Privacy policy
We appreciate your interest in our website. The protection of your privacy is very important to us. Below, we provide you with detailed information about how we handle your data in accordance with the General Data Protection Regulation (GDPR) and the German Telemedia Act (TMG/TTDSG).
1. Controller
The controller responsible for data processing on this website within the meaning of the GDPR is:
von der Factory
Lucas von der Forst, Michael von der Forst, Miguel Belo GbR
Dahlweg 22
48153 Munster
Germany
Email: info@vonderfactory.de
2. General Information on Data Processing
We only process personal data when this is permitted by law or when you have given your express consent. Personal data refers to all information relating to an identified or identifiable natural person, such as name, address, email address or user behaviour.
3. Data Collection When Visiting Our Website
When Visiting the Website
When you access our website, your browser automatically transmits certain information to our server. This information is temporarily stored in so-called log files. The following data is collected:
- the IP address of your device,
- the date and time of access,
- the address of the page accessed (URL),
- the website from which you accessed our page (referrer URL),
- the browser type used and, where applicable, the operating system of your device,
- the name of your internet service provider.
This data is required to ensure the smooth operation of the website and to technically analyse attacks, misuse and errors.
The legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and technically error-free presentation of our website.
Log files are automatically deleted after 7 days at the latest, unless security-related retention is required.
3a. Hosting via Shopify
Our website is hosted on the platform Shopify Inc., 151 O'Connor Street, Ottawa, ON K2P 2L8, Canada. Shopify stores your personal data on secure servers and processes it under a data processing agreement in accordance with Art. 28 GDPR. Further information can be found in Shopify's privacy policy: https://www.shopify.com/legal/privacy
4. Cookies and Consent Management
Our website uses so-called "cookies". These are small text files that are stored on your device and contain information about the use of our website.
When you first visit our website, you will receive a cookie banner through which you can give your consent to the use of certain categories of cookies. You can change or withdraw your selection at any time via the [Cookie Settings].
We distinguish the following cookie categories:
- Strictly necessary cookies: These are required for the operation of the website (e.g. shopping cart, language settings) and cannot be deactivated.
- Functional cookies: These enable enhanced functionality and personalisation, such as saving your language settings or recently viewed products.
- Analytics cookies: They help us understand how visitors interact with our website (e.g. Google Analytics, Clarity).
- Marketing cookies: These allow us to show you advertisements for products on other platforms that you have previously viewed on our website (e.g. via Meta Pixel, Google Ads).
The legal basis for analytics and marketing cookies is Art. 6(1)(a) GDPR (your consent).
5. Contact
When you contact us via the contact form or by email, we process the following personal data:
- Name
- Email address
- Content of your message
We use this information exclusively to process your enquiry.
The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or contract performance).
After your enquiry has been processed, it will be deleted unless statutory retention obligations apply.
6. Orders and Contract Processing
When you place an order with us, we process the following data:
- First and last name
- Billing and delivery address
- Email address
- Payment data (e.g. credit card, PayPal, Klarna)
This data is required to process your order and fulfil the purchase contract.
The legal basis is Art. 6(1)(b) GDPR.
Payment data is processed exclusively through our payment service providers. They act as independent controllers; their privacy policies can be found on the respective provider websites.
7. Newsletter
If you subscribe to our newsletter, we use your email address to send you regular information about our products.
Registration is carried out using the double opt-in procedure. You can unsubscribe at any time via a link at the end of each email.
We use Klaviyo (USA) for sending and analysing our newsletter. This may involve data transfers to third countries (see below).
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
8. Review Invitations (Judge.me)
After your purchase, you may receive an invitation to submit a product review through our service provider Judge.me, provided you have consented to this or we have a legitimate interest.
Legal basis: Art. 6(1)(f) GDPR.
Privacy policy: https://judge.me/privacy
9. Analytics and Marketing Tools
Google Analytics
Provider: Google Ireland Ltd., Dublin, Ireland
Purpose: Analysis of user behaviour
Privacy policy: https://policies.google.com/privacy?hl=de
Opt-out: https://tools.google.com/dlpage/gaoptout
Google Ads Conversion Tracking
Provider: Google Ireland Ltd., Dublin, Ireland
Purpose: Measurement of advertising effectiveness on Google
Legal basis: Consent (Art. 6(1)(a) GDPR)
Meta Pixel (Facebook & Instagram)
Provider: Meta Platforms Ireland Ltd., Dublin, Ireland
Purpose: Remarketing and conversion tracking
Privacy policy: https://www.facebook.com/privacy/policy
Opt-out: https://www.youronlinechoices.com
Microsoft Clarity
Provider: Microsoft Ireland Operations Ltd.
Purpose: Analysis of user interaction using heatmaps
Privacy policy: https://privacy.microsoft.com/de-de/privacystatement
10. Embedded Instagram Feed
An Instagram feed is embedded on our website. When this content is accessed, a connection is established with the servers of Meta Platforms Ireland Ltd. Personal data (e.g. your IP address) may be transmitted to Meta and cookies may be set.
The embedding only takes place after your express consent via the cookie banner in the "Marketing" category.
Legal basis: Art. 6(1)(a) GDPR
Privacy policy: https://privacycenter.instagram.com/policy
11. Data Transfers to Third Countries
Some of our service providers (e.g. Google, Meta, Klaviyo, Shopify) are based in the USA or other third countries. The transfer takes place on the basis of EU Standard Contractual Clauses or, in the case of the USA, on the basis of the EU-U.S. Data Privacy Framework, where applicable.
12. Your Rights
You have the right:
- to request information about your stored data pursuant to Art. 15 GDPR,
- to rectify inaccurate data pursuant to Art. 16 GDPR,
- to have your data deleted pursuant to Art. 17 GDPR,
- to restrict processing pursuant to Art. 18 GDPR,
- to receive your data in a commonly used, machine-readable format pursuant to Art. 20 GDPR,
- to object to processing pursuant to Art. 21 GDPR,
- to withdraw consent at any time pursuant to Art. 7(3) GDPR,
- to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.
Competent authority for NRW:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
https://www.ldi.nrw.de
If you have any questions or concerns about your personal data, please use our contact form or send us an email.
13. Retention Period
We store your personal data only for as long as is necessary for the respective purposes or as statutory retention periods apply (e.g. 10 years for tax-relevant data).
14. Data Security
Our website uses SSL/TLS encryption to protect your data during transmission from unauthorised access. You can recognise this by the browser address bar showing "https://".
15. Changes to This Privacy Policy
We reserve the right to amend this privacy policy as needed, for example in response to new legal requirements or changes to our services. The current version is always available on our website.
16. Contact
If you have questions about data protection or wish to exercise your rights, please contact:
von der Factory
Lucas von der Forst, Michael von der Forst, Miguel Belo GbR
Dahlweg 22
48153 Munster
Germany
Email: info@vonderfactory.de
Alternatively, you can also reach us directly via our contact form.