PRIVACY POLICY

1 Information about the collection of personal data

(1) In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.
(2) The responsible party pursuant to Article 4 (7) of the EU General Data Protection Regulation (DS-GVO) is CHEVAL DORÉ, Frankfurter Allee 65, 10247 Berlin, Germany, Owner: Julian Reimer, e-mail: contact@chevaldore.com (see our imprint).
(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations.
(4) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the defined criteria for the storage period.

2 Your rights
(1) You have the following rights vis-à-vis us with regard to the personal data concerning you:
- Right to information,
- Right to correction or deletion,
- Right to restriction of processing,
- Right to object to processing,
- Right to data portability.
(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

3 Collection of personal data when visiting our website
(1) In the case of merely informative use of the website, i.e. if you do not transmit information to us in any other way, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO):
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request comes
- browser
- Operating system and its interface
- Language and version of the browser software.
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive associated with the browser you are using and through which the entity that sets the cookie (in this case by us) receives certain information. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO).
(3) Use of cookies:
a) This website uses the following types of cookies, the scope and functionality of which are explained below:
- Transient cookies (for this purpose b)
- Persistent cookies (c).
b) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are deleted automatically after a specified period of time, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all functions of this website.
e) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.

4 Further functions and offers of our website
(1) In addition to the purely informational use of our website, we may offer various services that you can use if you are interested. For this purpose, you will usually have to provide further personal data, which we use to provide the respective service and for which the aforementioned data processing principles apply.
(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
(3) Furthermore, we may pass on your personal data to third parties if we offer promotions, competitions, contracts or similar services together with partners. You will receive more information on this when you provide your personal data or below in the description of the offer.
(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.

5 Objection or revocation against the processing of your data
(1) If you have given your consent to the processing of your data, you may revoke this consent at any time. Such revocation affects the permissibility of the processing of your personal data after you have expressed it to us.
(2) Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.
(3) Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us of your advertising objection using the following contact details: CHEVAL DORÉ, Frankfurter Allee 65, 10247 Berlin, Germany, Owner: Julian Reimer, e-mail: contact@chevaldore.com (see our imprint).

6 Integration of Google Maps
(1) On this website we use the offer of Google Maps. This allows us to display interactive maps directly on the website and enables you to comfortably use the map function.
(2) By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. In addition, the data mentioned under § 3 of this declaration are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
(3) For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
mated, machine processing. The query includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and further used there. However, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with any other data held by Google. The deviating data protection provisions of the Google company apply to this data. For more information on Google's privacy policy, please visit: https://www.google.com/intl/de/policies/privacy/

7 Integration of YouTube videos
(1) We can integrate YouTube videos into our online offer, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transmission.
(2) By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under § 3 of this declaration are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
(3) For more information on the purpose and scope of data collection and its processing by YouTube, please refer to the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

8 Use of our webshop (Shopify)
(1) If you wish to place an order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we require for the processing of your order. Mandatory data required for the processing of contracts are marked separately, other data are voluntary. We process the data you provide to process your order. For this purpose, we may pass on your payment data to our house bank. The legal basis for this is Art. 6 para. 1 p. 1 lit. b DS-GVO.
You can voluntarily create a customer account, through which we can store your data for future purchases. When creating an account under "My Account", the data you provide will be stored revocably. You can always delete all further data, including your user account, in the customer area.
We may also process the data you provide to inform you about other interesting products from our portfolio or to send you e-mails with technical information.
(2) We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, we will restrict processing after [two years], i.e. your data will only be used to comply with legal obligations.
(3) To prevent unauthorized access by third parties to your personal data, in particular financial data, the ordering process is encrypted using TLS technology.
10 Use of the rating functions and Trusted Shops
In our store, where various services are offered, you can submit public reviews in the form of comments. Your comment will be published with your specified username with the post. We recommend using a pseudonym instead of your real name. The specification of user name and e-mail address is required, all other information is voluntary. If you post a comment, we will continue to store your IP address, which we will delete after one week. The storage is necessary for us to be able to defend ourselves against liability claims in cases of possible publication of illegal content. We need your e-mail address in order to contact you if a third party should object to your comment as illegal. To implement our rating system, we use the provider Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany. To display our Trusted Shops seal of approval and the collected ratings as well as to offer Trusted Shops products to buyers after an order, the Trusted Shops Trustbadge is integrated on this website. When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. Legal bases are Art. 6 para. 1 p. 1 lit. b and f DS-GVO. Comments are not checked before publication. We reserve the right to delete comments if they are objected to by third parties as unlawful. For more information, please visit the third-party provider's page: https://www.trustedshops.de/impressum/.

9 Use of our webshop

We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example:

We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.

We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

10 Use of our portal
(1) If you wish to use our portal, you must register by providing your e-mail address, a password of your choice, and a user name of your choice. There is no obligation to use a clear name; pseudonymous use is possible. The provision of the aforementioned data is mandatory, all other information you can provide voluntarily by using our portal.
(2) If you use our portal, we store your data required for the fulfillment of the contract, including information on the method of payment, until you finally delete your access. Furthermore, we store the voluntary data you provide for the duration of your use of the portal, unless you delete it beforehand. You can manage and change all details in the protected customer area. The legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO.
(3) If you use the portal, your data may become accessible to other participants of the portal in accordance with the contractual performance. Non-registered members will not receive any information about you. For all registered members, your username and photo are visible, regardless of whether you have shared them. In contrast, your entire profile with the data you have shared is visible to all members who have confirmed you as a personal contact. If you make content available to your personal contacts that you do not send by means of a private message, this content is visible to third parties, provided that your personal contact has given the release. If you post contributions in public groups, these are visible to all registered members of the portal.
(4) To prevent unauthorized access by third parties to your personal data, especially financial data, the connection is encrypted using TLS technology.

11 Duration of storage of personal data
We store personal data in accordance with the statutory retention periods (e.g. retention periods under commercial and tax law). Subsequently, the respective data will be deleted, provided that they are not required for the fulfillment of the contract and/or there is no legitimate interest in storing them.