Data protection

Unless otherwise stated below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only if no other information is provided in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.

Server log files
You can visit our websites without providing any personal information.
Each time you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the accessed page, date and time of access, the IP address, the amount of data transferred and the requesting provider.
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our offer.
Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision of the EU Commission exists for Canada. For the USA, an adequacy decision of the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.

Contact

Controller
Contact us if you wish. The controller for data processing is: Yaman Labash Abazid, Mülgaustraße 13, 41236 Mönchengladbach Germany, +49 15561 098752, hello@siravo.de

Customer's proactive contact by email
If you proactively contact us by email for business purposes, we only collect your personal data (name, email address, message text) to the extent provided by you. The data processing serves to process and answer your contact request.
If the contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form
When using the contact form, we only collect your personal data (name, email address, message text) to the extent provided by you. The data processing serves the purpose of contacting you.
If the contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR. If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation. We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing of applications by email
Website visitors can apply by email for vacant positions advertised on our website. In this case, we only collect your personal data to the extent provided by you. This includes your contact details (e.g. name, email address, telephone number), information on your professional qualifications and education, information on professional training and performance-related certificates.
The data processing serves the purpose of contacting you and deciding on the establishment of an employment relationship with you. The provision of data is necessary to carry out the application process. The processing of your personal data is carried out on the basis of Art. 6 (1) lit. b GDPR in conjunction with Section 26 (1) BDSG for the purpose of carrying out pre-contractual measures (going through the application process as initiation of an employment contract).
If you have given us your consent to the processing of personal data for inclusion in our applicant pool, e.g. by ticking a checkbox, the processing is carried out on the basis of Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.
If, within the scope of the application process, special categories of personal data within the meaning of Art. 9 (1) GDPR are requested from applicants, such as information on the degree of severe disability, this is done on the basis of Art. 9 (2) lit. b GDPR, so that we can exercise the rights arising from employment law and social security and social protection law and comply with our obligations in this regard.
We store your personal data for as long as this is necessary for the decision on your application. Your data will then be deleted at the latest after six months, unless you have consented to further processing and use. If an employment relationship is established after the application process, the provided data will continue to be processed on the basis of Art. 6 (1) lit. b GDPR in conjunction with Section 26 (1) BDSG for the purposes of carrying out the employment relationship and then transferred to the personnel file.

Collection and processing when using the application form
When using the application form, we only collect your personal data to the extent provided by you. This includes your contact details (e.g. name, email address, telephone number), information on your professional qualifications and education, information on professional training and performance-related certificates.
The data processing serves the purpose of contacting you and deciding on the establishment of an employment relationship with you. The provision of data is necessary to carry out the application process. The processing of your personal data is carried out on the basis of Art. 6 (1) lit. b GDPR in conjunction with Section 26 (1) BDSG for the purpose of carrying out pre-contractual measures (going through the application process as initiation of an employment contract).
If you have given us your consent to the processing of personal data for inclusion in our applicant pool, e.g. by ticking a checkbox, the processing is carried out on the basis of Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.

If, within the scope of the application process, special categories of personal data within the meaning of Art. 9 (1) GDPR are requested from applicants, such as information on the degree of severe disability, this is done on the basis of Art. 9 (2) lit. b GDPR, so that we can exercise the rights arising from employment law and social security and social protection law and comply with our obligations in this regard.

We store your personal data for as long as this is necessary for the decision on your application. Your data will then be deleted at the latest after six months, unless you have consented to further processing and use. If an employment relationship is established after the application process, the provided data will continue to be processed on the basis of Art. 6 (1) lit. b GDPR in conjunction with Section 26 (1) BDSG for the purposes of carrying out the employment relationship and then transferred to the personnel file. Collection and processing when sending images by email
You have the option of sending us images by email in connection with the order of a personalized product.
By submitting your images, we may collect your personal data (image of an identifiable person) only to the extent provided by you. The data processing serves the purpose of creating personalized products. The transmitted image serves as a template for the product and is used for this purpose (e.g. T-shirt printing). The processing is carried out on the basis of Art. 6 (1) lit. b GDPR and is necessary for the performance of a contract with you.
Your data will not be passed on.
We only use the image you send us within the scope of providing the service. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Use of Calendly
We use the appointment booking function "Calendly" from the provider Calendly LLC (BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA) on our website.
When using this function, we collect and process your personal data (first and last name, email address and telephone number, message text) only to the extent provided by you. The data processing serves the purpose of appointment scheduling and user-friendliness.
Calendly uses technologies such as cookies. The following information, among others, can be collected and transmitted to Calendly: IP address, date and time of the page view, device model, information about the browser you are using and the operating system you are using, as well as the location.
Your data may be transferred to third countries such as the USA. For the USA, an adequacy decision of the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Calendly has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The processing of your personal data for appointment booking is carried out on the basis of Art. 6 (1) lit. b GDPR for the fulfillment of the contract concluded with us or for the implementation of pre-contractual measures.
The use of cookies or comparable technologies takes place with your consent on the basis of Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data through the use of cookies takes place with your consent on the basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
Further information on data protection and the use of cookies at Calendly can be found at https://calendly.com/privacy (https://calendly.com/privacy).

WhatsApp Business
If you contact us via WhatsApp for business purposes, we use the WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "WhatsApp"). If you reside outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The data processing serves to process and answer your contact request. For this purpose, we collect and process your mobile phone number stored on WhatsApp, if provided, your name and other data to the extent provided by you. We use a mobile device for the service, in whose address book only data of users who have contacted us via WhatsApp are stored. Therefore, personal data is not passed on to WhatsApp without your prior consent to WhatsApp.
Your data is transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. For the USA, an adequacy decision of the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has certified itself under the TADPF and has thus committed to complying with European data protection principles. If the contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in providing quick and easy contact and in answering your request. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation.
We only use your personal data to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Further information on terms of use and data protection when using WhatsApp can be found at https://www.whatsapp.com/legal/#terms-of-service (https://www.whatsapp.com/legal/#terms-of-service) and https://www.whatsapp.com/legal/#privacy-policy (https://www.whatsapp.com/legal/#privacy-policy).

Orders

Collection, processing and transfer of personal data when placing orders
When placing an order, we only collect and process your personal data to the extent necessary to fulfill and process your order and to process your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Art. 6 (1) lit. b GDPR and is necessary for the performance of a contract with you.
Your data may be passed on to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing and IT service providers, for example. In all cases, we strictly comply with legal requirements. The scope of data transfer is limited to a minimum.
Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision of the EU Commission exists for Canada. For the USA, an adequacy decision of the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.

Reviews Advertising

Review reminder
After your order, we would like to ask you to review your purchase with us.
For this purpose, we use your personal data (name, email address, order information) independently of the contract processing, to send you a review reminder by email after an order has been placed, provided you have expressly consented to this.
The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by using the corresponding link in the email or by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.
Use of the email address for sending newsletters
We use your email address to send you information and offers via newsletter, provided you have expressly consented to this. The data processing serves exclusively the purpose of advertising. For this purpose, we process your email address and, if applicable, other data that you voluntarily provided when subscribing to our newsletter.
The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.
You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address in a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is carried out on the basis of Art. 6 (1) lit. f GDPR due to our and your legitimate interest in preventing the re-use of your email address for sending our newsletter. You have the right to object at any time to this processing of personal data concerning you for reasons arising from your particular situation.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. If a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables unique identification of the browser when the website is called up again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies already stored can be deleted at any time. However, we would like to point out that in this case you may not be able to fully use all functions of this website.

Under the following links you can find out how to manage (including deactivate) cookies in the most important browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de (https://support.google.com/accounts/answer/61416?hl=de)
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09 (https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09)
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen (https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen)
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac (https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac)

Technically necessary cookies
Unless otherwise stated below in the privacy policy, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after a page change.

The use of cookies or comparable technologies is based on Section 25 (2) TDDDG. The processing of your personal data is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.
You have the right to object at any time to this processing of personal data concerning you for reasons arising from your particular situation.
Use of the Shopify Consent Tool (Shopify Privacy & Compliance)
We use the consent tool "Shopify Privacy & Compliance" from Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Shopify is an affiliated company of Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool allows you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent already given. The data processing serves the purpose of obtaining and documenting necessary consents to data processing and thus complying with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify.
Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision of the EU Commission exists for Canada. For the USA, an adequacy decision of the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
The data processing is carried out to fulfill a legal obligation on the basis of Art. 6 (1) lit. c GDPR.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz (https://www.shopify.com/de/legal/datenschutz).

Analysis

Use of Shopify Statistics
We use the statistics and analysis functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website within the scope of order processing. Shopify is an affiliated company of Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The data processing serves the purpose of analyzing this website and its visitors. For this purpose, data is stored for marketing and optimization purposes and provided in reports, analyses and statistics. The following device information, among others, is collected and processed: information on the web browser, the IP address, the time zone and some of the cookies installed on your device. When you navigate on the website, information on accessed web pages or products, the referrer URL (website from which you accessed our website), and information on how you interact with the website are also collected. Technologies such as cookies, as well as web beacons, tags and pixels (electronic files for collecting information on how you navigate the website) are used for this purpose.
Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision of the EU Commission exists for Canada. For the USA, an adequacy decision of the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
The use of cookies or comparable technologies takes place with your consent on the basis of Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz (https://www.shopify.com/de/legal/datenschutz), information on the data processing agreement at https://www.shopify.com/de/legal/dpa (https://www.shopify.com/de/legal/dpa) and information on the cookies used at https://www.shopify.com/de/legal/cookies (https://www.shopify.com/de/legal/cookies).

Plug-ins and other

Use of Google Maps
We use the function for embedding Google Maps maps from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, "Google") on our website.
The function enables the visual display of geographical information and interactive maps. When pages with embedded Google Maps maps are accessed, data of website visitors is also collected, processed and used by Google.
Your data may also be transferred to the USA. For the USA, an adequacy decision of the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
Further information on the collection and use of data by Google can be found in Google's privacy policy at https://www.google.com/privacypolicy.html (https://www.google.com/privacypolicy.html). There you also have the option to change your settings in the privacy center so that you can manage and protect your data processed by Google.

Use of YouTube
We use the function for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is an affiliated company of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
The function displays videos stored on YouTube in an iFrame on the website. The "Extended data protection mode" option is activated. This means that YouTube does not store any information about visitors to the website. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
Further information on the collection and use of data by YouTube and Google, on your rights in this regard and options for protecting your privacy can be found in YouTube's privacy policy at https://www.youtube.com/t/privacy (https://www.youtube.com/t/privacy).

Data subject rights and storage period

Duration of storage
After complete contract processing, the data will initially be stored for the duration of the warranty period, then, taking into account statutory, in particular tax and commercial law, retention periods, and then deleted after the expiry of the period, unless you have consented to further processing and use.

Rights of the data subject
If the legal requirements are met, you have the following rights according to Art. 15 to 20 GDPR: right to information, to rectification, to erasure, to restriction of processing, to data portability.
In addition, you have a right to object to processing based on Art. 6 (1) f GDPR and to processing for direct marketing purposes according to Art. 21 (1) GDPR.

Right to lodge a complaint with the supervisory authority
According to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You can, among others, lodge a complaint with the supervisory authority responsible for us, which you can reach at the following contact details:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Postfach 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240
Fax: +49 211 38424999
E-Mail: poststelle@ldi.nrw.de

Right to object
If the personal data processing listed here is based on our legitimate interest according to Art. 6 (1) lit. f GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation.
After an objection has been lodged, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

Last updated: 22.10.2024