Privacy policy
1. Scope of Application
This privacy policy applies exclusively to business relationships. Our online store and services are intended solely for business customers (B2B) within the meaning of § 14 BGB and Article 2(2)(c) of the GDPR. We do not process personal data of consumers (private individuals).
2. General Information
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obligated to provide your data. Failure to provide the data will not have any consequences.
"Personal data" refers to any information relating to an identified or identifiable natural person.
3. Server Log Files
You may visit our website without disclosing personal information. Every time you access our site, your browser transmits usage data, which is recorded in server log files. These may include: the page visited, date and time of access, IP address, amount of data transferred, and the requesting provider.
This processing is based on Article 6(1)(f) GDPR and serves our legitimate interest in ensuring a stable and secure website experience.
Your data may be transferred to third countries outside the EU, including Canada and the USA. Canada is subject to an adequacy decision by the European Commission. For the USA, an adequacy decision under the Trans-Atlantic Data Privacy Framework (TADPF) is in place. However, Shopify is not currently certified under TADPF. Data transfers are therefore based on contractual safeguards equivalent to the EU Standard Contractual Clauses.
4. Contacting Us
Data Controller:
Jasmin Nasser e.Kfr.
Vahrenwalder Straße 269 A
30179 Hanover
Germany
Phone: +49 1577 3889957
Email: orders@piecelypuzzles.com
5. Contact via Email
If you contact us as a business customer via email, we will collect your contact data (name, email address, message content) only to the extent provided by you. Processing is carried out solely for the purpose of responding to your inquiry.
If your inquiry relates to pre-contractual matters or an existing contract, the processing is based on Article 6(1)(b) GDPR.
Otherwise, it is based on Article 6(1)(f) GDPR, representing our legitimate interest in responding to your message. You may object to this processing at any time on grounds relating to your particular situation.
Your email address will only be used to respond to your inquiry. After processing, your data will be deleted in accordance with applicable legal retention periods unless further use has been consented to.
6. Order Processing
We collect and process your personal data only to the extent necessary for processing your order and any related inquiries. Providing your data is required to conclude a contract. Without it, a contract cannot be established.
Data may be shared with service providers such as:
shipping carriers, IT service providers, paymen processors, fulfillment and logistics partners.
All transfers comply with legal requirements and are restricted to the minimum necessary.
Transfers may occur to countries outside the EU, including Canada and the USA, based on contractual safeguards comparable to the EU Standard Contractual Clauses.
7. Email Marketing to Business Customers
We use your email address, obtained in the course of an existing business relationship, to send marketing communications about our own products and services (e.g., product updates, special offers).
This is done in accordance with § 7(3) of the German Act Against Unfair Competition (UWG) and Article 6(1)(f) GDPR, based on our legitimate interest in B2B direct marketing.
You may unsubscribe at any time by using the link provided in every email or by contacting us directly. Upon receipt of your objection, we will stop all marketing communications.
8. Shipping Notifications
With your explicit consent during checkout, we may share your email address with the shipping provider to notify you of delivery status. This processing is based on Article 6(1)(a) GDPR. You can revoke this consent at any time without affecting the legality of previous processing.
9. Inventory Management
We use an external inventory system to process orders. Your order data is transmitted to:
Billbee GmbH
Arolser Str. 10
34477 Twistetal
Germany
Processing is based on Article 6(1)(b) GDPR to fulfill our contractual obligations.
10. Cookies
Our website uses cookies—small text files stored on your device. Cookies help recognize your browser and improve functionality and user experience.
You can manage or disable cookies in your browser settings:
Technically necessary cookies are used to enable essential functions such as session recognition and navigation. These are processed in accordance with § 25(2) TDDDG and Article 6(1)(f) GDPR.
You have the right to object to processing at any time if it concerns your particular situation.
11. Google Fonts
We use Google Fonts (Google Ireland Ltd., Dublin, Ireland) to ensure uniform text rendering. When accessing our site, your browser connects to Google servers and may transmit your IP address and browser information.
Google is certified under the Trans-Atlantic Data Privacy Framework (TADPF).
Use of Google Fonts is based on your consent in accordance with § 25(1) TDDDG and Article 6(1)(a) GDPR. You may withdraw your consent at any time.
For more details:
Google Privacy Policy
Google Fonts FAQ
12. Data Retention
After a contract is fulfilled, your data will be retained for the duration of legal warranty periods and then stored according to tax and commercial law obligations before deletion, unless further processing is based on your consent.
13. Your Rights
If applicable under GDPR, you have the right to:
Access (Art. 15)
Data portability (Art. 20)
Rectification (Art. 16)
Erasure (Art. 17)
Restriction (Art. 18)
You may also object to processing based on legitimate interest (Art. 21 GDPR) and withdraw consent at any time with future effect.
Please note: As we operate in a B2B context, certain data subject rights may apply only to the extent permitted by law, and not all consumer rights may be relevant.
14. Right to Lodge a Complaint
If you believe your data is being processed unlawfully, you have the right to lodge a complaint with your supervisory authority:
Data Protection Authority of Lower Saxony
Prinzenstraße 5
30159 Hanover
Germany
Phone: +49 511 1204500
Email: poststelle@lfd.niedersachsen.de
15. Right to Object
If your data is processed on the basis of our legitimate interest under Article 6(1)(f) GDPR, you have the right to object at any time, based on reasons arising from your particular situation. We will cease processing unless we can demonstrate compelling legitimate grounds or the data is necessary for legal claims.
Last updated: October 22, 2024