Privacy Policy
1. Controller
The controller for data processing on this website in the sense of the General Data Protection Regulation (GDPR) is:
Expo Habesha Shop, owner Tsegai Tesfai, Peterstraße 23-25, 50676 Cologne, Germany, Phone: +49 152 17478399, E-Mail: info@expohabesha.de
2. General information on data processing
We process personal data of our customers only insofar as this is necessary for the provision of our online shop, for the processing of orders and for the fulfillment of legal obligations, or if you have given your consent. The legal bases are, in particular, Art. 6 para. 1 lit. a GDPR (consent), lit. b (contract fulfillment), lit. c (legal obligation) and lit. f GDPR (legitimate interest). The provision of personal data is necessary for an order; without this data, we cannot fulfill the contract. Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place.
3. Hosting via Shopify
Our online shop is operated on the e-commerce platform Shopify, offered by Shopify International Limited, 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. When you visit our website, Shopify processes technical access data on our behalf (e.g., IP address, date and time of access, browser type), which are necessary for the provision and security of the website (Art. 6 para. 1 lit. f GDPR). Data you enter in the shop is stored on Shopify's infrastructure. This may involve a transfer to Shopify Inc. in Canada as well as to other Shopify companies and service providers outside the EU; for Canada, an adequacy decision by the EU Commission exists, otherwise Shopify secures transfers via recognized guarantees such as EU standard contractual clauses. Further information can be found in Shopify's privacy policy: https://www.shopify.com/legal/privacy
4. Orders and Payment Processing
To process your order, we process the order, address, and payment data you provide (Art. 6 para. 1 lit. b GDPR). The data necessary for payment processing is transmitted to the respective payment service provider; their privacy policies also apply. We offer the following payment methods:
Card payments (Visa, Mastercard, American Express, Maestro, UnionPay) as well as Apple Pay and Google Pay are processed via Shopify Payments, a payment service of Shopify International Limited, 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. When paying via Apple Pay or Google Pay, Apple or Google also process personal data in accordance with their own privacy policies.
When paying via Klarna, the data required for processing is transmitted to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Depending on the selected Klarna payment option, Klarna may carry out a credit check to assess creditworthiness (Art. 6 para. 1 lit. b and lit. f GDPR). Details can be found in Klarna's privacy policy.
When paying via PayPal, the data required for processing is transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Details can be found in PayPal's privacy policy.
We retain invoice and booking data for up to ten years based on commercial and tax law obligations (§ 257 HGB, § 147 AO) (Art. 6 para. 1 lit. c GDPR).
5. Shipping
To deliver your order, we share your name and delivery address with our shipping service provider DHL (Art. 6 para. 1 lit. b GDPR). We only share your email address or phone number with DHL if this is necessary for announcing or coordinating delivery, or if you have given your consent. For in-store pickup (Click & Collect), we use your email address to notify you when your order is ready for pickup.
6. Customer Account
You can create a customer account in our shop. We process the data you provide for the purpose of providing the account (Art. 6 para. 1 lit. b GDPR). You can have your customer account deleted at any time; please contact info@expohabesha.de for this. Legal retention periods remain unaffected.
7. Contacting Us
If you contact us via the contact form, by email, or by phone, we process your information to handle the request (Art. 6 para. 1 lit. b or lit. f GDPR). We delete the data as soon as it is no longer required for processing and no retention obligations prevent deletion.
8. Newsletter
If you subscribe to our newsletter, we use your email address to send you information about our products and offers (Art. 6 para. 1 lit. a GDPR). The registration takes place via a double opt-in procedure: you will receive a confirmation email with which you confirm the registration. The newsletter is sent via Shopify's infrastructure. You can unsubscribe from the newsletter at any time, for example via the unsubscribe link in each email; the lawfulness of the processing carried out until revocation remains unaffected.
9. Cookies and Consent Management
Our shop uses cookies and similar technologies. We use technically necessary cookies, without which the shop cannot function (e.g., shopping cart, login, security and consent status), based on § 25 para. 2 TDDDG and Art. 6 para. 1 lit. f GDPR. All other cookies, for example for statistics or marketing, are only set with your consent (§ 25 para. 1 TDDDG, Art. 6 para. 1 lit. a GDPR). You can adjust or revoke your consent at any time with future effect via the cookie settings on our website.
10. Storage Period
We only store personal data for as long as it is necessary for the stated purposes or if legal retention periods exist. After that, the data is deleted or anonymized.
11. Your Rights
You have the following rights regarding your personal data vis-à-vis us: right to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR) as well as the right to withdraw given consents at any time with future effect (Art. 7 para. 3 GDPR). To exercise your rights, simply send an email to widerruf@expohabesha.de.
Right to object: Insofar as we process your data on the basis of Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing at any time for reasons arising from your particular situation (Art. 21 GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority. The responsible authority for us is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf, www.ldi.nrw.de.