Privacy Policy

The data controller is:

Frescolori.de GmbH
Ferdinand-Braun-Straße 2
Bocholt
Germany
info@frescolori.com

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we inform you in detail about how we handle your data. The processing of your data is based on the GDPR and in accordance with § 165 para. 3 TKG (Austria).

1. Access Data and Hosting
You can visit our websites without providing personal information. Each time a web page is accessed, the web server automatically stores a so-called server log file, which may include the name of the requested file, your IP address, date and time of access, transmitted data volume, and the requesting provider (access data), and documents the access. These access data are used solely to ensure the trouble-free operation of the site and to improve our offer, in accordance with our overriding legitimate interests under Art. 6 para. 1 sentence 1 lit. f GDPR. All access data are deleted no later than one month after your visit.

Hosting
The services for hosting and displaying the website are partly provided by our service providers within a processing contract on our behalf. Unless otherwise specified in this privacy policy, all access data and all data collected through forms on this website are processed on their servers. For questions about our service providers and the basis of our cooperation with them, please contact the contact options described in this privacy policy.

2. Data Processing for Contract Execution and Contact

2.1 Data Processing for Contract Execution
For the purpose of contract execution (including inquiries and processing of any warranty and performance claims as well as legal update obligations) under Art. 6 para. 1 sentence 1 lit. b GDPR, we collect personal data if you voluntarily provide it during your order. Mandatory fields are marked as such because we need the data to process the contract and cannot send your order without it. The data collected is visible from the respective input forms.

Further information on how we process your data, especially regarding sharing with our service providers for order, payment, and shipping processing, can be found in the following sections of this privacy policy. After the complete processing of the contract, your data is restricted for further processing and deleted after the expiry of tax and commercial retention periods in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, unless you have explicitly consented to further use of your data under Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use your data beyond that, which is legally permitted and about which we inform you in this statement.

Warenwirtschaftssystem
For order and contract processing, we use enterprise resource planning systems of external service providers. Our service providers act on our behalf within a processing contract. For questions about our service providers and the basis of our cooperation, please contact the contact options described in this privacy policy.

2.2 Customer Account
If you have given your consent under Art. 6 para. 1 sentence 1 lit. a GDPR by choosing to open a customer account, we use your data to establish the customer account and to store your data for future orders on our website. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact described in this privacy policy or via a dedicated function in the customer account. After deletion, your data is deleted unless you have explicitly consented to further use under Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use your data beyond that, which is legally permitted and about which we inform you in this statement.

2.3 Contact
In the context of customer communication, we collect personal data for processing your inquiries in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR if you voluntarily provide it when contacting us (e.g., via contact form, live chat, or email). Mandatory fields are marked as such because we need the data to process your contact request. The data collected is visible from the respective input forms. After your inquiry is fully processed, your data is deleted unless you have explicitly consented to further use under Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use your data beyond that, which is legally permitted and about which we inform you in this statement.

3. Data Processing for Shipping
To fulfill the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we forward your data to the shipping service provider commissioned with delivery, if necessary for the delivery of ordered goods. For questions about our service providers and the basis of our cooperation, please contact the contact options described in this privacy policy.

Data Sharing with Shipping Service Providers for Delivery Notification
If you have given us explicit consent during or after your order, based on this consent under Art. 6 para. 1 sentence 1 lit. a GDPR, we forward your email address to the selected shipping service provider so that they can contact you prior to delivery for delivery notification or coordination.

You can revoke this consent at any time by sending a message to the contact described in this privacy policy or directly to the shipping service provider at the contact address below. After revocation, we delete your data unless you have explicitly consented to further use under Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use your data beyond that, which is legally permitted and about which we inform you in this statement. For questions about our service providers and the basis of our cooperation, please contact the contact options described in this privacy policy.

United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany

4. Data Processing for Payment Handling
In processing payments in our online shop, we cooperate with the following partners: technical service providers, credit institutions, payment service providers.

4.1 Data Processing for Transaction Processing
Depending on the selected payment method, we transmit the necessary data for processing the payment transaction to our technical service providers acting on our behalf, the commissioned credit institutions, or the selected payment service provider, if required for the transaction. This serves the fulfillment of the contract under Art. 6 para. 1 sentence 1 lit. b GDPR. Some payment service providers collect the necessary data themselves, e.g., on their own website or via technical integration in the order process. Their privacy policies apply accordingly.

For questions about our payment processing partners and the basis of our cooperation, please contact the contact options described in this privacy policy.

4.2 Data Processing for Fraud Prevention and Optimization of Payment Processes
We may provide our service providers with additional data, which they use together with the data necessary for payment processing as our processors for fraud prevention and the optimization of our payment processes (e.g., invoicing, handling disputed payments, supporting accounting). This serves to protect our legitimate interests, overriding in the context of a balancing of interests, under Art. 6 para. 1 sentence 1 lit. f GDPR, in securing against fraud and ensuring efficient payment management.

5. Marketing via Email

5.1 Email Newsletter with Registration
If you register for our newsletter, we use the data required or separately provided by you to send you our newsletter regularly based on your consent under Art. 6 para. 1 sentence 1 lit. a GDPR. You can unsubscribe from the newsletter at any time, either by sending a message to the contact described below or via a link in the newsletter. After unsubscribing, we delete your email address unless you have explicitly consented to further use under Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use your data beyond that, which is legally permitted and about which we inform you in this statement.

5.2 Newsletter Dispatch
The newsletter may also be sent by our service providers within the scope of processing on our behalf. For questions about our service providers and the basis of our cooperation, please contact the contact options described in this privacy policy.

5.3 Sending Review Requests via Email
If you have given us explicit consent during or after your order under Art. 6 para. 1 sentence 1 lit. a GDPR, we use your email address to request a review of your order through the review system we use. This consent can be revoked at any time by sending a message to the contact described in this privacy policy or via a link in the review request. After revoking your consent, we delete your email address unless you have explicitly consented to further use under Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use your data beyond that, which is legally permitted and about which we inform you in this statement.

Review requests may also be sent by our service provider Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops").

We receive information about the status of review requests from Trusted Shops (e.g., whether the review request was sent and received) in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR to fulfill our legitimate interest in obtaining information about review invitations to optimize our processes and to fulfill the legitimate interest of Trusted Shops to offer this service.

For sending review requests and collecting and displaying review or status information, we share responsibility with Trusted Shops.

In the joint responsibility between us and Trusted Shops, please contact Trusted Shops first for data protection questions and to assert your rights, which you can find here. Further information on data protection can be found here. Regardless, you can always contact us via the contact options described in this privacy policy. Your request will then, if necessary, be forwarded to the responsible party for response.

6. Cookies and Other Technologies

General Information
To make our website attractive and enable the use of certain functions, we use technologies including cookies on various pages.

Cookies are small text files that are automatically stored on your device. Some cookies we use are deleted after the browser session ends, i.e., after closing your browser (session cookies). Others remain on your device and allow us to recognise your browser on your next visit (persistent cookies). The duration of storage can be found in the overview in your browser’s cookie settings.

Privacy Protection on End Devices
When using our online offerings, we deploy essential technologies to provide the telemedia service you explicitly desire. The storage of information on your device or access to information already stored there does not require your consent.

For non-essential functions, storing information on your device or accessing information already stored requires your consent. We point out that if you do not give your consent, parts of the website may not be fully usable. Any consents you give remain in effect until you adjust or reset the settings on your device.

Subsequent Data Processing via Cookies and Other Technologies
We use technologies that are necessary for the use of certain functions of our website (e.g., shopping cart function). These technologies collect and process IP address, visit time, device and browser information, and usage data (e.g., contents of the shopping cart). This serves a legitimate interest in an optimised presentation of our offer, overriding in the context of a balancing of interests, under Art. 6 para. 1 sentence 1 lit. f GDPR, and complies with the legal provisions of § 165 para. 3 TKG (Austria).

We also use technologies to fulfill legal obligations (e.g., to document consents to data processing) and for web analysis and online marketing. Further information on these, including the legal basis for data processing, can be found in the following sections of this privacy policy.

What types of cookies are used?

Necessary Cookies
These cookies are necessary to enable the operation of our website. Examples include cookies that allow you to log into the customer area or add items to the shopping cart.

Cookie Settings
You can find your browser’s cookie settings at the following links: Microsoft Edge™ / Safari™ / Chrome™/ Firefox™ / Opera™

If you have consented to the use of technologies under Art. 6 para. 1 sentence 1 lit. a GDPR, you can revoke your consent at any time by sending a message to the contact described in this privacy policy.

7. Use of Cookies and Other Technologies
We use the following cookies and other technologies from third parties on our website. Unless otherwise specified for individual technologies, this is based on your consent under Art. 6 para. 1 sentence 1 lit. a GDPR. When the purpose ceases or the respective technology is no longer used, the data collected in this context is deleted. You can revoke your consent at any time with effect for the future. Further information on your revocation options can be found in the section "Cookies and Other Technologies." Additional information, including the basis of our cooperation with individual providers, can be found with each technology. For questions about providers and the basis of our cooperation, please contact the contact options described in this privacy policy.

7.1 Use of Google Services
We use the technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google technologies about your use of our website is usually transmitted to a Google LLC server at 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, and stored there. Unless otherwise specified, data processing is based on a data processing agreement between jointly responsible parties under Art. 26 GDPR. Further information on data processing by Google can be found in the Google Privacy Policy.

Our service providers have servers located outside the EU and EEA, for which the European Commission has determined an adequate level of data protection by decision.

Our service providers have servers outside the EU and EEA. For these countries, no adequacy decision by the European Commission exists. Our cooperation is based on standard contractual clauses of the European Commission.

Google Analytics
For website analysis, data (IP address, visit time, device and browser information, and usage data) are automatically collected and stored by Google Analytics, from which pseudonymous usage profiles are created. Cookies may be used for this purpose. When you visit our website from the EU, your IP address is stored on a server within the EU to derive location data and is immediately deleted before traffic is forwarded to other Google servers. Data processing is based on a data processing agreement with Google.

YouTube Video Plugin
To embed third-party content, data (IP address, visit time, device and browser information) are collected via the YouTube Video Plugin in extended privacy mode, transmitted to Google, and processed only if you play a video.

7.2 Other Providers of Web Analytics and Online Marketing Services
Use of Vimeo Video Plugin for embedding third-party content

For embedding third-party content, data (IP address, visit time, device and browser information) are collected via Vimeo Inc., 330 West 34th Street, 5th Floor, New York 10011, USA (“Vimeo”), transmitted to Vimeo, and processed there. Data processing is based on a joint responsibility agreement under Art. 26 GDPR. The Vimeo Video Plugin integrates Google Analytics automatically. Data (IP address, visit time, device and browser information, and usage data) are automatically collected and stored, and pseudonymous profiles are created. Cookies may be used. Google Analytics is provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The automatically collected information about your use of our website is usually transmitted to a Google LLC server at 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, and stored there. When visiting our EU website, your IP address is stored on a server within the EU to derive location data and is immediately deleted before further processing. We have no influence over Vimeo’s data processing, including settings and results of Google Analytics.

Our service providers have servers located outside the EU and EEA, for which the European Commission has determined an adequate level of data protection by decision.

Our service providers have servers outside the EU and EEA. For these countries, no adequacy decision by the European Commission exists. Our cooperation is based on standard contractual clauses of the European Commission.

8. Social Media
Our online presence on Facebook (by Meta), Instagram (by Meta), YouTube, Pinterest, LinkedIn

If you have given your consent under Art. 6 para. 1 sentence 1 lit. a GDPR to the respective social media provider, data will be automatically collected and stored for marketing and advertising purposes when visiting our online presences on the above-mentioned social media platforms, from which pseudonymous usage profiles are created. These can be used to serve advertisements within and outside the platforms that are likely to match your interests. Cookies are usually used for this purpose. For detailed information on data processing and use by the respective social media provider, as well as contact options and your rights and privacy settings, please refer to the linked privacy notices of the providers below. If you need assistance regarding this, you can contact us.

Facebook (by Meta) is an offer of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our Facebook (by Meta) online presence is usually transmitted to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. Data processing during a visit to a Facebook (by Meta) fan page is based on a joint responsibility agreement under Art. 26 GDPR. Further information (including insights data) can be found here.

Our service providers have servers located in the following countries, for which the European Commission has determined an adequate level of data protection: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA serves as the basis for data transfer to third countries, provided the respective provider is certified. Certification exists.

Our service providers have servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.

For these countries, no adequacy decision by the European Commission exists. Our cooperation is based on these guarantees: Standard contractual clauses of the European Commission.

Instagram (by Meta) is an offer of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The automatically collected information by Meta Platforms Ireland about your use of our Instagram online presence is usually transmitted to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, and stored there. Data during a visit to an Instagram (by Meta) fan page is based on a joint responsibility agreement under Art. 26 GDPR. Further information (including insights data) can be found here.

Our service providers have servers located in the following countries, for which the European Commission has determined an adequate level of data protection: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA serves as the basis for data transfer to third countries, provided the respective provider is certified. Certification exists.

Our service providers have servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.

For these countries, no adequacy decision by the European Commission exists. Our cooperation is based on these guarantees: Standard contractual clauses of the European Commission.

Pinterest is an offer of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”). The automatically collected information about your use of our online presence on Pinterest is usually transmitted to a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA, and stored there.

Our service providers have servers located outside the EU and EEA, for which the European Commission has determined an adequate level of data protection.

Our service providers have servers outside the EU and EEA. For these countries, no adequacy decision by the European Commission exists. Our cooperation is based on standard contractual clauses of the European Commission.

YouTube is an offer of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google about your use of our online presence on YouTube is usually transmitted to a Google LLC server at 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, and stored there.

Our service providers have servers located outside the EU and EEA, for which the European Commission has determined an adequate level of data protection.

Our service providers have servers outside the EU and EEA. For these countries, no adequacy decision by the European Commission exists. Our cooperation is based on standard contractual clauses of the European Commission.

LinkedIn is an offer of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The automatically collected information about your use of our online presence on LinkedIn is usually transmitted to a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA, and stored there.

Our service providers have servers in the following countries, for which the European Commission has determined an adequate level of data protection: USA.

The adequacy decision for the USA serves as the basis for data transfer to third countries, provided the respective provider is certified. Certification exists.

9. Contact Options and Your Rights
Our data protection officer: