Privacy Policy

Privacy Policy

1) Information on the Collection of Personal Data and Contact Details of the Responsible Party

1.1 Thank you for visiting our website and your interest. Below, we inform you about the handling of your personal data when using our website. Personal data refers to all information that can personally identify you.

1.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party). You can recognize an encrypted connection by the "https://" sequence and the lock symbol in your browser’s address bar.

2) Data Collection When Visiting Our Website

When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the data your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website:

- Website visited
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you came to the site
- Browser used
- Operating system used
- IP address used (if applicable: in anonymous form)

The processing is carried out based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files later if there are specific indications of illegal use.

Google Analytics 4

With your consent, this website uses Google Analytics 4, a web analytics service provided by Google LLC. The responsible entity for users in Brazil is Google Brasil Internet Ltda., Av. Brigadeiro Faria Lima, 3477, São Paulo, SP, 04538-133, Brazil ("Google").

Nature and Purpose of Processing

Google Analytics uses cookies that enable an analysis of your use of our website. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics 4 uses IP anonymization by default. Due to IP anonymization, your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data from Google.

During your visit to the website, your user behavior is recorded in the form of "events." Events can be:

- Page views
- First visit to the website
- Start of session
- Pages visited
- Your "click path," interaction with the website
- Scrolls (whenever a user scrolls to the end of the page (90%))
- Clicks on external links
- Internal searches
- Interaction with videos
- File downloads
- Ads viewed/clicked
- Language setting

Additionally, the following are collected:

- Your approximate location (region)
- Date and time of the visit
- Your IP address (in abbreviated form)
- Technical information about your browser and the devices used (e.g., language setting, screen resolution)
- The URL of the referring website (from which site/advertisement you came to this website)

Purposes of Processing

On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.

Recipients

The recipients of the data are:

- Google Brasil Internet Ltda., Av. Brigadeiro Faria Lima, 3477, São Paulo, SP, 04538-133, Brazil (as data processor according to Art. 28 GDPR)
- Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
- Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

Transfer to Third Countries

For the USA, the European Commission adopted its adequacy decision on July 10, 2023. Google LLC is certified under the EU-US Privacy Framework. As Google servers are globally distributed and a transfer to third countries (e.g., Singapore) cannot be completely excluded, we have also concluded the EU Standard Contractual Clauses with the provider.

Storage Duration

The data sent by us and linked to cookies are automatically deleted after 2 months. The maximum lifetime of Google Analytics cookies is 2 years. Data deletion whose retention period has been reached occurs automatically once a month.

Legal Basis

The legal basis for this data processing is your consent according to the General Data Protection Law (LGPD).

Revocation

You can revoke your consent at any time with effect for the future by accessing the cookie settings and changing your selection. The legality of the processing carried out based on the consent until the revocation remains unaffected.

You can also prevent the storage of cookies from the outset by adjusting your browser settings. If you set your browser to reject all cookies, this may limit the functionality of this and other websites. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google by not giving your consent to the setting of the cookie or
b) by downloading and installing the browser add-on to disable Google Analytics here.
More information about Google Analytics' terms of use and privacy can be found at https://marketingplatform.google.com/about/analytics/terms/en/ and https://policies.google.com/?hl=en.

3) Contact

In the context of contacting us (e.g., via contact form or e-mail), personal data is collected. The specific data collected can be seen from the respective contact form. This data is stored and used exclusively to respond to your request or for contact and related technical administration. The legal basis for processing the data is our legitimate interest in responding to your request per Art. 7, IX of the LGPD. If your contact aims to conclude a contract, the additional legal basis for processing is Art. 7, V of the LGPD. Your data will be deleted after the final processing of your request, provided there are no legal retention obligations.

4) Data Processing When Opening a Customer Account and for Contract Execution

In accordance with Art. 7, V of the LGPD, personal data will continue to be collected and processed if you provide us with this information for contract execution or when opening a customer account. The specific data collected can be seen from the respective input forms. You can delete your customer account at any time by sending a message to the above-mentioned address of the responsible party. We store and use the data you provide for contract execution. After contract completion or deletion of your customer account, your data will be blocked, considering tax and commercial retention periods, and deleted after these periods unless you have expressly consented to further use of your data or if a legally permitted further use of data is provided.

5) Use of Your Data for Direct Advertising

5.1 Subscription to Our Email Newsletter

When you subscribe to our email newsletter, we regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Any additional information provided is voluntary and used to address you personally. For the newsletter's dispatch, we use the so-called double opt-in procedure. This means we will only send you an email newsletter if you expressly confirm that you consent to the newsletter's receipt. We will then send you a confirmation email asking you to confirm that you wish to receive future newsletters by clicking on an appropriate link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6, paragraph 1, letter a of the GDPR. When you subscribe to the newsletter, we store the IP address registered by the internet service provider (ISP) and the date and time of subscription to trace a possible misuse of your email address at a later date. The data collected when subscribing to the newsletter is used exclusively for promotional purposes through the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the responsible party mentioned at the beginning. After unsubscribing, your email address will immediately be removed from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, as permitted by law and about which we inform you in this statement.

6) Data Processing for Order Processing

6.1 The personal data collected by us will be shared with the transport company responsible for the delivery, to the extent necessary for the delivery of the goods. Your payment data will be passed on to the bank responsible for processing the payment, to the extent necessary for processing the payment. If payment service providers are used, we will explicitly inform you about this below.

6.2 Use of Payment Service Providers

- PayPal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal, your payment data will be transferred to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), during payment processing. The transfer is made according to Art. 6, paragraph 1, letter b of the GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to perform a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be transmitted to credit agencies based on Art. 6, paragraph 1, letter f of the GDPR, based on PayPal's legitimate interest in verifying your creditworthiness. The result of the credit check concerning the statistical probability of default is used by PayPal to decide on the provision of the respective payment method. The credit check may contain probability values (the so-called score values). Insofar as score values are included in the credit check result, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, are included in the calculation of score values. Further information on PayPal's data protection, including the credit agencies used, can be found in PayPal's privacy statement: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if necessary for the contractual processing of payments.

- Stripe

If you choose a payment method offered by the payment service provider "Stripe," the payment processing will be carried out by Stripe Payments Europe Ltd., c/o A&L Goodbody, IFSC, North Wall Quay, Dublin 1, Ireland, to whom we will provide your information during the ordering process, along with the information about your order (name, address, account number, bank code, possibly the credit card number, invoice amount, currency, and transaction number), in accordance with Art. 6, paragraph 1, letter b of the GDPR. The transfer of your data is solely for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. Further information on Stripe's data protection can be found at the following Internet address: https://stripe.com/de/privacy

7) DATA SUBJECT RIGHTS

7.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) regarding the controller processing your personal data, which we inform you about below:

- Right of access according to Art. 15 of the GDPR: You have the right, in particular, to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, the right to lodge a complaint with a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision-making, including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing, as well as your right to be informed about the guarantees pursuant to Art. 46 of the GDPR when your data is transferred to third countries;

- Right to rectification according to Art. 16 of the GDPR: You have the right to demand the immediate rectification of incorrect data concerning you and/or the completion of your incomplete data stored by us;

- Right to erasure according to Art. 17 of the GDPR: You have the right to demand the erasure of your personal data if the requirements of Art. 17, paragraph 1 of the GDPR are met. This right does not exist, in particular, if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;

- Right to restriction of processing according to Art. 18 of the GDPR: You have the right to demand the restriction of the processing of your personal data as long as the accuracy of your data contested by you is being verified, if you refuse the erasure of your data due to unlawful processing and instead demand the restriction of the processing of your data, if you need your data for the establishment, exercise, or defense of legal claims after we no longer need these data for the purpose of processing, or if you have objected on grounds relating to your particular situation, pending the verification whether our legitimate grounds override yours;

- Right to notification according to Art. 19 of the GDPR: If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to communicate this rectification or erasure of data or restriction of processing to each recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients.

- Right to data portability according to Art. 20 of the GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request the transfer to another controller, where technically feasible;

- Right to withdraw consent according to Art. 7, paragraph 3 of the GDPR: You have the right to withdraw a consent once given for data processing at any time with effect for the future. In case of withdrawal, we will immediately delete the data concerned unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;

- Right to lodge a complaint according to Art. 77 of the GDPR: If you consider that the processing of personal data relating to you infringes the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work, or place of the alleged infringement.

7.2 RIGHT TO OBJECT

If we process your personal data based on our overriding legitimate interest in the context of a balancing of interests, you have the right to object to this processing at any time on grounds relating to your particular situation, with effect for the future.

If you exercise your right to object, we will stop processing the data concerned. However, further processing is reserved if we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, fundamental rights, and freedoms, or if the processing is for the establishment, exercise, or defense of legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising. You can exercise the objection as described above.

If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.

8) DURATION OF STORAGE OF PERSONAL DATA

The duration of the storage of personal data is determined based on the respective statutory retention period (e.g., retention periods under commercial and tax law). After the expiration of the period, the corresponding data is routinely deleted unless it is still required for contract fulfillment or initiation and/or we have a legitimate interest in further storage.