Data protection information

1. general information

The following information is intended to give you an overview of how we process your personal data and of your data protection rights. In principle, it is possible to use our website without entering personal data. However, if you wish to use special services via our website or other possibilities, processing of personal data could become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain your consent.

As the controller, we always strive to ensure the most complete protection of personal data processed through this website by implementing up-to-date technical and organisational measures, just as we attach great importance to security and data protection friendliness in our other processing operations. Nevertheless, Internet-based data transmissions can have security gaps, so that absolute protection against unauthorised access by third parties cannot be guaranteed. For this reason, you are free to contact us by telephone or post, for example, and to transmit personal data to us in this way as well.

2. responsible person and service provider

factonet e-commerce GmbH

Reuttier Straße 40

89231 Neu-Ulm

E-mail: datenschutz@shirtcity.com

Phone:+49 731 25084483

For further information, please refer to our imprint.

3. questions about the data protection officer

If you have any questions about data processing or data protection at ShirtCity, you can contact our data protection officer at any time.

You can reach him by post to the above address (please note 'Attn. Data Protection Officer' on the envelope) or by e-mail at datenschutz@shirtcity.com.

4. transmission of data to third parties

We do not transfer your personal data to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

you have given us your express consent in accordance with Art. 6 Para. 1 lit. a DSGVO,

the disclosure is permissible in accordance with Art. 6 Para. 1 lit. f DSGVO to protect our legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,

in the event that a legal obligation exists for the disclosure in accordance with Art. 6 Para. 1 lit. c DSGVO, as well as

this is legally permissible and necessary according to Art. 6 para. 1 lit. b DSGVO for the processing of contractual relationships with you.

Within the scope of the processing operations described in this data protection declaration, personal data may be transferred to the USA. The USA does not have an adequate level of data protection (ECJ: Schrems II ruling). In particular, US investigating authorities can oblige US companies to hand over or disclose personal data without the data subjects being able to take effective legal action against this. This means that, in principle, there is a possibility that your personal data will be processed by US investigative authorities. We have no control over these processing activities. In order to protect your data, we have concluded commissioned processing agreements based on the standard contractual clauses of the European Commission. If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent pursuant to Art. 49 (1) a) DSGVO may serve as the legal basis for the transfer to third countries. This may not apply to data transfers to third countries for which the European Commission has issued an adequacy decision pursuant to Art. 45 of the GDPR.

5. technology

a) SL/TLS encryption

This site uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as contact requests that you send to us as the operator. You can recognise an encrypted connection by the fact that there is a "https://" instead of a "http://" in the address line of the browser and by the lock symbol in your browser line. We use this technology to protect your transmitted data.

Data collection when visiting the website

When using our website for information purposes only, i.e. when not registering or otherwise transmitting information to us, we only collect the data that your browser transmits to our server (in so-called "server log files"). Our website collects a series of general data and information each time a page is called up by you or by an automated system. This general data and information is stored in the server log files.

The following data may be collected

o the browser types and versions used

o the operating system used by the accessing system,

o the website from which an accessing system arrives at our website (so-called referrer),

o the sub-websites which are accessed via an accessing system on our website,

o the date and time of an access to the website,

o an internet protocol address (IP address) and,

o the internet service provider of the accessing system.

o When using this general data and information, we do not draw any conclusions about your person. Rather, this information is required in order to

o to deliver the contents of our website correctly,

o to optimise the content of our website as well as the advertising for it,

o to ensure the permanent functionality of our IT systems and the technology of our website, as well as

o to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.

Therefore, the data and information collected is, on the one hand, statistically evaluated and, on the other hand, evaluated with the aim of increasing the data protection and data security of our enterprise so as to ultimately ensure an optimal level of protection for the personal data we process. The data of the server log files are stored separately from any personal data provided by a data subject.

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f DS-GVO. Our legitimate interest follows from the data collection purposes listed above.

c) Encrypted payment transactions

If, after the conclusion of a contract with costs, there is an obligation to provide us with your payment data (e.g. the account number when granting direct debit authorisation), this data is required for payment processing. Payment transactions via the common means of payment are carried out exclusively via an encrypted SSL or TLS connection. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

We use this technology to protect your transmitted data.

d) AWS Cloudfront (Content Delivery Network) Our website uses features of Amazon CloudFront, a content delivery network (CDN) service designed for high performance, security and developer convenience. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg. This enables dynamic delivery of web content using the purpose-built and feature-rich global AWS network infrastructure. This helps to analyse traffic between users and our websites, for example to detect and prevent attacks on our services. We have concluded a corresponding contract processing agreement with AWS, which is based on the German Data Protection Regulation (DSGVO), or in accordance with EU standard contractual clauses. You can find more information about AWS CloudFront at: https://aws.amazon.com/de/cloudfront/?nc=sn&loc=0. Data protection information: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice__German_Translation1.pdf

We host our website on Amazon Web Services (AWS). The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg. When you visit our website, your personal data is processed on the servers of AWS. Personal data may also be transmitted to the parent company of AWS in the USA. The data transfer to the USA is based on the EU standard contractual clauses. Details can be found at: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/. The use of AWS is based on Art. 6 para. 1 lit. f DS-GVO. We have a legitimate interest in the most reliable presentation of our website.  We have concluded an order processing contract with AWS. This is a contract required by data protection law, which ensures that AWS only processes the personal data of our website visitors in accordance with our instructions and in compliance with the DSGVO. You can find more information about AWS's data protection policy at: https://aws.amazon.com/de/privacy/?nc1=f_pr.

1. contents and contact options

We provide information here for ShirtCity - i.e. all about the design and printing of shirts and other textiles as products of our company and inform about everything that has to do with selection, orders, designing shirts yourself and qualities. Our website and other services offered also provide various options for designing and purchasing selected goods and for contacting us.

Contacting us via contact form

If you wish to contact us, you can use our contact form. In particular, the data and information that you yourself provide in the form will be processed. These can be seen in the contact form and are stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration.

For reasons of data minimisation, only a valid e-mail address, your first and last name and your request/message are required fields (*) so that we can safely assign the request and limit misuse. You are welcome to enter your telephone number for queries voluntarily, but this is not required.

The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f DSGVO. If your contact aims at the conclusion or implementation of a contract with us, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO. Your data will be deleted after your request has been processed. This is the case if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and the deletion does not conflict with any statutory retention obligations.

1. cookies

a) General information on cookies

We use cookies on our website. These are data records as information which your browser automatically creates and which are stored on your IT system or end device (laptop, tablet, smartphone or similar) when you visit our site.

In the cookie, information is stored in a database that results in each case from the context of the specific end device used. However, this does not mean that we gain direct knowledge of your identity.

The use of cookies serves to make the use of our offer more pleasant for you. We use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognised that you have already been with us and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate our offer for you for the purpose of optimisation. These cookies enable us to automatically recognise that you have already visited our website when you visit it again. The cookies set in this way are automatically deleted after a defined period of time. The respective storage period of the cookies can be found in the settings of the consent tool used.

b) Legal basis for the use of cookies

The data processed by the cookies, which are required for the proper functioning of the website, are thus necessary to protect our legitimate interests as well as those of third parties in accordance with Art. 6 (1) lit. f DSGVO.

For all other cookies, it applies that you have given your consent to this via our opt-in cookie banner within the meaning of Art. 6 (1) lit. a DSGVO.

c) Information on avoiding cookies in common browsers

You can delete cookies, allow only selected cookies or completely deactivate cookies at any time via the settings of the browser you are using. You can find more information on the support pages of the respective providers: 

o Chrome: https://support.google.com/chrome/answer/95647?tid=311178978.

o Safari: https://support.apple.com/de-at/guide/safari/sfri11471/mac?tid=311178978.

o Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen?tid=311178978.

o Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-l%C3%B6schen-63947406-40ac-c3b8-57b9-2a946a29ae09.

d) Consents with Consent Technologies from CookieYes

Our website uses consent technology to obtain your consent to the storage of certain cookies on your terminal device or to the use of certain technologies and to document this in accordance with data protection law. The provider of this technology is: CookieYes Limited, 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom. Email: support@cookieyes.com.

When you enter our website, a connection is made to ConsentManager's servers to obtain your consents and other declarations regarding cookie use. The ConsentManager then stores a cookie in your browser in order to be able to allocate the consents granted to you or their revocation. The data collected in this way is stored until you request us to delete it, delete the ConsentManager provider cookie yourself or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.

This consent tool is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c DSGVO.

Contents of our website

a.Registration as a user

You have the option of registering on our website by providing personal data. The personal data transmitted to us in this process is specified in the respective input mask used for registration. The personal data you enter is collected and stored exclusively for internal use by us and for our own purposes. We may arrange for it to be passed on to one or more order processors, for example a parcel service provider, who will also use the personal data exclusively for an internal use attributable to us. By registering on our website, the IP address assigned by your Internet service provider (ISP), the date and the time of registration are also stored. This data is stored because it is the only way to prevent misuse of our services and, if necessary, to enable the investigation of criminal offences. In this respect, the storage of this data is necessary for our protection. As a matter of principle, this data is not passed on to third parties. This does not apply if we are legally obliged to pass on the data or if the passing on of the data serves the purpose of criminal prosecution. Your registration, with voluntary provision of personal data, also enables us to offer you content or services which, due to their nature, can only be offered to registered users. Registered persons are free to change the personal data provided during registration at any time or to have it completely deleted from our database.

Upon request, we will provide you at any time with information about which personal data is stored about you. Furthermore, we will correct or delete personal data at your request, insofar as this does not conflict with any legal obligations to retain data. A data protection officer named in this data protection declaration and all other employees are available to the data subject as contact persons in this context.

Your data is processed in the interest of convenient and simple use of our website. This constitutes a legitimate interest within the meaning of Art. 6 (1) f DSGVO.

Data processing when using social logins via Facebook

Instead of logging in or registering with us using your e-mail and password, you can also do this conveniently with your existing profile on the social networks Facebook and use it to authenticate / register / log in.

For this purpose, you will find the corresponding icons of the providers on the login page - so at the moment this is the possibility to login directly, with your Facebook account. Before a connection to the providers is established, you must expressly agree to the process and data transfer described below. By clicking on the respective icon, a new window will open where you have to log in with your login data for the social network & confirm the action. There you will be informed as follows: on Facebook: "If you continue, Social Login Shirtcity will receive ongoing access to the information you share. Facebook records the time when Social Login Shirtcity accesses it. More about this and the settings you can make."

After successful login, the social network will tell you which data (in particular name and email address) will be transmitted to us for authentication as part of the registration or login process. If you have agreed to this data transmission, the fields required by us for registration will be filled with the transmitted data. The information required by us for registration or login is your e-mail address.

Only after your express consent to the use of the transmitted and required data will your data be stored by us and used for the purposes stated in this privacy policy. We do not establish a link between the account created with us and the social network selected beyond the authentication process. If you do not want. If you do not want Facebook to assign the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the loading of Facebook plugins with add-ons for your browser, e.g. with "Adblock Plus" (https://adblockplus.org/de/).

In order to be able to carry out the authentication process for registration and login, your IP address is transmitted to the providers of the social network. We have no influence on the purpose and scope of the data collection and on the further processing of the data by the providers of the social network (e.g. data transfer to the USA, merging of data with your other profile data, etc.) For more information, please read the data protection information of your provider/social media service.

Service providers for Social Login are currently:

-Meta Platforms Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland

Transfers to third countries are possible. So-called standard contractual clauses pursuant to Art. 46 DSGVO have been concluded as suitable guarantees. For third countries/companies for which an adequacy decision exists, the adequacy decision also applies. Further information can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de. The deletion is the responsibility of the main service provider. Legal basis: Art. 6 (1) lit. a DSGVO (consent).

d) Data processing for order processing

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the framework of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will explicitly inform you about this below. The legal basis for the transfer of data is Art. 6 Para. 1 lit. b DSGVO.

e) Conclusion of contracts in our online shop, dealers and dispatch of goods

We only transmit personal data to third parties if this is necessary within the framework of the contract processing, for example to the companies entrusted with the delivery of the goods or to the credit institution entrusted with the payment processing. Further transmission of data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes. The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of contracts or pre-contractual measures.

Web analytics

a) Facebook Pixel (Custom Audience)

This website uses the "Facebook Pixel" of Meta Platforms, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA ("Meta"). If explicit consent is given, this allows the behaviour of users to be tracked after they have seen or clicked on a Facebook advertisement. This procedure is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help to optimise future advertising measures.

The data collected is anonymous for us and therefore does not allow us to draw conclusions about the identity of the users. However, the data is stored and processed by Meta so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes, in accordance with the Facebook Data Usage Policy (https://www.facebook.com/about/privacy/). This enables Meta and its partners to place advertisements on and outside of Facebook. A cookie may also be stored on your computer for these purposes.

Legal basis: These processing operations are carried out exclusively with the granting of explicit consent in accordance with Art. 6 para. 1 lit. a DSGVO.

Google Analytics Universal

On our websites we use Google Analytics, a web analytics service provided by Google Ireland Limited (https://www.google.de/intl/de/about/), Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). In this context, pseudonymised usage profiles are created and cookies (see point "Cookies") are used. The information generated by the cookie about your use of this website, such as

o the browser type/version,

o the operating system used,

o the referrer URL (the previously visited page),

o the host name of the accessing computer (IP address) and

o the time of the server request,

are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website and internet use for the purposes of market research and demand-oriented design of these internet pages. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that an allocation is not possible (IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

Legal basis: These processing operations are carried out exclusively when explicit consent is given in accordance with Art. 6 para. 1 lit. a DSGVO.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

Data protection information: https://support.google.com/analytics/answer/6004245?hl=de.

10.3 Google Analytics Remarketing

We have integrated Google Remarketing services on this website. The company operating the Google Remarketing services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Remarketing is a function of Google AdWords that enables a company to display advertisements to Internet users who have previously visited the company's website. The integration of Google Remarketing thus allows a company to create user-related advertising and consequently to display interest-relevant advertisements to the Internet user.

The purpose of Google Remarketing is to display interest-relevant advertising. Google Remarketing enables us to display advertisements via the Google advertising network or on other websites that are tailored to the individual needs and interests of Internet users.

Google Remarketing sets a cookie on the IT system of the data subject. The cookie enables Google to recognise the visitor to our website when he or she subsequently visits websites that are also members of the Google advertising network. Each time you visit a website on which the Google Remarketing service has been integrated, your internet browser automatically identifies itself to Google. As part of this technical procedure, Google obtains knowledge of personal data, such as your IP address or surfing behaviour, which Google uses, among other things, to display interest-relevant advertising.

The cookie is used to store personal information, such as the websites you visit. Each time you visit our website, personal data, including your IP address, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.

These processing operations will only be carried out if express consent has been given in accordance with Art. 6 Para. 1 lit. a DSGVO.

Privacy policy: https://www.google.de/intl/de/policies/privacy/ .

Plugins and other services

Google Tag Manager

On this website we use the Google Tag Manager service. The operating company of Google Tag Manager is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies with headquarters at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Through this tool, "website tags" (i.e. keywords which are integrated into HTML elements) can be implemented and managed via an interface. By using the Google Tag Manager, we can automatically track which button, link or personalised image you have actively clicked on and can then record which contents of our website are of particular interest to you.

The tool also triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If you have opted out at the domain or cookie level, this will remain in place for all tracking tags implemented with Google Tag Manager.

These processing operations are only carried out if explicit consent has been given in accordance with Art. 6 (1) lit. a DSGVO.

Further information on Google Tag Manager and the privacy policy: https://www.google.com/intl/de/policies/privacy/.

Payment provider PayPal

We have integrated components of PayPal on this website. The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which represent virtual private or business accounts. In addition, PayPal offers the possibility to process virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an e-mail address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also assumes trustee functions and offers buyer protection services.

If you select "PayPal" as a payment option during the ordering process in our online shop, your data will be automatically transmitted to PayPal. By selecting this payment option, you consent to the transmission of personal data required for payment processing.

The personal data transmitted to PayPal is usually your first and last name, address, e-mail address, IP address, telephone number, mobile phone number or other data necessary for the processing of the payment. Personal data that is necessary for the processing of the purchase contract is also data that is related to the respective order.

The purpose of the data transfer is payment processing and fraud prevention. We transmit personal data to PayPal in particular if there is a legitimate interest in the transmission. The personal data exchanged between PayPal and us may be transmitted by PayPal to credit agencies. The purpose of this transfer is to check identity and creditworthiness.

PayPal may disclose the personal data to affiliated companies and service providers or subcontractors insofar as this is necessary for the fulfilment of contractual obligations or the data is to be processed on behalf.

You have the option to revoke your consent to the processing of personal data at any time vis-à-vis PayPal. A revocation has no influence on personal data that must be processed, used or transmitted for (contractual) payment processing.

PayPal is used in the interest of proper and smooth payment processing. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. The transmission of your personal data only takes place if you have given your express consent in accordance with Art. 6 Para. 1 lit. a DSGVO.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: www.paypal.com/de

Details can be found in PayPal's privacy policy: www.paypal.com/de.

Your rights as a data subject

Right to confirmation - You have the right to request confirmation from us as to whether personal data relating to you is being processed.

Right to information Art. 15 DSGVO - You have the right to obtain from us, at any time and free of charge, information about the personal data stored about you, as well as a copy of this data in accordance with the legal provisions.

Right to rectification Art. 16 DSGVO - You have the right to request the rectification of inaccurate personal data concerning you. You also have the right to request that incomplete personal data be completed, taking into account the purposes of the processing.

Erasure Art. 17 GDPR - You have the right to request that we erase the personal data concerning you without undue delay, provided that one of the grounds provided for by law applies and to the extent that the processing or storage is not necessary.

Restriction of processing Art. 18 DSGVO - You have the right to demand that we restrict processing if one of the legal requirements applies.

Data portability Art. 20 DSGVO - You have the right to receive the personal data concerning you, which has been provided to us by you, in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us to whom the personal data has been provided, provided that the processing is based on consent pursuant to Art. 6(1)(a) DSGVO or Art. 9(2)(a) DSGVO or on a contract pursuant to Art. 6(1)(b) DSGVO and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you have the right to have the personal data transferred directly from one controller to another controller where this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.

Objection Art. 21 DSGVO - You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6 para. 1 lit. e (data processing in the public interest) or f (data processing on the basis of a balance of interests) DSGVO. This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 DSGVO. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims. In individual cases, we process personal data in order to carry out direct advertising. You may object to the processing of personal data for the purpose of such advertising at any time. This also applies to profiling, insofar as it is connected with such direct advertising. If you object to us processing your data for the purpose of direct advertising, we will no longer process the personal data for these purposes. In addition, you have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the Data Protection Regulation, unless such processing is necessary for the performance of a task carried out in the public interest.

You are free to exercise your right to object by means of automated procedures using technical specifications in connection with the use of information society services, notwithstanding Directive 2002/58/EC.

Withdrawal of consent under data protection law - You have the right to withdraw consent to the processing of personal data at any time with effect for the future.

Complaint to a supervisory authority - You have the right to complain about our processing of personal data to a supervisory authority responsible for data protection. You can find a compilation of the contact details of the data protection officers in the federal states and the supervisory authorities for the non-public sector as well as in other countries on the pages of the Federal Commissioner for Data Protection and Freedom of Information, BfDI under Addresses and Links.

1.Automated decision-making ; profiling

We do not use profiling within the meaning of Art. 22 DSGVO in the context of the use of our websites.

2.Data storage, deletion and blocking

We process and store your personal data only for the period of time required to achieve the purpose of storage or if this has been provided for by the legal provisions to which our company is subject.

If the purpose of storage no longer applies or if a prescribed storage period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

3. storage period

The criterion for the duration of the storage of personal data is the respective statutory retention period. After expiry of the period, the corresponding data is routinely deleted, provided that it is no longer required for the fulfilment of the contract or the initiation of the contract. These are in particular the statutory periods of limitation, retention periods under tax or commercial law.

4.Further data protection questions

If you have further questions, comments or other requests regarding your personal data that are not answered here, simply contact us at: datenschutz@shirtcity.com.