Privacy policy

1) Introduction and Contact Details of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data here refers to all data with which you can be personally identified.

1.2 The controller for data processing on this website, in terms of the General Data Protection Regulation (GDPR), is Wanke Tim Peter, Felkar Niko GbR, Simone-Weil-Str. 3, 85049 Ingolstadt, Germany, Tel.: +49 (0) 841 90250630, Email: info@jdmapproved.de. The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 In the case of merely informative use of our website, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

The visited website
Date and time at the moment of access
Amount of data sent in bytes
Source/reference from which you came to the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

3) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of the cookies we use are deleted after the browser session, i.e., after closing your browser (so-called "session cookies"). Other cookies remain on your device and enable us to recognize your browser on your next visit (so-called "persistent cookies"). The storage duration can be taken from the overview of cookie settings in your web browser.

Insofar as personal data is also processed by individual cookies implemented by us, processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either for the execution of the contract, according to Art. 6 Para. 1 lit. a GDPR in the case of given consent, or according to Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.

You can set your browser in such a way that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general.

Please note that the functionality of our website may be limited if cookies are not accepted.

4) Contacting Us

4.1 WhatsApp-Business

We offer visitors to our website the opportunity to contact us using the messaging service WhatsApp by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "Business version" of WhatsApp.

If you contact us via WhatsApp on the occasion of a specific transaction (e.g., an order placed), we store and use the mobile phone number used by you at WhatsApp and - if provided - your first and last name according to Art. 6 Para. 1 lit. b. GDPR for processing and answering your request. Based on the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address, or email address) in order to be able to assign your request to a specific process.

If you use our WhatsApp contact for general inquiries (such as the range of services, availability, or our website), we store and use the mobile phone number used by you at WhatsApp and - if provided - your first and last name according to Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in providing the requested information efficiently and promptly.

Your data will always be used only to respond to your concern via WhatsApp. Data will not be passed on to third parties.

Please be aware that WhatsApp Business accesses the address book of the mobile device we use for this purpose and automatically transmits phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device whose address book stores exclusively the WhatsApp contact details of users who have also contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact details are stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts to Meta Platforms Inc. upon first use of the app on their device, in accordance with Art. 6 Para. 1 lit. a GDPR. Therefore, the transmission of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded.

For the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your rights and setting options for protecting your privacy, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

As part of the above-mentioned processing, data may be transferred to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.

4.2 In the course of contacting us (e.g., via contact form or email), personal data is processed solely for the purpose of processing and answering your request and only to the extent necessary.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact aims at concluding a contract, then additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted once it can be inferred from the circumstances that the matter in question has been conclusively resolved and provided that no legal retention obligations prevent deletion.

5) Data Processing When Opening a Customer Account

In accordance with Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary when you provide us with this information for the purpose of opening a customer account. The data required for the opening of the account can be seen from the input mask of the corresponding form on our website.

Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via the account have been fully processed, no legal retention periods are opposed, and there is no legitimate interest on our part in further storage.

6) Use of Customer Data for Direct Advertising

Subscription to our Email Newsletter

When you subscribe to our email newsletter, we regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of further data is voluntary and will be used to address you personally. For the newsletter dispatch, we use the so-called double opt-in procedure, which ensures that you will receive the newsletter only if you have expressly confirmed your consent to receive the newsletter by activating a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. At the time of registration, we store the IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration to be able to trace any possible misuse of your email address at a later point in time. The data collected by us when registering for the newsletter will be used exclusively for promotional purposes via the newsletter.

You can unsubscribe from the newsletter at any time via the provided link in the newsletter or by sending the corresponding message to the controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, provided you have not expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

7) Data Processing for Order Processing

7.1 As far as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the transport company commissioned with the delivery and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b GDPR.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact details (name, address, email address) transmitted by you at the time of the order to personally inform you via suitable communication channels (such as by mail or email) about upcoming updates within the legally prescribed period, in accordance with Art. 6 Para. 1 lit. c GDPR. Your contact details will be used strictly for the purpose of notifications about updates owed by us and will only be processed by us to the extent necessary for the respective information.

To process your order, we also work with the following service provider(s) who support us wholly or partly in the execution of concluded contracts. Certain personal data is transmitted to these service providers according to the following information.

7.2 To fulfill our contractual obligations to our customers, we work with external shipping partners. We pass on your name as well as your delivery address and, if necessary for the delivery, your phone number, exclusively for the purposes of goods delivery Art. 6 Para. 1 lit. b GDPR to a shipping partner selected by us.

7.3 Printful

For order processing, we use the following provider: Printful, Inc., 11025 Westlake Drive, Charlotte, NC 28273, USA

Name, address, and possibly further personal data are passed on to the provider exclusively for the purpose of processing the online order according to Art. 6 Para. 1 lit. b GDPR. Your data is only transferred to the extent that this is actually necessary for processing the order.

For data transmission to the USA, the provider relies on the standard contractual clauses of the European Commission, which are supposed to ensure compliance with the European level of data protection.

7.4 Printify

For order processing, we use the following provider: Printify Inc., 108 West 13th Street, Wilmington, 19801, Delaware, USA

7.5 Use of Payment Service Providers (Payment Services)

Apple Pay

If you choose the payment method "Apple Pay" of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing is carried out via the "Apple Pay" function of your end device running iOS, watchOS, or macOS by charging a payment card stored in "Apple Pay". Apple Pay uses security features integrated into the hardware and software of your device to protect your transactions. To release a payment, it is therefore necessary to enter a code previously defined by you as well as verification using the "Face ID" or "Touch ID" function of your device.

For the purpose of payment processing, the information you provide during the order process along with information about your order is passed on to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to carry out the payment. The encryption ensures that only the website from which the purchase was made can access the payment data. After the payment is made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the payment success.

Insofar as personal data is processed in the described transmissions, the processing is carried out exclusively for the purpose of payment processing according to Art. 6 Para. 1 lit. b GDPR.

Apple stores anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.

When you use Apple Pay on the iPhone or Apple Watch to complete a purchase you made through Safari on the Mac, the Mac and the authorization device communicate over an encrypted channel to the Apple servers. Apple does not process or store any of this information in a format that can identify you. You can disable the ability to use Apple Pay on your Mac in the settings of your iPhone. Go to "Wallet & Apple Pay", and disable "Allow Payments on Mac".

For more information on privacy with Apple Pay, please visit the following web address: https://support.apple.com/de-de/HT203027

Klarna

One or more online payment methods of the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

When selecting a payment method of the provider where you advance the payment (e.g., credit card payment), your payment data (including name, address, bank and payment card information, currency, and transaction number) and information about the content of your order will be passed on to the provider according to Art. 6 Para. 1 lit. b GDPR for the purpose of payment processing with the provider and only to the extent necessary.

When selecting a payment method where the provider advances the payment (e.g., invoice or installment purchase or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, possibly data on an alternative payment method) during the order process.

To safeguard our legitimate interest in determining the solvency of our customers, these data are forwarded by us to the provider for the purpose of a credit check according to Art. 6 Para. 1 lit. f GDPR. The provider checks based on the personal data provided by you and other data (such as shopping cart, invoice amount, order history, payment experiences) whether the payment option selected by you can be granted with regard to payment and/or default risks.

Identity and credit information from the following credit agencies may be included in the decision within the application review according to Art. 6 Para. 1 lit. f GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.

You can object to this processing of your data at any time by sending a message to us or directly to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.

8) Web Analytics Services

8.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, when visiting the website, Google (Universal) Analytics sets cookies, which are small text fragments stored on your device and collect certain information, including your IP address. However, Google truncates the last digits of your IP address to prevent direct personal identification.

The information is transmitted to and processed by Google servers. This may also include transmissions to Google LLC in the USA.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The data collected through the use of Google (Universal) Analytics is stored for a period of two months and then deleted.

All processing described above, especially the setting of cookies on the used device, only occurs if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without your consent, Google (Universal) Analytics will not be used during your visit to the site. You can revoke your consent at any time with future effect by deactivating this service via the "Cookie-Consent-Tool" provided on the website.

We have entered into a data processing agreement with Google, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further legal information about Google (Universal) Analytics can be found at https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites.

Demographic Characteristics Google (Universal) Analytics uses the special feature "demographic characteristics" to compile statistics that can provide information about the age, gender, and interests of site visitors. This is done by analyzing advertising and information from third parties. This allows marketing target groups to be identified. However, the collected data cannot be attributed to any specific individual and are deleted after a storage period of two months.

Google Signals As an extension to Google (Universal) Analytics, this website can use Google Signals to generate cross-device reports. If you have activated personalized ads and linked your devices with your Google account, Google can analyze your usage behavior across devices, provided you have given your consent to the use of Google Analytics according to Art. 6 Para. 1 lit. a GDPR. We receive no personal data from Google, only statistics. If you want to stop the cross-device analysis, you can deactivate the "Personalized advertising" function in the settings of your Google account. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de. More information about Google Signals can be found at: https://support.google.com/analytics/answer/7532985?hl=de.

UserIDs As an extension to Google (Universal) Analytics, this website can use the "UserIDs" function. If you have consented to the use of Google (Universal) Analytics according to Art. 6 Para. 1 lit. a GDPR, have set up an account on this website, and sign in on various devices with this account, your activities, including conversions, can be analyzed across devices.

8.2 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, when visiting the website, Google Analytics 4 sets cookies, small text fragments stored on your device that collect certain information, including your IP address. However, Google truncates the last digits of your IP address to prevent direct personal identification.

The information is transmitted to and processed by Google servers. This may also include transmissions to Google LLC in the USA.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, especially the setting of cookies on the used device, only occurs if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your consent at any time with future effect by deactivating this service via the "Cookie-Consent-Tool" provided on the website.

We have entered into a data processing agreement with Google, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further legal information about Google Analytics 4 can be found at https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites.

Demographic Characteristics Google Analytics 4 uses the special feature "demographic characteristics" to compile statistics that can provide information about the age, gender, and interests of site visitors. This is done by analyzing advertising and information from third parties. This allows marketing target groups to be identified. However, the collected data cannot be attributed to any specific individual and are deleted after a storage period of two months.

Google Signals As an extension to Google Analytics 4, this website can use Google Signals to generate cross-device reports. If you have activated personalized ads and linked your devices with your Google account, Google can analyze your usage behavior across devices, provided you have given your consent to the use of Google Analytics according to Art. 6 Para. 1 lit. a GDPR. We receive no personal data from Google, only statistics. If you want to stop the cross-device analysis, you can deactivate the "Personalized advertising" function in the settings of your Google account. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de. More information about Google Signals can be found at: https://support.google.com/analytics/answer/7532985?hl=de.

UserIDs As an extension to Google Analytics 4, this website can use the "UserIDs" function. If you have consented to the use of Google Analytics 4 according to Art. 6 Para. 1 lit. a GDPR, have set up an account on this website, and sign in on various devices with this account, your activities, including conversions, can be analyzed across devices.

9) Retargeting/Remarketing and Conversion Tracking

9.1 Meta Pixel with Advanced Data Matching

Within our online offering, we use the "Meta Pixel" service in the mode of advanced data matching provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").

When a user clicks on an advertisement we have placed on Facebook or Instagram, "Meta Pixel" extends the URL of our linked page with a parameter. This URL parameter is then entered into the user's browser by a cookie set by our linked page itself after redirection. Additionally, this cookie captures specific customer data such as the email address we collect on our webpage linked to the Facebook or Instagram ad during transactions like purchase completions, account logins, or registrations (advanced data matching). The cookie is then read out, enabling the transmission of the data including specific customer data to Meta.

We use "Meta Pixel" with advanced data matching to make our advertisements ("ads") on Facebook and/or Instagram more effective and to ensure that they match the interests of users or have specific characteristics (e.g., interests in certain topics or products determined based on visited web pages) that we transmit to Meta ("Custom Audiences").

Moreover, we analyze the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an advertisement (conversion). Compared to the standard version of "Meta Pixel", the function of advanced data matching helps us better measure the effectiveness of our advertising campaigns by capturing more associated conversions.

All data transmitted are stored and processed by Meta, enabling a connection to the respective user profile, and Meta can use the data for its own advertising purposes, according to Meta's data usage policy (https://www.facebook.com/about/privacy/). The data may enable Meta and its partners to place ads on and off Facebook.

All processing described above, especially setting cookies to read information on the used device, is only carried out if you have given us your express consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with future effect by deactivating this service in the "Cookie-Consent-Tool" provided on the website.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

The information generated by Meta is usually transmitted to a Meta server and stored there; in this context, data may also be transmitted to servers of Meta Platforms Inc. in the USA.

9.2 Google Ads Remarketing

This website uses the retargeting technology of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous Cookie-ID and based on the pages you visited. Further data processing only occurs if you have agreed with Google that your internet and app browser history is linked to your Google account and information from your Google account is used to personalize ads you see on the web. In this case, if you are logged into Google during your visit to our website, Google uses your data together with Google Analytics data to create and define target audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked with Google Analytics data to form target groups. During the use of Google Ads Remarketing, there may also be a transfer of personal data to the servers of Google LLC. in the USA.

All processing described above, especially setting cookies to read information on the used device, is only carried out if you have given us your express consent according to Art. 6 Para. 1 lit. a GDPR. Without this consent, the use of retargeting technology will be omitted during your visit to the site.

You can revoke your given consent at any time with future effect. To exercise your revocation, please deactivate this service in the "Cookie-Consent-Tool" provided on the website.

10) Rights of the Data Subject

10.1 The applicable data protection law grants you certain rights regarding the processing of your personal data (rights of access and intervention) against the controller, as detailed below, with reference to the respective legal basis for exercising these rights:

Right of access by the data subject according to Art. 15 GDPR;
Right to rectification according to Art. 16 GDPR;
Right to erasure according to Art. 17 GDPR;
Right to restriction of processing according to Art. 18 GDPR;
Right to be informed according to Art. 19 GDPR;
Right to data portability according to Art. 20 GDPR;
Right to withdraw consent given according to Art. 7 Para. 3 GDPR;
Right to lodge a complaint according to Art. 77 GDPR.

10.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCE OF INTERESTS DUE TO OUR PREDOMINANTLY LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

11) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and - if relevant - additionally by the respective legal retention period (e.g., commercial and tax retention periods).

If personal data are processed on the basis of an express consent according to Art. 6 Para. 1 lit. a GDPR, these data are stored until the data subject revokes his consent.

If there are statutory retention periods for data that is processed within the framework of legal or quasi-legal obligations on the basis of Art. 6 Para. 1 lit. b GDPR, these data are routinely deleted after the expiration of the retention periods, provided they are no longer necessary for the fulfillment or initiation of a contract and/or there is no longer any legitimate interest on our part in their further storage.

When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until the data subject exercises his right to object according to Art. 21 Para. 1 GDPR, unless we can prove compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or the processing serves the assertion, exercise, or defense of legal claims.

When processing personal data for direct marketing purposes on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until the data subject exercises his right to object according to Art. 21 Para. 2 GDPR.

Unless otherwise stated in the other information contained in this statement about specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

As of March 13, 2024, 7:14:30 PM.