing of personal data concerning you based on Art. 6 (1) lit. f DSGVO for reasons arising from your particular situation by sending us a message. For more information on data processing and data protection, please visit https://www.google.de/intl/de/policies/ and https://developers.google.com/fonts/faq.
Rights of the Data Subject and Storage Duration
Duration of Storage After complete contract processing, the data is initially stored for the duration of the warranty period, thereafter taking into account statutory, especially tax and commercial law storage periods, and then deleted after expiry of the period, unless you have agreed to further processing and use.
Rights of the Data Subject If the legal requirements are met, you have the following rights according to Art. 15 to 20 DSGVO: Right to information, to correction, to deletion, to restriction of processing, to data portability. In addition, according to Art. 21 (1) DSGVO, you have the right to object to processing based on Art. 6 (1) f DSGVO, as well as to processing for the purpose of direct advertising.
Right to Complain to the Supervisory Authority You have the right to complain to the supervisory authority according to Art. 77 DSGVO if you believe that the processing of your personal data is not lawful.
You can lodge a complaint with the supervisory authority responsible for us, among others, which can be reached at the following contact details:
State Commissioner for Data Protection Lower Saxony Prinzenstraße 5 30159 Hannover Tel.: +49 511 1204500 Fax: +49 511 1204599 E-Mail: poststelle@lfd.niedersachsen.de
Right to Object If the personal data processing listed here is based on our legitimate interest in accordance with Art. 6 (1) lit. f DSGVO, you have the right to object to these processing activities at any time with effect for the future for reasons arising from your particular situation. After the objection has been made, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
Last updated: 29.11.2022