Data Protection/ Privacy Policy

Data collection on our website

The TRUETAPE team appreciates your interest in our online shop. We take the protection of your personal data very seriously. We treat your personal data as strictly confidential under statutory data protection regulations and this data protection declaration.

If you use our website, various pieces of personal data will be collected. Personal data refers to any information concerning the personal or circumstantial situation of an identified natural person. This includes information such as a real name, address, and phone number.

In this data protection declaration, we explain which data are collected and the contexts in which we use them, as well as the purposes of processing.

1. Access data and hosting

You can visit our web pages without disclosing any personal information. Each time a website is called up, the web server solely automatically stores information in a so-called server log file which, for example, contains the name of the requested file, your IP address, date and time of access, the transferred data volume, and the requesting provider while documenting the access.

These access data are evaluated exclusively in order to ensure that the site functions properly and to improve our services. In accordance with Art. 6 para. 1 clause 1 (f) GDPR, this serves to protect our legitimate and predominantly prevailing interests in a correct presentation of our offer within the scope of a weighing of interests.

Third-party hosting services

As part of the processing on our behalf, a service provider supports us with hosting and website presentation services. This serves to protect our legitimate and predominantly prevailing interests in a correct presentation of our offer within the scope of a weighing of interests. All data collected during your use of this website or via the forms provided for that purpose in the online shop, as described below, are processed on the third-party provider’s servers. Processing on other servers only takes place in the framework described here.

2. Data collection and use to perform the contract

We collect the personal data that you provide us of your own volition when you place an order or contact us (e.g. via the contact form or email). Some fields are marked as mandatory because we strictly require the information for contract execution, for processing your inquiry, or for creating your customer account; without providing that information, you cannot place your order and/or submit your inquiry. The types of data collected are indicated in the respective input forms. We use the data provided by you in accordance with Art. 6 para. 1 clause 1 (b) GDPR for the performance of contracts and processing of your inquiries. After completion of the contract, your data will be restricted for further use and deleted after the mandatory storage periods defined in tax and commercial legislation, unless you have given your express consent for the further use of your data, or unless we have reserved the right to a more extensive use of the data which is legally permissible and about which we inform you below.

We transmit personally identifiable data to third parties only to the extent required to fulfil the terms of your contract with us, for example, to companies entrusted to deliver goods to you or banks entrusted to process your payments. Your data will not be transmitted for any other purpose, or only if you have given your express permission to do so. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

3. Cookies

We use cookies on various pages on this website to make your visit more pleasant, and to enable you to use certain functions, show products that match your interests, or for market research purposes. This serves to protect our legitimate and predominantly prevailing interests in an optimised presentation of our offer within the scope of a weighing of interests, pursuant to Art. 6 para. 1 clause 1 (f) GDPR. Cookies are small text files which are automatically stored on your end device. Some of the cookies we use are deleted after the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your computer and enable us to recognise your browser on your next visit (persistent cookies). You can see the duration of storage in the overview of the cookie settings in your web browser. You can set your browser so that you are informed about the use of cookies and decide individually on whether to accept them or to deactivate the acceptance of cookies in certain cases or completely. Each browser is different in the management of cookie settings. This is described in the Help menu of each browser, where it is explained to you how you can adjust your cookie settings.

4. Newsletter

We use the newsletter to inform you about ourselves and our offers.
If you would like to receive the newsletter, we require an email address and information that allows us to verify that you are the owner of the entered email address or that its owner agrees to receiving the newsletter. In addition, the first and last name must be provided; however, these data are used only to distribute the newsletters.
When you register for the newsletter, we collect your IP address and date of registration. This serves solely as proof in the event that a third party abuses an email address and registers without the knowledge of the person entitled to receive the newsletter.
The processing of the data entered in the newsletter registration form takes place exclusively based on your consent (Art. 6 para. 1 (a) GDPR). You can revoke consent to the storage of your data and email address as well as their use for sending the newsletter at any time, either through the “opt-out” link in the newsletter or by notifying us hereof. The legality of data processing, which has already occurred before we receive your request, remains unaffected by this.

At TRUETAPE, we use the provider Sendinblue (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany) to distribute our newsletter. When registering to receive the newsletter, the data are transmitted to Sendinblue and stored there.

The data provided when registering for the newsletter will be used to distribute the newsletter until such time as you unsubscribe; then, the data will be deleted from our servers and those of Sendinblue.

Sendinblue is a service with which the distribution of newsletters can be organised and analysed. If you enter your data (e.g. your email address) in order to subscribe to our newsletter, they will be stored on Sendinblue servers in Germany. Sendinblue has a TÜV Rheinland certificate and stores your data GDPR compliant.

More information about privacy at Sendinblue can be found at: https://www.sendinblue.com/gdpr/

5. Analysis tools and advertising

Google Analytics

This website uses Google Analytics, a web analysis service. This is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The personal data about your use of the website that are generated by the cookies will usually be transmitted to, and stored on, a Google server in the United States.
Google Analytics cookies are stored based on Art. 6 para. 1 (f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

IP Anonymisation

We have activated the IP anonymisation feature on our website. Prior to transmission to the USA, your IP address will be truncated by Google within the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on the website activity, and to provide other services related to the website activity and Internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data stored by Google.

Browser plugin

You can prevent cookies from being stored by selecting the appropriate settings in your browser; however, we wish to point out that by doing so, you may not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed on to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objecting to the collection of data

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set; this will prevent your data from being collected when you visit this website in the future:
Click here to disable Google Analytics
For more information about how Google Analytics handles user data, see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Contract data processing

We have entered into a contract with Google for the outsourcing of our data processing and have fully implemented the strict requirements of the German data protection authorities when using Google Analytics.

Demographic data collection by Google Analytics

This website uses Google Analytics’ “demographic features”. This allows reports to be generated containing statements about the age, gender, and interests of site visitors. These data come from interest-based advertising from Google and third-party visitor data. These collected data cannot be attributed to any specific individual person. You can disable this feature at any time by adjusting the ad settings in your Google account, or you can generally forbid the collection of your data by Google Analytics as described in the section “Objecting to the collection of data.”

Google Analytics Remarketing

Our websites use the features of Google Analytics Remarketing combined with the cross-device capabilities of Google AdWords and DoubleClick. These are operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
This function enables the target groups created with Google Analytics Remarketing to be linked with the cross-device functions of Google AdWords and Google DoubleClick. This allows advertising to be displayed based on your personal interests, identified from your previous usage and surfing behaviour on one device (e.g. your mobile phone) and on other devices (such as a tablet or computer).

Once you have given your consent, Google will associate your web and app browsing history with your Google Account for this purpose. That way, any device that signs in to your Google Account can use the same personalised promotional messaging.

To support this feature, Google Analytics collects Google-authenticated user IDs that are temporarily linked to our Google Analytics data to define and create cross-device ad targeting.

You may permanently object to cross-device remarketing/targeting by disabling personalised advertising in your Google Account by following this link: https://www.google.com/settings/ads/onweb/.

The aggregation of the data collected in your Google Account is based solely on your consent, which you may give or withdraw from Google (Art. 6 para. 1 (a) GDPR). For data collection operations not merged into your Google Account (for example, because you do not have a Google Account or have objected to the merge), the collection of data is based on Art. 6 para. 1 (f) GDPR. The legitimate interest arises from the fact that the website operator has an interest in anonymous analysis of website visitors for advertising purposes.

Further information and the data protection regulations can be found in Google’s data protection (privacy) policy at: https://www.google.com/policies/technologies/ads/.

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising programme from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”).
As part of Google AdWords, we use so-called Conversion Tracking. When you click on an ad served by Google, a conversion tracking cookie is set. Cookies are small text files that the internet browser stores on the user’s computer. These cookies expire after 30 days and are not used for personal identification of the user. Should the user visit certain pages of the website and the cookie has not yet expired, Google and the website can tell that the user clicked on the ad and proceeded to that page.

Each Google AdWords advertiser has a different cookie. Thus, cookies cannot be tracked using the website of an AdWords advertiser. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted into conversion tracking. Customers can find out the total number of users who have clicked on their ad and were directed to the page with a conversion tracking tag. However, advertisers do not obtain any information that can be used to personally identify users. If you do not wish to participate in tracking, you can refuse by simply deactivating the Google conversion tracking cookie via your internet browser settings. By doing so, you will not be included in the conversion tracking statistics.

If you visit our site via a mobile device (e.g. smartphone or tablet), you can use this link to object to the use of Google Analytics for the future. By deactivating the use of Google Analytics on a smartphone or tablet, we set a cookie in your browser, which tells us to prevent the use of Google Analytics for your device. Please note that you will have to express your objection again if you remove the cookies from your browser.

“Conversion cookies” are stored based on Art. 6 para. 1 (f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

For more information about Google AdSense and Google conversion tracking, please see Google’s privacy policy at http://www.google.com/policies/privacy/.

You can configure your browser so that you are informed about the use of cookies and you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions, or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.

Facebook Pixel

Our website uses the visitor action pixel of Facebook, Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) for conversion measurement.
This allows the behaviour of site visitors to be tracked after they click on a Facebook ad to reach the provider’s website. This allows an analysis of the effectiveness of Facebook advertisements for statistical and market research purposes and their future optimisation.

The collected data are anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data are stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the guidelines for Facebook data use. This will allow Facebook to display ads both on Facebook and on third-party sites. We, as the operator of the site, have no control over how these data are used.
Please refer to Facebook’s privacy policy for more information on the protection of your privacy: https://www.facebook.com/about/privacy/. You can also disable the remarketing feature “Custom Audiences” in the Ad Settings section of https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen deaktivieren. To do so, you will first need to log into Facebook.

If you do not have a Facebook account, you can disable Facebook usage-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

Use of Google Web Fonts

This site uses web fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) to uniformly display fonts. With Google Web Fonts, we can use external fonts, called Google Fonts. When you access our website, the required Google font is downloaded onto your browser cache by your web browser to display texts and fonts correctly. This is necessary so that your browser can also show an optically improved representation of our texts. If your browser does not support this feature, your computer will use a standard font for display. Integration of these web fonts is realised via a server access, typically a Google server in the United States. This transmits information to the server about which of our website pages you have visited. The IP address of the browser of the visitor’s end device is also stored by Google. We use Google Web Fonts for optimisation purposes, in particular to improve the use of our website for you and to make its design more user-friendly. This is also in our legitimate interest pursuant to Art 6 para. 1 (f) GDPR. Google is subject to and certified under the Privacy Shield Agreement between the European Union and the USA. Google therefore undertakes to comply with the standards and regulations of European data protection law. Further information can be found in the following linked entry.

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

For more information about data protection, please refer to Google’s privacy policy: http://www.google.de/intl/de/policies/privacy

Further information on Google Web Fonts can be found at http://www.google.com/webfonts/, https://developers.google.com/fonts/faq?hl=de-DE&csw=1 und https://www.google.com/fonts#AboutPlace:about.

6. Plug-ins and tools

YouTube

Our website uses plugins from YouTube, which is operated by Google. The operator of these pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our pages that features a YouTube plugin, a connection is established to the YouTube servers. The YouTube server is then informed about which of our pages you have visited. If you are logged in to your YouTube account, YouTube allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interests of making our online presence more attractive. This constitutes a legitimate interest pursuant to Art. 6 para. 1 (f) GDPR. Further information about the handling of user data can be found in YouTube’s privacy policy: https://www.google.de/intl/de/policies/privacy.

Use of social plugins from Facebook, Instagram

Our site uses social plugins (“plugins”) from social networks.
When you visit a page of our website that contains a social plugin, your browser makes a direct connection to the servers of Facebook, Google, Twitter, or Instagram. The content of the plugin is transmitted by the provider directly to your browser and integrated into the webpage. By integrating the plugin, the provider receives the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the relevant supplier or are not currently logged in. This information (including your IP address) will be transmitted from your browser directly to a server of the provider (potentially in the USA) and stored there. If you are logged in to one of the services, the providers can immediately assign the visit to our website to your profile in the respective social network. When you interact with the plugins, for example by pressing the “Like” or “Share” button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on the social network and displayed to your contacts. This serves to protect our legitimate interests in the optimal marketing of our offer, considering the balance of interests, in accordance with Art. 6 para. 1 clause 1 (f) GDPR.

For the purpose and scope of data collection and further processing and use of data by the providers, as well as your rights and settings options to protect your privacy and contact details, please refer to the privacy policies of the providers.

http://www.facebook.com/policy.php
https://help.instagram.com/155833707900388

If you do not want the social networks to associate the data collected from our website directly with your profile in the respective social network, you must log out of the network before visiting our website. You can completely prevent plugins from loading by means of add-ons for your browser, for example with the script blocker “NoScript” (http://noscript.net/).

7. Payment providers

PayPal

Our website accepts payments via PayPal. The provider of this service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).

If you select payment via PayPal, the payment data you provide will be transmitted to PayPal. The transmission of your data to PayPal is carried out in accordance with Art. 6 para. 1 (a) GDPR (Consent) and Art. 6 para. 1 (b) GDPR (Processing for contract fulfilment purposes). You have the option to revoke your consent to data processing at any time. Revocation does not affect the effectiveness of data processing operations that took place before the revocation.

Sofortüberweisung (Immediate transfers)

Our website accepts, among others, payments via “Sofortüberweisung”. The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter “Sofort GmbH”).

“Sofortüberweisung” provides us with real-time payment confirmations, allowing us to begin fulfilling our contractual duties right away.

If you opt to pay using “Sofortüberweisung”, you will be submitting a PIN and a valid TAN to Sofort GmbH so that it can access your online banking account. Sofort GmbH will automatically check your account balance and perform the transfer to our account using the TAN you supply. It then sends an immediate transaction confirmation. After logging in, your transactions, the limit of the overdraft facility, and the existence of other accounts and their balances will be checked automatically.

In addition to the PIN and TAN, the information which will be sent to Sofort GmbH also includes payment details you provide as well as personal information about you. This personal information includes your first and last name, address, telephone number(s), email address, IP address, and any other data required to process your payment. This transfer of these data is required to identify you unequivocally and to prevent fraud.

Data are transmitted to Sofort GmbH based on Art. 6 para. 1 (a) GDPR (Consent) and Art. 6 para. 1 (b) GDPR (Processing for contract fulfilment purposes). You have the option to revoke your consent to data processing at any time. Revocation does not affect the effectiveness of data processing operations that took place before the revocation.

For details on payments by Sofortüberweisung, please refer to the following links: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.

Stripe

Our website accepts payments via credit card. The provider of this payment service is STRIPE PAYMENTS EUROPE, LIMITED, Company Number IE513174, A&L Goodbody, IFSC, North Wall Quay, Dublin 1, Ireland.

If you select payment via credit card, the payment data you provide will be transmitted to Stripe Payments Europe, Limited. The transmission of your data to Stripe Payments Europe, Limited is based on Art. 6 para. 1 (a) GDPR (Consent) and Art. 6 para. 1 (b) GDPR (Processing for contract fulfilment purposes). You have the option to revoke your consent to data processing at any time. Revocation does not affect the effectiveness of data processing operations that took place before the revocation.

8. Changes to our data protection statement

We reserve the right to change or update this data protection declaration whenever necessary in compliance with the applicable data protection regulations. This allows us to ensure that it always meets the current legal requirements and to include changes to our services, such as the introduction of new services. The most current version always applies to your visit.

9. Contact possibilities and your rights

As a data subject, you have the following rights:

• pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent described therein;
• pursuant to Art. 16 GDPR, to request the correction of incorrect or incomplete personal data stored by us;
• pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless further processing
  - is necessary to exercise the right of freedom of expression and information;
  - is necessary to fulfil a legal obligation;
  - is necessary for reasons of public interest; or
  - is necessary for the assertion, exercise, or defence of legal claims;
• pursuant to Art. 18 GDPR, the right to obtain the restriction of the processing of your personal data, if
  - you dispute the accuracy of the data;
  - the processing is unlawful, but you do not want to request their erasure;
  - we no longer need the data, but you do need it to assert, exercise, or defend legal claims; or
  - you have lodged an objection to the processing pursuant to Art. 21 GDPR;
• pursuant to Art. 20 GDPR, to receive your personal data, which you have provided, in a structured, current, and machine-readable format or to request its transfer to another responsible person;
• pursuant to Art. 77 GDPR, to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our headquarters.

If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to enquire about, correct, block, or erase data or revoke a consent, or opt out of a particular use of your data, please contact us directly using the contact details in our legal notice.