Below you will find comprehensive information about the processing of your personal data when visiting our website. Personal data is any data relating to an identified or identifiable natural person — for example name, address, email address and user behavior.

———————— 01 / who is responsible for processing data?

The person responsible for processing data on this website according to Article 4 para. 7 GDPR is

the sept / Christina Barho
Keltenstrasse 14
77971 Kippenheim, Germany

Phone 0049 7825 8198354
Email hello@theseptlabel.com

theseptlabel.com

———————— 02 / hosting of the website

Our website is located on the web server / hosting of

Host Europe GmbH
Hansestrasse 111
51149 Cologne, Germany

hereinafter ‚Host Europe‘

If you want to know more about their data protection, you can find the details in the privacy policy here. We have concluded a contract on commissioned data processing with Host Europe — see example here. Such a contract is required by data protection law. It ensures that the personal data of our website visitors are only processed according to our instructions and in compliance with the GDPR. We use Host Europe on the basis of Article 6 para. 1 lit. f GDPR, i.e. we have a legitimate interest in the most reliable presentation of our website.

———————— 03 / what data do we collect and store and for what purposes?

3.1 during a purely informative visit to the website

If you only visit our website for information purposes, do not register and do not otherwise enter any data or actively send us any data, then we process the personal data that your browser transmits to the server by means of our service provider Host Europe — see point 2 above. These are stored without you doing anything until they are automatically deleted. What kind of information is this? You will find this in detail below

——— IP address of the requesting computer
——— date and time of access
——— name and URL of the retrieved file
——— website from which the access is made / referrer URL
——— the browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

We use the above mentioned data for the operation of our website, in particular to detect and eliminate website errors, to determine the utilization of the website and to make adjustments and improvements. The legal basis for the data processing is Article 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection just mentioned. In no case do we use the collected data for the purpose of drawing conclusions about your person. The data will also not be merged with other data sources.

In principle, we only store the personal data mentioned for the duration of your visit. They are anonymized immediately afterwards and deleted after 14 days.

If we use external links on our pages that redirect you to other service providers, you will recognize this by the link symbol for external links. When you click on an external link, your IP address becomes visible to the provider of the external site.

3.2 when contacting us by email

You can contact us via the email address provided. In this case, the data you provide — your email address, name and phone number, if applicable — will be stored in order to process your enquiry and answer your questions. We delete the data accruing in this context, if the enquiry is assigned to a contract, after the time limits for the term of the contract, otherwise after 3 months, or restrict the processing if there are statutory retention obligations. We process this data on the basis of Article 6 (1) lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries addressed to us (Article 6 para. 1 lit. f GDPR).

3.3 for further functions and offers on our website

In addition to the purely informational use of our website, we offer various services that you can use if you are interested and we use other usual functions to analyze or market our offers, which are described in the following under sections 8 to 11 in more detail. For the use of these further services and functions, you usually have to provide further personal data or we process these further personal data in order to provide the respective services and enable functions. The following data processing principles apply to all data processing purposes described here.

———————— 04 / how long do we store your data and when do we delete it?

If no specific deletion periods are specified in this data protection declaration for the respective case, we will delete your personal data as soon as the purpose of the storage no longer applies. However, we will continue to store your data if we are obliged to do so by the European or national legislator in EU regulations, laws or other provisions to which we are subject.

If a storage period prescribed in the aforementioned standards expires, then your data will of course be deleted — unless it is still required for the conclusion of a contract with us or the performance of a contract you have concluded with us.

———————— 05 / what rights do you have as a data subject?

5.1 information

In accordance with Article 15 GDPR, you can request information from us at any time about the personal data we process. In particular, if you so request, we will provide you with information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision making, including profiling, and, if applicable, meaningful information about its details.

5.2 correction

In accordance with Article 16 GDPR, you can immediately request the correction of incorrect or completion of your personal data stored by us.

5.3 deletion

You have the right to request the deletion of your personal data stored by us in accordance with Article 17 GDPR.

5.4 restriction of processing

You can request the restriction of the processing of your personal data in accordance with Article 18 GDPR.

5.5 data portability

Pursuant to Article 20 GDPR, you may request that we provide you with your personal data that you have provided to us in a structured, common and machine readable format or transfer it to another responsible party designated by you.

5.6 revocation of consent

You may revoke your consent at any time in accordance with Article 7 (3) of the Data Protection Act. This has the consequence that we may no longer continue the data processing based on this consent for the future.

5.7 objection to the collection of data in special cases and to direct advertising

You may object to the processing of your personal data in accordance with Article 21 of the GDPR, provided that there are grounds for doing so which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation. You can inform us of your objection informally by phone, by email or to our postal address listed at the beginning of this data protection declaration.

If you would like to exercise one or more of your rights or need more information about them, please contact us using the details above.

———————— 06 / when and where do we pass on your data?

We only transfer your data to third parties if

——— you have given your express consent to this in accordance with Article 6 para. 1 s. 1 lit. a GDPR
——— the disclosure is necessary for the assertion, exercise or defense of legal claims pursuant to Article 6 (1) sentence 1 lit. f GDPR and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data
——— in the event that there is a legal obligation for the disclosure pursuant to Article 6 (1) sentence 1 lit. c GDPR, as well as
——— this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Article 6 para. 1 s. 1 lit. b GDPR.

If we use commissioned service providers for individual functions of our offer or wish to use your data for advertising purposes, we will always carefully select and monitor these service providers and inform you in detail about the respective processes below. In doing so, we also state the defined criteria for the storage period.

———————— 07 / right to complain to the supervisory authority

You have the right to complain to a supervisory authority in accordance with Article 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the one of our company headquarters.

Bavarian State Office for Data Protection Supervision
PO Box 134991504
Ansbach, Germany

Phone 0049 981 1800930
Email poststelle@lda.bayern.de

———————— 08 / do we collect and use data from your end devices — cookies and tracking?

8.1. general information

In addition to the above-mentioned data, we use technical tools for various functions when you visit our website, in particular cookies, which can be stored on your end device.

8.1.1 what are cookies?

Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using so that certain information can flow to the entity that sets the cookie. Cookies cannot execute programs or transmit viruses to your computer, but are primarily used to make the website faster and more user-friendly. We use the following types of cookies on this website, whose functionality and legal basis we will explain below

——— transient cookies — such cookies, especially session cookies, are automatically deleted when the browser is closed or by logging out. They contain a so-called session ID. In this way, various requests from your browser can be assigned to the joint session and your computer can be recognized when you return to our website.
——— persistent cookies — these are deleted automatically after a specified duration, which is defined differently depending on the cookie.

8.1.2 mandatory functions that are technically necessary for displaying the website

The technical structure of the website requires us to use techniques, in particular cookies. Without these techniques, our website cannot be displayed (completely and correctly) or the support functions could not be enabled. You cannot deselect these cookies if you wish to use our website.

8.1.3 optional cookies when consent is granted

Cookies that are not mandatory require consent in order to be set. The associated functions are only activated in the event of consent and can be used in particular to analyze visits to the website and improve the website, to make it easier to use across different browsers or end devices, to recognize you when you visit, or to serve advertising possibly also to tailor advertising to interests, measure the effectiveness of ads, or show interest-based advertising — the legal basis for this processing is consent, Article 6 para. 1 p. 1 lit. a GDPR and Section 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s end device e.g. device fingerprinting as defined by the TTDSG. This can be revoked at any time. However, this does not affect the permissibility of the processing until the revocation.

8.2 which cookies and services do we use?

We only use cookies on our website and collect information that is absolutely necessary for the operation and function of our website. These are exclusively cookies and information resulting from the integration of the online shop of our service provider Shopify International Ltd — Victory Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32 Ireland, hereinafter ‚Shopify‘ — for more on our online shop, see section 9.

The legal basis for this processing is Article 6 para. 1 p. 1 lit. f GDPR, our legitimate interest in the proper functioning of the website and online shop.

———————— 09 / what data do we collect and use in our online shop?

9.1 for orders

If you would like to order our product in our online shop, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the purpose of processing your order. Mandatory information required for the processing of contracts is marked separately, other information is voluntary. We store and use the data provided by you for contract processing. To process your order, we work together with service providers, which support us wholly or partially in the execution of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information. We use Shopify International Ltd — Victory Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32 Ireland, hereafter ‘Shopify’ — to power our online shop. You can read more about how Shopify uses your personal data here.

The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution within the framework of payment processing if this is necessary for payment handling.

The legal basis for the transfer of data is Article 6 (1) point b GDPR. Of course, we have concluded a contract on commissioned data processing with Shopify to ensure that the personal data of our website visitors are only processed according to our instructions and in compliance with the GDPR.

9.2 storage period of your online shop data

We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, we restrict processing after three years, i.e. from this point onwards your data will only be used to comply with legal obligations.

9.3 security

To prevent unauthorized access to your personal data by third parties, the ordering process is encrypted using SSL or TLS technology.

———————— 10 / how do we handle data for our newsletter?

You can sign up for the newsletter offered on our website. For this purpose, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter. Further data is not required and is only collected if you provide it to us voluntarily. We process your data on the basis of your consent — Article 6 para. 1 lit. a GDPR. You can revoke this consent at any time. However, the revocation does not affect the lawfulness of the data processing operations already carried out until the revocation.

We use the service provider

rapidmail GmbH
Wentzingerstrasse 21
79106 Freiburg im Breisgau, Germany

Email info@rapidmail.de
Phone 0049 761 55 77 55 77
rapidmail.de

hereinafter ‘rapidmail’ to manage and send the newsletter.

rapidmail is a service with which, among other things, the dispatch of newsletters can be organized. Your data is stored for this purpose on the servers of rapidmail exclusively in Germany. Your data will be stored until you unsubscribe from the newsletter. If you unsubscribe from the newsletter, your data will be deleted from the newsletter distribution list. Data that has been stored by us for other purposes remains unaffected by this. You can find the data protection declaration of rapidmail here. We have concluded a contract on commissioned data processing with rapidmail to ensure that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.

———————— 11 / how secure is your data?

All information you submit to us is stored on servers within the European Union. Unfortunately, the transmission of information via the Internet is not completely secure, which is why we cannot guarantee the security of data transmitted to our website via the Internet. However, we secure our website and other systems against loss, destruction, access, alteration or distribution of your data by unauthorized persons by means of technical and organizational measures. In particular, we transmit your personal data in encrypted form. We use the SSL — Secure Socket Layer or TLS — Transport Layer Security coding system.

———————— 12 / status and update of this privacy policy

We reserve the right to change this privacy policy at any time with effect for the future. A current version is available on the website. Please visit our website regularly and inform yourself about the applicable data protection provisions.

last updated July 2022