Close

Your cart

Close

Menu

Language
  • Deutsch
  • English
  • Türkçe
  • français
  • Nederlands

HIBBOUX PRIVACY POLICY

This Privacy Policy describes how your personal information is collected, used and shared as part of your visit to www.hibboux.de (the “Site”) and your purchase.

THE DATA CONTROLLER

For the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in member states of the European Union and other data protection-related regulations, the data controller is: Hibboux Europe GmbH Address: Splieterstraße 27, 48231 Warendorf, Germany, Tel: 90 532 6916983, Email : service@hibboux.de, website: www.hibboux.de

COOKIES

We use cookies on various pages of this website to make your visit more pleasant, to give you the opportunity to use certain functions, to show you products that interest you or for market research purposes. In doing so, we protect our legitimate interest in the optimal marketing of our offer, weighing up the interests in accordance with Article 6 Paragraph 1 Point 1 Letter f GDPR. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the browser session has ended - i.e. after you have closed your browser - (so-called session cookies). Other cookies remain on your computer so that we can recognize your browser the next time you visit (persistent cookies). The storage period is displayed in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about how cookies are used and decide individually whether you want to accept the storage of cookies in certain cases or deactivate them completely. Managing cookie settings varies from browser to browser; The help menu of the respective browser explains how the cookie settings can be changed. However, deactivating cookies can limit the functionality of our website.

PERSONAL INFORMATION WE COLLECT

When you visit our website, we automatically collect certain information about your device, such as information about your web browser, IP address, time zone and some of the cookies installed on your device. As you browse the website, we also collect information about the individual websites or products you view, which websites or search terms you used to find our website, and information about how you interact with the website. We refer to this automatically collected information as “Device Data.”

We collect device data using the following technologies:

  • “Cookies” are files stored on your device or computer that often contain an anonymous identification code. For more information about cookies and how to disable them, visit http://www.allaboutcookies.org.
  • “Log files” track activity on the website and collect information such as your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
  • “Web beacons”, “tags” and “pixels” are electronic files that store data about how you navigate our website.

In addition, we collect information about you when you make or intend to make a purchase through the Site, including your name, billing address, shipping address, payment information, email address and telephone number. We refer to this information as “Order Information.”

The term “personal information” as used in this Privacy Policy includes both device information and order information.

USE OF PERSONAL DATA

In general, we use the order data we collect to process orders received via the website (this includes processing payment information, assembling it for shipping and creating invoices and/or order confirmations). We also use this order data to:

  • to communicate with you;
  • to examine our orders for potential risks or fraud and
  • Send you information or advertising relating to our products or services if they correspond to the preferences you have shared with us

We use the device data we collect to screen for potential risks and fraud (in particular your IP address) and generally to improve and optimize our website (for example, by creating analytics about how our customers navigate and interact with our website and to measure the success of our marketing and advertising campaigns).

SHARING YOUR PERSONAL DATA

We share your personal information with third parties who assist us in using your personal information as described above. For example, we use Shopify to operate our online store - you can find out more about how Shopify uses your personal data here: https://www.shopify.com/legal/privacy. We also use Google Analytics to understand how our customers use the website - further information about how Google uses their personal data can be found here: https://www.google.com/intl/en/policies/ privacy/. You can prevent your data from being passed on to Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Finally, we may disclose your personal information to comply with applicable laws and regulations, to respond to court requests for documents, search warrants or other legal requests for information to us, or to otherwise protect our rights.

BEHAVIOR-BASED ADVERTISING

As described above, we use your personal information to send you targeted advertising or marketing communications that we believe will be of interest to you.

YOUR RIGHTS

If you live in the European Union, you have the right to access the personal information we hold about you and to request that your personal information be corrected, updated or deleted. If you would like to exercise this right, you can contact us using the contact information below.

If you are a citizen of the European Union, please note that we process your data in order to fulfill existing contracts where applicable (for example, when you place an order through the Website) or otherwise to pursue our legitimate business interests set out above. In addition, please note that your data will be transferred to countries outside of Europe, including Canada and the United States.

  • Right to confirmation

You have the right granted by European legislators to request confirmation from the person responsible as to whether personal data concerning you is being processed. If you want to exercise this right, you can contact an employee of the controller at any time.

  • Right of access

You have the right granted by European legislators to obtain free information about your stored data from the person responsible at any time and to receive a copy of this data. In addition, European directives and regulations give you access to the following information:

  • the processing purposes;
  • the categories of personal data;
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
  • where possible, information on how long the personal data will be stored or, if this is not possible, the criteria for determining that period;
  • that you have the right to correct or delete personal data concerning you or to restrict processing by the controller or to object to this processing;
  • that you have the right to lodge a complaint with a supervisory authority;
  • if the personal data are not collected from the data subject, all available information about the origin of the data;
  • that automated decision-making, including profiling, is used in accordance with Article 22 paragraphs 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for you. In addition, you have the right to information about whether personal data is transferred to a third country or to an international organization. If this is the case, you have the right to be informed of the appropriate safeguards in connection with the transfer.

If you want to exercise this right of access, you can contact an employee of the controller at any time.

  • Right to rectification

You have the right granted by the European legislator to immediately request that the person responsible correct incorrect personal data concerning you. Taking into account the purposes of the processing, you have the right to request that incomplete personal data be completed, including by means of a supplementary statement.

If you want to exercise this right to rectification, you can contact an employee of the controller at any time.

  • Right to deletion (“right to be forgotten”)

You have the right granted by the European legislator to request that the controller delete personal data concerning you immediately, and the controller is obliged to immediately delete personal data if one of the following reasons applies and as long as the processing is not necessary delete:

  • The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
  • You withdraw your consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR and there is no other legal basis for the processing
  • You object to the processing in accordance with Article 21 Paragraph 1 GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Article 21 Paragraph 2 GDPR.
  • The personal data was processed unlawfully.
  • The deletion of personal data is necessary to comply with a legal obligation under EU law or the law of the Member States to which the controller is subject.
  • The personal data was collected in relation to information society services offered in accordance with Article 8 Paragraph 1 GDPR.

If one of the reasons above applies and you would like to request the deletion of personal data stored by the person responsible, you can contact an employee of the person responsible at any time. An employee of the person responsible will immediately ensure that the request for deletion is fulfilled immediately.

If the controller has made the personal data public and is obliged to delete them in accordance with Article 17(1), he shall, taking into account the available technology and the costs of implementation, take appropriate measures, including technical measures, to prevent other data controllers from using the personal data to inform you that you have requested them to delete any links to, or copies or replications of, that personal data. An employee of the person responsible will initiate the necessary measures.

  • Right to restriction of processing

You have the right granted by European legislators to request that the controller restrict processing if one of the following conditions is met:

  • The accuracy of the personal data is contested by you for a period enabling the controller to verify the accuracy of the personal data.
  • The processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data.
  • The controller no longer needs the personal data for the purposes of processing, but you still need them to assert, exercise or defend legal claims,
  • You have objected to the processing in accordance with Article 21 Paragraph 1 of the GDPR and it is not yet clear whether the controller's legitimate reasons outweigh yours.

If one of the reasons above applies and you want to request the restriction of the processing of personal data stored by the controller, you can contact an employee of the controller at any time. An employee of the controller will immediately ensure that the request to restrict processing is fulfilled immediately.

  • Right to data portability

You have the right granted by European legislators to receive the personal data concerning you that you have provided to a controller in a structured, commonly used and machine-readable format. You have the right to transfer this data to another controller without hindrance from the controller to whom the personal data were provided, provided that the processing is based on consent in accordance with Article 6 paragraph 1 letter a or Article 9 paragraph 2 letter a GDPR or on a Contract is based on Article 6 paragraph 1 letter b GDPR and the processing is carried out using automated procedures. This right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

In addition, when exercising your right to data portability in accordance with Article 20 Paragraph 1 of the GDPR, you have the right to have the personal data transmitted directly from one controller to another controller, to the extent that this is technically feasible and does not infringe the rights and freedoms of other persons impaired.

To exercise your right to data portability, you can contact an employee of the person responsible at any time.

  • Right to object

You have the right granted by the European legislator to object at any time to the processing of personal data concerning you, which is carried out on the basis of Article 6 paragraph 1 letters e or f GDPR, for reasons arising from your particular situation. This also applies to profiling based on these provisions.

In the event of an objection, the person responsible will no longer process the personal data unless he can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the person responsible processes personal data in order to conduct direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. This also applies to profiling insofar as it is connected to such direct advertising. If you object to processing for direct advertising purposes, the personal data will no longer be processed for these purposes.

In addition, you have the right, on grounds relating to your particular situation, to object to the processing of your personal data for scientific or historical research purposes or for statistical purposes in accordance with Article 89 paragraph 1 of the GDPR unless the processing is necessary to fulfill a task in the public interest.

To exercise your right to object, you can contact an employee of the person responsible. Furthermore, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, you are free to exercise your right to object using automated procedures using technical specifications.

  • Automated decisions on a case-by-case basis, including profiling

You have the right granted by the European legislator not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you, unless the decision (1 ) is necessary for the conclusion or performance of a contract concluded between you and the person responsible, (2) is permitted by law of the European Union or the Member States to which the person responsible is subject and these laws take appropriate measures to safeguard the rights and freedoms as well legitimate interests or (3) with your express consent.

If the decision (1) is necessary for the conclusion or fulfillment of a contract concluded between you and the person responsible, or (2) it is based on your express consent, the person responsible will take appropriate measures to protect your rights and freedoms and legitimate interests, which includes at least the right to obtain human intervention from the person responsible, to express your own point of view and to challenge the decision.

If you would like to exercise your rights regarding automated decision-making in individual cases, you can contact an employee of the person responsible at any time.

  • Right to withdraw consent to data protection

You have the right granted by European legislators to withdraw your consent to the processing of your personal data at any time.

If you would like to exercise your right to revoke your consent to data processing, you can contact an employee of the person responsible at any time.

STORAGE PERIOD OF PERSONAL DATA

The criterion used to determine the storage period is the legally required retention period.

DATA RETENTION

When you order through the Website, we will retain your order information for our records unless or until you ask us to delete this information.

MINORS

The website is not intended for people under 18 years of age.

CHANGES

We may change this privacy policy from time to time, for example to reflect a change in our business practices or for other operational, legal or regulatory reasons. 

CONTACT

For more information about our privacy practices, please contact us at service@hibboux.de or at the postal address listed below. Here you can also ask questions or make complaints if necessary.

Splieterstrasse 27, 48231, Warendorf, Germany

 

Recently viewed

What are you looking for?