Data protection

Privacy Policy

The controller for data processing is:
Tinkalu GmbH
Dechbettener Strasse 11
93049 Regensburg
Germany
tinkalu@tinkalu.com

Thank you for your interest in our online shop. The protection of your privacy is very important to us. Below, we provide detailed information on how we handle your data.

1. Access data and hosting

You can visit our websites without providing any personal information. Each time a website is accessed, the web server merely automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of access, amount of data transferred, and the requesting provider (access data), and documents the access.

This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. This serves, according to Art. 6 (1) sentence 1 lit. f GDPR, to protect our legitimate interests in a correct presentation of our offer, which are overriding within the scope of a balancing of interests. All access data will be deleted no later than seven days after the end of your visit to the site.

Hosting services by a third-party provider
Within the framework of processing on our behalf, a third-party provider provides us with services for hosting and displaying the website. This serves to protect our legitimate interests in a correct presentation of our offer, which are overriding within the scope of a balancing of interests. All data collected in the course of using this website or in forms provided for this purpose in the online shop, as described below, will be processed on their servers. Processing on other servers only takes place within the framework explained here.

This service provider is located within a country of the European Union or the European Economic Area.

2. Data collection and use for contract processing, contacting us

We collect personal data if you voluntarily provide it to us as part of your order or when contacting us (e.g., via contact form or email). Mandatory fields are marked as such, as in these cases we absolutely need the data for contract processing or for handling your contact, and you cannot send the order or contact without providing them. What data is collected is evident from the respective input forms. We use the data you provide in accordance with Art. 6 (1) sentence 1 lit. b GDPR for contract processing and handling your inquiries. Insofar as you have given your consent according to Art. 6 (1) sentence 1 lit. a GDPR by deciding to open a customer account, we use your data for the purpose of opening a customer account. After complete processing of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the expiry of tax and commercial law retention periods, unless you have expressly consented to further use of your data or we reserve the right to further data use, which is legally permitted and about which we inform you in this declaration. The deletion of your customer account is possible at any time and can be done either by a message to the contact option described below or via a function provided for this purpose in the customer account.

3. Data disclosure

For the fulfillment of the contract in accordance with Art. 6 (1) sentence 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the order process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you open an account there. In this case, you must log in to the payment service provider with your access data during the order process. The privacy policy of the respective payment service provider applies in this regard.

Data transfer to shipping service providers
If you have given us your express consent to this during or after your order, we will, based on this consent and in accordance with Art. 6 (1) sentence 1 lit. a GDPR, pass on your email address to the selected shipping service provider so that they can contact you before delivery for the purpose of announcing or coordinating delivery.

You can revoke your consent at any time by sending a message directly to the shipping service provider. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to further data use, which is legally permitted and about which we inform you in this declaration.

4. Email newsletter and postal advertising

Email advertising with newsletter registration
If you subscribe to our newsletter, we will use the data required for this or separately provided by you to regularly send you our email newsletter based on your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR.

Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a dedicated link in the newsletter. After unsubscribing, we will delete your email address, unless you have expressly consented to further use of your data or we reserve the right to further data use, which is legally permitted and about which we inform you in this declaration.

The newsletter is sent by a service provider as part of processing on our behalf, to whom we pass on your email address for this purpose.

This service provider is located within a country of the European Union or the European Economic Area.

Postal advertising and your right to object
In addition, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, e.g., to send you interesting offers and information about our products by post. This serves to protect our legitimate interests in addressing our customers for advertising purposes, which are overriding within the scope of a balancing of interests, in accordance with Art. 6 (1) sentence 1 lit. f GDPR.

The advertising mailings are provided by a service provider as part of processing on our behalf, to whom we pass on your data for this purpose.
You can object to the storage and use of your data for these purposes at any time by sending a message to the contact option described below.

5. Cookies and web analysis

To make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages with your consent (Art. 6 (1) lit. a GDPR). This serves to protect our legitimate interests in an optimized presentation of our offer, which are overriding within the scope of a balancing of interests, in accordance with Art. 6 (1) sentence 1 lit. f GDPR. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e., after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies). You can find the duration of storage in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:
Internet Explorer™: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Safari™: https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14
Chrome™: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Firefox™ https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera™ : https://help.opera.com/de/latest/web-preferences/#cookies

If cookies are not accepted, the functionality of our website may be limited.

Use of Google Analytics 4 for web analysis
This website uses Google Analytics 4, a web analysis service of Google LLC (www.google.de), for website analysis. This serves to protect our legitimate interests in an optimized presentation of our offer, which are overriding within the scope of a balancing of interests, in accordance with Art. 6 (1) sentence 1 lit. f GDPR. Google Analytics 4 uses methods that enable an analysis of your use of the website, such as cookies. The automatically collected information about your use of this website is usually transmitted to a Google server in the USA and stored there. By activating IP anonymization on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser within the scope of Google Analytics is generally not merged with other Google data. After the purpose has ceased and the use of Google Analytics by us has ended, the data collected in this context will be deleted.

Google LLC is headquartered in the USA and is certified under the EU-US Data Privacy Framework. An up-to-date certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Data Privacy Framework.

You can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plug-in, you can click this link to prevent future collection by Google Analytics 4 on this website. An opt-out cookie will be placed on your end device. If you delete your cookies, you must click the link again.

Google reCAPTCHA
For the purpose of protecting against misuse of our web forms and against spam, we use the Google reCAPTCHA service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: Google) within the framework of some forms on this website. By verifying a manual input, this service prevents automated software (so-called bots) from carrying out abusive activities on the website. This serves, in accordance with Art. 6 (1) sentence 1 lit. f GDPR, to protect our legitimate interests in protecting our website from misuse and in a trouble-free presentation of our online presence, which are overriding within the scope of a balancing of interests.
Google reCAPTCHA uses methods, by means of a code embedded in the website, a so-called JavaScript, within the framework of the verification, that enable an analysis of your use of the website, such as cookies. The automatically collected information about your use of this website, including your IP address, is usually transmitted to a Google server in the USA and stored there. In addition, other cookies stored by Google services in your browser are evaluated by Google reCAPTCHA.
Personal data from the input fields of the respective form is not read out or stored.
Google is certified under the EU-US Data Privacy Framework. An up-to-date certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Data Privacy Framework.
You can prevent the collection of the data generated by the JavaScript or the cookie and related to your use of the website (incl. your IP address) by Google as well as the processing of this data by Google by preventing the execution of JavaScripts or the setting of cookies in your browser settings. Please note that this may limit the functionality of our website for your use.
Further information on Google's privacy policy can be found here.

Google Fonts
The script code "Google Fonts" from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: Google) is integrated into this website. This serves to protect our legitimate interests in a uniform presentation of the content on our website, which are overriding within the scope of a balancing of interests, in accordance with Art. 6 (1) lit. f) GDPR.
In this context, a connection is established between the browser you are using and Google's servers. This allows Google to know that our website has been accessed via your IP address.
Google is certified under the EU-US Data Privacy Framework. An up-to-date certificate can be viewed here. Based on this Data Privacy Framework between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Data Privacy Framework.
Further information on data processing by Google can be found in Google's privacy policy.

Our online presence on Facebook, Instagram, Pinterest
Our presence on social networks and platforms serves to facilitate better, active communication with our customers and interested parties. We provide information about our products and ongoing special offers there.
When visiting our online presences on social media, your data may be automatically collected and stored for market research and advertising purposes. From this data, so-called usage profiles are created using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. For this purpose, cookies are generally used on your end device. These cookies store visitor behavior and user interests. This serves, in accordance with Art. 6 (1) lit. f GDPR, to protect our legitimate interests in an optimized presentation of our offer and effective communication with customers and interested parties, which are overriding within the scope of a balancing of interests. If you are asked by the respective social media platform operators for consent to data processing, e.g., by means of a checkbox, the legal basis for data processing is Art. 6 (1) lit. a GDPR.
Insofar as the aforementioned social media platforms are headquartered in the USA, the following applies: An adequacy decision from the European Commission exists for the USA. This is based on the EU-US Data Privacy Framework. An up-to-date certificate for the respective company can be viewed here.
For detailed information on the processing and use of data by the providers on their pages, as well as a contact option and your rights and setting options for protecting your privacy, in particular objection options (opt-out), please refer to the providers' privacy policies linked below. Should you still need help in this regard, you can contact us.
Facebook: https://www.facebook.com/about/privacy/

Data processing is carried out on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR, which you can view here:
https://www.facebook.com/legal/terms/page_controller_addendum

Instagram: https://help.instagram.com/519522125107875
Pinterest: https://about.pinterest.com/de/privacy-policy

Right to object (Opt-Out):
Facebook: https://www.facebook.com/settings?tab=ads
Instagram: https://help.instagram.com/519522125107875
Pinterest: https://www.pinterest.de/?next=/settings/

6. Sending review reminders by email

If you have given us your express consent to this during or after your order in accordance with Art. 6 (1) sentence 1 lit. a GDPR, we will use your email address to remind you to submit a review of your order via the rating system we use.
This consent can be revoked at any time by sending a message to the contact option described below.

7. Contact options and your rights

As a data subject, you have the following rights:

in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
in accordance with Art. 16 GDPR, the right to demand the immediate correction of inaccurate data or the completion of your personal data stored by us;
in accordance with Art. 17 GDPR, the right to demand the erasure of your personal data stored by us, unless further processing is not
- for the exercise of the right to freedom of expression and information;
- for compliance with a legal obligation;
- for reasons of public interest or
- for the establishment, exercise or defense of legal claims
is required;
in accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data, if
- the accuracy of the data is disputed by you;
- the processing is unlawful, but you refuse its erasure;
- we no longer need the data, but you need them for the establishment, exercise or defense of legal claims or
- you have objected to the processing in accordance with Art. 21 GDPR;
in accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
in accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

For questions regarding the collection, processing or use of your personal data, for information, correction, restriction or erasure of data, as well as the revocation of consents granted or objection to a specific data use, please contact us directly using the contact details in our impressum.

********************************************************************
Right to object
Insofar as we process personal data as explained above to protect our legitimate interests that are overriding in a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you have a right to object only if there are reasons arising from your particular situation.

After exercising your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.

This does not apply if the processing is for direct marketing purposes. In that case, we will no longer process your personal data for this purpose. ********************************************************************


Privacy policy created with the Trusted Shops legal text generator