Privacy policy

We are pleased that you are visiting our website. The protection of your personal data is important to us, and we want you to feel safe when visiting our website. We protect your privacy and your personal data. We process your personal data in accordance with the content of this Privacy Policy and in compliance with the applicable data protection regulations of the General Data Protection Regulation (GDPR) and the national provisions of the Federal Data Protection Act (BDSG).

Table of Contents

1. Name and Contact Details of the Controller
2. Contact with the Data Protection Officer
3. What are Personal Data?
4. Purposes of Data Processing
5. Legal Basis for Data Processing
6. Right to Object
7. Network Service
8. Use of Our Website for Information Purposes
9. Use of Our Website for Other Services
10. Contacting Us
11. Newsletter
12. Security
13. Cookies
14. Consent Tool
15. Web Storage
16. Web Analysis
17. Other Functions and Content
18. Recipients and Data Transfer
19. Deletion of Your Data
20. Your Rights
21. Changes to Our Privacy Policy

1) Name and Contact Details of the Controller

Etiketten Becker GmbH & Co. KG, Chemnitzerstrasse 14-18, 71540 Murrhardt, as the operator of the website: https://etikettenbeckershop.de, is the controller within the meaning of the GDPR.

3) What are Personal Data?

Personal data refers to any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

4) Purposes of Data Processing

The scope and type of collection, processing, and use of your data depend on whether you visit our website solely to access generally available information or use additional services. In principle, we process your personal data as part of our business activities for pre-contractual or contractual purposes. Additionally, the exercise of our legitimate interests or compliance with legal requirements may also be the purpose of data processing by us. We will inform you about the specific purposes of data processing in the following sections.

5) Legal Basis for Data Processing

We process your personal data based on the following legal grounds:

• For the fulfillment of pre-contractual or contractual obligations (Art. 6(1)(b) GDPR)
• Based on your consent (Art. 6(1)(a) GDPR)
• As part of a legitimate interest assessment (Art. 6(1)(f) GDPR)
• Based on legal requirements (Art. 6(1)(c) GDPR)

Additionally, depending on the nature and scope of the processing, other legal bases under national regulations may apply. We will inform you about the specific legal grounds for data processing in our respective processing activities.

6) Right to Object

If we process your personal data based on our legitimate interest (the legal basis for processing is Art. 6(1)(f) GDPR), you have the right to object at any time, on grounds relating to your particular situation, to such processing. If you exercise your right to object, we will cease processing the affected data. However, further processing may be reserved (except in the case of direct marketing, where we will immediately comply with your objection) if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims. Other rights of data subjects remain unaffected.

7) Network Service

Our website operates on the network of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen. The server location is in Germany.

8) Use of Our Website for Informational Purposes

For purely informational use of our website, it is generally not necessary for you to provide personal data. In this case, when you access our website, we only collect data that your internet browser automatically transmits, such as:

• Your computer’s IP address
• Date and time of the page access
• Your browser type, browser version, and browser settings
• The operating system used (Windows, iOS, Linux, etc.)
• The amount of data transmitted and status of transmissions
• The website from which the access to our page originated
• Other similar data and information used to prevent threats in the event of attacks on our information technology systems.

This is typically done through the use of log files. The purpose of processing is to ensure the functionality and compatibility of our website for technically smooth use, including troubleshooting, as well as to protect against technical attacks and misuse. The legal basis for this processing is our legitimate interest under Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper operation of our website. Log file data will be deleted when it is no longer required for the processing purpose.

9) Use of Our Website for Additional Services

If you use additional services offered by our company through our website, it may be necessary for you to provide personal data. The personal data required for providing these services will be specified in the respective input mask or application. You may also provide additional information voluntarily. Mandatory information is indicated by an asterisk (*) or a note stating “Required Field,” while voluntary information is not marked. The processing of your data will be carried out solely for the purpose of providing the requested service. The legal basis for processing your personal data and details about when your personal data will be deleted will be provided in the description of the specific services.

10) Contacting Us

Contact Form

On our website, we offer the option to contact us via a contact form. The personal data you provide through the contact form will only be processed for the purpose of handling your inquiry. Data will be shared with third parties only if it is necessary for processing your contact request. The legal basis for this processing is Art. 6(1)(b) GDPR. Your personal data will be deleted when it is no longer required to fulfill the purpose of your contact request. Please note that your messages may need to be retained due to statutory retention obligations. In this case, the legal basis is Art. 6(1)(c) GDPR.

Contact via Email

On our website, we also provide the option to contact us via email. Please be aware that unencrypted communication via email is insecure. It cannot be excluded that data transmitted in this way could be read, copied, altered, or deleted by unauthorized persons. The personal data you provide through an email request will only be processed for the purpose of handling your email inquiry. Data will be shared with third parties only if it is necessary for processing your contact request. The legal basis for this processing is Art. 6(1)(b) GDPR. Your personal data will be deleted when it is no longer required to fulfill the purpose of your contact request. Please note that your messages may need to be retained due to statutory retention obligations. In this case, the legal basis is Art. 6(1)(c) GDPR.

11) Newsletter

If you wish to subscribe to our newsletter, we need your email address and confirmation that you are the owner of the provided email address and consent to receive the newsletter. This data is collected solely for the purpose of sending you the newsletter and documenting our authorization to do so. Additionally, the following data is collected during the registration process:

• IP address of the requesting computer
• Date and time of registration

Your consent is obtained during the registration process, and this Privacy Policy is referenced. The legal basis for processing is Art. 6(1)(a) GDPR. The logging of the registration process is based on our legitimate interests under Art. 6(1)(f) GDPR and serves to prove consent to receive the newsletter. You can withdraw your subscription to the newsletter at any time with future effect. Your personal data will be deleted when it is no longer required for the purpose of processing.

Use of Klaviyo

We use Klaviyo Inc.’s service (125 Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”) for newsletter distribution under a data processing agreement.

We share the information you provide during newsletter registration (email address, and possibly first and last name) with Klaviyo. The data processing is for the purpose of sending newsletters and performing statistical evaluations.

To evaluate newsletter campaigns, the newsletters sent contain a 1×1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine if you have opened the newsletter and if you have clicked on any integrated links. In this context, we collect personal data such as IP address, browser type and device, as well as the time. Usage profiles can be created from this data under a pseudonym. The collected data is not used to personally identify you. The data is used solely for statistical evaluation to improve newsletter campaigns.

Your data is typically transmitted to and stored on Klaviyo’s servers in the USA. An adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), is in place for the USA. Klaviyo is certified under the TADPF and thus committed to adhering to European data protection principles. For more information on privacy at Klaviyo, please visit Klaviyo Privacy Notice.

12) Security

We have secured our website and other systems through technical and organizational measures to protect against loss, destruction, access, alteration, or dissemination of your data by unauthorized persons. In particular, the personal data you provide via the contact form is transmitted encrypted. We use the TLS 1.3 (Transport Layer Security) encryption system for this purpose.

13) Cookies

We use cookies to track visitor preferences and to optimize our website. Cookies are small text files stored on your computer when you visit our site. You can delete cookies at any time if you wish. However, this may result in certain features not being available to you. To delete cookies, please refer to the help function of your browser.

14) Consent Tool

Complianz GDPR / CCPA

This website uses the cookie consent tool provided by Complianz BV, CoC 717814475, Kalmarweg 14-5, 9723 JG, Groningen (NL). The purpose of processing is to obtain and document consent for the storage of certain cookies on your device or the use of specific technologies, as well as to technically enable the withdrawal of granted consents. In this context, your browser may transmit personal data to the provider. Additionally, the provider may store a cookie in your browser to associate the consents granted or their withdrawal. The legal basis for this is Art. 6(1)(f) GDPR. The data collected will be stored until you request deletion, delete the cookie yourself, or the purpose for data storage no longer applies. Mandatory legal retention obligations remain unaffected. For more information, please refer to the provider’s privacy policy at: Complianz Privacy Statement.

15) Web Storage

We use a technology known as Web Storage (also referred to as “Local Data” and “Local Storage”) on our website. The purpose of this is to utilize functionalities that we implement on our site. Data is stored locally in your browser’s storage (“cache”) and can persist and be processed even after you close the browser window or end the program. Data stored in Web Storage cannot be accessed by third parties, and it is not shared with third parties or used for advertising purposes. We use Web Storage technology only where it is necessary to enable the functionality of our service (see § 25 TTDSG). The legal basis for this is Art. 6(1)(f) GDPR. Data collected in this manner is stored until you close the browser window (Session Storage) or clear the cache through your web browser (Local Storage). If the use of Web Storage technology is not strictly necessary for the functionality of our service, we will only use it with your consent; the legal basis for this is Art. 6(1)(a) GDPR.

16) Web Analysis

Sourcebuster

We use the web analysis service Sourcebuster to analyze how users found our website. This helps us understand whether our users arrive at our site through search engines or other sources. Sourcebuster processes information such as your IP address, browser type, operating system, referrer URL, as well as the date and time of your visit. Sourcebuster is hosted by us, so your data is not shared with third parties. The data processing by Sourcebuster is carried out with your consent. The legal basis for this is Art. 6(1)(a) GDPR. You can withdraw your consent at any time by changing the cookie settings on our website.

17) Additional Features and Content

If we implement additional features and content on our website (e.g., map or font services) through which we or the service providers process personal data from you, we will inform you accordingly.

Google Services

We use services from Google on our website. The provider of these services is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It cannot be ruled out that your personal data may also be transferred to Google LLC based in the USA or that additional Google services might be loaded by Google itself without our influence (e.g., YouTube services). Google is certified under the EU-U.S. Data Privacy Framework to comply with the data protection level applicable in the EU. The certification can be viewed at Data Privacy Framework.

For more information on data processing by Google, please refer to: Google Privacy Policy

Google Fonts

Our website uses external fonts provided by “Google Fonts”. Google Fonts is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your browser may also transmit personal data to Google LLC in the USA. Google is certified under the EU-U.S. Data Privacy Framework to ensure compliance with the European data protection level. The certification can be viewed at Data Privacy Framework. The legal basis for using Google Fonts is Art. 6(1)(a) GDPR. You can withdraw your consent at any time for the future by removing the checkmark [here / link to consent tool]. For more information on data processing by Google, please refer to: Google Privacy Policy

WooCommerce

We use the WooCommerce e-commerce system from Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA (“Automattic”) on our website. WooCommerce stores cookies on your device and processes personal data such as your name, address, and payment information to facilitate the ordering process on our website. The use of WooCommerce is based on your consent according to Art. 6(1)(a) GDPR. You can withdraw your consent at any time for the future. Automattic is the recipient of the data as a processor. We have entered into a data processing agreement with Automattic. Your data may be transferred to Automattic in the USA. Automattic is certified under the EU-U.S. Data Privacy Framework, ensuring compliance with the European data protection level. For more information on terms of use and privacy, please visit: Automattic Privacy Policy

PayPal

PayPal is a payment service used on our website – the processing company is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”). Data collection and processing occur for the purpose of payment and functionality of this payment method. The following personal data is collected by the service or through its use: name, address, bank details, passwords, TANs, checksums, contract details, payment information, credit and debit card numbers, transaction information, purchase activity, IP address, browser information, internet service provider, and geographical location. The legal basis for processing personal data is Art. 6(1)(b) GDPR. The collected data cannot be used or stored for any purpose other than the one listed. The data is processed solely within the European Union. For more information on the data protection policies of the processor, please visit: PayPal Privacy Policy and the PayPal Cookie Policy.

Nitropack

We use the CDN service “Nitropack CDN.” The provider is Nitropack LLC, 801 Garden Street 3 A, Prof. Georgi Bradistilov Str. 1700 Sofia, Bulgaria (“Nitropack”). Nitropack provides a globally distributed Content Delivery Network with DNS. The technical information transfer between your browser and our website is routed through Nitropack’s network. A CDN is an online service that delivers large media files (such as graphics, page content, or scripts) through a network of regional and internet-connected servers. Using Nitropack’s Content Delivery Network helps optimize the loading times of our website. The use of Nitropack is based on our legitimate interest in ensuring error-free, secure, and efficient delivery, as well as improving the stability and functionality of our online service. The legal basis is Art. 6(1)(f) GDPR. For more information on security and privacy at Nitropack, please visit: Nitropack Privacy.

AWS CloudFront

We use AWS CloudFront to deliver content on our website. AWS CloudFront is a service provided by Amazon Web Services, Inc., which functions as a Content Delivery Network (CDN) on our website. A CDN helps deliver content from our online offering, particularly files like graphics or scripts, faster by using regionally or internationally distributed servers. When you access this content, you connect to servers of Amazon Web Services, Inc., where your IP address and possibly browser data such as your user-agent are transmitted. This data is processed solely for the purposes mentioned above and to maintain the security and functionality of AWS CloudFront. The use of the Content Delivery Network is based on our legitimate interests, i.e., interest in a secure and efficient delivery as well as optimizing our online offering in accordance with Art. 6(1)(f) GDPR. For more information, please refer to the privacy statement for AWS CloudFront at: AWS Privacy.

WordPress Static Files

Our website uses WordPress, a popular content management platform, to manage and deliver content. As part of using WordPress, “Static Files” are used. These files contain static content such as images, CSS files, and JavaScript files necessary for displaying the website. The legal basis for data processing is Art. 6(1)(f) GDPR. The use of WordPress Static Files allows for efficient delivery of website content and improves loading times for visitors. These Static Files are stored on our own servers or, if applicable, on an external Content Delivery Network (CDN). A CDN may be used to optimize the delivery of Static Files by storing them on servers at various locations worldwide. No personal data is collected or processed when using WordPress Static Files unless you actively provide such data through forms or other interactions on the website. In this case, the relevant data protection provisions according to our privacy policy apply.

18) Recipients and Data Transfer

Certain data processing activities within our organization are centralized and managed by specific departments, such as handling inquiries. To ensure the performance of our tasks and contractual obligations, external contractors and service providers (e.g., logistics companies or IT service providers) may be involved. Additionally, data may be transferred to recipients if we are obligated or authorized to do so based on contractual or legal requirements or your consent.

Data Transfer to Third Countries

Data transfer to third countries (countries outside the EU and the European Economic Area) only occurs if necessary for the performance of a contract/order/business relationship, including preliminary negotiations, or if permissible based on our legitimate interests or your consent, and only under the prescribed data protection requirements.

Note on Data Transfer to the USA

Our website incorporates services from companies based in the USA or includes links to such services. As part of using these services, personal data may be transferred to US servers of the respective service providers.

Under the “Data Privacy Framework” (DPF), the EU Commission has recognized the data protection level for certain US companies as adequate in its adequacy decision dated July 10, 2023. The list of certified companies and further information about the DPF can be found on the US Department of Commerce website at Data Privacy Framework. In this privacy policy, we will inform you which of the service providers we use are certified under the DPF.

19) Deletion of Your Data

We process your personal data only as long as necessary to fulfill the respective purpose or until a legal basis for processing (e.g., revocation of consent to data processing) no longer exists. We adhere to the applicable statutory retention and storage periods.

20) Your Rights

You have the right to:

• Receive free information about the personal data we have stored about you (right of access).
• Request confirmation as to whether or not we are processing personal data concerning you (right to confirmation).
• Demand the immediate deletion of personal data concerning you, provided that its processing is no longer necessary and all other conditions for deletion under the GDPR are met (right to deletion).
• Request immediate correction and completion of incorrect personal data concerning you (right to rectification).
• Request restriction of the processing of your personal data (right to restriction of processing).
• Receive the personal data concerning you in a structured, commonly used, and machine-readable format (right to data portability).
• Object to the processing of your personal data (right to object).
• Not be subject to a decision based solely on automated processing – including profiling – that has legal effect on you or significantly affects you in a similar manner (right to individual decision-making).
• Withdraw your consent to the processing of your personal data at any time with future effect (right to withdraw consent).
• File a complaint with the supervisory authority responsible for data protection if you believe that the processing of your personal data violates the GDPR (right to lodge a complaint).

For further information about your rights, please contact our data protection officer.

21) Changes to Our Privacy Policy

In order to ensure that our privacy policy always complies with current legal requirements, we reserve the right to make changes at any time. This also applies if the privacy policy needs to be adjusted due to new or revised services, such as new service offerings. The new privacy policy will then apply during your next visit to our services.