Data Protection Statement

The GRAMS28 takes the protection of your personal data very seriously. The purpose of this Data Protection Statement is to inform you about the type of personal data that will be collected when you use our website, grams28.com, and how we will process, use, and protect such data.

1. Scope

1.1 

Use of the grams28.com website is subject to the Data Protection Statement set out below. The grams28.com website is a service provided by GRAMS28. (hereinafter referred to as “GRAMS28”). 

1.2

Protecting your personal data is important to us, in particular, where respecting your personal rights in connection with the processing and use of such data is concerned. The term personal data refers to information regarding the personal and/or factual circumstances of a specific or specifiable natural person including the person’s name, postal address, e-mail address and/or telephone number and user data such as the IP address. We collect, process, and use your personal data in compliance with the relevant laws.

2. Automated Data Collection and Processing by Your Browser

2.1

As with every website, our server automatically collects the following information and temporarily saves it in server log files which are transmitted by your browser unless you have deactivated such function: 

- the IP address of the computer transmitting the request 

- the client’s file request 

- the http response code 

- the volume of data transmitted 

- the website from which you access our website (referrer URL) 

- the date and time of the server request 

- the type, version and language of your browser 

- the operating system on the computer transmitting the request

Our server log files are not evaluated based on personal use. We cannot allocate this data to specific persons at any time. Also, we do not merge this data with data from other sources. 

 2.2

Our website uses Google Analytics, a web analytics service offered by Google Inc. (hereinafter referred to as “Google”). Google Analytics uses small text files called cookies which are saved on your computer to facilitate analysis of your website use. The information collected relates to your operating system, browser and IP address, the website you accessed previously (referrer URL), and the date and time of your visit to our website. The information generated by cookies regarding your use of our website typically is transmitted to and saved on a Google server in the United States. If and when IP anonymization is activated on this website, Google will reduce your IP address for transmission among member states of the European Union or to other member states of the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be transmitted to a Google server in the United States and then reduced. At our request, Google will use this information to evaluate your use of our website, to compile reports on website activity, and to provide us with other services relating to website activity and Internet use. The IP address transmitted from your browser as part of Google Analytics will not be merged with any other data held by Google. 

 You may refuse the use of cookies by selecting the appropriate settings on your browser software; however, please note that in this case you may not be able to use the full functionality of our website. In addition, you can object to Google’s collection of data generated by cookies relating to your use of our website (including your IP address) as well as to its dissemination of the data. To do so, download and install the browser plug-in available at http://tools.google.com/dlpage/gaoptout?hl=en.

The third-party provider’s data protection statement is available at http://www.google.de/intl/en/policies/privacy.

3. Collection and Processing of Data Provided Voluntarily

3.1

Your provision of personal data to us by e-mail, via our website or online-shop is voluntary. We use this data to process our contractual relationship with you and/or your inquiries or orders, to conduct market research or opinion polls, or for mailing our advertisements to you. We only use your data for e-mail advertising purposes with your consent. 

3.2

If you register in our online shop and create a customer profile, we will save the account information you provide (in particular: name, billing and delivery address, payment information and e-mail address) so that you do not need to share your information again. You can update or delete your profile at any time. 

3.3

If you want to subscribe to our newsletter, please provide your valid e-mail address and confirm that you are in agreement with the following: 

 “I hereby agree that GRAMS28 may process and use the data I have provided for the purpose of sending me e-mail newsletters to inform me about products as well as about GRAMS28 current campaigns and events.” 

 I can revoke this agreement at any time by sending written notice to GRAMS28 via letter or e-mail to shop@grams28.com. As soon as I revoke such agreement, the data I provided will be deleted from all GRAMS28 systems and no longer will be used to send me the newsletter.

3.4

Personal data provided to us via our website will be saved only for the time it takes us to meet the purpose for which you provided such data. When your contract has been fulfilled completely, your data will be blocked and then deleted in accordance with the relevant tax and trade regulations unless you have given your express consent to such data being used for other purposes. To the extent mandatory trade and tax retention periods need to be observed, the retention period for some types of data can be up to ten years.

4. Transmission to Third Parties

4.1

We will not transmit any personal data you provide to us to any third parties. Personal data will be transmitted only 

- if you have given prior consent 

- to sub-contractors who need to receive and use such data for the purpose of fulfilling specific orders if required to process your inquiries, orders and use of our services 

- to service providers bound by instructions if required to process your order data in accordance with the law 

- to parties entitled to obtain such data if required to comply with statutory obligations 

4.2

As part of the payment process selected by you in our online shop, your data will be transmitted to third parties as follows: 

 We will forward your data to our partner Shopify Inc. in order to process payments by credit card or via PayPal. In addition to the data about your order, shipping and the desired method of payment, we pass on the following categories of personal data to the payment service provider: 

- Your name 

- Your billing address 

- Your delivery address 

- Your email address 

- Your phone number 

- Your payment details 

- Your IP address 

The payment service provider bears the responsibility for your payment data. We point out that this service transmits your personal data to others necessary for the execution of payments, in particular to the involved banks and credit card institutions. This transmission leads to the processing of your personal data to execute the payment. 

The third-party provider’s data protection statement is available at https://www.shopify.com/legal/privacy 

4.3

Our newsletters are distributed via MailChimp, a newsletters distribution platform owned by US Rocket Science Group, LLC, 675 Ponce De Leon Ave. NE # 5000, Atlanta, GA 30308, USA (hereinafter referred to as “MailChimp”). 

The e-mail addresses of our Newsletter recipients, as well as their other information described in these notes, are stored on the servers of MailChimp in the USA. MailChimp uses this information to send and evaluate the newsletters on our behalf. Furthermore, MailChimp may, according to its own information, use this data to optimize or improve its own services, e.g. for the technical optimization of the shipping and the presentation of the newsletter or for economic purposes, to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients for their own purpose or to pass them on to third parties.

We rely on the reliability, IT and data security of MailChimp. MailChimp is certified under the US-EU privacy shield "Privacy Shield" and is committed to complying with EU data protection requirements. Furthermore, we have concluded a data processing agreement with MailChimp. This is a contract in which MailChimp pledges to protect the data of our users, to process it in accordance with its privacy policy on our behalf and, in particular, not to disclose it to third parties. 

 The third-party provider’s data protection statement is available at https://mailchimp.com/legal/privacy/ 

a) Double opt-in and logging

The registration to our newsletter is carried out by a double opt-in procedure. After registration, you will receive an e-mail asking you to confirm your registration. This procedure increases security and prevents logins with external e-mail addresses.The registration for the newsletter will be logged in order to prove the registration process according to the legal requirements. This includes the registration of login and confirmation time, as well as the IP address. Changes made later to your data stored with MailChimp will also be logged. 

b) Statistical survey and analysis

The newsletters contain a web beacon, a pixel-sized file that is retrieved from the MailChimp server when the newsletter is opened. This call will initially collect technical information, such as information about the browser and your system, as well as your IP address and time of retrieval. This information is used to improve the technical performance of services based on their specifications or audience and their reading habits, based on their locations (which can be determined using the IP address) or access times. 

Statistical surveys also include determining if the newsletters will be opened, when they will be opened and which links will be clicked. For technical reasons, this information can be allocated to the individual newsletter recipients. However, it is neither our desire nor that of MailChimp to observe individual users. The evaluations help us to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users. 

c) Termination / Revocation

You can unsubscribe to our newsletter at any time and revoke your consent. A separate revocation of a dispatch via MailChimp or the statistical evaluation that is part of the MailChimp service is not possible. To unsubscribe from the newsletter, you can use the link at the end of the newsletter or send us an e-mail to shop@grams28.com. 

5. Cookies

5.1

To learn about your individual preferences and adjust our offerings optimally to best meet your needs, our website uses cookies – small text files saved on your computer or mobile device that your computer or mobile device can retrieve when you access our website at a later time. Cookies do not contain any personal data and we do not merge the data in cookies with data from other sources. 

5.2

Cookies do not harm your computer or mobile device and do not contain any viruses. If you do not want cookies saved on your computer, please adjust your browser settings so saving cookies is impossible or you are asked for express consent before any cookies are saved. Please note that you may have to change the settings in each browser you use to access this website and that not all functions of this website may be available to you if you object to the use of cookies.

6. Your Rights

6.1

At any time, at no cost to you and without providing any reason you can request information regarding the data relating to you which is saved in our systems as well as information regarding the origin, recipients or categories of recipients to whom such data has been transmitted and why such data has been saved.

6.2

In addition, legally you are entitled to have your personal data corrected, blocked or deleted. Also, you can revoke your consent to the use of your data at any time and without having to provide a reason.

6.3

Please address any requests for information, inquiries, objections to the processing of your data, and any questions you may have to GRAMS28 in writing via letter or e-mail to shop@grams28.com.