Privacy policy
This English version is a translation provided for convenience. In case of any discrepancy, the German version shall prevail.
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for entering into a contract. You are not obligated to provide the data. Non-provision has no consequences. This applies only insofar as no other information is given for the following processing operations.
„Personal data" means any information relating to an identified or identifiable natural person.
Server log files
You can visit our websites without providing any personal information. Each time you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.
The processing takes place based on Art. 6 Abs. 1 lit. f DSGVO due to our predominant legitimate interest in ensuring the smooth operation of our website as well as improving our offering.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to the EU Commission's standard contractual clauses.
Contact
Controller
Contact us if you wish. The controller responsible for data processing is:
Car-e-Cover GmbH, Maysweg 10, Gebäude P2, 47918 Tönisvorst, Deutschland
Phone: 02151-6232291
Email: info@car-e-cover.de
Customer-initiated contact via email
If you initiate business contact with us by email, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves to handle and respond to your inquiry.
If the contact serves to carry out pre-contractual measures (e.g. advice in the event of interest in purchasing, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Abs. 1 lit. b DSGVO.
If contact is made for other reasons, this data processing is based on Art. 6 Abs. 1 lit. f DSGVO due to our predominant legitimate interest in processing and responding to your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6 Abs. 1 lit. f DSGVO.
We use your email address only to process your inquiry. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of establishing contact.
If the contact serves to carry out pre-contractual measures or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Abs. 1 lit. b DSGVO. If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 Abs. 1 lit. f DSGVO. You have the right to object to this processing at any time.
We use your email address only to process your inquiry. Your data will subsequently be deleted in compliance with statutory retention periods.
Collection and processing when using the withdrawal button
If you have concluded a contract via our online presence, we provide you with a withdrawal function (withdrawal button). When you use it, we collect your personal data (name, email address, information identifying the contract, time of submission) only to the extent provided by you.
The data processing takes place based on Art. 6 Abs. 1 lit. b or lit. c DSGVO. Your data will subsequently be deleted in compliance with statutory retention periods.
For the technical provision of the withdrawal function, we use a software solution from the third-party provider EU Widerrufsbutton as part of a data processing agreement. When you use the withdrawal function, your collected personal data is transmitted to this third-party provider's servers. The processing is carried out on the basis of Art. 6 Abs. 1 lit. c and lit. f DSGVO.
Customer account & orders
Customer account
When opening a customer account, we collect your personal data to the extent specified there. The processing is carried out on the basis of Art. 6 Abs. 1 lit. a DSGVO with your consent. You may revoke your consent at any time; your customer account will then be deleted.
Collection, processing and disclosure of personal data for orders
When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. The provision of the data is required for the conclusion of the contract. The processing is carried out on the basis of Art. 6 Abs. 1 lit. b DSGVO.
Your data is disclosed, for example, to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing, and IT service providers. The scope of data transmission is limited to a minimum.
Your data may be transferred to third countries outside the EU, in particular Canada and the USA. Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to the EU Commission's standard contractual clauses.
Reviews & advertising
Website logo for Google Customer Reviews
Our website incorporates the website logo for Google customer reviews of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; „Google") The integration serves the purpose of displaying the number and result of the reviews we have received via Google so far. To display the logo and show you personalized advertisements, Google uses cookies.
Your data may be transferred to the USA. Google is certified under the TADPF. The use of cookies is based on your consent pursuant to § 25 Abs. 1 S. 1 TDDDG in conjunction with Art. 6 Abs. 1 lit. a DSGVO. You can withdraw your consent at any time.
Further information can be found at: Google Customer Reviews Terms of Service as well as Google Privacy Policy
Google Customer Reviews rating tool
We use the review tool for Google Customer Reviews. After your order, we would like to ask you to rate your purchase. For this purpose, order details (order ID, delivery country, expected delivery date, GTIN of the ordered products) as well as your email address are transmitted to Google, among other things. Google is certified under the TADPF.
The processing takes place based on Art. 6 Abs. 1 lit. a DSGVO with your consent. You can revoke your consent at any time.
Review reminder
After your order, we would like to ask you to review your purchase with us. For this purpose, we use your personal data (name, e-mail address, information about the order) to send you a review reminder by e-mail, provided you have expressly consented to this. The processing is carried out on the basis of Art. 6 Abs. 1 lit. a DSGVO. You can revoke your consent at any time.
Use of the Email Address for Sending Newsletters
We use your email address to send you information and offers by newsletter, provided that you have expressly consented to this. The processing is carried out on the basis of Art. 6 Abs. 1 lit. a DSGVO. You can unsubscribe from the newsletter at any time via the corresponding link in the newsletter or by notifying us.
Shipping Service Provider & Merchandise Management System
Disclosure of the email address to shipping companies
We pass on your email address to the transport company as part of the contract processing, provided that you have expressly consented to this during the order process. The disclosure serves the purpose of informing you by email about the shipping status. The processing is carried out on the basis of Art. 6 Abs. 1 lit. a DSGVO. You can withdraw your consent at any time.
Use of an external merchandise management system
For contract processing, we use a merchandise management system as part of a data processing agreement. For this purpose, your personal data collected in connection with the order is transmitted to the following company:
m-por media GmbH, Hufschmiedstr. 22a, 45665 Recklinghausen
The processing takes place based on Art. 6 Abs. 1 lit. b DSGVO.
Payment service provider
Use of PayPal Express
We use the payment service PayPal Express provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). To integrate this payment service, PayPal collects data when the website is accessed (e.g. IP address, device type, operating system, browser type, location). The use of cookies takes place with your consent based on § 25 Abs. 1 S. 1 TDDDG in conjunction with Art. 6 Abs. 1 lit. a DSGVO.
Further information can be found at: PayPal Privacy Policy
Use of PayPal Checkout
We use the payment service PayPal Check-Out provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg). By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal. The processing is based on Art. 6 Abs. 1 lit. b DSGVO.
For certain payment methods such as credit card via PayPal, direct debit via PayPal, or „Pay later" via PayPal, PayPal reserves the right to obtain a credit report using credit agencies. You have the right to object to this processing at any time by notifying PayPal.
When paying by invoice purchase, the data is transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin). Further information: Ratepay privacy policy
Further information on PayPal can be found at: PayPal Privacy Policy
Use of Shopify Payments
We use the payment service "Shopify Payments" provided by Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). Payment processing is carried out by Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). By selecting a Shopify Payments payment method, the data required for payment processing is transmitted to Stripe. The processing is based on Art. 6 Abs. 1 lit. b DSGVO.
Stripe reserves the right to obtain a credit check using credit agencies. You have the right to object to this processing at any time by notifying Stripe.
Further information: Shopify Privacy Policy | Stripe Privacy Policy
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser on a user's computer system and enable a unique identification of the browser when the website is visited again. You have full control over the use of cookies via your browser settings.
Information on cookie management in the most common browsers:
Chrome | Microsoft Edge | Mozilla Firefox | Safari
Technically Necessary Cookies
We use technically necessary cookies to make our offering more user-friendly, effective and secure. The use is carried out on the basis of § 25 Abs. 2 TDDDG as well as Art. 6 Abs. 1 lit. f DSGVO. You have the right to object to this processing at any time.
Use of the Cookie Consent Manager CCM19
We use the cookie consent manager CCM19 provided by HB legal tech GmbH (Kohlgartenstraße 11–13, 04315 Leipzig; "CCM19") on our website as part of a data processing arrangement. The plug-in enables you to grant consent to data processing operations and to exercise your right of withdrawal. In doing so, the following information is collected, among other things: randomly assigned ID, consent status, date and time of consent/refusal. The data is stored for 1 year and one month. The data processing is based on Art. 6 Abs. 1 lit. c DSGVO.
Further information: Händlerbund Privacy Policy
Analytics & Advertising Tracking
Use of Google Analytics 4
We use the web analytics service Google Analytics provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). The data processing serves to analyze this website as well as for marketing and advertising purposes. In doing so, the following may be collected, among other things: IP address, date and time of the page visit, click path, browser information, pages visited, referrer URL, location data, purchase activities.
We use the advanced implementation of consent mode (Advanced Consent Mode). With this, user data is transmitted to Google in the form of „Pings" even if consent has not been given. Google has certified itself under the TADPF. The processing is carried out with your consent on the basis of Art. 6 Abs. 1 lit. a DSGVO. You can withdraw your consent at any time.
Further information: Google Privacy Policy
Use of Shopify Statistics
We use the statistics and analytics functions of Shopify International Ltd. as part of a data processing arrangement. The data processing serves to analyze this website. Shopify is not certified under the TADPF; the data transfer is based on the standard contractual clauses of the EU Commission. The processing takes place with your consent based on Art. 6 Abs. 1 lit. a DSGVO.
Further information: Shopify Privacy Policy | Data Processing Agreement
Use of the Meta Pixel
We use the Meta Pixel provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta"). Meta and we are joint controllers for the collection of your data that takes place when the service is integrated. The basis for this is an agreement available at: facebook.com/legal/terms/businesstools
The application serves the purpose of specifically addressing website visitors with interest-based advertising on Facebook and Instagram, as well as creating conversion statistics. Meta has certified itself under the TADPF. The processing takes place with your consent based on Art. 6 Abs. 1 lit. a DSGVO. You can deactivate the remarketing function „Custom Audiences" here.
Plug-ins & other
Use of Google Tag Manager
We use Google Tag Manager provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). This application is used to manage JavaScript tags and HTML tags that are used to implement tracking and analytics tools. Google Tag Manager itself neither stores cookies nor processes personal data directly.
Use of YouTube
We use the function for embedding YouTube videos provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The "Enhanced privacy mode" option is activated. Information is only transmitted to YouTube once you watch a video. YouTube is certified under the TADPF. The processing takes place with your consent based on Art. 6 Abs. 1 lit. a DSGVO.
Further information: YouTube Privacy Policy
Integration of the Händlerbund member logo
Our website incorporates the Händlerbund membership logo (Händlerbund e.V., Kohlgartenstraße 11–13, 04315 Leipzig). When our website is accessed, your browser automatically sends information to the Händlerbund e.V. server, which is temporarily stored for 7 days in server log files (IP address, date and time, file accessed, referrer URL, browser, operating system). The legal basis is Art. 6 Abs. 1 S. 1 lit. f DSGVO.
Data subject rights & retention period
Duration of storage
After complete performance of the contract, the data will initially be stored for the duration of the warranty period, and thereafter, taking into account statutory retention periods, in particular those under tax and commercial law, before being deleted after the period has expired, unless you have consented to further processing and use.
Rights of the data subject
Provided the legal requirements are met, you have the following rights under Art. 15 to 20 DSGVO: the right to access, to rectification, to erasure, to restriction of processing, and to data portability. In addition, under Art. 21 Abs. 1 DSGVO you have the right to object to processing based on Art. 6 Abs. 1 f DSGVO, as well as to processing for the purpose of direct marketing.
Right to lodge a complaint with the supervisory authority
Pursuant to Art. 77 DSGVO, you have the right to lodge a complaint with the supervisory authority. You may file a complaint with the supervisory authority responsible for us:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Postfach 20 04 44, 40102 Düsseldorf
Phone: +49 211 384240 | Fax: +49 211 38424999
Email: poststelle@ldi.nrw.de
Right to Object
If the personal data processing described here is based on our legitimate interest pursuant to Art. 6 Abs. 1 lit. f DSGVO, you have the right to object to this processing at any time with effect for the future. After an objection is made, the processing of the affected data will be terminated unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.
