Privacy Policy
Privacy Policy
1. Privacy at a glance
The protection of your personal data is important to us. Below we inform you in accordance with Art. 13 GDPR about the processing of personal data on our website.
2. Data controller
Quentin Le Grand
ScreenCraft Apparel
Sansibarstraße 60c, 13351 Berlin, Germany
Email: screencraftapparel@gmail.com
3. Collection and processing of personal data
We process personal data only to the extent necessary for the fulfilment of the contract (Art. 6(1)(b) GDPR), in particular:
- Name
- Delivery and billing address
- Email address
- Phone number (if provided)
Payment processing is carried out by external payment service providers. We do not store any sensitive payment data.
Data entered via the contact form (name, email address, phone number, comment) is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries) and deleted once the enquiry has been handled.
4. Hosting
Our website is operated by Shopify International Ltd., Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes technical data in the course of operations (e.g. IP addresses, browser information). Processing is based on Art. 6(1)(f) GDPR. Further information: https://www.shopify.com/legal/privacy
Each time our website is accessed, Shopify automatically records server log files transmitted by your browser. These include browser type, operating system, referring URL, IP address, and date and time of access. This data cannot be attributed to specific individuals and is not combined with other data sources. Processing is based on Art. 6(1)(f) GDPR (legitimate interest in the security and operation of the website).
5. Payment service providers
For payment processing, we use the following providers, who process payment data under their own responsibility:
Shopify Payments (Shopify International Ltd.) — Credit card (Visa, Mastercard, American Express, Maestro). Privacy policy: https://www.shopify.com/legal/privacy
PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). Privacy policy: https://www.paypal.com/en/webapps/mpp/ua/privacy-full
Klarna (Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden). Klarna may carry out a credit check as part of payment processing. For this purpose, personal data (in particular name, address, date of birth) may be transmitted to Klarna. Processing is based on Art. 6(1)(b) GDPR and legitimate interests pursuant to Art. 6(1)(f) GDPR. Privacy policy: https://www.klarna.com/en/privacy/
Apple Pay / Google Pay / Shop Pay — These services process payment data directly through their respective providers (Apple Inc., Google LLC and Shopify).
Privacy policies:
Apple Pay: https://www.apple.com/legal/privacy/
Google Pay: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice
Shop Pay: https://www.shopify.com/legal/privacy
Shipping Service Provider
For the delivery of your order, we transmit your name and delivery address to an external shipping service provider (e.g., DHL, Hermes, or similar). This transfer is carried out exclusively for the purpose of delivery and on the basis of Art. 6(1)(b) GDPR (fulfilment of contract). If the shipping service provider requires your email address for shipment tracking, this will only be transmitted with your explicit consent.
6. Transfer of data to third countries
In connection with the use of Shopify and certain payment providers, personal data may be transferred to third countries (in particular the USA and Canada). The transfer is carried out on the basis of EU standard contractual clauses pursuant to Art. 46(2)(c) GDPR.
Emails sent to screencraftapparel@gmail.com are processed via Google LLC servers (USA). The transfer is carried out on the basis of EU standard contractual clauses pursuant to Art. 46(2)(c) GDPR. Further information: https://policies.google.com/privacy
7. Cookies
Our website uses cookies that are necessary for technical operation (e.g. shopping cart and checkout functionality). These are used on the basis of Art. 6(1)(f) GDPR. Non-essential cookies are only set with your consent pursuant to Art. 6(1)(a) GDPR. You can give or withdraw your consent via the cookie banner displayed on the site.
8. Retention period
Order data is retained in accordance with statutory retention obligations (in particular §147 AO, §257 HGB) for up to 10 years. Other data is deleted as soon as it is no longer required for its original purpose.
9. Your rights
You have the right at any time to:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
Withdrawal of consent (Art. 7(3) GDPR): If the processing is based on your consent, you have the right to withdraw it at any time with effect for the future. The lawfulness of processing carried out prior to withdrawal is not affected.
To exercise your rights, please contact us at: screencraftapparel@gmail.com
10. Right to lodge a complaint
You have the right to lodge a complaint with the competent data protection supervisory authority:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219, 10969 Berlin, Germany
https://www.datenschutz-berlin.de