This Privacy Policy describes how webandits.eu (the "Website") collects, uses and discloses your Personal Information when you visit or make a purchase from the Website, or make purchases by phone, email or in the Shop. WE BANDITS GmbH and Sophie Pollak e.U. ("we"), Neubaugasse 36, 1070 Vienna, Austria (e-mail: support[at]webandits.eu) are responsible for processing your data.

1. Collecting personal data

1.1 Legal basis

Pursuant to the General Data Protection Regulation ("GDPR"), if you are a resident of the European Economic Area ("EEA"), we process your personal data in accordance with the following lawful bases: 

• Your consent according to Art 6 Abs 1 lit a); 
• The fulfillment of the contract between you and us as the responsible party according to Art 6 Abs 1 lit b) 
• To comply with our legal obligations under Art 6 para 1 lit c); 
• For our legitimate interests, unless your interests or fundamental rights and freedoms override. 

1.2 Collecting personal data 

When you visit the Website, we collect certain information about the device you are using, your interaction with our Website, and information necessary to process your purchases and interests. We may also collect additional information when you contact our customer service. In this Privacy Policy, we refer to any information that can uniquely identify an individual (including the information listed below) as "Personal Information." See the list below for more information about what Personal Information we collect and why.

We use your Personal Information to provide you with our services, which include: offering products for sale, processing payments, shipping and fulfilling your order, and keeping you informed about new products, services and offers from us.

Information about your device

• Categories of Personal Information Collected: Web browser version, IP address, time zone, cookie information, what web pages or products you view, search terms, and how you interact with the website. 
• Purpose of collection: to load the website appropriately for you and to perform analysis on the use of the website in order to optimize our website. 
• Source of collection: Collected automatically when you access our website, using cookies, log files, web beacons, tags or pixels. 
• Disclosure for business purposes: we share this data with, among others, our processor Shopify, which provides the service. 
• Legal basis: safeguarding the legitimate interests of the responsible parties.

Information about your order

• Categories of Personal Information collected: Name, billing address, shipping address, payment information, clothing or shoe size, email address and phone number. 
• Purpose of processing: To provide you with products or services to fulfill our contract, to process your payment information, to arrange for shipment and provide you with invoices and/or order confirmations, to communicate with you, to check orders for potential risks or fraud, and, if consistent with the preferences you have provided, to provide you with information or advertising regarding our products or services. If a product is not available, you have the option to be notified of its availability by providing your email address. 
• Source of collection: provided by you and therefore collected directly. If you do not provide us with your data, we can not process your order. 
• Disclosure for business purposes: we share this data with our platform operator Shopify, our logistics center H.S.FASHION logistics GmbH, the courier service DHL Paket GmbH, the payment service providers, and our external accounting and tax consulting services 
• Legal basis: fulfillment of the contract between you and us as the responsible party as well as our legitimate interest for a smooth ordering process and in sending advertising and your consent to be notified of availability and finally the fulfillment of our legal obligation for proper accounting etc. 

Data processing for the purpose of customer service: 

• Categories of Personal Information Collected: Name, email address, phone number, shipping address, billing address or any other Personal Information you disclose to us. 
• Purpose of the collection: customer service. 
• Source of the collection: given by you. 
• Disclosure for business purposes: mainly internally, if necessary for the fulfillment of the contract then with our logistics center H.S.FASHION logistics GmbH, the courier service DHL Paket GmbH, the payment service providers. 
• Legal basis: fulfillment of the contract between you and us as the responsible party and, if necessary, to protect the legitimate interests of the responsible parties. 

1.3 Retention

When you place an order through the website, we will retain your Personal Information for our records for as long as is legally or contractually necessary. Please note that we cannot delete your data if we have a legal obligation to retain it. Unless you ask us to delete that data. For more information about your right to erasure, please see the "Your Rights" section below. 

1.4. Minors

The website is not intended for persons under the age of 14. We do not intentionally collect Personal Information from children. If you are a parent or guardian and believe that your child has provided us with Personal Information, please contact us at the address below to request deletion.

2. Disclosure of Personal Information

2.1 Service provider and legal obligations 

We share your personal data with service providers (including as processors) to help us provide our services and fulfill our contracts with you, as described above. The use of processors in a third country requires an adequacy decision by the Commission or appropriate safeguards under Art. 46 GDPR. 

For example:

Technical support

• We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. Shopify is a platform provider located in Canada (offices at 151 O'Connor Street, Ground floor, Ottawa, ON, K2P 2L8). The Commission has confirmed that Canada is a safe third country and therefore personal data can be transferred from EU Member States and European Economic Area Member States to this third country without any further requirements. 
• The service providers we commission in the area of IT support could also have access to personal data of our customers.

Partner in logistics 

• Your order will be packed and shipped by H.S.FASHION logistics GmbH. You can view the privacy policy of H.S.FASHION logistics GmbH here: https://fashion-logistics.de/datenschutz. This is a transport service provider that processes name and address on our behalf.
• Your order will usually be delivered by DHL Paket GmbH. You can view the privacy policy of DHL here: https://www.dhl.de/de/toolbar/footer/datenschutz.html. 

Payment service provider

For the processing of your payment, we work with various payment service providers. You can view these at any time on the sub-page “payments”.

To fulfill a legal obligation 

We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights. 

2.2 Personalized advertising

If you give us your consent, we will use your Personal Information to send you targeted advertising or marketing communications that we believe may be of interest to you. You can view your current consent at: https://webandits.eu/pages/cookies. There you also have the possibility to check and adjust your cookie consent at any time.

Google

Provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

We use the following services from Google:

• We use Google Analytics to understand how our customers use the website. You can also disable Google Analytics here: https://tools.google.com/dlpage/gaoptout. 
• We use Google Ads Conversion Tracking to statistically analyze and adjust the advertising we serve via Google Ads for market research purposes. 
• We use Google Ads remarketing tags to show you relevant ads in Google search results and on third-party websites based on your behavior on our website.

Privacy Policy: https://policies.google.com/privacy?hl=aten. 

Privacy policy regarding advertising and Google:

https://policies.google.com/technologies/ads

Facebook

Anbieter: Facebook Ireland Limited, 4 Grand Canal Quare, Dublin 2, Irland

We use the Facebook Pixel to statistically analyze and adjust the advertising we serve on Facebook for market research purposes. 

Privacy Policy: https://www.facebook.com/privacy/explanation. 

For more information on how targeted advertising works, you can visit the Network Advertising Initiative ("NAI") educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising: 

• FACEBOOK - https://www.facebook.com/settings/?tab=ads 
• GOOGLE - https://www.google.com/settings/ads/anonymous 

In addition, you may opt out of some of these services by visiting the Digital Advertising Alliance opt-out portal at http://optout.aboutads.info/.

2.3 Newsletter 

Double opt-in and logging: The registration for our newsletter takes place in a so-called double opt-in process. This means that you will receive an e-mail after registration in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other e-mail addresses. The registrations to the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Changes to your data stored at Sendinblue are also logged.

The dispatch of the newsletter takes place by means of SendInBlue.

SendInBlue privacy policy: https://de.sendinblue.com/legal/privacypolicy/

2.4 Automated decision making 

Neither we nor Shopify perform fully automated decision making (profiling according to Art. 22 of the GDPR), however Shopify reserves the right to automatically block a payment card number or IP address after a risk and fraud screening after a certain number of failed payment attempts; this is only done for a short period of time.

3. Your rights

GDPR

If you are located in the EEA, you have the right to access your Personal Information that we hold about you, transfer it to a new service, and request that your Personal Information be corrected, updated, or deleted. If you wish to exercise these rights, please contact us using the contact information below:

• by e-mail to: support[at]webandits.eu 
• by mail to: WE BANDITS GmbH, Neubaugasse 36, 1070 Vienna, Austria 

If you are not satisfied with our response to your complaint, or if you believe that we are not processing your data in accordance with data protection law, please contact us first. You also have the right to lodge a complaint with the competent data protection authority. 

4. Cookies

A cookie is a small file of information that is downloaded to your computer or mobile device when you visit our website. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies enhance your browsing experience by allowing the website to remember your actions and preferences (for example, login and region selection). This means you don't have to re-enter this information each time you return to the website or browse from one web page to another. Cookies also provide information about how people use the website, such as whether it is their first visit or if they are a frequent visitor.

We use the following cookies to optimize your experience on our website and provide our services.

Necessary

Necessary cookies help make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Marketing 

Marketing cookies are used to follow visitors on websites. The intention is to show ads that are relevant and appealing to the individual user and therefore more valuable to publishers and advertising third parties.

Not classified

Unclassified cookies are cookies that we are currently trying to classify, along with providers of individual cookies.

Do not track

Please note that Shopify may not change data collection and usage practices if such a signal is detected by your browser, as there is no consistent industry understanding of how to respond to "Do Not Track" signals.

5. Contact

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us:

• by e-mail to: support[at]webandits.eu 
• by mail to: WE BANDITS GmbH, Neubaugasse 36, 1070 Vienna, Austria 

6. Changes 

We reserve the right to update this privacy policy from time to time for operational or legal reasons. Therefore, we recommend that you check this website from time to time to stay informed. The changes are effective as of publication on this page. 

Last updated: 01.03.2021