Privacy Policy (according to GDPR)
Controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Laetum - Creative Designs UG (haftungsbeschränkt) Waldluststraße 48 85540 Haar Germany
Represented by: Niklas Hussel & Nicolas Keppler; Email: info@avolence.com
1. General Information and Mandatory Disclosures
Data Protection
As the operator of this site, we take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.
Rights of the Data Subject
Within the scope of the applicable legal provisions, you have the right at any time to free access to your stored personal data, its origin and recipients, and the purpose of the data processing, and, if applicable, a right to rectification, blocking, or erasure of this data (Art. 15-18 GDPR). You also have the right to data portability (Art. 20 GDPR) and the right to restrict processing (Art. 18 GDPR).
Right to Object (Art. 21 GDPR)
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR.
Right to Withdraw Consent (Art. 7 (3) GDPR)
Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The legality of the data processing carried out until the withdrawal remains unaffected by the withdrawal.
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of breaches of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is generally the state data protection commissioner of the federal state in which our company is based. For us, this is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht - BayLDA).
SSL/TLS Encryption For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption.
2. Data Collection on Our Website
Server Log Files
The provider of the pages (Shopify) automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
This data is not merged with other data sources. The basis for data processing is Art. 6 (1) (f) GDPR, which permits the processing of data to safeguard our legitimate interests in a secure and error-free presentation of our website.
Contact Form / Contact via Email
If you send us inquiries via the contact form or email, your details from the inquiry form or your email, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent. The processing of this data is based on Art. 6 (1) (b) GDPR, if your request is related to the fulfillment of a contract or is necessary for the performance of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 (1) (f) GDPR). The data you transmit will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been fully processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.
Use of Shopify Inbox (Live Chat)
On our website, we offer you the opportunity to contact us directly via a live chat. This chat tool is provided by Shopify Inc., 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada, as part of the Shopify platform ("Shopify Inbox").
When you use the chat, the following data is collected and processed on Shopify's servers:
The use of this service is voluntary. The processing of the data entered and uploaded in the chat is based on Art. 6 (1) (b) GDPR, if your request is related to a contract (e.g., a complaint with a photo) or is necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in fast and effective customer communication and answering inquiries (Art. 6 (1) (f) GDPR).
The chat histories and the files contained therein are stored to process your request and any follow-up questions. They remain with us until the purpose for storage no longer applies (e.g., your request has been finally clarified), unless statutory retention obligations (e.g., correspondence resulting from an order) require longer storage.
For more information on how Shopify handles your data, please see Shopify's privacy policy: https://www.shopify.com/legal/privacy. The data transfer to Canada is based on the adequacy decisions of the EU Commission.
3. Data Processing for Orders
Processing of Customer and Contract Data
We collect, process, and use personal data (name, address, email, payment data) only insofar as it is necessary for the establishment, content design, or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 (1) (b) GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. The collected customer data will be deleted after completion of the order or termination of the business relationship. Statutory retention periods (e.g., from tax and commercial law, usually 10 years) remain unaffected.
Data Transfer upon Conclusion of Contract for Online Shops, Retailers, and Goods Dispatch
We only transmit personal data to third parties if this is necessary in the context of contract processing, for example, to the payment service providers commissioned with payment processing or the logistics company commissioned with the delivery of the goods (your PoD provider). A further transmission of the data does not take place or only if you have expressly consented to the transmission. The basis for data processing is Art. 6 (1) (b) GDPR.
4. Hosting and Data Processing Agreement
External Hosting by Shopify
This website is hosted by Shopify Inc., 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada. Personal data collected on this website is stored on Shopify's servers. The use of Shopify is in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6 (1) (f) GDPR). We have concluded a Data Processing Addendum (DPA) with Shopify. This contract ensures that Shopify processes the data of our website visitors only according to our instructions and in compliance with the GDPR. As data is transferred to Canada, the transfer is based on the adequacy decisions of the EU Commission.