Datenschutzerklärung

This Privacy Policy explains how hcofbg.shop collects, uses, stores, shares and otherwise processes personal information when customers visit our website, create an account, place an order, contact us or otherwise interact with our online store.

We take privacy seriously and seek to process personal information transparently and responsibly.

This policy is intended to reflect applicable data-protection requirements, including the General Data Protection Regulation where applicable.

For privacy-related questions, contact:

info@hcofbg.shop

Data Controller

For purposes of this Privacy Policy, hcofbg.shop refers to the operator of the hcofbg.shop ecommerce store and the entity responsible for determining the purposes and means of processing personal information in connection with the store where it acts as controller.

Privacy enquiries may be sent to:

Email: info@hcofbg.shop

German and EU law may require the controller's complete legal identity and address to be disclosed separately in the store's legally required business information.

Information We Collect

Depending on how a customer interacts with hcofbg.shop, we may process information including:

• Name;
• Billing information;
• Shipping information;
• Email address;
• Telephone number where provided;
• Customer-account information;
• Order details;
• Products purchased;
• Shopping-cart information;
• Payment-related information;
• Transaction information;
• Customer-service correspondence;
• Return and refund information;
• Device information;
• Browser information;
• Internet Protocol address;
• Cookie identifiers;
• Website interaction data;
• Referral information;
• Fraud-prevention information; and
• Other information voluntarily provided by the customer.

Information Provided Directly by Customers

Customers provide personal information when they:

• Place an order;
• Create or manage an account;
• Enter billing or shipping information;
• Contact customer service;
• Request a return;
• Exercise a withdrawal right;
• Request a refund;
• Subscribe to marketing where available;
• Submit a review or other content where available; or
• Otherwise communicate with us.

Customers should provide accurate information where necessary for fulfilment of their orders.

Automatically Collected Information

When customers use hcofbg.shop, certain technical information may be collected automatically.

This may include:

• IP address;
• Device type;
• Operating system;
• Browser type;
• Approximate geographic information derived from technical data;
• Pages viewed;
• Time spent on pages;
• Referral pages;
• Interaction with website features; and
• Cookie or similar technology identifiers.

The extent of this processing depends on website functionality, customer choices and applicable consent requirements.

Why We Process Personal Information

We may process personal information for purposes including:

Order Fulfilment

To:

• Process orders;
• Receive payment;
• Arrange fulfilment;
• Ship products;
• Provide tracking;
• Communicate about orders;
• Process withdrawals;
• Handle returns; and
• Issue refunds.

Customer Service

To respond to questions, complaints and requests.

Website Operation

To maintain, secure and improve our ecommerce website and checkout functionality.

Fraud Prevention

To identify suspicious transactions, protect customers and reduce fraud or misuse.

Legal Compliance

To satisfy obligations relating to taxation, accounting, consumer protection, ecommerce, privacy, fraud prevention or other applicable requirements.

Marketing

Where permitted, to provide promotional communications or advertising.

Marketing activities requiring consent will be carried out on the basis of valid consent where required.

Legal Bases for Processing

Where the GDPR applies, personal information may be processed under one or more appropriate legal bases.

These may include:

Performance of a Contract

Processing may be necessary to process and fulfil a customer's order or take steps requested before entering into a contract.

Legal Obligation

Processing may be required to comply with legal obligations.

Legitimate Interests

We may process information where necessary for legitimate business interests, provided those interests are not overridden by the customer's fundamental rights and freedoms.

Legitimate interests may include:

• Fraud prevention;
• Network security;
• Protecting our website;
• Customer-service administration;
• Internal business administration; and
• Establishing or defending legal claims.

Consent

Where processing requires consent, we will rely on consent.

Customers may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Shopify

hcofbg.shop may use Shopify to provide ecommerce infrastructure.

Information may therefore be processed through Shopify systems when customers browse our store, use checkout or place orders.

Depending on the processing activity, Shopify and related service providers may process information on our behalf or under their own applicable privacy responsibilities.

Customers should also review relevant Shopify privacy information where appropriate.

Payment Providers

Payments may be processed by external payment providers.

These providers may collect payment-card or other payment credentials directly.

We do not necessarily receive or store complete payment-card information.

Payment providers may process personal data under their own privacy policies and legal obligations.

Shipping and Fulfilment Providers

To deliver orders, we may share relevant information with logistics, fulfilment, postal and courier providers.

Information shared may include:

• Customer name;
• Shipping address;
• Telephone number where necessary;
• Email address where necessary;
• Order information; and
• Delivery instructions.

Only information reasonably necessary for fulfilment and delivery should be shared.

Service Providers

We may use third parties providing services such as:

• Website hosting;
• Ecommerce infrastructure;
• Payment processing;
• Fraud prevention;
• Shipping;
• Fulfilment;
• Analytics;
• Marketing;
• Customer communications;
• Cloud storage;
• Technical support; and
• Website security.

These providers may process personal information where necessary to provide their services.

Cookies and Similar Technologies

hcofbg.shop may use cookies, pixels, local storage and similar technologies.

Some technologies are necessary for the website to function.

Examples may include technologies necessary for:

• Shopping carts;
• Checkout;
• Security;
• Fraud prevention;
• Authentication;
• Customer preferences; and
• Network communications.

Other technologies may be used for analytics, personalization or advertising.

Where German or European law requires consent before non-essential information is stored on or accessed from a customer's device, such technologies should not be activated until the required consent has been obtained.

Customers may manage available cookie preferences through the consent controls provided by the website.

Marketing Communications

Where customers voluntarily subscribe to marketing communications, we may send information concerning products, promotions or store updates.

Where consent is legally required, marketing will be sent only after the required consent has been obtained.

Customers may unsubscribe using the method provided in the communication or by contacting:

info@hcofbg.shop

Withdrawing marketing consent does not affect transactional communications necessary to fulfil orders or provide customer service.

International Data Transfers

Because ecommerce service providers may operate internationally, personal data may be processed in countries outside Germany or the European Economic Area.

Where GDPR restrictions on international data transfers apply, appropriate safeguards should be used as required by law.

Such safeguards may include:

• European Commission adequacy decisions;
• Standard Contractual Clauses; or
• Other legally recognized transfer mechanisms.

Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and as required by applicable law.

Retention periods may depend on:

• Order fulfilment;
• Accounting requirements;
• Tax requirements;
• Contractual obligations;
• Warranty or conformity claims;
• Fraud prevention;
• Chargeback periods;
• Legal limitation periods;
• Dispute resolution; and
• Other legal obligations.

When information is no longer required, we may delete, anonymize or otherwise securely dispose of it.

Data Security

We use reasonable administrative, technical and organizational safeguards designed to protect personal information.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Customers should also protect their account credentials and should not disclose passwords to unauthorized persons.

Customer Rights

Where the GDPR applies, customers may have rights including:

• Right of access;
• Right to rectification;
• Right to erasure;
• Right to restriction of processing;
• Right to object to certain processing;
• Right to data portability where applicable;
• Right to withdraw consent;
• Right not to be subject to certain solely automated decisions where applicable; and
• Right to lodge a complaint with a competent data-protection supervisory authority.

These rights may be subject to legal conditions, limitations and exceptions.

Access Requests

Customers may request information concerning personal data processed about them by contacting:

info@hcofbg.shop

We may need to verify the requester's identity before disclosing personal information.

Correction

Customers who believe their information is inaccurate or incomplete may request correction.

Deletion

Customers may request deletion of personal data where the legal conditions for deletion are satisfied.

We may retain information where required by law or where another lawful basis for retention applies.

Objection

Where processing is based on legitimate interests, customers may have the right to object based on circumstances relating to their particular situation.

Customers have specific rights regarding processing for direct marketing purposes.

Withdrawal of Consent

Where processing is based on consent, consent may be withdrawn at any time.

Withdrawal does not affect the lawfulness of earlier processing.

Automated Decision-Making

Certain fraud-prevention systems may automatically identify transactions presenting elevated risks.

Where GDPR rules governing solely automated decisions with legal or similarly significant effects apply, customers will receive the protections required by law.

Children's Privacy

Our online store is intended for persons legally capable of entering into the relevant transactions.

We do not knowingly seek to collect personal information from children in circumstances where parental or guardian authorization is legally required.

Third-Party Links

Our website may contain links to third-party websites.

We are not responsible for the privacy practices of independent third-party websites.

Customers should review the applicable privacy notice of any third-party service they visit.

Changes to This Privacy Policy

We may update this Privacy Policy where necessary to reflect:

• Changes to our store;
• New ecommerce functionality;
• Service-provider changes;
• Legal or regulatory developments; or
• Changes in our processing practices.

The current version will be published on hcofbg.shop with the applicable revision date.

Complaints

Customers who have concerns about how personal information is handled should first contact:

info@hcofbg.shop

Customers may also have the right to lodge a complaint with the competent data-protection supervisory authority.

Contact

Privacy questions may be sent to:

hcofbg.shop
Email: info@hcofbg.shop