GDPR Data Policy
Introduction
This GDPR Data Policy outlines how [RÄBBIT] ("we", "us", "our") collects, uses, stores, and protects personal data of visitors and users ("you", "your") on our website [www.rabbitakarabbit.com], which is hosted and managed using Squarespace, in compliance with the General Data Protection Regulation (GDPR) and the Bundesdatenschutzgesetz (BDSG).
Data Collection
We may collect the following personal data from you when you visit our website or interact with our services:
Contact Information: Name, email address, and phone number.
Usage Data: IP address, browser type, operating system, referring URLs, pages viewed, and the dates/times of access.
Communication Data: Information you provide when you contact us via email, social media, or through the website.
Transaction Data: When you purchase merchandise, we collect billing information, shipping address, payment details, and transaction history.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
Consent: You have given clear consent for us to process your personal data for specific purposes.
Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
Legitimate Interests: Processing is necessary for our legitimate interests, provided your interests and fundamental rights do not override those interests.
Use of Data
We may use your personal data for the following purposes:
To provide and manage our services, including responding to your inquiries and fulfilling your requests.
To process and fulfill your merchandise orders, including payment processing and shipping.
To send you updates, newsletters, and promotional materials, if you have opted to receive them.
To improve our website, services, and overall user experience through analysis of usage data.
To comply with legal obligations and protect our rights and interests.
External Links and Embedded Content
Our website includes external links and embedded content from third-party platformsand other websites, including SoundCloud, Spotify, YouTube, Instagram, Threads, and Google Maps. These third-party platforms and websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content. We do not control these third-party services and websites and are not responsible for their privacy practices.
When you click on these links or interact with embedded content, you will be subject to the privacy policies of the respective third-party platforms and websites. We recommend reviewing the privacy policies of these platforms and websites to understand how they collect and use your data:
Data Sharing
We do not share your personal data with third parties except in the following circumstances:
Service Providers: We may share your data with trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you, provided they agree to keep your data confidential and use it only for the agreed-upon purposes.
Payment Processors: We share your transaction data with payment processors to facilitate payments for merchandise orders.
Shipping Companies: We share your shipping information with logistics providers to deliver merchandise orders.
Legal Requirements: We may disclose your data if required to do so by law or in response to valid requests by public authorities.
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred to the acquiring entity.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting requirements. When we no longer need your personal data, we will securely delete or anonymize it.
Your Rights
Under the GDPR and BDSG, you have the following rights regarding your personal data:
Access: You have the right to request access to your personal data and obtain a copy of it.
Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
Erasure: You have the right to request deletion of your personal data under certain conditions.
Restriction: You have the right to request restriction of processing of your personal data under certain conditions.
Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
Objection: You have the right to object to the processing of your personal data based on legitimate interests or direct marketing purposes.
Complaint: You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates the GDPR or BDSG.
To exercise any of these rights, please contact us at [rabbit.with.some.habits@gmail.com].
Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure servers, and access controls. Our website is hosted on Squarespace, which also implements security measures to protect your data. You can learn more about Squarespace's data protection practices by visiting the Squarespace Privacy Policy.
Changes to This Policy
We may update this GDPR Data Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on our website with the updated effective date.
Contact Us
If you have any questions or concerns about this GDPR Data Policy or our data practices, please contact us at:
[RÄBBIT]
[rabbit.with.some.habits@gmail.com]
[+4917663306989]
Effective Date: [15.May.2024]