Privacy Policy – Artimoo Store (artimoo.com)
1. Responsible person
The entity responsible for data processing on this website is:
Artimoo Store
Alt Fermersleben 80B
39122 Magdeburg
Saxony-Anhalt, Germany
Email: artimoo.store@gmail.com
2. General information on the processing of personal data
We take the protection of your personal data very seriously. Personal data is any information relating to an identified or identifiable natural person (e.g., name, address, email address, IP address).
We process your data exclusively within the framework of the applicable legal provisions, in particular the GDPR and the BDSG.
3. What data we collect
3.1. Device information / Usage data
When you visit our website https://artimoo.com/ (hereinafter referred to as "Website"), we automatically collect certain information about your device and your use of the Website. This includes, in particular:
- Information about the web browser
- IP address
- Time zone
- Information about installed cookies
- visited subpages and products
- referring websites or search terms
- Date and time of access
- general interactions with the website
We call this automatically collected data "device information" .
We collect device information using the following technologies:
- “Cookies”
Small data files that are stored on your device/computer and often contain an anonymous unique identifier.
Information about cookies and how to disable them can be found, for example, at: http://www.allaboutcookies.org - "Log files" (log files)
Here, actions on the website are logged and data such as IP address, browser type, internet service provider, referring/exit pages and date/time are recorded. - “Web Beacons”, “Tags” and “Pixels”
These are electronic files used to collect information about how you navigate and interact with the website (e.g., for analysis or marketing purposes).
3.2. Ordering information
When you buy or attempt to buy something on the website, we collect certain information about you as an individual. This includes, in particular:
- First and Last Name
- Billing address
- Delivery address
- E-mail address
- Telephone number
- ordered products
- Payment information (e.g. card type, card number masking, payment service provider – we generally do not store complete credit card data ourselves, but only receive transaction data from the payment provider)
We call this data "order information" .
Where this privacy policy refers to "personal data" , we mean both device information and order information.
4. How we use your personal data
4.1. Use of the order information
We primarily use the order information to:
- To process and fulfill your order (including payment processing, shipping, invoicing, order confirmation)
- to communicate with you (e.g. for follow-up questions, status information, support)
- to check our orders for potential risks or fraud
- To send you information or advertising about our products – provided this is legally permissible and requested by you – (e.g. via email newsletter or personalized recommendations).
The legal bases for this are in particular Art. 6 para. 1 lit. b GDPR (performance of a contract), Art. 6 para. 1 lit. c GDPR (legal obligations, e.g. tax retention) and Art. 6 para. 1 lit. f GDPR (legitimate interest, e.g. fraud prevention and customer service).
4.2. Using the device information
We use the device information to:
- to check the website for potential risks and fraud (especially your IP address)
- to generally improve and optimize our website (e.g. by analyzing user behavior, loading times, and the devices used)
- to assess the effectiveness of marketing and advertising campaigns (e.g., using analytics tools)
- To potentially display targeted advertising / retargeting , provided you have consented to this.
The legal basis for this is Art. 6 para. 1 lit. a GDPR (consent, e.g. for cookies/tracking) and Art. 6 para. 1 lit. f GDPR (legitimate interest in a secure, user-friendly and economically operated website).
5. Disclosure of your personal data
We only share your personal data to the extent necessary for the respective purposes and as permitted by law.
5.1. Service providers / Data processors
We use external service providers who support us in operating our online shop. These include, in particular:
- Shopify – Operation and hosting of our online shop
Our shop is powered by Shopify Inc. Further information on data processing by Shopify can be found in Shopify's privacy policy:
https://www.shopify.com/legal/privacy -
Payment service providers – processing of payments
Depending on the payment method you choose, your data may be shared with payment service providers such as credit card companies or payment processors (e.g., Stripe, PayPal, etc., if used). These providers process your data under their own responsibility. Please refer to the privacy policies of the respective payment service providers for further details. - Shipping service provider – Delivery of your orders
For the delivery of your orders, we will pass on your delivery address and, if applicable, your contact details (e.g. email/phone for shipment tracking) to shipping service providers. - Analysis and marketing service provider
For example, we use Google Analytics (see next section) to evaluate user behavior anonymously or pseudonymously.
Where necessary, data processing agreements are in place with these service providers in accordance with Article 28 GDPR.
5.2. Google Analytics
We use Google Analytics , a web analytics service provided by Google Ireland Limited (“Google”), to understand how our customers use the website (e.g., most visited pages, origin of access).
Google Analytics uses cookies and similar technologies to collect information about your browsing behavior. This information is generally transmitted to and stored on a Google server. Depending on your settings, this may also involve transferring data to the USA.
You can find more information about how Google uses your data here:
https://policies.google.com/privacy?hl=de
You can deactivate Google Analytics using the following browser plugin:
https://tools.google.com/dlpage/gaoptout
The use of Google Analytics – especially within the EU – generally only takes place with your consent via our cookie or consent banner (Art. 6 para. 1 lit. a GDPR).
5.3. Legal Disclosure / Protection of Rights
We may also share your personal data to:
- to fulfill legal obligations,
- to respond to a lawful request from authorities (e.g. summons, search warrant),
- to protect or enforce our rights or the rights of third parties.
6. Behavioral advertising / Retargeting
To the extent that we use services for targeted advertising (retargeting) , we use your data to show you advertisements for products that may be of interest to you (e.g. based on previously viewed items).
Further information on how interest-based online advertising generally works can be found, for example, on the Network Advertising Initiative (NAI) website:
http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work
You can disable personalized advertising from typical platforms, e.g. at:
- Facebook: https://www.facebook.com/settings/?tab=ads
- Google: https://www.google.com/settings/ads/anonymous
- Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
Additionally, you can deactivate many of these services centrally via the Digital Advertising Alliance:
http://optout.aboutads.info/
Where legally required, behavior-based advertising will only be used after you have given your consent via our consent banner.
7. “Do Not Track”
Please note that we will not change the data collection and usage procedures of our website if we receive a "Do Not Track" signal from your browser.
8. Data transfer to third countries
Some of the above-mentioned service providers (e.g. Shopify, Google) may also transfer your data to countries outside the EU/EEA, in particular to the USA or Canada .
In these cases, we ensure that an adequate level of data protection is guaranteed, e.g. by:
- Adequacy decisions by the EU Commission (e.g. for certain countries),
- the conclusion of EU standard contractual clauses with the respective service provider or
- other suitable safeguards pursuant to Art. 44 et seq. GDPR.
9. Storage duration
We only store your personal data for as long as it is necessary for the respective purposes or as we are legally obligated to do so.
In particular, the following applies:
- Order information is generally stored for up to 10 years for tax and commercial law retention periods.
- Device and usage data (e.g. in log files or analysis tools) are usually deleted or anonymized after the respective retention periods have expired.
- Data based on consent will be deleted as soon as you withdraw your consent, unless other legal retention obligations apply.
10. Your rights as a data subject
If you are resident in the European Union or the GDPR applies to you, you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification of inaccurate data (Art. 16 GDPR)
- Right to erasure (“right to be forgotten”, Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to certain processing activities (Art. 21 GDPR), in particular to direct marketing
- Right to withdraw consent with effect for the future (Art. 7 para. 3 GDPR)
To exercise these rights, you can contact us at any time (see contact details below).
You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.
11. Minors
Our website and our offers are not aimed at persons under 16 years of age .
We do not knowingly collect personal data from children under the age of 16. If we become aware that we have collected data from minors without the consent of their legal guardians, we will delete this data.
12. Changes to this Privacy Policy
We may occasionally amend this privacy policy to:
- Changes to our data processing,
- legal or regulatory requirements
- or new features/services on our website
to be taken into account.
The current version of the privacy policy can be accessed at any time on our website.
13. Contact
If you have any questions about this privacy policy, wish to exercise your rights, or want to file a complaint, please contact us:
Artimoo Store
Alt Fermersleben 80B
39122 Magdeburg
Saxony-Anhalt, Germany
Email: artimoo.store@gmail.com