Privacy Policy

 

Privacy Policy

1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Brigatte Limited, Email: support@brigatte.de. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website
2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the moment of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

3) Hosting & Content Delivery Network
Shopify
For hosting our website and displaying the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.
All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties. For data transfers to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

4) Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use cookies—small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device longer and allow page settings to be saved (so-called "persistent cookies").
Insofar as personal data is processed by individual cookies implemented by us, processing takes place pursuant to Art. 6(1)(b) GDPR either for contract performance, pursuant to Art. 6(1)(a) GDPR in the event of consent granted, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in optimal website functionality and a customer-friendly layout.
You can set your browser so that you are informed about the setting of cookies and decide individually on their acceptance or exclude acceptance for specific cases or generally. Please note that if cookies are not accepted, the functionality of our website may be restricted.

5) Contacting Us
When contacting us (e.g., via contact form or email), personal data is processed exclusively for the purpose of handling and answering your request and only to the extent necessary for this purpose.
The legal basis for processing this data is our legitimate interest in answering your request pursuant to Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted when circumstances indicate that the matter in question has been conclusively clarified, provided no statutory retention obligations conflict.

6) Use of Customer Data for Direct Marketing
6.1 Subscription to our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only required information for sending the newsletter is your email address. Providing further data is voluntary and used to address you personally. We use the double opt-in procedure for sending the newsletter.
By activating the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to trace possible misuse of your email address at a later date. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by notifying the controller mentioned above.

6.2 Klaviyo
Our email newsletters are dispatched via this provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA.
Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on your data provided during registration pursuant to Art. 6(1)(f) GDPR to this provider.
Subject to your explicit consent pursuant to Art. 6(1)(a) GDPR, the provider conducts statistical evaluations using web beacons or tracking pixels. You may revoke your consent to newsletter tracking at any time with effect for the future. For data transfers to the USA, the provider has certified under the EU-US Data Privacy Framework.

6.3 Abandoned Cart Reminders via Email
If you abandon your purchase before completing the order, you have the option to receive a one-time email reminder regarding the contents of your virtual shopping cart.
The only required information is your email address. We use the double opt-in procedure. By activating the confirmation link, you grant your consent pursuant to Art. 6(1)(a) GDPR. You can unsubscribe from cart reminders at any time by contacting the controller.

7) Data Processing for Order Handling
7.1 Insofar as necessary for contract fulfillment for delivery and payment purposes, personal data collected by us will be passed on to the commissioned transport company and credit institution pursuant to Art. 6(1)(b) GDPR.
To fulfill our contractual obligations, we work with external shipping partners:
- Deutsche Post: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany
- DHL: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
- DHL Express: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany
- DPD Austria: DPD Direct Parcel Distribution Austria GmbH, Arbeitergasse 46, Leopoldsdorf 2333, Austria
- Austrian Post: Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria

If consent is granted pursuant to Art. 6(1)(a) GDPR, we pass on your email address and/or phone number prior to delivery for delivery coordination; otherwise, only the recipient's name and shipping address are passed on pursuant to Art. 6(1)(b) GDPR.

7.2 Payment Service Providers

- Apple Pay: Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Payment data is passed on in encrypted form pursuant to Art. 6(1)(b) GDPR.
- EPS Transfer: PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria.
- Google Pay: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Data is processed pursuant to Art. 6(1)(b) GDPR for transaction verification.
- iDeal: Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands.
- Klarna: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden. For pay-later options, identity and credit checks may be conducted based on legitimate interest (Art. 6(1)(f) GDPR).
- PayPal / PayPal Checkout: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Data is passed on for contract handling pursuant to Art. 6(1)(b) GDPR. For payment methods involving credit risks (e.g., credit card, pay upon invoice, direct debit), PayPal reserves the right to conduct credit checks pursuant to Art. 6(1)(f) GDPR. For "Pay upon invoice" options, data may be forwarded to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin, Germany.

8) Rights of the Data Subject
Under applicable data protection law, you have the following rights regarding the processing of your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to withdraw consent (Art. 7(3) GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

RIGHT TO OBJECT (Art. 21 GDPR)
IF WE PROCESS YOUR PERSONAL DATA BASED ON A BALANCE OF INTERESTS (ART. 6(1)(f) GDPR), YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION. IF YOU OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING.

9) Duration of Storage of Personal Data
The duration of the storage of personal data is determined by the respective statutory retention period (e.g., commercial and tax retention periods). Upon expiry of the period, the corresponding data is routinely deleted, provided it is no longer required for contract fulfillment or contract initiation and/or there is no longer a legitimate interest on our part in further storage.