DirtySox GmbH Privacy Policy

For DirtySox GmbH , trading as , (“us”, “we”, “our”, “the Company”) take the protection and security of your data seriously. This Privacy Policy (“Privacy Policy”) explains our data protection practices in relation to the activities set out below. As is your right, we inform you about how we collect, store, access and otherwise process data relating to individuals. In this Policy, “personal data” refers to any information that, on its own or in combination with other available information, can be used to identify an individual.

We are committed to protecting your privacy in accordance with the most comprehensive data protection regulations. We therefore comply with the obligations arising from the following provisions:

• Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws
• Quebec Act 25
• the EU General Data Protection Regulation (GDPR)
• Brazil’s Data Protection Legislation (LGPD)
• California’s Consumer Protection Act (CCPA) / California Privacy Rights Act (CPRA) and California Online Privacy Protection Act (CalOPPA)
• Colorado Privacy Act (CPA)
• Utah Consumer Privacy Act (UCPA)
• Connecticut Data Privacy Act (CTDPA)
• Virginia Consumer Data Protection Act (VCDPA)
• South Africa’s Personal Data Protection Act (POPIA)

Scope

This policy applies to the websites, domains, applications, services and products of DirtySox GmbH.

This policy does not apply to third-party applications, websites, products, services or platforms accessed via links (not DirtySox GmbH-links) that we make available to you. Such websites are operated independently of us and do not belong to us. They have their own privacy and data collection practices. Personal data that you provide to these websites is subject to the privacy policy of the relevant third party. We cannot accept any liability for the actions or policies of these independent websites and are not responsible for the content or data protection practices of such sites.

Processing activities

This policy applies when you interact with us through any of the following activities:

• If you use our application and our services as an authorised user.
• When you visit one of our websites linked to this privacy policy.
• If you receive a communication from us, such as a newsletter, email, phone call or text message / SMS.

This {Privacy Policy was generated by Enzuzo

We collect this personal data

When you make a purchase or attempt to make a purchase, we collect the following types of personal data:

These include:

• Information relating to your account, such as your name, email address and password
• Payment details such as your billing address, telephone number, credit card, debit card or other payment method
• Purchase information, particularly where it is personalised or unique

When you use our products and/or features, we collect the following types of personal data:

• Information relating to your account, such as your name, email address and password
• Payment details such as your billing address, telephone number, credit card, debit card or other payment method
• Purchase information, particularly where it is personalised or unique

How we collect your personal data

We collect personal data from the following sources:

From you. You may provide us with your account details, payment details, financial information, demographic data, purchase information, content, feedback and product information by completing forms, using our products or services, entering information online, or by corresponding with us by post, telephone, email or in any other way. This also includes personal data that you provide to us, for example, when you do the following:

• You create an account or purchase products on our website;
• You use our products or services;
• You create content about our products or services;
• You express an interest in our products or services;
• You are downloading software and/or our mobile app;
• Subscribe to our newsletter;
• You are completing a voluntary market research survey;
• Please contact us if you have an enquiry or wish to report a problem (by telephone, email, via social media or a messaging service);
• You log in to our website via social media;

Automated technologies or interactions: When you interact with our website, we may automatically collect the following types of data (all as described above): Device data relating to your equipment, usage data relating to your browsing activities and patterns, and contact details where tasks you have carried out via our website remain incomplete, e.g. incomplete orders or abandoned shopping baskets. We collect this data using cookies, server logs and other similar technologies. Further details can be found in the section on cookies (below).

Third-party providers: We may receive personal data about you from various third parties, including:

• Account and payment details of other people when they buy a gift for you on our website;
• Device and usage data from third parties, including analytics providers such as Google;
• Account information and payment details from social media platforms when you log in to our website via these platforms;
• Content from communication services, including email providers and social networks, if you grant us permission to access your data on such third-party services or networks;
• Account information and payment details from third parties, including organisations (e.g. law enforcement agencies), associations and groups that share data for the purposes of fraud prevention and detection, and to reduce credit risk; and
• Account information, payment details and financial data from providers of technical, payment and delivery services.

If you provide us or our service providers with personal data relating to other individuals, you hereby declare that you are authorised to do so and acknowledge that such data will be used in accordance with this policy. If you believe that we have obtained your personal data in an improper manner, or if you wish to exercise your rights in relation to your personal data in any other way, please contact us using the details provided in the ‘Contact’ section below.

Device and usage data

When you visit a website operated by DirtySox GmbH, we automatically collect and store information about your visit using browser cookies (files that we send to your computer) or similar technology. You can set your browser to reject all cookies or to notify you when a cookie is sent. The help function in most browsers provides information on how to accept cookies, disable them or enable notifications for new incoming cookies. If you do not accept cookies, some features of our service may not be available. We recommend that you leave them enabled.

We also process information when you use our services and products. This information may include the following:

• Login details
• Individual products you have viewed
• Internet terms or search queries that led you to this website

Data we collect from third parties

We may receive your personal data from third parties, such as companies that provide services to DirtySox GmbH subscribers, partners and other sources. This personal data is not collected by us, but by third parties, and is subject to the privacy and data collection policy of the relevant third party. We have no control over, nor any influence on, how your personal data is handled by third parties. As always, you have the right to review and correct this information. If you have any questions, you should first contact the relevant third party to obtain further information about your personal data. If the third party does not respond to your request regarding your rights, you may contact the Data Protection Officer at DirtySox GmbH (see below for contact details).

Our websites and services may contain links to other websites, applications and services operated by third parties. The privacy practices of such other services, or of social media networks that host our brand’s social media pages, are governed by the third parties’ privacy policies. You should read these to better understand the privacy practices of these third parties.

Purpose and legal basis for the processing of personal data

With your consent, we collect and use your personal data to provide, maintain and further develop our products and services, and to understand how we can improve them.

These purposes include:

• Delivery of your product or service
• Order fulfilment, including electronic and non-electronic dispatch
• Technical and customer support services
• Organisation and implementation of advertising and marketing
• Sending you newsletters and other marketing materials about current and future products, programmes and services, events, competitions, surveys and special offers organised by us or on our behalf; and
• Organising events or registering participants and planning meetings for events.

When we process your personal data to provide a product or service, we do so because it is necessary to fulfil our contractual obligations. All the above-mentioned processing activities are necessary, in accordance with our legitimate interests, to provide products and services, to maintain our relationship with you and to protect our business, for example against fraud. Consent is required before we begin providing services to you. If changes are made to the type of data collected, new consent is required. If you do not give your consent within the scope of our contract, some services may not be available to you.

Third-party tools

We use these third-party tools to store your information:

• Shopware

International data transfer and storage

Wherever possible, we store and process the data on servers located in the general geographical region where you live. (Please note: this is not necessarily the country in which you live.) Your personal data may also be transferred to and stored on servers outside your state, province, country or other governmental jurisdiction, where data protection laws may differ from those in your jurisdiction. We will take appropriate measures to ensure that your personal data is handled securely and in accordance with this policy and applicable data protection laws. Further information on these clauses can be found here: https://eur-lex.europa.eu/legal-content/de/TXT/?uri=CELEX%3A32021D0914

Sharing and Disclosure

We will only disclose your personal data to third parties as set out in this policy or as explained at the point at which the personal data is collected.

We also use Google Analytics to understand how our customers use the website. You can read more about how Google uses your personal data here: https://www.google.com/intl/de/policies/privacy/

You can also opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout?hl=de

We may also use your personal data to send you targeted marketing in the form of adverts or communications (such as newsletters).

Further information on how targeted advertising works can be found on the Network Advertising Initiative (“NAI”) information page: http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work

You can also visit the Digital Advertising Alliance’s opt-out portal to opt out of some of these services: http://optout.aboutads.info/

Legal requirements

We may use or disclose your personal data to comply with a legal obligation, in response to a request from a public authority or government body, in connection with legal proceedings, to prevent injury or death, or to protect our rights or property. Where possible and practicable, we will inform you in advance of any such disclosure.

Service providers and other third parties

We may use external service providers, independent contractors, agencies or consultants to provide our products and services and to help us improve them. We may share your personal data with marketing agencies, database providers, backup and disaster recovery service providers, email service providers and other service providers, but only for the purpose of maintaining and improving our products and services. If you require further information about the recipients of your personal data, please contact us using the details provided in the ‘Contact’ section below.

What are cookies?

A cookie is a small file containing data that your browser stores on your device. The data in this file is usually shared with the website operator, as well as any partners and third parties associated with that company. This data may be collected to enable the website to function and/or to improve your user experience.

How we use cookies

How you can set your cookies

Provided the cookie is not strictly necessary, you can choose to accept or decline the use of cookies at any time. To change the way we collect data from you, please visit our Cookie Manager.

We will only retain your personal data for as long as is necessary for the purpose for which it was collected and as required by applicable law. Once we no longer require your personal data, we will remove it from our systems and/or take steps to anonymise it.

If we are involved in a merger, acquisition or sale of assets, your personal data may be transferred. We will inform you of this before your personal data is transferred and becomes subject to a different privacy policy. In certain circumstances, we may be obliged to disclose your personal data where required by law or in response to legitimate requests from public authorities (e.g. a court or a government agency).

We have appropriate organisational safeguards and security measures in place to protect your personal data from accidental loss, unauthorised use or access, alteration or disclosure.

Communication between your browser and our website takes place via a secure, encrypted connection when your personal data is involved.

We require any third party entrusted with processing your personal data on our behalf to implement security measures to protect your data and to handle such data in accordance with the law.

In the unfortunate event of a personal data breach, we will notify you and all relevant supervisory authorities where we are legally obliged to do so.

Your rights are subject to local data protection regulations, which depend on your geographical location and nationality. These rights may include:

• Right of access (PIPEDA, GDPR Article 15, CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA, LGPD, POPIA)

  You have the right to know whether we are processing your personal data, and you have the right to request a copy of the personal data we process about you.

• Right to rectification (PIPEDA, GDPR Article 16, CPRA, CPA, VCDPA, CTDPA, LGPD, POPIA)

  You have the right to have any incomplete or inaccurate personal data that we process about you rectified.

• Right to be forgotten (right to erasure) (GDPR Article 17, CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA, LGPD, POPIA)

  You have the right to request that we erase any personal data we process about you, unless we are required to retain such data to comply with a legal obligation or to establish, exercise or defend legal claims.

• Right to restriction of processing (GDPR Article 18, LGPD)

  You have the right to restrict our processing of your personal data in certain circumstances. In such cases, we will process your data for no purpose other than storage.

• Right to data portability (PIPEDA, GDPR Article 20, LGPD)

  You have the right to receive the personal data we hold about you in a structured electronic format and to transfer such data to another data controller where it is (a) personal data which you have provided to us, and (b) where we process such data on the basis of your consent or to fulfil a contract with you or a third party who subscribes to services from .

• Right to object (CPRA, CPA, VCDPA, CTDPA, UCPA)

  You have the right to object to the processing of your personal data for the following purposes: (1) targeted advertising; (2) the sale of personal data; and/or (3) profiling to support decisions that have legal or similarly significant effects on you. Under the CPRA, you have the right to object to the sharing of your personal data with third parties, as well as to our use and disclosure of your sensitive personal data for purposes necessary to provide the products and services you expect.

• Right to object (GDPR Article 21, LGPD, POPIA)

  Where the legal basis for our processing of your personal data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will comply with your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or unless we need to continue processing the personal data in order to establish, exercise or defend legal claims.

• Non-discrimination and non-retaliation (CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA)

  You have the right not to be denied the service or to have a different experience simply because you have exercised your rights.

• Lodge an objection (CPA, VCDPA, CTDPA)

  You have the right to lodge an objection based on our response to the exercise of any of these rights. Should you disagree with the way in which we have resolved your objection, you have the right to contact the Attorney General, whom you can find here:
  
  If you are based in Colorado, please visit this website to file a complaint.
  If you are based in Virginia, please visit this website to file a complaint.
  If you are based in Connecticut, please visit this website to file a complaint.

• Submit a complaint (GDPR Article 77, LGPD, POPIA)

  You have the right to lodge a complaint with the data protection authority responsible for you.
  If you are based in the EEA, please visit this website (https://edpb.europa.eu/about-edpb/about-edpb/members_de) for a list of local data protection authorities.

Withdraw consent

If you have given your consent to the processing of your personal data, you have the right to withdraw your consent at any time free of charge, for example if you wish to unsubscribe from receiving the promotional messages that you receive from us. If you wish to withdraw your consent, please contact us using the information provided below on this page.

How to exercise your rights

You can submit a request to exercise any of these rights in relation to your personal data by sending the request to our data protection team using the form below.

To ensure the protection and security of your data, we may, at our discretion, require you to verify your identity before we provide the requested information.

We may amend this policy at any time. Should we make any changes to this policy, we will publish an updated version of this policy on this website. You will be asked to review and accept our privacy policy when you use our services. This enables us to record your consent and inform you of any future changes to this policy.

To request a copy for your information, unsubscribe from our email list, request the deletion of your data or ask a question about the protection of your data, we have created a simple procedure: