Privacy policy
In the following privacy policy, we inform you about the use of your personal data. We comply with the German Data Protection Act (BDSG) and the European General Data Protection Regulation (GDPR).
Responsible for data processing
Dirk Eichler
Neviandtstr. 38
42117 Wuppertal
GERMANY
datenschutz@cam-b.de
Contents
1. Introduction
2. Legal basis
3. Definitions
4 Our data processing and its purposes
- Processing in the case of sending e-mails and contact by telephone
- Processing in connection with your use
of the cam-b.store web store
- Use of the order function
- Use of the Customer Account
- Use of the withdrawal tool
- Use of ratings
- Use of accounting software
- Use of payment service providers
- Use of our social media profiles
5. existence of suitable guarantees
6. recipients and further processing
7. rights of data subjects
1. Introduction
With the following declaration, the controller (hereinafter also referred to as "we" or the "provider") informs you about the type, scope and purposes of the collection, processing and use of your data when you contact the controller by telecommunication or exchange data with the controller.
This privacy policy applies in particular to the cam-b.store web store and other telemedia such as company websites, social media profiles and video channels. Insofar as we handle data processing uniformly across the telemedia we use, we have summarized the relevant information on the processing purposes, the relevant legal bases and the storage periods for you. The necessary details on the telemedia we use and their third-party providers (hereinafter referred to as telemedia providers) can be found at the end of the summary section.
Your point of contact for all data protection issues is the controller named above, who you can reach at the address and contact details given above.
2. Legal basis
Legal basis consent
The legal basis for the processing of data is Art. 6 para. 1 lit. a General Data Protection Regulation (GDPR) if you have given us your consent. You have the option to withdraw your consent to the processing of personal data at any time. You can find more information in the section below entitled Data subject rights.
Legal basis Contract fulfillment
If the purpose of the data processing is the initiation or performance of a contract, Art. 6 para. 1 lit. b GDPR is a legal basis for the data processing.
Legal basis Contract fulfillment
If the purpose of the data processing is the initiation or performance of a contract, Art. 6 para. 1 lit. b GDPR is a legal basis for the data processing.
Legal basis for legitimate interests
We are entitled to process your personal data if it is necessary to safeguard legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. However, such data processing cannot be considered if your interests or fundamental rights and freedoms, which require the protection of personal data, prevail. Our legitimate interests include the presentation of our company, the implementation of advertising measures and the guarantee of IT security. However, we will only ever process data on the basis of our legitimate interests in a way that is appropriate to the purpose and limited to what is necessary.
You have the option at any time to object to data processing that is necessary to safeguard the legitimate interests of the controller or a third party. You can find more detailed information in the section on data subject rights below.
Legal basis for fault monitoring and prevention of misuse
The legal basis for data processing to detect faults or errors in telecommunications systems is Section 12 TDDDG in conjunction with Art. 95 GDPR. Art. 95 GDPR as well as Art. 6 para. 1 lit. c GDPR, insofar as action is required for reasons of information security.
If there are actual indications of unlawful use of a telecommunications network or telecommunications service, in particular unreasonable harassment in accordance with Section 7 UWG, we may process traffic data required to detect and prevent unlawful use of the telecommunications network or service in order to protect end users. The legal basis is § 12 TDDDG i.V.m. Art. 95 GDPR.
3. Definitions
Definition of personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Definition of inventory data
Inventory data is personal data of a user that is required for the establishment, content design or modification of a contractual relationship between the service provider and the user regarding the use of telemedia.
Definition of usage data
Usage data is the personal data of a user that is required to enable and bill the use of telemedia. This includes, in particular, characteristics for identifying the user, information about the start and end as well as the scope of the respective use and information about the telemedia used by the user.
Definition of traffic data
Traffic data is data whose collection, processing or use is necessary for the provision of a telecommunications service.
Definition of log data
Log data is usage and traffic data that is automatically transmitted to the provider's server by the user's end device for technical reasons when accessing the provider's website. This data is stored in so-called log files.
Definition of processing
Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Definition of pseudonymization
Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
Definition of cookies
Cookies are small text files that are stored on the user's end device. Cookies always have a validity period, which may be limited to the end of the user session (so-called session cookies) or may last for a longer period (so-called persistent cookies). These persistent cookies remain on the user's end device and enable the provider or its partner companies (so-called third-party cookies) to recognize the end device on your next visit. You can set your browser so that you are informed about the setting of the cookie and can decide individually whether to accept it or to reject the setting of the cookie in certain cases or in general. If you do not accept cookies, the functionality of the website may be restricted.
Definition of website
A website, also known as a web presence, is the presence of a private or corporate provider of telemedia on the global network (World Wide Web), summarized under a specific Internet address. The web presence includes web pages or subpages and optionally available downloadable documents as well as other retrievable audiovisual media services.
Definition of telemedia provider
A telemedia provider or service provider is any natural or legal person who makes their own or third-party telemedia available for use or provides access for use.
4. Our data processing and its purposes
Processing in the case of sending e-mails and contacting us by telephone
You can contact us via the e-mail addresses and telephone numbers provided. We process the data you provide in order to respond to your contact request.
Data characteristics (inventory data):
- Title, first name and surname,
- company name,
- Address data (regarding contact and billing address) such as street, zip code, city and country,
- Communication data such as telephone (landline and cell phone number), fax and e-mail address,
- website.
In principle, we only process the data that you expressly provide to us.
Legal basis:
- Your consent,
- our legitimate interests (company presentation, target group-oriented advertising),
- the fulfillment of contractual obligations or the initiation of a contract.
Right to object:
As we process your data on the basis of our legitimate interests, you have the right to object.
Storage period:
Data provided by you will be deleted immediately after your request has been dealt with or, if it has not been dealt with, no later than 3 months after the last contact, unless your data is subject to a longer storage period for a separate reason (e.g. the storage of information used to fulfill a contract). The request is completed when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
Processing in connection with your use of the cam-b.store website
We process the data you provide to enable you to use our website cam-b.store (hereinafter referred to as the website). We use the website to publish information about our company and our products.
The website is implemented as a web store. We use the Shopify telemedia service from the provider Shopify International Ltd, Dublin, Ireland (hereinafter referred to as Shopify) as our store software. You can find more information in the section "Using the order function"
Cookies of the website
We set the following cookies when you visit our website and give us your consent for the respective data processing via the consent query (so-called cookie banner). You can find more information on the cookie banner function in the section "Storing consent".
secure_customer_sig:
- Category: Necessary
- Provider: Shopify
- Purpose: Login function for customers
- Expiration: 12 months
- Type: Cookie
localization:
- Category: Necessary
- Provider: Shopify
- Purpose: Translation of the user interface
- Expiration: 12 months
- Type: Cookie
cmp_a:
- Category: Necessary
- Provider: Shopify
- Expiration: 24 hours
- Type: Cookie
_tracking_consent:
- Category: Necessary
- Provider: Shopify
- Purpose: Storage of the user's consent/refusal
- Expiration: 12 months
- Type: Cookie
_pandectes_gdpr:
- Category: Necessary
- Provider: cam-b.store
- Purpose: Storage of consents
- Expiration: 12 months
- Type: Cookie
keep_alive:
- Category: Necessary
- Provider: Shopify
- Expiration: 30 minutes
- Type: Cookie
_shopify_sa_t:
- Category: Optional
- Provider: Shopify
- Purpose: Reach measurement
- Expiration: 30 minutes
- Type: Cookie
_shopify_y:
- Category: Optional
- Provider: Shopify
- Purpose: Reach measurement
- Expiry: 12 months
- Type: Cookie
_orig_referrer:
- Category: Optional
- Provider: Shopify
- Purpose: Reach measurement
- Expiry: 14 days
- Type: Cookie
_shopify_sa_p:
- Category: Optional
- Provider: Shopify
- Purpose: Reach measurement
- Expiration: 30 days
- Type: Cookie
_landing_page:
- Category: Optional
- Provider: Shopify
- Purpose: Reach measurement
- Expiry: 14 days
- Type: Cookie
_shopify_s:
- Category: Optional
- Provider: Shopify
- Purpose: Reach measurement
- Expiration: 30 days
- Type: Cookie
Processing in the event of use of the contact form
We provide a contact form on our website that you can use to send us your request. We process the data you provide to answer your request.
Data characteristics (inventory data):
- Name (optional),
- e-mail address (*),
- telephone number (optional),
- Message (*).
* Mandatory data
Legal basis:
- Your consent,
- our legitimate interests (company presentation, target group-oriented advertising),
- the fulfillment of contractual obligations or the initiation of a contract.
Right to object:
As we process your data on the basis of our legitimate interests, you have the right to object.
Storage period:
Data provided by you will be deleted immediately after your request has been dealt with or, if it has not been dealt with, no later than 1 month after the last contact, unless your data is subject to a longer storage period for a separate reason (e.g. the storage of information used to fulfill a contract). The request is completed when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
Processing in the event of registration for the newsletter
You can subscribe to our newsletter on our website. To register, first enter your e-mail address in the form field provided and send the form. In the next step, you will receive an email from us to the email address provided, with which you can confirm your registration for the specific email address by clicking on a link contained in the email (so-called double opt-in procedure). If you confirm your registration as described, this also constitutes your consent under data protection law to the processing of your e-mail address for the sending of the newsletter.
We use the newsletter to inform recipients about developments in our company and about the products we offer. We process the data transmitted by you exclusively for the purpose of sending the newsletter.
Data characteristics (inventory data):
- E-mail address (*).
* Mandatory information
Legal basis:
- Your consent.
Storage period:
We store the data provided by you until you withdraw your consent, but for no longer than 3 years from the time you give your consent.
Processing of data for fault and abuse control
We analyze the log data of our telemedia for the purposes of malfunction and abuse control. A malfunction is defined as a malfunction of a telemedium. Misuse of a telemedium exists, for example, if there is unreasonable harassment. The measures we take include the evaluation of error states and system monitoring to detect and prevent system threats.
Data characteristics (traffic data):
- Browser type and browser version,
- operating system used,
- Referrer URL,
- Host name of the accessing computer,
- Time of the server request,
- IP address.
We do not merge this data with other data sources.
Legal basis:
- Our legitimate interests (protection of our IT systems),
- fault control and prevention of misuse.
Right to object:
As we process your data on the basis of our legitimate interests, you have the right to object. The collection of data for the provision of the telemedium and the storage of data in log files is absolutely necessary for its operation and may also be justified for other legal reasons. However, you can exercise your right to object by means of automated procedures that use technical specifications, e.g. in the case of anonymization of your IP address by VPN providers.
Storage duration:
If the data is stored in log files, the data will be deleted after 7 days at the latest. Storage beyond this period is possible in accordance with data protection legislation.
Storage of consents
We place a permanent cookie on your end device if you have given us at least one consent for the data processing mentioned above in the section "Website cookies". We use this cookie to store the consent you have given on your device so that it is taken into account for further use of the website and for your subsequent visits.
By clicking on the link below and selecting "Change consent preference", you can change the cookie settings and thus revoke your previous cookie consents. Link: https://cam-b.store/pages/cookie-richtlinie
Data characteristics (inventory data):
- Pseudonymous identifier of the end device
- Processing relevant to consent
Legal basis:
- Your consent.
Storage period:
Your data will be deleted after 12 months, unless your data is subject to a longer storage period for a separate reason.
Use of the order function
By using the order function, you can conclude a distance selling contract with us via our webshop. Depending on your choice of payment service provider, we will establish a data connection to the website of the relevant payment service provider during the ordering process so that you can transmit your payment data directly to the relevant payment service provider.
We use the Shopify telemedia service from the provider Shopify International Ltd, Dublin, Ireland (hereinafter referred to as Shopify) as our store software.
Data characteristics (inventory data):
Order form
- First name and surname (*),
- Company,
- Address data (regarding billing and shipping address) such as street, postal code, city and country (*),
- e-mail address (*).
* Mandatory information
User account
- First name and surname (*),
- Company,
- Address data (regarding billing and shipping address) such as street, postal code, city and country (*),
- e-mail address (*).
* Mandatory information
The following functions are available:
- Add, change and delete addresses
- Order history with itemized list of order items
- Logging out of the account
Purposes, legal bases and storage periods
Purposes:
We require your personal data described in more detail above in the order form section for the purpose of processing and handling your order. The data stored in your user account serves the purpose of providing you with an overview of your order history.
Legal basis:
- The fulfillment of contractual obligations or the initiation of a contract.
Storage period:
The personal data collected by us will be stored for a period of 10 years due to commercial and tax law storage and documentation obligations (from the German Commercial Code, Tax Code) and deleted after this period has expired. After 2 years, we will restrict processing, i.e. your data will only be processed to comply with legal obligations from this point onwards. If you have consented to further storage in accordance with Article 6, paragraph 1, sentence 1, letter a GDPR, the aforementioned periods will be extended in accordance with your consent.
Order processing:
Shopify is our processor and manages the data you provide by using the online ordering process exclusively in accordance with our instructions. The provider has concluded an order processing contract with Shopify.
Shopify privacy policy: https://www.shopify.com/legal/privacy
Use of the Customer Account (Passwordless Login)
On our website, we offer you the option to create a customer account to manage your orders and speed up the checkout process for future purchases. The processing of data entered for this purpose is carried out in accordance with Art. 6 Para. 1 lit. b GDPR (performance of a contract or implementation of pre-contractual measures).
Login Features (Passwordless Procedure)
We use our shop system’s modernized customer account system. Unlike traditional systems, no password is required to create or log in to your customer account. Identity verification is instead performed via a verified one-time login procedure (OTP - One-Time Password):
Login: When you wish to log in or create an account, enter your email address in the designated field.
Verification: Our system automatically sends a six-digit verification code to that email address.
Confirmation: By entering this code in the shop, you verify that you have access to the email account. Access to your customer account is granted only after the code is successfully entered.
Deleting the Customer Account
You can request the deletion of your customer account in our Data Privacy Center by selecting "Request deletion of all personal data." To use this feature, you must be logged into your account.
Data Transfer to Shopify
To operate the customer accounts, your email address as well as technical data (timestamp of login, IP address) are transmitted to our service provider, Shopify (Shopify International Limited, Ireland). To the extent that data is transferred to the United States, this is done on the basis of the EU Commission's Standard Contractual Clauses or the Data Privacy Framework to ensure an adequate level of data protection.
Use of the revocation tool (401layers UG)
We use the “euwiderrufsbutton” app from 401layers UG, Lionel Schockenhoff, Dorothea-Erxleben-Str. 1a, 40721 Hilden, Germany, to provide the legally required revocation button and to handle the revocation process.
Purpose:
When you use the revocation button, your entries (e.g., name, email, order number) are transmitted to the servers of 401layers UG in order to generate the revocation declaration, forward it to us, and send you a confirmation of receipt.
Legal basis:
This service is used to fulfill our legal obligation to provide an electronic cancellation procedure (Art. 6 (1) (c) GDPR).
Order processing:
We have concluded an order processing agreement (AVV) with 401layers UG, which ensures that the data is only processed in accordance with our instructions and in compliance with the GDPR.
Storage period:
The data will be stored for as long as is necessary to process the withdrawal and fulfill legal retention obligations. Details can be found in the 401layers privacy policy at https://euwiderrufsbutton.de/dsgvo.
Use of the rating function
You can rate the products we offer in the respective item view. To implement the rating function, we use the telemedia service judge.me of the provider Buckworths (Ireland) Limited, c/o Workhub, 77 Lower Camden Street, Dublin SO2 XE80, Ireland (hereinafter Buckworths).
Data characteristics (inventory data):
- Evaluation form
- Name (*),
- e-mail address (*).
* Mandatory information
Purposes, legal bases and storage periods
Purposes:
The sole purpose of data processing is to enable you to describe and evaluate a specific product.
Legal basis:
- Your consent,
- our legitimate interests (product advertising).
Storage period:
Your ratings will be stored for a period of 6 years and deleted after this period has expired. If you have consented to further storage in accordance with Article 6, paragraph 1, sentence 1, letter a GDPR, the aforementioned periods will be extended in accordance with your consent.
Order processing:
Buckworths is our processor and manages the data you provide by using the online ordering process exclusively in accordance with our instructions. The provider has concluded an order processing contract with Buckworths.
Judge.me privacy policy: https://judge.me/privacy.
Use of accounting software
For the commercial processing of your order, we use an online accounting software together with an interface software, which serves the data exchange between our webshop and the accounting software. We use the accounting software for the automated creation of invoices, credit notes and delivery bills.
We use the following services:
- lexoffice,
- lexoffice - Shopify integration.
Data characteristics (inventory data):
- First name and surname (*),
- Company,
- Address data (regarding billing and shipping address) such as street, postal code, city and country (*),
- e-mail address (*).
* Mandatory information
Purposes, legal bases and storage periods
Purposes:
The data processing serves to fulfill the requirements of commercial accounting in accordance with HGB and AO.
Legal basis:
- The fulfillment of contractual obligations or the initiation of a contract.
Storage period:
The personal data collected by us is stored for a period of 10 years due to retention and documentation obligations under commercial and tax law (from the German Commercial Code, Fiscal Code) and deleted after this period has expired. After 2 years, we will restrict processing, i.e. your data will only be processed to comply with legal obligations from this point onwards. If you have consented to further storage in accordance with Article 6, paragraph 1, sentence 1, letter a GDPR, the aforementioned periods will be extended in accordance with your consent.
Information on the respective third-party providers
Use of lexoffice
As accounting software, we use lexoffice, an online service provided by Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg (hereinafter referred to as Haufe-Lexware).
The purpose of data processing is to carry out commercial accounting.
Processed data, legal basis, storage periods: see above Use of accounting software.
Haufe-Lexware is our processor in accordance with Art. 28 GDPR. The provider has concluded an order processing contract with Haufe-Lexware.
Privacy policy of Haufe-Lexware: https://www.lexoffice.de/datenschutz/.
Use of the Shopify - lexoffice integration
We use an interface for data exchange between our web store and our accounting system. The operator of the interface is Eshop Guide GmbH, Husemannplatz 5a, 44787 Bochum (hereinafter referred to as Eshop Guide).
The purpose of data processing is to carry out commercial accounting.
Processed data, legal basis, storage periods: see above Use of accounting software.
Eshop Guide is our processor pursuant to Art. 28 GDPR. The provider has concluded an order processing contract with Eshop Guide.
Eshop Guide's privacy policy: https://www.eshop-guide.de/pages/datenschutz.
Use of Google Analytics
This website uses the “Google Analytics” service offered by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to analyze website usage by users. The service uses “cookies” - text files that are stored on your end device. The information collected by the cookies is usually sent to a Google server in the USA and stored there.
IP anonymization is used on this website. The IP address of users is truncated within the member states of the EU and the European Economic Area. This shortening eliminates the personal reference of your IP address. As part of the contract data agreement that the website operators have concluded with Google Inc., Google Inc. uses the information collected to compile an analysis of website usage and website activity and provides services related to internet usage.
You have the option of preventing the storage of cookies on your device by making the appropriate settings in your browser. There is no guarantee that you will be able to access all functions of this website without restrictions if your browser does not allow cookies.
You have the option of preventing cookies from being stored on your device by making the appropriate settings in your browser. There is no guarantee that you will be able to access all functions of this website without restrictions if your browser does not allow cookies.
You can also use a browser plugin to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link will take you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=de
Here you can find further information on the use of data by Google Inc.: https://support.google.com/analytics/answer/6004245?hl=de
Use of Microsoft Clarity
We use Microsoft Clarity to optimize and analyze the shop system and to compile usage statistics. Personal data is processed for this purpose if you have consented to tracking cookies.
The legal basis for this data processing is Art. 6 (1) b) GDPR. The data is transferred to Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, as an independent controller.
This may also involve the transfer of personal data outside the European Union. The basis for the transfer of data to the USA is Art. 45 GDPR of the adequacy decision C(2023) 4745 of the European Commission in compliance with the Data Privacy Framework (DPF).
Data Protection Officer Microsoft Ireland Operations Ltd.: https://www.microsoft.com/de-at/concern/privacy
Microsoft's privacy policy can be viewed at the following link: https://privacy.microsoft.com/de-de/privacystatement
Use of Google Maps
To display the current delivery status, we have integrated map material from the Google Maps service of Google LLC into our website via an API. In order to display the content in your browser, Google must receive your IP address.
The legal basis for this data processing is Art. 6 para. 1 b) GDPR, as the IP address is required to deliver the content to you. In this processing, our cooperation with Google is based on a joint controllership agreement pursuant to Art. 26 GDPR, which can be accessed at https://business.safety.google/intl/de/controllerterms/.
Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.
Use of artificial intelligence (AI) systems
We use selected artificial intelligence-based technologies in our online offering to optimize our technical processes and ensure the quality of our texts.
Transparency in accordance with the EU AI Act:
In accordance with the requirements of Regulation (EU) 2024/1689, we hereby inform you that we use AI systems exclusively for support purposes (e.g., to prepare article texts or for technical analysis of store functions). There is no automated decision-making or profiling within the meaning of Art. 22 GDPR that has legal effect on you.
No AI images and no bots:
We expressly point out that we do not use AI-generated product or wall images and do not use AI chatbots for customer communication.
Detailed information on our principles and the labeling of content can be found in our AI policy.
Use of payment service providers
We enable you to use the payment services listed below
- PayPal,
- shopPay,
- GPay
- Klarna.
General information, purposes, legal bases and retention periods
Description:
When you initiate a payment transaction via a payment service, this triggers a number of data processing operations by the respective payment service. You will find more detailed information on the processing operations and the internet address at which you can access the privacy policies of the respective providers in the following sections.
Purposes:
The purpose of data processing is payment transfer.
Legal basis:
- The fulfillment of contractual obligations or the initiation of a contract.
Storage period:
The personal data collected by the payment service will be stored for a period of 10 years due to commercial and tax law retention and documentation obligations (from the German Commercial Code, Fiscal Code) and deleted after this period has expired. If you have consented to further storage in accordance with Article 6, paragraph 1, sentence 1, letter a GDPR, the aforementioned periods will be extended in accordance with your consent.
Storage of information on your end device
The payment services use so-called cookies, which are stored on your end device when you visit their websites, even if you do not have your own user account or are not logged into it during your visit to our profile. These cookies allow the provider of the payment service to create user profiles based on your preferences and interests and to display advertising tailored to your interests. The cookies have a limited validity, which is determined by the payment service provider so that you can use the services offered. However, the validity is extended with each use of the relevant service. Details on this can be found in the respective privacy policy of the payment service.
Transfer of data to third parties
If you use a payment service, we do not transfer your data to third parties. The payment services generally transfer your data to affiliated companies worldwide as well as to service providers and partner companies. You can find more information in the privacy policy of the respective social network.
Information on the respective third-party providers
Use of PayPal.com
We offer you the use of the payment service PayPal.com, provided by PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter PayPal).
The purpose of data processing is to enable online payments.
Processed data, legal basis, storage periods: see above Use of payment service providers.
PayPal is jointly responsible with us for data protection pursuant to Art. 26 GDPR.
PayPal's privacy policy: https://www.paypal.com/myaccount/privacy/privacyhub.
Use of GPay
The GPay payment service of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google) is also available to you as a payment service provider.
The purpose of data processing is to enable online payments.
Processed data, legal basis, storage periods: see above Use of payment service providers.
Google is jointly responsible with us for data protection pursuant to Art. 26 GDPR.
Google's privacy policy: https://policies.google.com/privacy.
Use of Shop Pay
You can use Shop Pay to pay for the ordered goods. Store Pay is a service provided by Shopify International Ltd, c/o Intertrust Ireland, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter referred to as Shopify).
Store Pay stores your email address, credit card, shipping and billing information so that you do not have to re-enter this data every time you make a purchase.
The purpose of data processing is the central storage of payment-related customer data.
Processed data, legal basis, storage periods: see above Use of payment service providers.
Shopify is jointly responsible with us under data protection law in accordance with Art. 26 GDPR.
Shopify's privacy policy: https://www.shopify.com/legal/privacy.
Use of Klarna
You can use the payment service provider Klarna to pay for the ordered goods. Klarna is a service of the provider Klarna Bank AB, German Branch, Chausseestraße 117, 10115 Berlin (hereinafter Klarna Bank).
The purpose of data processing is to enable online payments in addition to factoring services.
Processed data, legal basis, storage periods: see above Use of payment service providers.
Klarna Bank is jointly responsible with us under data protection law in accordance with Art. 26 GDPR.
Klarna Bank's privacy policy: https://www.klarna.com/de/datenschutz/.
Use of our social media profiles
We maintain the profiles listed below on social media portals and video channels (collectively referred to as social networks):
- Facebook,
- Instagram,
- YouTube,
- Tiktok.
General information, purposes, legal bases and storage periods
Description:
Your visit to our profiles triggers a variety of data processing operations by the respective social network. You will find more detailed information on the processing operations and the Internet address at which you can access the data protection declarations of the respective providers in the following sections.
In some cases, the telemedia providers make anonymous usage statistics available to us, which we use to improve the attractiveness of our profile. We do not have access to the usage data that the social network providers collect to compile these statistics.
Purposes:
Data processing serves the purpose of company and product presentation as well as communication with customers, interested parties and other users of the respective telemedia. If a telemedia provider provides us with usage statistics, the data processing also serves to measure reach.
Legal basis:
- Your consent,
- our legitimate interests (company presentation, target group-oriented advertising).
The collection of usage statistics serves our legitimate interest in improving the attractiveness of our profile for specific target groups.
If you use our respective profile to contact us (e.g. by creating your own posts, responding to one of our posts or sending us private messages), we will process the data you provide (your name, your message and, if applicable, photographs, documents and multimedia data) exclusively for the purpose of contacting you.
Right to object:
As we process your data on the basis of our legitimate interests, you have the right to object.
Storage period:
We delete stored data as soon as its storage is no longer required or if you request us to delete it. In the event of further statutory retention obligations, we store your data until the expiry of the relevant period. We limit the processing of the stored data in accordance with the purposes for which it is stored.
Joint responsibility with the respective social network
When you visit our profile, your personal data is not only collected, used and stored by us, but also by the respective telemedia provider as the operator of the social network. This happens even if you have not registered a user account with the social network. The individual data processing operations at the operator of the respective social network and their scope are only comprehensible to us to a limited extent. For details on the collection and storage of your personal data as well as the type, scope and purpose of its use by the operator of the respective social network, please refer to the respective privacy policy. We link to these in the sections below.
Storage of information on your end device
Furthermore, the operators of the social networks use so-called cookies, which are stored on your end device when you visit our profile even if you do not have your own user account or are not logged into it during your visit to our profile. These cookies allow the provider of the social network to create user profiles based on your preferences and interests and to show you tailored advertising (inside and outside the social network). The cookies have a limited validity, which is determined by the social network provider so that you can use the services offered by the social network. However, the validity is extended with each use of the relevant service. Details on this can be found in the respective privacy policy of the social network.
Transfer of data to third parties
If you use one of our profiles, we do not transfer your data to third parties. The telemedia providers of the respective social networks generally transfer your data to affiliated companies, service providers and partner companies worldwide. You can find more information in the privacy policy of the respective social network.
Information on the respective third-party providers
Use of our Facebook page
We maintain a company page on the social media portal Facebook (hereinafter Facebook page), a web service of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter Facebook), at the Internet address https://www.facebook.com/storecamb/.
The purpose of the Facebook page is to present the company, to enable interaction between us and our users and to advertise our support services and job vacancies.
Processed data, legal basis, storage periods: see above Use of our social media profiles.
Facebook is jointly responsible with us under data protection law in accordance with Art. 26 GDPR.
Facebook privacy policy: https://de-de.facebook.com/privacy/policy.
Use of our Instagram profile
We maintain a profile on the social media portal Instagram, a web service of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter referred to as Instagram) at the Internet address https://www.instagram.com/cam_b.photo.
The purpose of the Instagram profile is the presentation of the company as well as the interaction between us and our users.
Processed data, legal basis, storage periods: see above Use of our social media profiles.
Instagram is jointly responsible with us for data protection pursuant to Art. 26 GDPR.
Instagram privacy policy: https://privacycenter.instagram.com/policy.
Use of our YouTube channel
We maintain a video channel on YouTube, a streaming service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter Google Ireland), at the Internet address https://www.youtube.com/@cam_b_photo.
The purpose of the YouTube channel is the presentation of the company and interaction between us and our users.
Processed data, legal basis, storage periods: see above Use of our social media profiles.
Google Ireland is jointly responsible with us for data protection pursuant to Art. 26 GDPR.
Privacy policy of Google Ireland: https://policies.google.com/privacy?hl=de.
Use of our TikTok channel
We maintain a video channel on TikTok, a streaming service of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (hereinafter referred to as TikTok Ireland) at the Internet address https://www.tiktok.com/@cam_b.photo.
The purpose of the TikTok channel is the presentation of the company as well as the interaction between us and our users.
Processed data, legal basis, storage periods: see above Use of our social media profiles.
TikTok Ireland is jointly responsible with us under data protection law in accordance with Art. 26 GDPR.
Privacy policy of TikTok Ireland: https://www.tiktok.com/legal/page/eea/privacy-policy/de.
5. Existence of suitable guarantees
Pseudonymization
Insofar as we collect usage data, we always store it under pseudonyms (in the case of cookies, for example, via a unique session key). We do not merge pseudonymous data with data about the bearer of the pseudonym (such as inventory data).
Use of encryption technologies
We use the SSL security system (Secure Socket Layer) for data transfer between your computer or mobile device and our server. This technology is designed to protect your data from being read by unauthorized third parties and offers a very high standard of security. You can recognize that your data is transmitted in encrypted form by the closed display of a key or lock symbol in the lower status bar of your browser.
6. recipients and further processing
Recipients of personal data in the EU
We transmit your data to the following companies:
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
The purpose of the data transfer is the provision of shipping services.
Recipients of personal data in third countries
The provider does not transfer any personal data to recipients outside the EU.
Further processing for other purposes
Unless otherwise stated above, your data will not be passed on to third parties and will not be processed for purposes other than those stated.
7. Rights of data subjects
You have the right:
- in accordance with Article 7(3) GDPR, to withdraw your consent once given to us at any time. As a result, we may no longer continue the data processing based on this consent in the future;
- to request information about your personal data processed by us in accordance with Article 15 GDPR. In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;
- in accordance with Article 16 GDPR, to demand the immediate rectification of incorrect or incomplete personal data stored by us
- in accordance with Article 17 GDPR, to demand the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims
- in accordance with Article 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Article 21 GDPR
- in accordance with Article 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller; and
- to lodge a complaint with a supervisory authority in accordance with Article 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
Right to object
If your personal data is processed on the basis of legitimate interests in accordance with Article 6, paragraph 1, sentence 1, lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, provided that there are reasons for this arising from your particular situation.
To exercise this right to object, as well as your rights under Articles 15, 16, 17, and 18 of the GDPR, simply leave a message by phone, send an email to datenschutz@cam-b.de, or use our Privacy Center.
Datenschutzerklärung cam-b.store EN Rev. 006/07.04.26
