data protection
1) Information about the collection of personal data and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller for data processing on this website in the sense of the General Data Protection Regulation (GDPR) is JIMI PALAIS, Inh. Dennis Garbe
, Eiffestraße 598, 20537 Hamburg, Germany, Tel.: +49 49 740 724 38, E-mail: info@jimipalais.com. The controller for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.
2) Data collection when visiting our website
When using our website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. No disclosure or other use of the data takes place. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
3) Hosting & Content Delivery Network
3.1 Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. Within the scope of the aforementioned services of Shopify, data may also be transmitted to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. as part of further processing on behalf. In the event of data being transferred to Shopify Inc. in Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than those of Shopify mentioned above only takes place within the scope communicated below.
3.2 AWS-CloudFront (Amazon)
On our website, we use the Content Delivery Network ("CDN") "AWS CloudFront" from the service provider "Amazon" (Amazon EU S.a. r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg).
A Content Delivery Network is an online service that helps deliver large media files (such as graphics, page content, or scripts) through a network of regionally distributed and internet-connected servers. The use of Amazon's Content Delivery Network helps us optimize the loading speeds of our website.
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a secure and efficient provision, as well as improvement of the stability and functionality of our website.
Further information can be found in Amazon's privacy policy at https://docs.aws.amazon.com/de_de/AmazonCloudFront/latest/DeveloperGuide/data-protection-summary.html
3.3 Cloudflare
On our website, we use a so-called Content Delivery Network ("CDN") from the technology service provider Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA ("Cloudflare"). A Content Delivery Network is an online service that helps deliver large media files (such as graphics, page content, or scripts) through a network of regionally distributed and internet-connected servers. The use of Cloudflare's Content Delivery Network helps us optimize the loading speeds of our website.
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a secure and efficient provision, as well as improvement of the stability and functionality of our website.
We have concluded a data processing agreement with Cloudflare (Data Processing Addendum, available at https://www.cloudflare.com/media/pdf/cloudflare-customer-dpa.pdf) which obliges Cloudflare to protect the data of our site visitors and not to pass it on to third parties. For the transfer of data from the EU to the USA, Cloudflare relies on so-called standard contractual clauses of the European Commission, which are intended to ensure compliance with European data protection standards in the USA.
Further information can be found in Cloudflare's privacy policy at: https://www.cloudflare.com/privacypolicy/
3.4 IONOS
On our website, we use a so-called Content Delivery Network ("CDN") from &1 IONOS Internet SE, Elgendorfer Str. 57, 56410 Montabaur ("IONOS"). A Content Delivery Network is an online service that helps deliver large media files (such as graphics, page content, or scripts) through a network of regionally distributed and internet-connected servers. The use of IONOS's Content Delivery Network helps us optimize the loading speeds of our website.
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a secure and efficient provision, as well as improvement of the stability and functionality of our website.
We have concluded a data processing agreement with IONOS, which obliges IONOS to protect the data of our site visitors and not to pass it on to third parties. Further information can be found in IONOS's privacy policy at: https://www.ionos.de/terms-gtc/terms-privacy
4) Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), others remain on your device for a longer period and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of the cookie settings of your web browser.
If individual cookies used by us also process personal data, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of a given consent, or in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.
Please note that if cookies are not accepted, the functionality of our website may be limited.
5) Contacting us
5.1 Review invitations by Trusted Shops
If you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR during or after your order, we will transmit the order data required for sending a review invitation to Trusted Shops SE, Subbelrather Str. 15c, 50823 Cologne.
The transmitted data includes, in particular, your e-mail address, your order number, the order date and – if product reviews are enabled – information about the purchased products.
The data transfer takes place exclusively for the purpose of sending a review invitation and the performance and publication of merchant and, if applicable, product reviews via Trusted Shops.
The legal basis for the processing and transmission of your data is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future towards us or towards Trusted Shops SE. The legality of the processing carried out up to the revocation remains unaffected by this.
Further information on data protection at Trusted Shops can be found at:
https://www.trustedshops.de/impressum-datenschutz/
5.2 Zendesk
We use the Zendesk e-mail ticketing system, a customer service platform of Zendesk International Ltd., 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland ("Zendesk") to process customer inquiries. If users of our website send contact inquiries by e-mail, these are stored and organized in the ticketing system to enable chronological processing and improve the service experience. Users can always view the current status of their request using the individually assigned ticket number.
Solely for the organization of inquiries and their processing, personal data, as far as provided in the inquiry, but in any case first name, last name and e-mail address, are collected, transmitted to Zendesk, stored there and read out.
The legal basis for processing this data is our legitimate interest in the efficient design of our customer service, the fastest possible response to your request, and the optimization of our service offering in accordance with Art. 6 para. 1 lit. f GDPR.
We have concluded a data processing agreement with Zendesk, which obliges Zendesk to protect the data of our customers and not to pass it on to third parties.
Personal data may be transferred to servers of Zendesk Inc. in the USA. For such data transfers, Zendesk complies with Binding Corporate Rules (BCR) which have been recognized by the Irish data protection authority as appropriate safeguards for compliance with European data protection standards.
Your data will be deleted after final processing of your request. This is the case when it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no legal retention obligations to the contrary.
Further information on Zendesk's data protection can be found at https://www.zendesk.de/company/customers-partners/privacy-policy/.
5.3 When contacting us (e.g. via contact form or e-mail), personal data is processed - exclusively for the purpose of processing and answering your request and only to the extent necessary for this. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no legal retention obligations to the contrary.
6) Data processing when opening a customer account
In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary if you provide us with this data when opening a customer account. You can find out which data is required for opening an account from the input mask of the corresponding form on our website. You can delete your customer account at any time by sending a message to the controller's address mentioned above. After deleting your customer account, your data will be deleted, provided that all contracts concluded through it have been fully processed, there are no legal retention periods to the contrary, and we no longer have a legitimate interest in continued storage.
7) Comment function
Within the scope of the comment function on this website, in addition to your comment, information on the time of creation of the comment and the commenter name you have chosen will be stored and published on this website. Furthermore, your IP address will be stored for security reasons in order to enable assignment to the author in the event of illegal comments. Your e-mail address will be stored for contacting you if a third party should object to your published content as illegal.
8) Use of customer data for direct marketing
8.1 Subscription to our e-mail newsletter
If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive newsletters when you have explicitly confirmed your consent to receive newsletters by clicking on a verification link sent to the e-mail address provided.
By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. Here, we store your IP address registered by the Internet Service Provider (ISP) as well as the date and time of registration to be able to trace a possible misuse of your e-mail address at a later date. The data collected by us when registering for the newsletter will be used strictly for the intended purpose. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your e-mail address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to further data use that is legally permitted and about which we inform you in this declaration.
8.3 Stock availability notification by e-mail
For temporarily unavailable items, you can sign up to receive stock availability notifications by e-mail. In this case, we will send you a one-time e-mail notification about the availability of the item you have selected. The only mandatory information for sending this notification is your e-mail address. The provision of further data is voluntary and may be used to address you personally. For sending the e-mail, we use the so-called double opt-in procedure, which ensures that you only receive a notification if you have explicitly confirmed your consent by clicking on a verification link sent to the e-mail address provided.
By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. Here, we store your IP address registered by the Internet Service Provider (ISP) as well as the date and time of registration to be able to trace a possible misuse of your e-mail address at a later date. The data collected by us when registering for our e-mail notification service for stock availability will be used strictly for the intended purpose. You can unsubscribe from the availability notifications at any time by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your e-mail address will be immediately deleted from our distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to further data use that is legally permitted and about which we inform you in this declaration.
9) Data processing for order processing
9.1 As far as necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us are passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.
If, based on a corresponding agreement, we owe you updates for goods with digital elements or for digital products, we process the contact data you provided when ordering (name, address, email address) to inform you personally about upcoming updates within the legally prescribed period, using appropriate communication channels (e.g., postal mail or email), in accordance with our legal information obligations under Art. 6 para. 1 lit. c GDPR. Your contact data will be used strictly for the purpose of communicating updates owed by us and processed by us only to the extent necessary for the respective information.
To process your order, we also work with the following service provider(s), who assist us fully or partially in the performance of concluded contracts. Certain personal data will be transferred to these service providers in accordance with the following information.
9.2 The web agency we-site GmbH transfers the simple right of use to the code for the online shop JIMI PALAIS. This simple right of use entitles JIMI PALAIS to use the code for the aforementioned online shop. The right of use is neither time-limited nor geographically restricted. It is expressly stated that the copyright to the code remains with the transferor, we-site GmbH. Any modifications, reproductions, or resales of the code without the express consent of we-site GmbH are prohibited.
In connection with this right of use, JIMI PALAIS ensures compliance with the data protection provisions and practices of the online shop and that all data protection relevant aspects, including the collection, storage, and processing of user data, are in line with applicable data protection laws and regulations. We-site GmbH assumes no liability for data protection breaches arising from the operation or use of the online shop by the customer.
9.3 Use of payment service providers
- Apple Pay
If you choose the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing will be carried out via the "Apple Pay" function of your iOS, watchOS or macOS device by charging a payment card stored in "Apple Pay". Apple Pay uses security features built into the hardware and software of your device to protect your transactions. Therefore, to approve a payment, you must enter a previously defined code and verify it using the "Face ID" or "Touch ID" function of your device.
For the purpose of payment processing, your information provided during the ordering process, along with information about your order, will be transmitted to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before the data is sent to the payment service provider of the payment card stored in Apple Pay for payment execution. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm successful payment.
If personal data is processed during the described transmissions, processing occurs exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
Apple stores anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was successfully completed. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
If you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made via Safari on your Mac, the Mac and the authorization device communicate over an encrypted channel on Apple servers. Apple does not process or store any of this information in a format that can identify you. You can deactivate the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and deactivate "Allow Payments on Mac".
Further information on data protection for Apple Pay can be found at the following internet address: https://support.apple.com/en-us/HT203027
- Google Pay
If you choose the "Google Pay" payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment processing will be carried out via the "Google Pay" application of your mobile device running at least Android 4.4 ("KitKat") and equipped with an NFC function, by charging a payment card stored in Google Pay or a verified payment system there (e.g., PayPal). To authorize a payment via Google Pay exceeding €25, you must first unlock your mobile device using the configured verification method (e.g., facial recognition, password, fingerprint, or pattern).
For the purpose of payment processing, your information provided during the ordering process, along with information about your order, will be transmitted to Google. Google then transmits your payment information stored in Google Pay to the originating website in the form of a uniquely assigned transaction number, which is used to verify a successful payment. This transaction number contains no information about the real payment data of your payment methods stored in Google Pay, but is created and transmitted as a uniquely valid numerical token. In all transactions via Google Pay, Google acts only as an intermediary for processing the payment. The transaction is carried out exclusively between the user and the originating website by debiting the payment method stored in Google Pay.
If personal data is processed during the described transmissions, processing occurs exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
Google reserves the right to collect, store, and evaluate certain transaction-specific information for every transaction made via Google Pay. This includes the date, time, and amount of the transaction, merchant location and description, a description of the goods or services purchased provided by the merchant, photos you have attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction, and, if applicable, the offer associated with the transaction.
According to Google, this processing is carried out exclusively in accordance with Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest in proper accounting, verification of transaction data, and the optimization and maintenance of the Google Pay service.
Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when using other Google services.
The terms of use for Google Pay can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=en
Further information on data protection for Google Pay can be found at the following internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en
- giropay
When paying via "giropay", payment processing is handled by giropay GmbH, An der Welle 4, 60322 Frankfurt/Main, to whom we transmit your information provided during the order process along with information about your order. The transmission of your data takes place in accordance with Art. 6 para. 1 lit. b GDPR exclusively for the purpose of payment processing and only to the extent necessary for this purpose. Further information on the data protection provisions of giropay GmbH can be found at the following internet address: https://www.giropay.de/rechtliches/datenschutzerklaerung
- Klarna
If you choose a Klarna payment service, payment processing will be handled by Klarna Bank AB (publ), https://www.klarna.com/en/, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). To enable payment processing, your personal data (first and last name, street, house number, postal code, city, gender, email address, phone number, and IP address) as well as data related to the order (e.g., invoice amount, items, delivery method) are transmitted to Klarna for identity and credit assessment purposes, provided you have expressly consented to this during the order process in accordance with Art. 6 para. 1 lit. a GDPR. You can see which credit agencies your data may be forwarded to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_gb/credit_rating_agencies
The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. Klarna uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, implementation, or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for contractual payment processing.
Your personal data will be treated in accordance with applicable data protection regulations and as described in Klarna's privacy policy for data subjects residing in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_gb/privacy
or for data subjects residing in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_gb/privacy
respectively.
- PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered - "purchase on account" or "installment payment" via PayPal, we transmit your payment data within the framework of payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transmission takes place in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be transmitted to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check regarding the statistical probability of payment default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. Further data protection information, including about the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/en/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered via the payment service provider Shopify Payments, payment processing is carried out via the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we transmit your information provided during the order process, along with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency, and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. The transmission of your data is exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this. Further information on Shopify Payments' data protection can be found at the following internet address: https://www.shopify.com/legal/privacy.
Data protection information regarding Stripe Payments Europe Ltd. can be found here: https://stripe.com/en/privacy
10) Online Marketing
Facebook Pixel for creating Custom Audiences (with Cookie Consent Tool)
Within our online offering, the so-called "Facebook Pixel" of the social network Facebook, operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook"), is used.
If a user clicks on an advertisement placed by us and displayed on Facebook, an addition is appended to the URL of our linked page by Facebook Pixel. If our page, via Pixel, allows data sharing with Facebook, this URL parameter is written into the user's browser via a cookie that our linked page itself sets. This cookie is then read by Facebook Pixel, enabling the forwarding of data to Facebook.
With the help of the Facebook Pixel, Facebook can, on the one hand, determine the visitors to our online offering as a target group for displaying ads (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel to display Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products, determined based on the visited websites), which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook Pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of users and do not appear annoying. We can further evaluate the effectiveness of Facebook ads for statistical and market research purposes by understanding whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").
The collected data is anonymous to us, meaning it does not allow us to draw conclusions about the identity of the users. However, the data is stored and processed by Facebook, so a connection to the respective user profile is possible, and Facebook can use the data for its own advertising purposes, in accordance with Facebook's data use policy (https://www.facebook.com/about/privacy/). The data can enable Facebook and its partners to display advertisements on and off Facebook.
The data processing associated with the use of the Facebook Pixel only occurs with your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
11) Web Analysis Services
11.1 Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which can be used to analyze website usage.
When using Google Analytics 4, so-called "cookies" are used by default. Cookies are text files that are stored on your device and enable an analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your device, shortened by the last digits, see below) is usually transmitted to a Google server and stored and processed there. This may also involve the transmission of information to the servers of Google LLC, based in the USA, and further processing of the information there.
When using Google Analytics 4, the IP address transmitted by your device when you use the website is always collected and processed in an anonymized manner by default and automatically, so that direct personal identifiability of the collected information is excluded. This automatic anonymization occurs because the IP address transmitted by your device is shortened by Google within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA).
On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports on your website activities or usage behavior, and to provide us with other services related to your website usage and internet usage. The shortened IP address transmitted by your device within Google Analytics 4 is not merged with other Google data. The data collected within Google Analytics 4 is stored for 2 months and then deleted.
Google Analytics 4 also enables, via a special function, the so-called "demographic features," the creation of statistics with statements about the age, gender, and interests of website users based on an evaluation of interest-based advertising and with the involvement of third-party information. This makes it possible to determine and distinguish user groups of the website for the purpose of target-group-optimized marketing measures. However, data collected via "demographic features" cannot be assigned to a specific person and thus not to you personally. This data collected via the "demographic features" function is stored for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies for storing and reading information on the device you use to access the website, will only take place if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. Without your consent, Google Analytics 4 will not be used during your visit to the website. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service via the "Cookie Consent Tool" provided on the website.
In connection with this website, the "UserIDs" function is also used as an extension of Google Analytics 4. By assigning individual UserIDs, we can have cross-device reports compiled by Google (so-called "Cross Device Tracking"). This means that your usage behavior, if you have given your corresponding consent to the use of Google Analytics 4 in accordance with Art. 6 (1) (a) GDPR, can also be analyzed across devices, provided you have set up a personal account by registering on this website and are logged into your personal account on different devices with your relevant login data. The data collected in this way shows, among other things, on which device you first clicked on an advertisement and on which device the corresponding conversion took place.
We have concluded a so-called data processing agreement with Google for our use of Google Analytics 4, which obliges Google to protect the data of our website users and not to disclose it to third parties.
To ensure compliance with the European level of data protection even when data is potentially transferred from the EU or EEA to the USA and further processed there, Google relies on the so-called Standard Contractual Clauses of the European Commission, which we have contractually agreed with Google.
Further legal information on Google Analytics 4, including a copy of the aforementioned Standard Contractual Clauses, can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites
12) Retargeting/ Remarketing/ Recommendation advertising
Google Ads Remarketing
Our website uses the functions of Google Ads Remarketing; with this, we advertise this website in Google search results, as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. Further data processing only takes place if you have agreed with Google that your internet and app browser history will be linked to your Google account and information from your Google account will be used to personalize advertisements you view on the web. If, in this case, you are logged in to Google during your visit to our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to form target groups. In the context of using Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC. in the USA.
Details on the processing initiated by Google Ads Remarketing and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the browser plug-in from Google available at the following link:
https://www.google.com/settings/ads/onweb/
Further information and the privacy policy regarding advertising and Google can be found here:
https://www.google.com/policies/technologies/ads/
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
Outbrain
This website uses the retargeting technology of Outbrain Inc., 39 W 13th Street, New York, NY 10011, USA ("Outbrain"). This enables us to specifically draw the attention of visitors to our website to further content of our own or third parties in the form of banners, based on their usage behavior, which are likely to correspond to the respective user's interests. This content is displayed based on a cookie-based analysis of previous usage behavior, but no personal data is stored. For this interest-oriented content determination, a cookie is stored on your computer or mobile device to collect pseudonymized data about your browsing behavior and thus adapt the content individually to the stored information.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
Outbrain Pixel
Within our online offering, we use the "Outbrain Pixel" from Outbrain, Inc., 39 W 13th St, New York 10011, USA ("Outbrain"). The Outbrain Pixel sets a cookie on your computer if you have reached our website via an advertisement or other campaign. Cookies are small text files that are stored on your device. If the user visits certain pages of this website, we can recognize that the user has clicked on the advertisement and has been redirected to this page (conversion page). The information collected with the help of the conversion cookie is used to generate conversion statistics, i.e., to record how many users reach a conversion page after clicking on an advertisement. We thus learn the total number of users who clicked on our advertisement and were redirected to a page with a conversion tracking tag. However, we do not receive any information that allows users to be personally identified.
All processing described above, in particular the reading of information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
Snap Pixel (Snapchat)
This website uses the "Snapchat Pixel", a tracking technology of the social network Snapchat by Snap Inc., 63 Market Street, Venice, CA 90291, USA ("Snapchat").
If you have reached our website from an advertisement on Snapchat, we will place a cookie on your computer, which interacts with a similarly implemented JavaScript code from Snapchat. Cookies are small text files that are stored on your device.
If the user is redirected from an advertisement on Snapchat to pages of this website, the pixel records certain user actions predefined by us and can track them (e.g. completed transactions, leads, searches on the website, views of product pages). When such an action is performed, your browser sends an HTTP request from the cookie via the Snapchat Pixel to Snapchat's server, transmitting certain information about the action (including type of action, time, browser type of the device).
Through this transmission, Snapchat can create statistics about user behavior on our website after redirection from an advertisement, which serves to optimize our offer. However, we do not receive any information that allows users to be personally identified.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Snapchat for the use of the Snapchat Pixel ("Data Processing Agreement", viewable at https://www.snap.com/es/terms/data-processing-agreement), which obliges Snapchat to protect the data of our site visitors and not to disclose it to third parties. Snapchat generally transfers collected information outside the European Economic Area and relies on so-called Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
TikTok Pixel
This website uses the "TikTok Pixel", a tracking technology of the social network "TikTok" by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok").
By means of cookies (small text files that are stored on the device used), information about browsing behavior on our website is collected in pseudonymized form, transmitted to TikTok, stored and evaluated there, in order to then enable the display of interest-based and personalized product recommendations on TikTok. The information collected and pseudonymized in this way generally includes the device ID, device type, timestamp, the operating system used, and the IP address. The information can be assigned to the user's person with the help of further information that TikTok has stored about the user, for example, due to owning an account on the social network "TikTok". TikTok can also combine the information collected via the pixel with further information that TikTok has collected via other websites and/or in connection with the use of the social network "TikTok", and thus create pseudonymized usage profiles. In no case can the collected information be used to personally identify visitors to this website.
The TikTok Pixel also enables us to track the effectiveness of advertisements on TikTok. If the user is redirected from an advertisement on TikTok to pages of this website and the cookies have not yet expired, the pixel records certain user actions predefined by us and can track them (e.g., completed transactions, leads, searches on the website, views of product pages). When such an action is performed, your browser sends an HTTP request from the cookie via the TikTok Pixel to TikTok's server, transmitting certain information about the action. Through this transmission, TikTok can create statistics about user behavior on our website after redirection from a TikTok advertisement, which serve to optimize our offer.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with TikTok for the use of the TikTok Pixel, which obliges TikTok to protect the data of our site visitors and not to disclose it to third parties. TikTok generally transfers collected information outside the European Economic Area and relies on so-called Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
13) Page functionalities
13.1 Use of YouTube videos
This website uses the YouTube embedding function for the display and playback of videos from the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
The extended data protection mode is used here, which, according to the provider, only initiates the storage of user information when the video(s) are played. When the playback of embedded YouTube videos is started, the provider "YouTube" uses cookies to collect information about user behavior. According to "YouTube", these serve, among other things, to record video statistics, improve user-friendliness and prevent abusive actions. If you are logged in to Google, your data will be directly assigned to your account when you click on a video. If you do not wish for your profile on YouTube to be associated, you must log out before activating the button. You have a right to object to the creation of these user profiles, which you must exercise with YouTube. In the context of using YouTube, personal data may also be transmitted to the servers of Google LLC. in the USA.
Regardless of the playback of embedded videos, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations beyond our control.
All processing described above, in particular the reading of information on the device used via the tracking pixel, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. Without this consent, YouTube videos will not be used during your visit to the website.
You can revoke your given consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website via alternative options communicated to you on the website.
Further information on data protection at "YouTube" can be found in the YouTube Terms of Use at https://www.youtube.com/static?template=terms and in Google's privacy policy at https://www.google.de/intl/de/policies/privacy
13.2 - Google Meet
We use the "Google Meet" service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter "Google Meet") to conduct online meetings, video conferences, and/or webinars.
When using Google Meet, various data is processed. The extent of the data processed depends on what data you share before or during your participation in an online meeting, video conference, or webinar. During the use of Google Meet, data of communication participants is processed and stored on Google's servers. This data may include, in particular, your registration data (name, email address, phone (optional), and password) and meeting data (topic, participant IP address, device information, description (optional)). Additionally, visual and auditory contributions from participants, as well as voice input in chats, may be processed. This may also involve a transfer to the servers of Google LLC. in the USA.
When processing personal data that is necessary for the fulfillment of a contract with you (this also applies to processing operations that are necessary for carrying out pre-contractual measures), Art. 6 para. 1 lit. b GDPR serves as the legal basis. If you have given us consent for the processing of your data, the processing is based on Art. 6 para. 1 lit. a GDPR. Granted consent can be revoked at any time with effect for the future.
Otherwise, the legal basis for data processing during the conduct of online meetings, video conferences, or webinars is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the effective conduct of the online meeting, webinar, or video conference. Further information on data usage by Google Meet can be found in Google's privacy policy at https://www.google.de/policies/privacy/
13.3 Online applications via a form
On our website, we offer job seekers the opportunity to apply online using a corresponding form. Inclusion in the application process requires applicants to provide us with all personal data necessary for a well-founded and informed assessment and selection via the form.
Required information includes general personal details (name, address, a telephone or electronic contact option) as well as performance-specific evidence of the qualifications required for a position. If necessary, health-related information may also be required, which, in the interest of social protection, must be given special consideration under labor and social law regarding the applicant.
When the form is submitted, the applicant data is transmitted to us encrypted according to the state of the art, stored by us, and evaluated exclusively for the purpose of processing the application.
The legal basis for this processing is generally Art. 6 (1) lit. b GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG), within the meaning of which the application process is considered the initiation of an employment contract.
Insofar as special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g., health data such as information about severe disability) are requested from applicants during the application process, processing is carried out in accordance with Art. 9 (2) lit. b GDPR, so that we can exercise the rights arising from labor law and social security and social protection law and fulfill our corresponding obligations.
Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9 (1) lit. h GDPR if it is carried out for purposes of preventive health or occupational medicine, for the assessment of the applicant's working capacity, for medical diagnosis, the provision of health or social care or treatment, or for the management of health or social care systems and services.
If the applicant is not selected during the evaluation described above or if an applicant withdraws their application prematurely, their data submitted via the form will be deleted after appropriate notification at the latest after 6 months. This period is based on our legitimate interest in answering any follow-up questions about the application and, if necessary, fulfilling our obligations to provide evidence under the provisions on equal treatment of applicants.
In the event of a successful application, the provided data will be further processed on the basis of Art. 6 (1) lit. b GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG) for the purposes of carrying out the employment relationship.
13.4 Applications for job vacancies by e-mail
On our website, we list currently vacant positions in a separate section, for which interested parties can apply by e-mail to the contact address provided.
Inclusion in the application process requires applicants to provide us with all personal data necessary for a well-founded and informed assessment and selection, together with their application by e-mail.
The required information includes general personal details (name, address, a telephone or electronic contact option) as well as performance-specific evidence of the qualifications required for a position. If necessary, health-related information may also be required, which, in the interest of social protection, must be given special consideration under labor and social law regarding the applicant.
The specific requirements for an application to be considered, and the form in which these components must be submitted by e-mail, can be found in the respective job advertisement.
After receipt of the application sent using the specified e-mail contact address, the applicant data will be stored by us and evaluated exclusively for the purpose of processing the application. For queries arising during processing, we will use either the e-mail address provided by the applicant with their application or a specified telephone number, at our discretion.
The legal basis for this processing, including contacting for queries, is generally Art. 6 (1) lit. b GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG), within the meaning of which the application process is considered the initiation of an employment contract.
Insofar as special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g., health data such as information about severe disability) are requested from applicants during the application process, processing is carried out in accordance with Art. 9 (2) lit. b GDPR, so that we can exercise the rights arising from labor law and social security and social protection law and fulfill our corresponding obligations.
Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9 (1) lit. h GDPR if it is carried out for purposes of preventive health or occupational medicine, for the assessment of the applicant's working capacity, for medical diagnosis, the provision of health or social care or treatment, or for the management of health or social care systems and services.
If the applicant is not selected during the evaluation described above or if an applicant withdraws their application prematurely, their data submitted by e-mail, as well as all electronic correspondence including the original application e-mail, will be deleted after appropriate notification at the latest after 6 months. This period is based on our legitimate interest in answering any follow-up questions about the application and, if necessary, fulfilling our obligations to provide evidence under the provisions on equal treatment of applicants.
In the event of a successful application, the provided data will be further processed on the basis of Art. 6 (1) lit. b GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG) for the purposes of carrying out the employment relationship.
13.6 - Google Web Fonts
This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the uniform display of fonts. When you access a page, your browser loads the necessary web fonts into your browser cache to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This may also involve the transmission of personal data to the servers of Google LLC. in the USA. In this way, Google learns that our website has been accessed via your IP address. The processing of personal data in the course of establishing a connection with the font provider only takes place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your granted consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/
13.7 Google reCAPTCHA
On this website, we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function primarily serves to distinguish whether an input is made by a natural person or is abusively made by machine and automated processing. The service involves sending the IP address and possibly other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in determining individual responsibility on the internet and preventing misuse and spam. In the context of using Google reCAPTCHA, personal data may also be transferred to the servers of Google LLC. in the USA.
Further information on Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/
As legally required, we have obtained your consent for the data processing described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your granted consent at any time with effect for the future. To exercise your revocation, please follow the aforementioned option for making an objection.
13.8 Google Customer Reviews (formerly Google Certified Shop program)
We collaborate with Google within the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This program allows us to collect customer reviews from users of our website. After a purchase on our website, you will be asked if you would like to participate in an email survey from Google. If you give your consent in accordance with Art. 6 para. 1 lit. a GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your shopping experience on our website. Your rating will then be summarized with our other ratings and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Your rating will also be used for Google Seller Ratings. In the context of using Google Customer Reviews, personal data may also be transferred to the servers of Google LLC. in the USA.
You can revoke your consent at any time by sending a message to the data controller or to Google.
Further information on Google's data protection in connection with the Google Customer Reviews program can be found at the following link: https://support.google.com/merchants/answer/7188525?hl=de
Further information on Google Seller Ratings data protection can be found at this link: https://support.google.com/google-ads/answer/2375474
Privacy Policy Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for entering into a contract. You are not obliged to provide the data. Failure to provide the data has no consequences. This only applies if no other information is given in the following processing operations. "Personal data" means any information relating to an identified or identifiable natural person. Server log files You can visit our websites without providing any personal information. Each time you access our website, usage data is transmitted to us or our web host / IT service provider by your Internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the accessed page, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and to improve our offer. Your data will be transmitted to Canada, among other places. An adequacy decision of the EU Commission exists for data transfers to Canada. Contact controller Contact us if you wish. The controller for data processing is: Dennis Garbe, Eiffestrasse 598, 20537 Hamburg Germany, +4917680526387, dennis@jimipalais.com Customer's proactive contact by e-mail If you proactively contact us by e-mail for business purposes, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. Data processing serves to process and answer your contact request. If the contact serves to carry out pre-contractual measures (e.g., advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation. We will only use your e-mail address to process your request. Your data will then be deleted in compliance with legal retention periods, unless you have consented to further processing and use. Orders Collection, processing and transfer of personal data for orders When ordering, we collect and process your personal data only to the extent necessary to fulfill and process your order and to process your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data will result in no contract being concluded. The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR and is necessary for the fulfillment of a contract with you. Your data will be transferred, for example, to the shipping companies and dropshipping providers, payment service providers, service providers for order processing and IT service providers selected by you. In all cases, we strictly adhere to legal requirements. The scope of data transmission is limited to a minimum. Your data will be transmitted to Canada, among other places. An adequacy decision of the EU Commission exists for data transfers to Canada. Cookies Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. If a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables a unique identification of the browser when the website is called up again. Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Already stored cookies can be deleted at any time. However, we would like to point out that you may then not be able to use all functions of this website to their full extent. Under the following links you can find out how to manage (including deactivating) cookies in the most important browsers: Chrome: https://support.google.com/accounts/answer/61416?hl=de Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9- 2a946a29ae09 Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac Technically necessary cookies Unless otherwise stated below in the privacy policy, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after a page change. The use of cookies or similar technologies is based on Section 25 (2) TTDSG. The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer. You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation. Rights of the data subject and storage duration Duration of storage After complete contract processing, the data will initially be stored for the duration of the warranty period, then taking into account legal, in particular tax and commercial law, retention periods and then deleted after the expiry of the period, unless you have consented to further processing and use. Rights of the data subject If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, to rectification, to erasure, to restriction of processing, to data portability. In addition, you have a right to object under Art. 21 para. 1 GDPR against processing based on Art. 6 para. 1 f GDPR, as well as against processing for the purpose of direct marketing. Right to lodge a complaint with the supervisory authority According to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful. You can lodge a complaint with the supervisory authority responsible for us, which you can reach at the following contact details: Hamburg Commissioner for Data Protection and Freedom of Information Ludwig-Erhard-Str 22, 7th floor 20459 Hamburg Tel.: +49 40 428544040 Fax: +49 40 428544000 E-Mail: mailbox@datenschutz.hamburg.de Right to object If the personal data processing listed here is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation. After a successful objection, the processing of the affected data will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. Last updated: 13.07.2023
