Privacy policy
In accordance with Art. 4 No. 1. of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as "GDPR"), "processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
With the following data protection declaration, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or jointly with others on the purposes and means of the processing. In addition, we inform you below about the third-party components we use for optimisation purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.
Our data protection declaration is structured as follows:
I. Information about us as the responsible party
II. rights of users and data subjects
III. Information on data processing
I. Information about us as the responsible party
The responsible provider of this website in the sense of data protection law is:
Snow White Mini
/ Anh Tuyet Hoang
Irma-Uhrbach-Strasse 3
81739 Munich
Germany
E-mail: info@snowwhite-mini.de
II. Rights of users and data subjects
With regard to the data processing described in more detail below, the users and data subjects have the right to
to confirmation as to whether data relating to them is being processed, to information about the data processed, to further information about the data processing and to copies of the data (cf. also Art. 15 DSGVO);
correction or completion of inaccurate or incomplete data (cf. also Art. 16 of the GDPR);
the immediate erasure of the data concerning them (cf. also Art. 17 of the GDPR), or, alternatively, insofar as further processing is necessary pursuant to Art. 17(3) of the GDPR, restriction of processing in accordance with Art. 18 of the GDPR;
to receive the data concerning them and provided by them and to transfer this data to other providers/controllers (cf. also Art. 20 DSGVO);
to lodge a complaint with the supervisory authority if they are of the opinion that the data concerning them is being processed by the provider in breach of data protection provisions (cf. also Art. 77 of the GDPR).
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any correction or deletion of data or restriction of processing that takes place on the basis of Articles 16, 17 (1), 18 DSGVO. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.
Likewise, according to Art. 21 DSGVO, users and data subjects have the right to object to the future processing of data concerning them, insofar as the data is processed by the provider in accordance with Art. 6 para. 1 lit. f) DSGVO. In particular, an objection to data processing for the purpose of direct advertising is permitted.
III. Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of the storage no longer applies, the deletion of the data does not conflict with any legal obligations to retain data and no other information is provided below on individual processing procedures.
Server data
For technical reasons, in particular to ensure a secure and stable Internet presence, data is transmitted by your Internet browser to us or to our web space provider. These so-called server log files include the type and version of your internet browser, the operating system, the website from which you accessed our website (referrer URL), the website(s) of our website that you visit, the date and time of the respective access as well as the IP address of the internet connection from which our website is used.
The data collected in this way is temporarily stored, but not together with other data about you.
This storage takes place on the legal basis of Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the improvement, stability, functionality and security of our website.
The data is deleted again after seven days at the latest, unless further storage is required for evidence purposes. Otherwise, the data is exempt from deletion in whole or in part until the final clarification of an incident.
Cookies
a) Session cookies / session cookies
We use so-called cookies with our internet presence. Cookies are small text files or other storage technologies that are placed and stored on your end device by the Internet browser you use. These cookies are used to process certain information about you on an individual basis, such as your browser or location data or your IP address.
This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the reproduction of our website in different languages or the offer of a shopping cart function.
The legal basis for this processing is Art. 6 para. 1 lit b) DSGVO, insofar as these cookies data are processed for the purpose of initiating or executing a contract.
If the processing does not serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our website. In this case, the legal basis is Art. 6 para. 1 lit. f) DSGVO.
These session cookies are deleted when you close your internet browser.
b) Third-party cookies
Where applicable, cookies from partner companies with which we cooperate for the purpose of advertising, analysis or the functionalities of our website are also used with our website.
Please refer to the following information for details on this, in particular the purposes and legal bases of the processing of such third-party cookies.
c) Removal option
You can prevent or restrict the installation of cookies by setting your internet browser. You can also delete cookies that have already been stored at any time. However, the steps and measures required for this depend on the specific Internet browser you use. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. In the case of so-called Flash cookies, however, processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the specific Flash player you use. If you have any questions, please also use the help function or documentation of your Flash player or contact the manufacturer or user support.
However, if you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be used to their full extent.
Contract processing
The data transmitted by you in order to make use of our range of goods and/or services are processed by us for the purpose of contract processing and are necessary to this extent. Conclusion and processing of the contract are not possible without the provision of your data.
The legal basis for the processing is Art. 6 para. 1 lit. b) DSGVO.
We delete the data once the contract has been fully processed, but must observe the retention periods under tax and commercial law.
Within the framework of contract processing, we pass on your data to the transport company commissioned with the delivery of goods or to the financial service provider, insofar as the transfer is necessary for the delivery of goods or for payment purposes.
The legal basis for the transfer of data is then Art. 6 para. 1 lit. b) DSGVO.
Customer account / registration function
If you create a customer account with us via our website, we will collect and store the data you enter during registration (e.g. your name, address or e-mail address) exclusively for pre-contractual services, for the fulfilment of the contract or for the purpose of customer care (e.g. to provide you with an overview of your previous orders with us or to be able to offer you the so-called notepad function). At the same time, we also store your IP address and the date of your registration along with the time of day. Of course, this data will not be passed on to third parties.
During the further registration process, your consent to this processing will be obtained and reference will be made to this data protection declaration. The data collected by us in this process will be used exclusively for the provision of the customer account.
Insofar as you consent to this processing, Art. 6 para. 1 lit. a) DSGVO is the legal basis for the processing.
If the opening of the customer account also serves pre-contractual measures or the fulfilment of the contract, the legal basis for this processing is also Art. 6 (1) (b) DSGVO.
In accordance with Art. 7 (3) DSGVO, you can revoke your consent to the opening and maintenance of the customer account at any time with effect for the future. To do so, you only need to inform us of your revocation.
The data collected in this respect will be deleted as soon as processing is no longer necessary. However, we must observe retention periods under tax and commercial law.
Checking creditworthiness and scoring
Insofar as we offer you the basic option of payment by invoice within the scope of our range of goods or services and you make use of this option, we reserve the right to obtain credit information from a credit agency (such as Creditreform, Schufa, Bürgel or infoscore) on the basis of mathematical-statistical procedures. For this purpose, your data, insofar as it is relevant to the contract, such as your name and address, will be forwarded to the credit agency. We use the subsequent information about the statistical probability of a payment default for our decision whether to offer you payment by invoice.
The legal basis for this processing is our legitimate interest in the security of the claim in accordance with Art. 6 Para. 1 lit. f) DSGVO.
Newsletter
If you register for our free newsletter, the data you requested for this purpose, i.e. your e-mail address and - optionally - your name and address, will be transmitted to us. At the same time, we store the IP address of the internet connection from which you access our website as well as the date and time of your registration. During the further registration process, we will ask for your consent to send you the newsletter, describe the content in detail and refer to this data protection declaration. We will use the data collected exclusively for sending the newsletter - in particular, it will not be passed on to third parties.
The legal basis for this is Art. 6 para. 1 lit. a) DSGVO.
In accordance with Art. 7 (3) DSGVO, you can revoke your consent to receive the newsletter at any time with effect for the future. To do so, you simply need to inform us of your revocation or click on the unsubscribe link contained in each newsletter.
Contact requests / contact options
If you contact us via the contact form or e-mail, the data you provide will be used to process your request. The provision of the data is necessary for the processing and answering of your enquiry - without the provision of this data we cannot answer your enquiry or at best only to a limited extent.
The legal basis for this processing is Art. 6 para. 1 lit. b) DSGVO.
Your data will be deleted as soon as your enquiry has been finally answered and there are no legal obligations to retain data, e.g. for the subsequent processing of a contract.
Google Analytics
We use Google Analytics on our website. This is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
Due to the certification according to the EU-US Privacy Shield, Google Analytics is not allowed to use this service.
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google guarantees that the data protection requirements of the EU are also complied with when processing data in the USA.
The Google Analytics service is used to analyse the usage behaviour of our website. The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.
Usage and user-related information, such as IP address, location, time or frequency of visits to our website, is transferred to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymisation function. This function enables Google to truncate the IP address within the EU or EEA.
The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and of the usage activities there. This data may also be used to provide other services related to the use of our website and the use of the internet.
Google states that it will not associate your IP address with any other data. In addition, Google keeps a record of your IP address at
https://www.google.com/intl/de/policies/privacy/partners
Google also provides further information for you on data protection law, for example on the possibilities of preventing the use of data.
In addition, Google offers a website at
https://tools.google.com/dlpage/gaoptout?hl=de
Google also offers a so-called deactivation add-on together with further information on this. This add-on can be installed with the usual Internet browsers and offers you further control over the data that Google collects when you call up our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information about your visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analytics services. Of course, you can also find out whether and which other web analytics services we use in this privacy policy.
Google AdWords with conversion tracking
In our website, we use the advertising component Google AdWords and the so-called conversion tracking. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
Through the certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google guarantees that the data protection requirements of the EU are also complied with when processing data in the USA.
We use conversion tracking for the targeted advertising of our offer. The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.
If you click on an ad placed by Google, the conversion tracking we use saves a cookie on your terminal device. These so-called conversion cookies lose their validity after 30 days and do not serve to identify you personally.
If the cookie is still valid and you visit a specific page of our website, both we and Google can evaluate the fact that you have clicked on one of our ads placed with Google and that you have subsequently been redirected to our website.
Google uses the information obtained in this way to create statistics for us about visits to our website. In addition, this provides us with information about the number of users who clicked on our ad(s) and about the pages of our website that were subsequently accessed. However, neither we nor third parties who also use Google AdWords are able to identify you in this way.
You can also prevent or restrict the installation of cookies using the appropriate settings in your internet browser. At the same time, you can delete cookies already stored at any time. However, the steps and measures required for this depend on your specific Internet browser used. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support.
Furthermore, Google also offers the following website
https://services.google.com/sitestats/de.html
https://www.google.com/policies/technologies/ads/
http://www.google.de/policies/privacy/
Google also offers further information on this topic and in particular on the possibilities of preventing the use of data.
MailChimp - Newsletter
We offer you the opportunity to register for our free newsletter via our website.
We use MailChimp, a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, hereinafter referred to as "The Rocket Science Group", to send the newsletter.
Through certification under the EU-US Privacy Shield ("EU-US Privacy Shield").
https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active
The Rocket Science Group guarantees that the data protection requirements of the EU are also complied with when processing data in the USA. In addition, The Rocket Science Group offers the following services at
http://mailchimp.com/legal/privacy/
for further data protection information.
If you register for our newsletter, the data requested during the registration process, such as your e-mail address and, optionally, your name and address, will be processed by The Rocket Science Group. In addition, your IP address and the date and time of your registration will be stored. In the course of the further registration process, your consent to the sending of the newsletter is obtained, the content is described in detail and reference is made to this data protection declaration.
The newsletter subsequently sent via The Rocket Science Group also contains a so-called tracking pixel, also known as a "web beacon". With the help of this tracking pixel, we can evaluate whether and when you have read our newsletter and whether you have followed any links contained in the newsletter. In addition to other technical data, such as the data of your IT system and your IP address, the processed data is stored so that we can optimise our newsletter offer and respond to the wishes of our readers. The data is thus used to increase the quality and attractiveness of our newsletter offer.
The legal basis for the dispatch of the newsletter and the analysis is Art. 6 Para. 1 lit. a.) DSGVO.
In accordance with Art. 7 Para. 3 DSGVO, you can revoke your consent to the sending of the newsletter at any time with effect for the future. To do so, you simply need to inform us of your revocation or click on the unsubscribe link contained in each newsletter.
Shopify (shop software + web analysis)
a) Shopify shop software
We use "Shopify" to host our shop system and to present our offers and process contracts.
The legal basis is Art. 6 para. 1 lit. b) DSGVO (contract initiation/contract processing).
"Shopify" is the service of a group of companies consisting of Shopify Data Processing (USA) Inc, Shopify Payments (USA) Inc, Shopify (USA) Inc, Shopify Commerce Singapore Pte. Ltd. and Shopify International Limited.
Where we are located in the European Economic Area (EEA), processing is carried out by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, hereinafter referred to only as "Shopify".
However, due to the group of companies, it cannot be ruled out that processing also takes place in Canada and the USA), i.e. outside the EEA. In the case of data transfer to the Canadian Shopify Inc., however, an adequate level of data protection is guaranteed by the adequacy decision of the European Commission. The data transfer to the other aforementioned companies of the group of companies, which are based in the USA, takes place on the basis of the so-called Privacy Shield, a data protection agreement to which the participating partners have subscribed and with which compliance with the European data protection provisions has been confirmed.
https://www.privacyshield.gov/participant?id=a2zt0000000TNSNAA4&status=Active.
Shopify processes the following data on our behalf:
Name, billing and, if applicable, delivery address, email address, payment data, company name if applicable, telephone number if applicable, IP address, information about orders, information about the merchant shops supported by Shopify that you visit, as well as information about your terminal device and your internet browser.
In addition, Shopify offers the following at
https://www.shopify.de/legal/datenschutz
for more detailed data protection information.
b) Shopify web analytics
Insofar as we also use the Shopify web analytics service on our website, Shopify stores cookies on your end device via your internet browser. Via these cookies, further information, such as the location, time or frequency of your visit to our website, is transmitted to a Shopify server and analysed.
The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the analysis and optimisation of our website.
If you do not agree to this processing, you have the option of preventing the storage of the cookie through a setting in your internet browser. You can find more information on this above under "Cookies".
Social plugins from Facebook, Instagram
Social buttons from social networks are used on our website. These are only integrated into the page as HTML links, so that no connection is established with the servers of the respective provider when our website is called up. If you click on one of the buttons, the website of the respective social network opens in a new window of your browser There you can click on the Like or Share button, for example.
Our online presence on Facebook, Instagram
Insofar as you have given your consent to the respective social media operator in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presence on the social media mentioned above, from which usage profiles are created using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are generally used for this purpose. For detailed information on the processing and use of data by the respective social media operator, as well as a contact option and your rights and setting options in this regard to protect your privacy, please refer to the data protection notices of the providers linked below. Should you still require assistance in this regard, you can contact us.
Facebook is a service of Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland") The information automatically collected by Facebook Ireland about your use of our online presence on Facebook is generally transmitted to a server of Facebook, Inc, 1601 Willow Road, Menlo Park, California 94025, USA and stored there. There is no European Commission adequacy decision for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission. Data processing in the context of a visit to a Facebook fan page is carried out on the basis of an agreement between jointly responsible parties in accordance with Art. 26 DSGVO. Further information (information on Insights data) can be found here.
Instagram is a service of Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland") The information automatically collected by Facebook Ireland about your use of our online presence on Instagram is usually transmitted to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. There is no European Commission adequacy decision for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission. Data processing in the context of a visit to an Instagram fan page takes place on the basis of an agreement between jointly responsible parties in accordance with Art. 26 DSGVO. Further information (information on Insights data) can be found here.
Sample data protection declaration of the law firm Weiß & Partner