Data Protection
When you visit this website, personal data may be collected.
The website operator is responsible for data processing. This data is collected either through your input or automatically. Some data is used to ensure the smooth operation of the site, while others may be used to analyze your user behavior. You have the right at any time to obtain information about the origin, recipient, and purpose of your stored personal data. You also have the right to correction, deletion, or restriction of the processing of this data. Furthermore, you can revoke your consent to data processing at any time for the future and have the right to lodge a complaint with the relevant supervisory authority. When visiting this website, your browsing behavior may be statistically evaluated. For more detailed information, please refer to the Privacy Policy.
Hosting
Strato AG from Berlin is our provider for the hosting services of our website. When you visit the site, log files, including your IP address, are collected.
Further details can be found in Strato’s privacy policy: https://www.strato.de/datenschutz/. The processing of data is based on Art. 6 para.
1 lit. f GDPR, as we have a legitimate interest in ensuring a reliable presentation of our website. If consent is requested, processing will be carried out exclusively on the basis of Article 6(1)(a) GDPR. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be revoked at any time. To ensure the protection of your data, we have entered into a Data Processing Agreement (DPA) that ensures the personal data of our website visitors is processed only in accordance with our instructions and in compliance with the GDPR.
General Information and Mandatory Disclosures
- Data Protection and Information on the Responsible Party
The operators of these pages take the protection of your personal data very seriously and handle it with confidentiality. All personal data you provide to us will be processed in accordance with the legal data protection regulations. In this privacy policy, we inform you about the type, scope, and purpose of the collection and use of personal data. Additionally, we inform you about your rights under the General Data Protection Regulation (GDPR). The controller in charge of data processing on this website is , Olivia Krzyzowski, Nacker Str.7, 55234 Wendelsheim, Germany, phone: 01714983393, e-mail: info@kiddoz.de.
- Retention Period
If no specific retention period is indicated, your personal data will remain with us until the reason for processing no longer applies. If you request the deletion of your data or withdraw your consent for processing, your data will be deleted, unless there are other legally permissible reasons for its retention (e.g., tax or commercial retention periods). If such reasons exist, your data will be deleted after the retention period has expired.
- General Information on the Legal Basis for Data Processing on This Website
We process your personal data based on your consent, which you can withdraw at any time. If it is necessary for a contract or pre-contractual measures, we process your data based on Art. 6 Para. 1 lit. b GDPR.
1 lit. b GDPR. We also process your data when it is necessary to fulfill a legal obligation (Art. 6 Para. 1 lit. c GDPR).
Finally, we process your data based on our legitimate interests (Art. 6 Para. 1 lit. f GDPR).
Furthermore, data processing when transferring data to third countries is carried out based on Art. 49 Para.
1 lit. a of the GDPR, as well as with consent to the storage of cookies or access to information based on Section 25 Para.
1 TTDSG.
- Data Transfer to the USA or Other Third Countries
The tools we use are provided by companies based in the USA or other third countries that do not offer the same level of data protection as the EU. When we activate these tools, your personal data may be transferred to and processed in these countries. We must inform you that U.S. authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data located on U.S. servers for surveillance purposes. Unfortunately, we have no control over this.
Revocation of Your Consent to Data Processing
You have the right to withdraw your explicit consent at any time. This will not affect the lawfulness of the processing of your data that has occurred up to that point. Without your consent, many processing operations are not possible.
Right to Object to Data Collection in Specific Cases and Against Direct Marketing (Article 21 GDPR)
You have the right to object, for reasons arising from your particular situation, to the processing of your personal data at any time when the processing is based on Article 6 1 lit. e GDPR. This also applies to profiling based on these provisions.. The specific legal basis for each processing activity can be found in this privacy policy. If you object, we will no longer process your affected personal data, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims. You also have the right to object at any time to the processing of your personal data for the purposes of direct marketing; this also applies to profiling insofar as it is related to such direct marketing.
If you object, your personal data will no longer be used for direct marketing purposes.
Right to lodge a complaint with the competent supervisory authority
Affected individuals can file a complaint with a supervisory authority in the event of violations of the GDPR, particularly at the location of their habitual residence, place of work, or the place of the alleged infringement. In addition, further administrative or judicial remedies may be sought.
Right to Data Portability
You can request that your personal data, which we automatically process based on your consent or for the fulfillment of a contract, be provided to you in a commonly used, machine-readable format or be directly transferred to another controller. To the extent that this is technically feasible.
Information, Deletion, and Correction
You have the right to request information about your stored personal data free of charge. Additionally, you have the right to have incorrect data corrected and to have your stored personal data deleted. If you have any questions on this topic, please feel free to contact us at any time.
You can request that the data controller delete your personal data immediately. The data controller is required to do so if one of the following reasons applies: (a) The data are no longer necessary for the purposes for which they were collected; (b) You withdraw your consent to the processing, and there is no other legal basis for processing; (c) You object to the processing, and there are no overriding legitimate grounds; (d) The data has been processed unlawfully; (e) The deletion is required to comply with a legal obligation under Union law or the law of Member States; or (f) The data was collected in relation to services of the information society as referred to in Article 8. 1 GDPR The controller must, taking into account available technology and implementation costs, take reasonable steps, including technical measures, to inform other data controllers that you have requested the deletion of all links to, or copies or replications of, the personal data in question, if they have made the data publicly available. In some cases, however, there is no right to deletion, for example, if the processing is necessary: (a) To exercise the right of freedom of expression and information; (b) To comply with a legal obligation; (c) To act in the public interest in the field of public health; (d) To fulfill purposes in the public interest such as archiving, scientific or historical research, or statistical purposes, or (e) To assert, exercise, or defend legal claims.
Right to Restriction of Processing
You have the right to request the restriction of processing your personal data if you dispute the accuracy of your data stored with us, if the processing of your personal data has been unlawful, if we no longer need your personal data but you need it for the establishment, exercise, or defense of legal claims, or if you have objected to processing under Article 21(1). GDPR. If you request the restriction of processing your personal data, such data may only be processed – apart from storage – with your consent, for the establishment, exercise, or defense of legal claims, to protect the rights of another natural or legal person, or for reasons of substantial public interest of the European Union or a member state. You can contact us at any time to exercise your right to restrict the processing of your personal data.
SSL (Secure Sockets Layer) and TLS (Transport Layer Security)
To protect your data and transmit confidential information, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the browser’s address bar changing from “http://” to “https://”, as well as the lock symbol in your browser’s address bar. As SSL or TLS encryption is enabled, data transmitted to us cannot be read by third parties.
Objection to advertising emails
Hereby, we explicitly object to the use of the contact details published under the legal disclosure obligation for the purpose of sending unsolicited advertising and informational materials. Should unsolicited advertising be sent via email, the operators of the website reserve the right to take legal action.
Data Collection on This Website
- Data Collection During Orders
We need your personal data to offer you our services as a sales platform and to fulfill the obligations arising from the online purchase agreements concluded with you. To do this, we need to collect and store the following data:
1. First and last name
2. Address, including any different delivery address
3. Phone number
4. Email address
5. Payment method
6. Date and time of the order
7. Product details
8. IP address from which the order was placed Since the contract fulfillment occurs directly between the users, we need to pass this data to the respective sellers as contract partners so they can fulfill their obligations under the contract. The sharing of data is only necessary for the performance of the contractual relationship and the delivery of goods. The data will be deleted once it is no longer needed for the purpose for which it was collected. The legal basis for processing the data is Article 6(1) of the GDPR. 1 lit. .
- Data Collection During Payment
Users can use the payment service PayPal for payment. PayPal is responsible for the processing of personal data associated with it, and users can find more information in PayPal’s privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full. If the payment method “prepayment” is chosen, we will store the seller’s account details (account holder’s name, IBAN, BIC) to forward them to the buyer. This is based on the fulfillment of a contract (Art. 6 para. 1 lit. b GDPR). The data will be processed until the purpose of the processing is fulfilled or there is no longer a legal obligation to do so.
- Data Collection When Creating a User Account
Our online shop offers you the opportunity to set up a user account.nto einzurichten. This allows you to access your stored data for current and future orders without having to re-enter it. To do this, you provide your personal data (first and last name, billing and delivery address, email address, phone number, and a custom password) through an input form. In accordance with Art. 6 para. 1 lit. In accordance with Art. 6 para. 1 lit. b GDPR, these data are used for processing pre-contractual measures and for fulfilling contracts that you enter into with us. Your data will be deleted as soon as they are no longer required to fulfill these purposes. As an account holder, you can request the deletion of your account at any time or update your data in the user area. If you delete your user account, your data will also be deleted. Für weitere Fragen zu Ihrem Benutzerkonto wenden Sie sich bitte an info@kiddoz.de .
Seller account
At Kiddoz, you can register as a seller of goods. We collect and store the following data:
(1) Name of the company
(2) First and last name of the contact person
(3) Address
(4) Email address
(5) Phone number
(6) Company management
(7) VAT (Value Added Tax) number IDNr. of the company
(8) Tax office of the company
(9) Commercial register of the company
(10) Local court of the company
(13) Brand or trademark name
(14) Bank account details
(15) PayPal email address
(16) LUCID-Number
We process this data to create a seller account for you, in order to carry out pre-contractual measures and to enter into and fulfill contracts. The legal basis for processing the data is Article 6 (1) of the GDPR. Your data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. You can delete your seller account at any time and update your stored data. Please contact us at info@kiddoz.de.
Application form for sellers
The processing of your data entered in the application form is based on a legitimate interest (Art. 6 (1) (f) GDPR). This form is intended to provide you with an easy application process. Your information will be stored for processing the application, verifying your qualifications, and for any potential follow-up questions. Providing your personal data is voluntary, but we can only process your application if you provide all the information listed under ‘Seller Account’ points 1-16. Additionally, we store your IP address to prevent unwanted spam messages. This data is collected using the WordPress plugin ‘Forminator,’ but no data is sent to the plugin developer or their servers.
Cookies
Our websites use cookies. These are small data packages that do not harm your device. They can be stored on your device temporarily during a session (session cookies) or for an extended period (persistent cookies). Session cookies are automatically deleted after your visit, while persistent cookies remain on your device until you manually delete them or your web browser removes them automatically. Cookies may originate from us (first-party cookies) or from third parties (third-party cookies).
These allow the integration of certain third-party services into our websites. Cookies serve various functions; many are technically necessary to enable certain page features (such as the shopping cart). Other cookies are used for analysis or advertising purposes. “Cookies that are necessary for the technical execution of electronic communication processes, or for providing certain features you request (e.g., shopping cart), or for optimizing our website, are processed based on Art. 6 para. (1) “GDPR (General Data Protection Regulation), unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of their services. If consent for the storage of cookies has been requested, the processing is carried out exclusively on the basis of this consent (Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG); the consent can be revoked at any time. You can configure your browser to notify you about the setting of cookies and to refuse the acceptance of cookies or to delete them automatically. You can find out which cookies and services are used on this website in our privacy policy.
Social Media
Functions of the Twitter service are integrated into this website, provided by Twitter International Company, located at One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. When the social media element is active, a connection between your device and the Twitter server is established, allowing Twitter to receive information about your visit. By using Twitter and the ‘Re-Tweet’ feature, the websites you visit will be linked to your Twitter account and shared with other users. We have no knowledge of the content of the data transmitted and how it is used by Twitter. Further information can be found in Twitter’s privacy policy at https://twitter.com/de/privacy. The use of the service is based on your consent in accordance with Art. 6 para.
(1) a GDPR and § 25 TTDSG. The consent can be revoked at any time.
If no consent has been obtained, the use of the service is based on our legitimate interest in achieving as comprehensive visibility as possible on social media. The data transfer to the USA is based on the standard contractual clauses of the EU Commission (https://gdpr.twitter.com/en/controller-to-controller-transfers.html). You can change your privacy settings on Twitter in your account settings at https://twitter.com/account/settings.
Features of the Instagram service are integrated into our website, provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When the social media element is active, a direct connection is established between your device and the Instagram server. Instagram receives information about your visit to this website. If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button.
This allows Instagram to associate your visit to this website with your user account. We would like to point out that we have no knowledge of the content of the transmitted data and how Instagram uses it. Where consent has been obtained, the use of the aforementioned service is based on Art. 6 Para. 1 lit. a GDPR and § 25 TTDSG. The consent can be revoked at any time. Where no consent has been obtained, the use of the service is based on our legitimate interest in achieving the widest possible visibility on social media. We and Meta Platforms Ireland Limited are jointly responsible for data processing when, using the tools described here, personal data is collected on our website and forwarded to Facebook or Instagram. The joint responsibility is limited solely to the collection of data and its transfer to Facebook or Instagram.
The processing that occurs by Facebook or Instagram after the data has been transferred is not part of the joint responsibility. Our joint responsibilities have been documented in a joint processing agreement. Data transfers to the USA are based on the standard contractual clauses of the EU Commission. Further information can be found in Instagram’s privacy policy. We are responsible for providing the privacy information when using the Facebook or Instagram tools and for the data protection-compliant implementation of the tool on our website.
Facebook is responsible for the data security of Facebook or Instagram products. You can assert your rights (e.g., requests for information) regarding data processed by Facebook or Instagram directly with Facebook. If you assert your rights with us, we are obligated to forward them to Facebook.
We use the social media feature from Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland, on our website. When you visit our page, your browser establishes a direct connection to Pinterest’s servers, which transmits various data to Pinterest. This may include your IP address, the address of the page that also features Pinterest functions, your browser settings and data, the date and time of your request, Pinterest usage, and cookies. This service is used based on your consent (if obtained) or on our legitimate interest in having the broadest visibility on social media. For more information about the purpose, scope, and further processing and use of data by Pinterest, as well as your rights and options to protect your privacy, please refer to Pinterest’s privacy policy. https://policy.pinterest.com/de/privacy-policy.
Plugins and Tools
Google Fonts (local Hosting)
To ensure a consistent appearance of fonts, this site uses Google Fonts, which are directly installed on your device. There is no connection to Google’s servers. Further information on Google Fonts and their privacy policy can be found on the following pages: https://developers.google.com/fonts/faq and https://policies.google.com/privacy?hl=de.
