Privacy Policy

The controller is:

Brandspace 101 LTD
Alexandrou Papadiamanti 1, Block A, Office 3,
6035, Larnaca, Cyprus


Thank you for your interest in our online store. Protecting your privacy is very important to us. Below we will tell you in detail how we handle your data.

1. user information and hosting
You can visit our website without providing any personal information. Whenever you use the website, the web server simply automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting service provider (usage data) and documents the use.

This usage data is only evaluated to ensure the smooth operation of the site and to improve our services. In accordance with Article 6(1)(1)(f) of the GDPR, this serves to protect our legitimate interests in the proper presentation of our offer, which, in the context of the balancing of interests, take precedence over our interests. All usage data will be deleted no later than seven days after the end of your visit to the website.

Hosting services provided by a third party service provider
A third party service provider provides us with hosting and website hosting services as part of the processing on our behalf. This is to protect our legitimate interests in the proper presentation of our offerings and to balance our interests. Any data collected in connection with the use of this website or through the forms provided for this purpose in the online shop, as described below, will be processed on its servers. Processing on other servers will only take place within the framework described herein.

The service provider is located in the United States and is certified under the EU-US Privacy Shield. The valid certificate can be viewed here. Based on this agreement between the United States and the European Commission, the European Commission has determined an adequate level of data protection for companies certified under Privacy Shield.

This service provider is located in the United States and is certified under the EU-US Privacy Shield. The valid certificate can be viewed here. Based on an agreement between the United States and the European Commission, the European Commission has determined an adequate level of data protection for companies certified under the Privacy Shield.


2. collection and use of data for contract processing, contacting us
We collect personal data if you voluntarily provide it to us when you place an order or contact us (e.g. via a contact form or email). Mandatory fields are marked as such because we need the information in these cases to process the contract or to process your contact, and you cannot submit an order or contact us without providing it. The information that will be collected is indicated on the relevant input forms. We will use the information you provide in accordance with Article 6(1)(1)(b) of the GDPR to process contracts and to process your enquiries. If you have given your consent in accordance with Article 6(1)(1)(a) of the GDPR by deciding to open a customer account, we will use your data to open a customer account. Once the contract processing is completed or your customer account is deleted, your data will be limited for further processing and deleted at the end of the retention periods under tax and commercial law, unless you have expressly given your consent to the further use of your data or we reserve the right to use your data beyond what is permitted by law and which we inform you of in this notice. You may delete your customer account at any time, either by sending a message to the contact information option described below or by using the dedicated function in your customer account.

3. Transfer of data
In order to fulfil the contract in accordance with Article 6(1)(1)(1)(b) of the GDPR, we will transmit your data to the carrier that ordered the delivery, insofar as this is necessary for the delivery of the goods ordered. Depending on which payment service provider you choose in the ordering process, we will transmit the payment data collected for this purpose to the credit institution responsible for the payment and, where applicable, to the payment service providers we have instructed or to the payment service you have chosen. In some cases, the selected payment service providers will also collect this information themselves if you create an account with them. In this case, you will need to register with the payment service provider with your access data during the subscription process. In this respect, the privacy policy of the relevant payment service provider applies.

The same applies to the transfer of data to our manufacturers or wholesalers if they carry out the delivery on our behalf (drop shipment).

We use payment service providers and drop shippers based in a country outside the European Union. Personal data is transferred to these companies only to the extent necessary for the performance of the contract.

4.
E-mail advertising in connection with the registration for the newsletter
If you register for our newsletter, we will use the data necessary for this purpose or data you have provided separately in order to send you our newsletter regularly by e-mail on the basis of your consent in accordance with Article 6(1)(1)(a) of the GDPR.

It is possible to unsubscribe to the newsletter at any time, either by sending a message to the contact details described below or by using the link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address unless you have expressly given your consent to further use of your information or we reserve the right to use it in a broader manner as permitted by law, which we will inform you of in this notice.

Email advertising without newsletter subscription and your right to object.
If we receive your e-mail address in connection with the sale of a product or service and you have not objected, we reserve the right under Section 7(3) of the German Unfair Competition Act (UWG) to send you regular e-mail offers for similar products that you have already purchased from our range. This serves our legitimate interests in addressing our customers in a promotional way, which, in the context of balancing interests, take precedence over our interests.
You may object to this use of your email address at any time by sending a message to the contact details described below or via the link provided for this purpose in the promotional email, without incurring any costs other than the basic delivery charges.

The newsletter will be sent as part of our processing on our behalf by the service provider to whom we provide your email address for this purpose.

This service provider is located in the United States and is certified under the EU-US Privacy Shield. The valid certificate can be viewed here. Based on this agreement between the United States and the European Commission, the European Commission has determined an adequate level of data protection for companies certified under the Privacy Shield.

5. cookies and web analytics
In order to make your visit to our website attractive and to enable the use of certain functions, the display of suitable products or market research, we use so-called cookies on various pages. This serves to protect our legitimate interests with regard to the optimised presentation of our offer in accordance with Article 6(1)(1)(f) of the GDPR, which is predominant in the context of the balancing of interests. Cookies are small text files that are automatically stored on your terminal device. Some of the cookies we use are deleted at the end of your browser session, i.e. after you have closed your browser (so-called session cookies). Other cookies remain on your terminal and allow us to recognise your browser on your next visit (persistent cookies). You can find out how long they are kept in the overview of your browser's cookie settings. You can set your browser to notify you when cookies are set and you can choose to accept them individually or to opt out of accepting cookies in certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu for each browser, which explains how you can change your cookie settings. This can be found for each browser in the following links:
Internet Explorer™: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Safari™: https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14
Chrome™: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Firefox™: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera™: https://help.opera.com/de/latest/web-preferences/#cookies


If cookies are not accepted, the functionality of our website may be limited.


Use of Google (Universal) Analytics for web analytics
Insofar as you have given your consent in accordance with Article 6(1)(1)(a) of the GDPR, this website uses Google (Universal) Analytics, a web analytics service provided by Google LLC (www.google.de), to analyse the website. Google (Universal) Analytics uses methods, such as cookies, which enable the analysis of the use of the website. The information automatically collected about your use of this website is usually transmitted to a Google server in the United States and stored there. By activating IP anonymisation on this website, the IP address is shortened before being transferred within the Member States of the European Union or other States party to the Agreement on the European Economic Area. Only in exceptional cases will the entire IP address be transferred to a Google server in the United States and shortened there. The anonymised IP address sent by your browser in connection with Google Analytics will not be combined with other Google data. After the end of the purpose of use and the end of the use of Google Analytics, the data collected in this context will be deleted.

Google LLC is headquartered in the United States and is certified under the EU-US Privacy Shield agreement. The valid certificate can be viewed here. Based on an agreement between the US and the European Commission, the European Commission has determined an adequate level of data protection for companies certified under the Privacy Shield.

You can withdraw your consent at any time for the future by downloading and installing the browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de . This prevents the collection of data generated by the cookie and related to the use of the website (including your IP address) and the processing of this data by Google.

As an alternative to the browser extension, you can click on this link if you wish to prevent Google Analytics from collecting data from this website in the future. This will place an opt-out cookie on your terminal. If you delete the cookies, you will be asked to give your consent again.

If you have given your consent in accordance with Article 6(1)(1)(a) of the GDPR, this website also uses Google Signals. This is an extension of Google Analytics that allows so-called "cross-device tracking". This means that if your internet-enabled devices are connected to your Google account, Google can generate reports on your usage behaviour (in particular cross-device usage figures) even if you switch between devices. Google will use the data for this purpose if you have activated the "personalised advertising" setting on your Google Account.
We do not process personal data in this context, but only receive statistics based on Google Signals.
You can withdraw your consent at any time for the future by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de . This will prevent the collection of data generated by the cookie and related to the use of the website (including your IP address) and the processing of data by Google. You can also disable the "personalised advertising" setting on your Google Account. You can find more information here.

6. online marketing
Google Ads Remarketing
We use Google Ads remarketing to advertise this website in Google search results and on third party websites. Insofar as you have given us your consent to this in accordance with Article 6(1) sentence 1 lit. a of the GDPR, Google will set a so-called remarketing cookie when you visit our website, which will automatically enable interest-based advertising using a pseudonym cookie tag and based on the pages visited. When the purpose of use ends and we no longer use Google Ads Remarketing, the data collected in this context will be deleted.

Further processing of the data will only take place if you have given your consent for Google to link your browsing history online and in applications to your Google Account and to use the information from your Google Account to personalise the ads you see online. In this case, if they are logged in to Google when they visit our website, Google will use your data, together with data from Google Analytics, to create and customise targeting lists for cross-device remarketing. For this purpose, Google will temporarily combine your personal data with data from Google Analytics to create target groups.

Google Ads Remarketing is a service provided by Google LLC (www.google.de).
Google LLC is headquartered in the United States and is certified under the EU-US Privacy Shield Agreement. The valid certificate can be viewed here. Based on the agreement between the United States and the European Commission, the European Commission has determined an adequate level of data protection for companies certified under the Privacy Shield.

You can withdraw your consent at any time for the future by deactivating the remarketing cookie via this link. You can also contact the Digital Advertising Alliance for information on cookie setting and related settings.


Zendesk live chat tool
If you contact us via the live chat tool, we will process the data you voluntarily enter there (name, email address, message) in accordance with Article 6(1), 1st sentence, 1st subparagraph, point (b) of the GDPR in order to respond to your enquiry within the framework of the processing of the contract. In addition, the use of this tool serves to protect our legitimate interests for efficient and better customer communication in accordance with Article 6(1)(1)(f) of the GDPR, which is a priority in the context of balancing interests. The data will be deleted later.
As part of the processing on our behalf, the third party service provider Zendesk, Inc. provides services to us to provide a live chat tool. All data collected in connection with the use of the chat tool is processed on its servers.
Zendesk, Inc. is located in the United States and is certified under the EU-US Privacy Shield. The valid certificate can be viewed here. Based on this agreement between the United States and the European Commission, the European Commission has determined an adequate level of data protection for companies certified under the Privacy Shield.

Live chat tool Userlike
If you contact us via the live chat tool, we will process the data you voluntarily enter there (name, e-mail address, message) in accordance with Article 6 (1) 1 p. 1 lit. b) of the GDPR for the purpose of answering your query within the framework of the processing of the contract. In addition, the use of this tool serves to protect our legitimate interests for efficient and better customer communication in accordance with Article 6(1)(1)(f) of the GDPR, which is a priority in the context of the balancing of interests. The data will be deleted later.
In the context of processing on our behalf, the third party service provider Userlike provides services to us to make the live chat tool available. All data collected in connection with the use of the chat tool will be processed on its servers.

Google Maps
This website uses Google Maps to visually display geographic information Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as Google) to protect our legitimate interests in the optimized presentation of our offerings and the convenience of our locations, which, in the context of balancing our interests, override our interests pursuant to Article 6(1)(f) of the GDPR.
When using Google Maps, Google transmits or processes information about the use of the map functions by website visitors, which may include in particular IP address and location data. We have no influence on this data processing.
Google is certified under the EU-US Privacy Shield agreement. The valid certificate can be viewed here. Based on an agreement between the United States and the European Commission, the European Commission has determined an adequate level of data protection for companies certified under the Privacy Shield.
If you wish to disable Google Maps and thereby prevent the transfer of data to Google, you must disable the Java Script function in your browser. This will prevent or limit access to Google Maps.
For more information about Google's processing of your data, please see Google's Privacy Policy. The Google Maps Terms of Use contain detailed information about the map service.
Data processing is carried out on the basis of an agreement between the parties jointly and severally responsible in accordance with Article 26 of the GDPR, which you can find here.

Bing Maps
This website uses Bing Maps to visually present geographical information or to provide a route planner. Bing Maps is operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA (hereinafter referred to as Microsoft). This is to protect our legitimate interests in the optimised presentation of our offerings and the ease of use of our sites, which, in the context of balancing our interests, outweigh our interests in accordance with Article 6(1)(f) of the GDPR.
When using Bing Maps, Microsoft transmits or processes information about the use of the mapping functions by visitors to the website, which may in particular include the IP address. The website operator has no influence on this data processing.
Microsoft is certified under the EU-US Privacy Shield agreement. The valid certificate can be viewed here. Based on the agreement between the US and the European Commission, the European Commission has determined the level of data protection adequate for companies that have obtained Privacy Shield certification.
If you wish to disable Bing Maps and thereby prevent the transfer of data to Microsoft, you must disable the Java Script function in your browser. This will prevent or limit access to Bing Maps.
For more information on data processing by Microsoft, click here. The Bing Maps Terms of Use contain detailed information about the map service.


Google reCAPTCHA
In order to prevent abuse and spam of our online forms, we use Google reCAPTCHA from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as Google) for some of the forms on our website. By checking the manual entry, this service prevents automated software (so-called bots) from performing abusive actions on the website. In accordance with Article 6(1)(1)(f) of the GDPR, this serves our legitimate interests in protecting our website from abuse and ensuring the integrity of our online presence, which, in the balancing of interests, outweigh our interests.
Google reCAPTCHA uses code embedded in the website, known as JavaScript, as part of the authentication process, methods that allow the analysis of the use of the website, such as cookies. The information automatically collected about your use of this website, including your IP address, is usually transmitted to and stored by Google on servers in the United States. In addition, Google reCAPTCHA evaluates other cookies that are stored by Google services on your browser.
No personal data is read or stored from the input fields of this form.
Google is certified under the EU-US Privacy Shield agreement. The valid certificate can be viewed here. Based on an agreement between the US and the European Commission, the European Commission has determined an adequate level of data protection for companies certified under the Privacy Shield.
You may refuse the use of cookies by selecting the appropriate settings on your browser, but please note that if you do so, you may not be able to use all the features of this website. Please note that this may limit the functionality of our website for your use.
For more information about Google's privacy policy, please click here.

Google Fonts
The script code "Google Fonts" from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as Google) is integrated into this website. This is to protect our legitimate interests in the uniform presentation of the content of our website, which, in the context of balancing our interests, override our interests in accordance with Article 6(1)(f) of the GDPR.
This involves establishing a connection between the browser you use and Google's servers. This enables Google to know that our website has been accessed via your IP address.
Google is certified under the EU-US Privacy Shield agreement. The valid certificate can be viewed here. Based on the agreement between the United States and the European Commission, the European Commission has determined an adequate level of data protection for companies certified under the Privacy Shield.
For more information on Google's data processing, please see Google's Privacy Policy.


7. social media plug-ins
Use of Whatsapp social plug-ins through the Shariff solution.

Social buttons on social networks are used on our website.

This serves to protect our legitimate interests in the optimal marketing of our offer, which, in the context of balancing interests, outweigh our interests in accordance with Article 6 (1) 1 S. 1 lit. f GDPR. In order to improve the protection of your data when you visit our website, these buttons are not fully integrated as plug-ins, but only through an HTML link on the page. This integration ensures that when you visit a page on our website that contains such buttons, no connection is yet established with the servers of the social network provider concerned.

If you click on a button, a new window will open in your browser, which will call up the page of that provider, where you can click on a Like or Share button (after entering your login details, if necessary).

Information about the purpose and scope of data collection on the providers' websites, as well as further processing and use of the data, the option to contact them, your rights and options to protect your privacy in this context are set out in the providers' privacy notices.
https://www.whatsapp.com/legal/#privacy-policy

Youtube Video Plugins
Content from third party providers is integrated into this website. This content is provided by Google LLC ("the provider").
Youtube is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

The Extended Privacy Statement is activated for videos from YouTube that are embedded on our website. This means that Youtube does not collect and store information about visitors to our website unless they replay the video. The integration of videos serves to protect our legitimate interests in the optimal marketing of our offer, which are a priority in the balancing of interests pursuant to Article 6(1)(1)(f) of the GDPR.
For information on the purpose and scope of data collection, further processing and use of data by service providers, your rights in this regard and the options available to you to protect your privacy, please refer to Google's Privacy Policy https://developers.google.com/+/web/buttons-policy.

Vimeo Video Plugins
Third party content has been integrated into this website. This content is provided by Vimeo LLC ("Provider"). The integration of video serves to protect our legitimate interests in the optimal marketing of our offer in accordance with Article 6(1)(1)(f) of the GDPR, which is predominant in the balancing of interests.
Vimeo is operated by Vimeo LLC, 555 West 18th Street, New York 10011, USA ("Vimeo").
The Google Analytics tracking tool is automatically integrated into Vimeo videos embedded on our website. We have no control over, and cannot view, the tracking settings and the analytics results collected through it. In addition, web beacons are set for website visitors through the embedding of Vimeo videos.

You can prevent Google Analytics from setting tracking cookies by preventing cookies from being stored by selecting the appropriate settings in your browser software. However, we would like to point out that in this case you may not be able to fully use all the functions of this website.
You can also prevent Google from collecting information generated by the cookie and relating to your use of the website (including your IP address) and the processing of this information by Google by downloading and installing the browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Alternatively, instead of the browser plug-in, you can click on this link to prevent Google Analytics from collecting data on this website in the future. This will place an opt-out cookie on your terminal. If you delete the cookies, you will need to click on the link again.
For information on the purpose and scope of data collection, further processing and use of data by service providers, your rights in this regard and the options available to you to protect your privacy, please refer to the Vimeo Privacy Policy.

Our online presence on Facebook, Google, Twitter, Instagram and Pinterest.
Our presence on social networks and platforms serves to improve active communication with our customers and stakeholders. We provide information about our products and ongoing special offers.
When you visit our online social media presence, your data may be automatically collected and stored for market research and advertising purposes. This information is used to create so-called user profiles using pseudonyms. They may be used, for example, to place ads on and off the platforms that supposedly match your interests. Cookies are usually used on your terminal for this purpose. These cookies store visitor behaviour and user interests. This serves in accordance with Article 6(1)(f). In accordance with the GDPR, this serves to protect our legitimate interests in the optimised presentation of our offer and effective communication with customers and stakeholders, who are at the forefront of the balancing of interests. If the relevant social media platform operators ask you for your consent (opt-in) to the processing of your data, for example by means of a checkbox, the legal basis for the processing is Article 6(1)(a) of the GDPR.
To the extent that the above social media platforms are headquartered in the US, the following applies: for the US, there is an adequacy decision by the European Commission. This relates to the EU-US Privacy Shield. The valid certificate of the company in question can be found here.
Detailed information on the processing and use of data by service providers on their websites, as well as how to contact them and your rights and preferences in this context to protect your privacy, in particular opt-out options, can be found in the privacy notices of the service providers linked below. If you still need assistance in this regard, you can contact us.
Facebook: https://www.facebook.com/about/privacy/

The processing of data is based on an agreement between the persons jointly responsible pursuant to Article 26 of the GDPR, which you can find here:
https://www.facebook.com/legal/terms/page_controller_addendum

Google/YouTube: https://policies.google.com/privacy
Twitter: https://twitter.com/de/privacy
Instagram: https://help.instagram.com/519522125107875
Pinterest: https://about.pinterest.com/de/privacy-policy

Opt-out:
Facebook: https://www.facebook.com/settings?tab=ads
Google/YouTube: https://adssettings.google.com/authenticated
Twitter: https://twitter.com/personalization
Instagram: https://help.instagram.com/519522125107875
Pinterest: https://www.pinterest.de/?next=/settings/



8. sending assessment reminders by email
If you have given us your explicit consent to do so during or after the subscription in accordance with Article 6(1)(1)(a) of the GDPR, we will use your email address as a reminder to send you an evaluation of your subscription through the evaluation system we use.
This consent can be withdrawn at any time by sending a message to the contact details described below.


9. contact options and your rights
As a registered user, you have the following rights:

In accordance with Article 15 of the GDPR, the right to request information about your personal data processed by us to the extent specified therein;
In accordance with Article 16 of the GDPR, you have the right to request the prompt correction of inaccurate or incomplete personal data we have stored;
under Article 17 of the GDPR, the right to request the erasure of your personal data that we have stored, except where further processing is necessary to exercise the right to freedom of expression.
- to exercise the right to freedom of expression and information;
- to comply with a legal obligation;
- in the public interest; or
- for the establishment, exercise or defence of legal claims; or
is necessary;
In accordance with Article 18 of the GDPR, the right to request restriction of the processing of your personal data where the following conditions are met
- you contest the accuracy of the data;
- the processing is unlawful but you object to its erasure;
- we no longer need the data, but you need them for the establishment, exercise or defence of legal claims; or
- you have objected to the processing in accordance with Article 21 of the GDPR;
under Article 20 of the GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or the right to request their transfer to another controller;
under Article 77 of the GDPR, the right to lodge a complaint with a supervisory authority. As a general rule, you can do this by contacting the supervisory authority of your habitual residence or place of work or our head office.

If you have any questions about the collection, processing or use of your personal data, or if you wish to obtain information, rectify, restrict or delete data, withdraw consent or object to a particular use of data, please contact us directly via the contact details on the imprint.