Privacy policy

BoTrik Floating Frame

You can also find this version online at any time: www.botrik.de/en/datenschutz.html

Privacy Policy

Convenience translation. This English text is provided for ease of understanding only and is not legally binding. The legally binding version is the German original: Deutsche Fassung. In the event of any discrepancy or dispute, the German version shall prevail. The language of the contract is German (see our Terms and Conditions, § 2.4).

1. Controller

The controller within the meaning of the GDPR is:
Ismar Bolanca
BoTrik
Rosenweg 5
52222 Stolberg
Email: info@botrik.de
Phone and WhatsApp: +49 1523 9606352

2. Collection and processing of personal data

Visiting the website. When you visit our website, our hosting provider automatically processes data transmitted by your browser, in particular your IP address, the date and time of access, the page requested, the previously visited page and your browser and operating system. This is technically necessary to deliver the pages to you and to protect the server against misuse (Art. 6(1)(f) GDPR; our legitimate interest is a stable and secure website). The logs are deleted automatically as soon as they are no longer needed for these purposes. We do not analyse them for advertising purposes and do not combine them with other data.

Orders and contact. When you place an order or contact us, we process the details you provide: name, address and email address, and for orders also the items ordered and the payment method. Your payment details, such as your card number, are processed by the respective payment service provider; we do not receive them.

3. Purposes and legal bases

We process your data only for these purposes:

  • processing your order, including shipping and customer service (Art. 6(1)(b) GDPR)
  • answering your enquiries (Art. 6(1)(b) GDPR, for general enquiries Art. 6(1)(f) GDPR)
  • complying with legal obligations, in particular tax retention obligations (Art. 6(1)(c) GDPR)
  • the newsletter, if you have given your consent (Art. 6(1)(a) GDPR, see section 8)
  • providing and securing the website and protecting the withdrawal function against misuse (Art. 6(1)(f) GDPR, see sections 2 and 9)
  • using the Shopify feature “Network Intelligence” for a well-functioning checkout (Art. 6(1)(f) GDPR, see section 4)

4. Disclosure to third parties

We only pass on your data where this is necessary for these purposes:

  • Shopify International Ltd., 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland – shop platform and checkout (processing on our behalf pursuant to Art. 28 GDPR)
  • STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany – hosting of the website and sending of our emails (processing on our behalf pursuant to Art. 28 GDPR)
  • payment service providers, depending on the payment method chosen: card payments, Apple Pay, Google Pay, Shop Pay and country-specific payment methods are handled by Shopify through its payment service Shopify Payments, which uses payment processors such as Stripe, Adyen or PayPal. For payments with PayPal, this is PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. For payments with Klarna, this is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden; if you choose to pay in 30 days or in 3 instalments, Klarna checks your creditworthiness beforehand. The payment service providers partly process your data under their own responsibility, for example for fraud prevention; their own privacy notices apply to this.
  • DHL Paket GmbH, Bonn, Germany – delivery of your order; for this we transmit your name and delivery address (Art. 6(1)(b) GDPR).

Shopify as an independent controller. Our shop uses the feature “Shopify Network Intelligence”. Shopify then also uses the data from your checkout and your order, together with other Shopify data, for its own purposes, for example to improve its products, personalisation and the selection of payment methods in the checkout (Art. 6(1)(f) GDPR; our legitimate interest is a well-functioning checkout). Shopify only uses your data for advertising based on your activity across different merchants and Shopify if you agree to this in the cookie notice in the checkout (Art. 6(1)(a) GDPR). Shopify is itself responsible for this processing; other merchants cannot see your data. More information can be found in Shopify’s Consumer Privacy Policy: www.shopify.com/legal/privacy/app-users. You can withdraw your consent or object to the processing by Shopify in the Shopify Privacy Portal: privacy.shopify.com.

Transfers to third countries. Shopify may transfer data to Shopify Inc. in Canada and to sub-processors, including in the USA. For Canada there is an adequacy decision of the European Commission. For the USA, transfers are based on the EU-US Data Privacy Framework where the recipient is certified, and otherwise on the EU standard contractual clauses (Art. 45 and 46 GDPR).

5. Storage period

We delete your data as soon as it is no longer needed for the respective purpose, at the latest when the statutory retention periods have expired. Under § 147 of the German Fiscal Code we keep books and records for 10 years, invoices and other accounting vouchers for 8 years and business correspondence for 6 years.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15 to 20 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). An informal message to info@botrik.de is sufficient.

Right to object: Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia), Postfach 20 04 44, 40102 Düsseldorf, Germany.

7. Cookies and browser storage

Our website does not set any cookies, does not store anything in your browser and does not use any analytics or advertising services. It does not load any content from other providers either. Only when you switch to the Shopify checkout via the buy button does Shopify set the cookies there that are strictly necessary for the checkout, for example for the cart and session management (§ 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). Shopify only sets cookies for personalisation, marketing and analytics if you agree to them in the cookie notice in the checkout (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change your choice at any time via the “Cookies” link at the bottom of the checkout.

8. Newsletter

If you sign up for our newsletter, we use your email address on the basis of your consent (Art. 6 (1) (a) GDPR) to send you information about our products. Providing your name is optional and is used only to address you personally and to manage the list. Sign-up uses the double opt-in procedure: you receive a confirmation email and are only added to the list after clicking the confirmation link. Dispatch is handled via our own server at our hosting provider (see section 4). For your personal thank-you discount code we transmit your email address to our shop provider Shopify so the code can be redeemed at checkout. You can withdraw your consent at any time – via the unsubscribe link in every email or by message to info@botrik.de. If you unsubscribe, we delete the data stored in the list (email address and name).

9. Withdrawal function

If you withdraw from your purchase using our online function Withdraw from contract, we process the details from the form: your name, the order number, your email address and – if you provide it – the note on a part of the order. We use them solely to handle your withdrawal and to send you the legally required acknowledgement of receipt by email (Art. 6(1)(c) GDPR in conjunction with § 356a of the German Civil Code, and Art. 6(1)(b) GDPR). The email is sent via our own server at our hosting provider (see section 4). To prevent misuse, we store a non-reversible check value of your IP address for no longer than one hour (Art. 6(1)(f) GDPR). The withdrawal statement itself is kept within the statutory retention periods (see section 5).

10. Phone and WhatsApp

Phone. If you call us, we process your phone number and the information from the call to the extent we need it for your request (Art. 6(1)(b) GDPR, for general enquiries Art. 6(1)(f) GDPR).

WhatsApp. You can also message us on WhatsApp at +49 1523 9606352. We only use WhatsApp to answer your questions and help you – we do not send advertising via WhatsApp. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. When you message us, we process your phone number, your profile name, your profile picture (if you have made it visible) and the content of the chat in order to deal with your request (Art. 6(1)(b) GDPR, for general enquiries Art. 6(1)(f) GDPR; our legitimate interest is quick and easy communication). Messages are end-to-end encrypted. However, WhatsApp processes metadata on its own responsibility – for example when and with whom you exchange messages – including at WhatsApp LLC and Meta Platforms, Inc. in the USA; these transfers are based on the EU-US Data Privacy Framework, under which WhatsApp is certified (Art. 45 GDPR). Further details can be found in WhatsApp’s privacy policy: www.whatsapp.com/legal/privacy-policy-eea. We use the WhatsApp Business app without access to our address book, so no contacts are transferred to WhatsApp. Please do not send us payment details via WhatsApp. We delete chats once your request has been dealt with, unless we are required to keep them, for example as business correspondence (see section 5). Using WhatsApp is voluntary – you can reach us just as well by email at info@botrik.de.

The WhatsApp icon on our pages is a simple link: WhatsApp (wa.me) only opens when you tap it. No data is transferred to WhatsApp before that.