Welcome to CRAFTO

Free shipping from 100€

Data Protection Regulation

Data protection

Responsible body

    Dach PRO UG (limited liability)

    Crafto
    Einsteinstrasse 5A
     53842 Troisdorf
    Germany
    Email: info@crafto.shop

    Dach PRO takes protecting your data seriously. With this data protection declaration we inform you about the type, scope and purpose of the processing of personal data and about the rights to which you are entitled as a data subject. If you have any questions about data protection, we are available at any time using the contact details provided.

    Order via our online shop

      In order to process orders via our online shop, the processing of personal data (name, address, contact and payment details) is necessary. We process this data exclusively to process the order and, if desired, to open a customer account.

      The data will be passed on to the extent necessary to the company responsible for the delivery (e.g. DHL) or the service provider responsible for the payment (Paypal Inc.).

      To operate our online shop, we use Shopify, a service provided by Shopify Inc., 126 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5. Shopify provides an e-commerce platform through which we offer our goods for sale. The data provided during the ordering process is stored on a Shopify server in the USA. Further information can be found in Shopify's data protection information at http://www.shopify.com/legal/privacy .

      The legal basis for this data processing is Article 6 (1) lit. b) of the General Data Protection Regulation (GDPR). Once the contract has been completed and the purchase price has been paid in full, your data will be blocked for further use and, unless legal requirements require longer storage, deleted. If you have created a customer account, your data will generally remain stored until you delete the customer account. If no orders are placed via a customer account for more than two years, we will delete the account including the data.

      Inquiries by email

          If you contact us via the email address provided, the personal data transmitted with the email will be stored. This data is processed exclusively to answer the request. The legal basis for processing is Art. 6 (1) lit. f.) GDPR or Art. 6 (1) lit. b) GDPR if the request is aimed at concluding a contract. The data will be deleted if the purpose of the processing no longer applies, e.g. the query has been finally answered.

          You can object to the processing of your personal data at any time by sending an email to info@crafto.shop contradict.

          Cookies

            Our website uses cookies. Cookies are text files that are stored in the browser or by the browser on the user's computer system. Cookies enable the browser to be identified when the page is accessed again. In addition, cookies can be used to analyze visits to the website and its use as well as to display and measure advertising.

            You can control the use of cookies through your browser settings. Depending on the browser you use, you can deactivate or restrict the use of cookies. Cookies that have already been saved can be deleted at any time. If you have disabled cookies, you may not be able to use all of the functions of our website.

            • We use cookies to make our site user-friendly. For this purpose, the items in the shopping cart and the log-in information are saved. This data is not used for profile creation. The legal basis for this data processing is Art. 6 (1) lit. f) GDPR.
            • To analyze the use of our website, we use Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. We have activated the IP anonymization function on our website. This means that your IP address will be shortened beforehand by Google within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Once shortened, the IP address can no longer be assigned to a specific user. 

              Google processes this information on our behalf to evaluate the use of our website and compile reports on website activity. The IP address transmitted by your browser will not be merged with other Google data. Further information can be found in Google's data protection information at https://policies.google.com/privacy?hl=de .

              The use of these analysis cookies serves to improve the quality of our website and our offerings. The legal basis for this data processing is Art. 6 (1) lit. f) GDPR.

              You can prevent the storage of cookies by setting your browser software accordingly. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link to install https://tools.google.com/dlpage/gaoptout?hl=de .

              Cookies for marketing purposes

                We also use cookies to display advertising and evaluate advertising campaigns. We believe that product recommendations based on their personal interests are interesting for users of our websites. We only use these cookies if the user has expressly agreed.

                • We use the communication tool Custom Audiences from Website from Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland (“Facebook”) to show visitors to our website interest-based advertising on Facebook.

                  If you have a Facebook user account, the information that you have visited our website will be transmitted to Facebook. Facebook can assign this information to your user account and, on this basis, display interest-based advertising on Facebook (“Custom Audiences from Website”). Further information about the purpose and scope of data collection, the processing and use of data by Facebook and your control options can be found in Facebook's data protection guidelines at https://www.facebook.com/ads/website_custom_audiences/ and https://www.facebook.com/privacy/explanation .

                  You can object to the processing of your data as part of Custom Audiences from Website at any time at https://www.facebook.com/ads/website_custom_audiences/ .
                • We place Google AdWords ads and use Google Conversion Tracking, an analysis service from Google. If you click on an ad placed by Google, a cookie for conversion tracking will be stored on your computer. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used to personally identify the user.

                  If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page.

                  The information collected using the conversion cookie is used to create statistics to evaluate the AdWords campaign. These statistics include the total number of users who clicked on our ads and, if applicable, whether they were redirected to one of our conversion tagged pages. Further information can be found in Google's data protection information at https://www.google.de/policies/privacy/ .

                  You can prevent conversion tracking from being recorded by deactivating the corresponding cookies via your browser settings.
                • We use Google's remarketing function. This function is used to show visitors to our website interest-based advertisements on other websites in the Google advertising network, taking into account the products and services that you clicked on during your last visit to our website. According to Google, it does not process any personal data during this process. Further information can be found in Google's data protection information at https://policies.google.com/privacy?gl=de .

                  You can do remarketing at https://www.google.com/settings/ads deactivate or prevent you from deactivating the corresponding cookies via your browser settings.

                The legal basis for this data processing is Art. 6 (1) lit. a) GDPR. You can revoke your consent to the processing of your data for these purposes at any time by email to info@crafto.shop or revoke your consent using the opt-out links or functions described. In this case, your data will be deleted immediately. In all cases, your data will be deleted after 30 months at the latest.

                Social plugins

                  In order to increase the user-friendliness of our website, we integrate various social plugins.

                  • We use Facebook plugins. The plugins are marked with the Facebook logo. If you access a page on our website that contains such a plugin, your browser establishes a direct connection with the Facebook servers. By integrating the plugins, Facebook receives the information that you have accessed the corresponding page on our website. If you are logged in to Facebook, Facebook can assign the visit to your Facebook account. The purpose and scope of data processing as well as your related rights and setting options to protect your privacy result from the Facebook’s data protection information under https://www.facebook.com/policy.php .

                    In order to prevent data processing by the Facebook plugin, you must log out of Facebook before visiting our website.

                  • Facebook fan page

                    When you visit our corporate presence on Facebook, Facebook collects personal data. This applies even if you do not have a Facebook user account. Please note that we cannot control the type and extent of data processing by Facebook. Facebook only provides us with anonymous demographic data in aggregate form to help us get to know our audience better.

                    The purpose and scope of data processing by Facebook as well as your related rights towards Facebook and setting options to protect your privacy can be found in the Facebook’s data protection information under https://www.facebook.com/policy.php .

                  • We also use a plugin from Pinterest, operated by Pinterest Inc., 808 Brannan St., San Francisco, CA 94103, USA (“Pinterest”). If you access a page on our website that contains such a plugin, your browser establishes a direct connection with Pinterest's servers. Pinterest can assign the visit to your user account. The purpose and scope of data processing as well as your related rights and setting options to protect your privacy can be found in Pinterest's data protection information at https://policy.pinterest.com/de/privacy-policy .

                    In order to prevent data processing by the Pinterest plugin, you must log out of Pinterest before visiting our website.
                  • Our website also includes a plugin from Instagram, operated by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you access a page on our website that contains such a plugin, your browser establishes a direct connection to Instagram's servers. By integrating the plugin, Instagram receives the information that you have accessed the corresponding page on our website.

                    The purpose and scope of data processing as well as your related rights and setting options to protect your privacy can be found in Instagram's data protection information at https://help.instagram.com/155833707900388 .

                    In order to prevent data processing by the Instagram plugin, you must log out of Instagram before visiting our website.

                  YouTube

                    A YouTube video is embedded on our website. YouTube is a Google service. The “extended data protection mode” is activated on our website. YouTube does not store any information about website visitors who do not watch the video. When you play the video, data may be collected by YouTube. We have no influence on this data processing. Further information can be found in YouTube's data protection information at www.youtube/t/privacy .

                    Rights of the data subject

                      The persons affected by the processing of personal data have the following rights:

                      1. Right to information
                        (1) The data subject has the right to request confirmation from the controller as to whether personal data concerning him or her is being processed; If this is the case, you have the right to access this personal data and the following information:
                        1. the processing purposes;
                        2. the categories of personal data being processed;
                        3. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
                        4. if possible, the planned period for which the personal data will be stored or, if this is not possible, the criteria for determining that period;
                        5. the existence of a right to rectification or deletion of personal data concerning you or to restriction of processing by the controller or a right to object to such processing;
                        6. the existence of a right to lodge a complaint with a supervisory authority;
                        7. if the personal data are not collected from the data subject, all available information about the origin of the data;
                        8. the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
                          (2) If personal data are transferred to a third country or to an international organization, the data subject shall have the right to the appropriate safeguards referred to in Article 46 GDPR to be informed in connection with the transfer.

                          2. Right to rectification

                          The data subject has the right to immediately request that the person responsible correct incorrect personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary statement.

                          3. Right to deletion

                          (1) The data subject has the right to request that the controller delete personal data concerning him or her immediately, and the controller is obliged to delete personal data immediately if one of the following reasons applies:

                          1. The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
                          2. The data subject withdraws their consent on which the processing was based in accordance with Article 6 (1) lit. a) or Article 9 (2) lit. a) GDPR and there is no other legal basis for the processing.
                          3. The data subject objects to the processing in accordance with Article 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects in accordance with Article 21 (2)
                            GDPR objection to the processing.
                          4. The personal data was processed unlawfully.
                          5. The deletion of personal data is necessary to comply with a legal obligation under Union or Member State law to which the controller is subject.
                          6. The personal data was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.

                            (2) If the person responsible has made the personal data public and is obliged to delete them in accordance with paragraph 1, he shall take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, to ensure that those responsible for data processing who have the personal data to inform that a data subject has requested the deletion of all links to that personal data or copies or replications of that personal data.

                            (3) Paragraphs 1 and 2 do not apply if processing is necessary

                            1. to exercise the right to freedom of expression and information;
                            2. to fulfill a legal obligation requiring processing under Union or Member State law to which the controller is subject, or to carry out a task carried out in the public interest or in the exercise of official authority vested in the controller;
                            3. for reasons of public interest in the field of public health in accordance with Article 9 (2) lit. h) and i) and Article 9 (3) GDPR;
                            4. for archival purposes in the public interest, scientific or historical research purposes or for statistical purposes referred to in Article 89 (1), to the extent that the law referred to in paragraph 1 is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
                            5. to assert, exercise or defend legal claims.
                              4. Right to restriction of processing

                              (1) The data subject has the right to request that the controller restrict processing if one of the following conditions is met:
                              1. the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data,
                              2. the processing is unlawful and the data subject refuses the deletion of the personal data and instead requests the restriction of the use of the personal data;
                              3. the controller no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims, or
                              4. the data subject has lodged an objection to the processing in accordance with Article 21 (1) GDPR, as long as it is not yet clear whether the legitimate reasons of the controller outweigh those of the data subject.

                                (2) If the processing has been restricted in accordance with paragraph 1, these personal data - with the exception of their storage - may only be used with the consent of the data subject or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person processed for reasons of important public interest of the Union or a Member State.

                                5. Right to data portability
                                (1) The data subject has the right to receive the personal data concerning him or her that he or she has provided to a controller in a structured, commonly used and machine-readable format and he or she has the right to transmit these data to another controller without hindrance from the controller to whom the personal data was provided, provided that
                                1. the processing is based on consent in accordance with Article 6 (1) lit. a) or Article 9 (2) lit. a) GDPR or on a contract in accordance with Article 6 (1) lit. b) GDPR and
                                2. the processing takes place using automated procedures.

                                  (2) When exercising their right to data portability in accordance with paragraph 1, the data subject has the right to have the personal data transmitted directly from one controller to another controller, to the extent that this is technically feasible.

                                  The right referred to in paragraph 1 shall not affect the rights and freedoms of other persons.

                                  This right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

                                  6. Right to object

                                  The data subject has the right, for reasons arising from his or her particular situation, to object at any time to the processing of personal data concerning him or her, which is carried out on the basis of Article 6 (1) lit. e) or f) GDPR; This also applies to profiling based on these provisions. The controller will no longer process the personal data unless he or she can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

                                  In connection with the use of information society services, notwithstanding Directive 2002/58/EC, the data subject may exercise his or her right to object through automated procedures using technical specifications.

                                  7. Right of withdrawal

                                  The data subject has the right to revoke their declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent before its revocation.

                                  8. Right to complain to a supervisory authority

                                  Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her residence, place of work or the place of the alleged infringement, if the data subject considers that the processing of the personal data relating to him or her data violates this regulation.

                                  Security

                                    We have taken technical and organizational measures to protect your personal data. We will continually improve these measures.

                                    Newsletter

                                    E-mail advertising with registration for the newsletter If you register for our newsletter, we will use the data required for this or separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 Para. 1 Sentence. 1 lit. a GDPR. You can unsubscribe from the newsletter at any time and can do so either by sending a message to the contact option described below or via a link provided in the newsletter. After you unsubscribe, we will delete your email address unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.

                                    Status and update

                                      The status of this data protection declaration is May 9, 2022

                                      We update the privacy policy from time to time. Please inform yourself about the current status of this data protection declaration.
                                      Back to top