Privacy policy

Below we inform you about the type, scope, and purpose of the processing of your personal data when using our shop at the address "https://kraftkids.de". Personal data means all information relating to an identified or identifiable natural person.

1. Responsible party

The controller within the meaning of the EU General Data Protection Regulation (GDPR) is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data. For the personal data processed in this shop, the controller within the meaning of the GDPR is: KraftKids GmbH, Waldnieler Str. 57, 41068 Mönchengladbach, Phone 02161 53 977 49, Email info@kraftkids.de (hereinafter "we").

2. When you visit our website

When you visit our website, our server collects the following information from your device: browser type and version, operating system, the previously visited website ("referrer"), IP address, and the time of the page request.

We collect and process this data to ensure the smooth operation of our website and to detect, prevent, and pursue misuse of our services. Furthermore, we use the collected data for statistical purposes, for example, to evaluate which devices and browsers are used to access our shop, in order to continuously adapt and improve our offerings based on this. This data processing is based on Article 6 Paragraph 1 Letter f of the GDPR.

We delete all the above-mentioned personal data no later than twelve months after their collection.

3. If you order from us

When you place an order in our shop, we process your name, delivery address, and your email address as you provide them during the ordering process. If you voluntarily provide additional data during your order (e.g., a different billing address or a phone number), we also process this data.

We process this data electronically for proper contract fulfillment, in particular for delivery, invoicing, booking of payments, and handling of returns and complaints. If we are obliged to provide you with updates for a digital product or for goods with digital elements, we also process your contact data for this purpose. This data processing is based on Article 6 paragraph 1 letter b GDPR.

We keep this data stored until all mutual claims from the respective contractual relationship with you have been fully settled and the commercial and tax retention periods to which we are subject have expired.

For a contract conclusion between you and us, it is necessary that we receive your name, delivery address, and your email address. The necessity of providing this data results from legal provisions (e.g., § 312i para. 1 no. 3 BGB, § 14 para. 4 UStG). Without providing this data, you cannot conclude a contract with us.

When deciding on a contract conclusion, we refrain from automated decision-making and profiling.

4. Customer Account

You can optionally create a customer account in our online shop. The data required for this and processed by us result from the input mask for opening the customer account. The customer account is set up exclusively at your request. The legal basis is therefore your consent according to Article 6 paragraph 1 letter a GDPR. We keep the personal data associated with the customer account stored until you delete the customer account or ask us to delete it. For personal data from already completed contracts, the retention periods as set out in the section "If you order from us" apply, regardless of the existence of the customer account.

5. Delivery and Payment

Insofar as we send physical goods based on the purchase contract, we transmit the name and address of the recipient and, if you have consented, your email address to Deutsche Post (Deutsche Post AG, 53113 Bonn), DHL (DHL Paket GmbH, 53113 Bonn), DPD (DPD Deutschland GmbH, 63741 Aschaffenburg) or DPD Polska Sp. z o.o. (02-274 Warszawa, Poland), DHL eCommerce Poland Sp. z o.o (02-823 Warszawa, Poland) as shipping service providers, for the purpose of delivering the shipment, possibly including a prior email notification about the expected delivery time, and for the purpose of a possible return of your shipment to us based on Article 6 paragraph 1 letter b GDPR.

If you return a delivery to the returns service provider named by us in the cancellation policy or if we have a delivery to be returned collected from you by a service provider, this service provider will also process your name and address as our processor for the purpose of handling the return.

For the payment of your purchase, the payment service provider you choose collects and processes your name, your email address, your card or account number, and/or other data as required for the payment method you have selected. The contractual and data protection provisions of the payment service provider you have chosen apply accordingly.

When receiving a payment, we process the data transmitted to us by the payment service provider.

When we receive a transfer to our account, we process in particular the name of the transferring account holder, the account number (IBAN and BIC), and the transmitted purpose of use.

Processing is based on Article 6(1)(b) GDPR. We keep this data stored until all mutual claims from the respective contractual relationship with you have been fully settled and the commercial and tax retention periods to which we are subject have expired.

6. Processors

To support our business operations, we use the services of DATEV eG (90329 Nuremberg), BaseLinker sp. z o.o. (53-333 Wrocław, Poland), HOSTIDO.PL GAŁĄZKA sp. j. (80-103 Gdańsk, Poland) as processors in accordance with Article 28 GDPR.

For operating our website on the internet, we use the technical services of Shopify (Shopify International Limited, Dublin 4, D04 XN32, Ireland) as a processor according to Article 28 GDPR.

7. Contact

If you use the contact form on our website, we process the data you enter into the form, especially your name, your email address, and your message.

If you send us a message by email, we store your message along with the sender data transmitted with it (name, email address, and possibly other information added by your email program and the transmitting servers). For receiving, storing, and sending emails, we use services from Google Mail (Google Ireland Ltd., Barrow Street, Dublin 4, Ireland) as a processor according to Article 28 GDPR.

The legal basis for this data processing is our legitimate interest in responding to your message and being able to react to any follow-up questions from you (Article 6(1)(f) GDPR). We delete the data collected with your message at the latest twelve months after the last communication with you regarding your concern, subject to the regulation in the following paragraph.

If you send us a legally relevant statement regarding the contractual relationship (e.g., a revocation or a complaint), the legal basis for processing, regardless of the transmission method, is also Article 6(1)(b) GDPR. In such a case, we delete the data related to your statement as soon as all mutual claims from the contractual relationship have been finally settled and the commercial and tax retention periods have expired.

8. Newsletter

If you have subscribed to our newsletter, we will inform you by email about new offers and features of our shop. You will receive no more than one newsletter per week. You can object to the use of your email address for advertising purposes at any time without formalities, without incurring any costs other than the transmission costs according to the basic tariffs.

This data processing is based on your consent according to Article 6 Paragraph 1 Letter a GDPR. If you revoke your consent to the use of your email address for advertising purposes, we delete your email address from our newsletter distribution list.

As a technical service provider for sending our newsletter, we use the service of Shopify International Limited (Dublin 4, D04 XN32, Ireland) (processor according to Article 28 GDPR).

9. Comments and Reviews

If you write a comment or review about one of our products in our shop, we publish your contribution at the appropriate place on our shop website together with your username, for which you can also provide a pseudonym. To prevent misuse of our offer, we store the IP address of the device from which you write for a period of twelve months (Article 6 paragraph 1 letter f GDPR). We reserve the right to delete inappropriate or thematically unsuitable contributions at any time. Otherwise, we only delete published contributions at the request of the respective author.

10. Google Services

To the extent you have consented, we use certain Google services on our website. If you visit our site from a location in the European Union, Norway, Iceland, Liechtenstein, or Switzerland, "Google" refers to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; otherwise, it refers to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

General information about data usage by Google can be found at Google under https://policies.google.com/technologies/partner-sites ("How we use data from websites or apps where our services are used").

11. Google Analytics

If you have consented, we use Google Analytics, a web analytics service from Google. Google places cookies on your device. With these cookies, Google can collect information about how you use our website. This information is transmitted to a Google server, evaluated there, and made available to us. We use the information to better understand what interests the visitors of our website, how successful our advertising media are, and how we can improve our offer.

The legal basis for this processing is your consent (Article 6 paragraph 1 letter a GDPR).

For the creation of usage analyses, Google acts as a processor for us (Article 28 GDPR), based on a processing agreement that includes the EU standard data protection clauses. You can access the content of the agreement with Google ("Data Processing Terms") online at https://privacy.google.com/businesses/processorterms/.

We use Google Analytics with IP anonymization enabled. This means that your IP address is usually shortened within the scope of the GDPR so that it can no longer be used to identify you. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser is not merged with other data from Google. You can prevent the storage of cookies by adjusting the settings of your browser software accordingly.

12. Facebook Pixel, Custom Audience, Conversion Tracking

On our website, we use the "Facebook Pixel" service from Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, or, if you are located in the USA or Canada: Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA). The technology allows us to define visitors to our website as a target group ("Custom Audience") for advertisements delivered by Facebook ("Facebook Ads"). To do this, we analyze your user behavior using an invisible graphic file integrated into our website and derive products or topics you are interested in. With Facebook Pixel, we can also determine the effectiveness of Facebook Ads, namely whether and how you respond to an advertisement from us ("Conversion Tracking").

This data processing is based on Article 6 paragraph 1 letter f GDPR, namely in our legitimate interest to promote our offers especially to those groups of people who are likely to be interested in our products, and to analyze the efficiency of the online advertising we use.

13. Your rights

With regard to the personal data we process about you, you have the following rights:

You have the right to request from us confirmation as to whether we are processing personal data concerning you. If this is the case, we will provide you with the personal data stored about you and the further information pursuant to Article 15 paragraphs 1 and 2 GDPR.

You have the right to have inaccurate personal data concerning you corrected without delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data – including by means of a supplementary statement.

You can request from us the immediate deletion of personal data concerning you under the conditions of Article 17(1) GDPR, insofar as their processing is not necessary according to Article 17(3) GDPR.

You can request from us the restriction of the processing of your data if one of the conditions of Article 18(1) GDPR applies. You can request the restriction particularly instead of deletion.

We will inform all recipients to whom we have disclosed personal data concerning you of any correction or deletion of your personal data and any restriction of processing, unless this proves impossible or involves disproportionate effort. We will also inform you about these recipients if you request.

You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and you can request that we transmit this data to another controller without hindrance, insofar as this is technically feasible.

If data processing is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of data processing carried out up to the point of withdrawal.

RIGHT TO OBJECT: FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, YOU CAN OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU; this right of objection applies to data processing based on Article 6(1)(f) GDPR for the purpose of safeguarding legitimate interests of ours or a third party, unless your interests or fundamental rights and freedoms requiring the protection of personal data override. If you exercise your right to object, we will no longer process the relevant data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

IN CASE WE PROCESS PERSONAL DATA FOR DIRECT MARKETING (E.G. NEWSLETTERS), YOU CAN OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA CONCERNING YOU FOR SUCH ADVERTISING, WITH THE RESULT THAT WE WILL NO LONGER PROCESS YOUR DATA FOR THESE PURPOSES.

If you believe that the processing of your personal data violates the GDPR, you can file a complaint with a supervisory authority, especially in the member state of your residence, workplace, or the location of the alleged violation. This does not exclude other administrative or judicial remedies.