Privacy policy

We take the protection of your personal data seriously and would like to inform you about data protection when visiting our website www.cimbom.store at this point. Within the scope of our data protection responsibility, we have been assigned additional obligations due to the enactment of the EU General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter referred to as "GDPR") to ensure the protection of personal data of the individuals affected by processing. Where we either alone or jointly with others decide on the purposes and means of data processing, this primarily includes the obligation to transparently inform you about the nature, scope, purpose, duration, and legal basis of the processing (cf. Art. 13 and Art. 14 GDPR). With this statement (hereinafter: "Privacy Policy"), we inform you about how your personal data is processed by us.

I. Controller

Cimbom Streetwear
Mücahit Isleyen
Zum Schürmannsgraben 29
47441 Moers
Germany

Phone: +49 2841 4064864
Email: info@cimbom.store

II. Purposes and Legal Bases of Data Processing

In the context of using our website, we process personal data exclusively for specified purposes, which we will explain in detail below for your information.

You can visit our website purely for informational purposes without providing any further active disclosure of data about yourself. In this case, only technical access data automatically transmitted by your browser are stored, to enable you to visit our website in an optimized and needs-based manner and to protect our systems from security risks (accessing/visiting the website, technical provision), as well as information transmitted to us through cookies for statistical analysis of the usage of our website and for interest-based display of advertisements (use of cookies), if applicable, based on your browser settings.

Further processing of your personal data beyond what is stated in the privacy policy only occurs in cases where a legal provision explicitly authorizes or obliges us to do so, or you have explicitly consented to the data processing. We will inform you about any changes in purpose in accordance with legal requirements.

1. Use of the Website

a. Accessing and Visiting Our Website
For the purpose of technically providing the website, it is necessary for us to process certain automatically transmitted information from you so that your browser can display our website and you can use it. This information is automatically collected each time you access our website and stored in our server log files. This information relates to the browser/operating system of the accessing computer. The following technical access data are collected:

• IP address (anonymized: IPv4 addresses /24, IPv6 addresses /64)
• Identification data of the browser used (e.g., browser type/version)
• Date and time of your access

The storage of the aforementioned access data takes place as part of so-called server log files on our web server and is necessary for providing a functioning website and ensuring system security for technical reasons. This also applies to the storage of your anonymized IP address, which is necessary and, under certain conditions, may enable assignment to your person. In addition to the purposes mentioned above, we use access data exclusively for the needs-based design and optimization of our online offering on a purely statistical basis and without drawing conclusions about your person. There is no merging of the technical access data with other data sources, and the data is not evaluated for marketing purposes.

Furthermore, we use cookies to provide you with our website optimized and tailored to your needs (for details on this and your corresponding design options, see below in the section "Use of Cookies and Related Functions/Technologies").

The access data collected in the context of using our website are only stored for the period required to achieve the above-mentioned purposes. Your anonymized IP address is stored on our web server for a maximum of 7 days.

If you visit our website to inform yourself about our services and other services or to use them, the temporary storage of access data and log files is based on Art. 6(1)(b) GDPR (legal basis), in particular for the purpose of pre-contractual measures. Furthermore, Art. 6(1)(f) GDPR serves as the legal basis for the temporary storage of technical access data and log files. Our legitimate interest here is to be able to provide you with a technically functioning and user-friendly website and to ensure the security of our systems.

b. Contact Form/Inquiry
In order to process and respond to your inquiries to us, e.g., via the contact form or to our email address, we process the personal data provided by you in this context. This always includes your name and email address, in any case, to send you a response, as well as any other information you send us as part of your communication. When using the contact form on our website, the following technical access data are also stored upon submission: date and time of sending your inquiry.

For sending appropriate information or the desired contact on a specific topic, it may be necessary for us to disclose the data you provide to external service providers (within the scope of contract processing). This is done only within the framework of legal permissions and only to the extent necessary for the purpose of processing and responding to your contact request.

If you contact us within the scope of an existing contractual relationship or contact us beforehand to obtain information about our service offerings or other services, the data and information provided by you are processed for the purpose of processing and responding to your contact request in accordance with Art. 6(1)(b) GDPR (legal basis). The storage of the technical access data collected during the submission process serves the purpose of technically providing the contact options and ensuring system security based on Art. 6(1)(f) GDPR (legal basis) and serves to protect legitimate interests.

We store the personal data collected in connection with your contact for the purpose and duration of processing your inquiry. The technical access data stored in this context are only retained for the period necessary for technical reasons, in particular for the functional provision of the contact options and to ensure system security.

Newsletter
We offer you the opportunity to subscribe to our newsletter on our website. If you have given us separate consent to inform you by email about our products and services, processing will take place accordingly based on Art. 6(1)(a) GDPR. This service is exclusively aimed at users who have reached the age of 16.

For technical necessity and legal protection, your IP address is also processed when ordering the newsletter. For sending newsletters by email, we use the so-called double opt-in procedure. This means that you will only receive advertising by email if you have expressly confirmed in advance that we should activate the newsletter service. This is done by sending you a notification email and asking you to confirm that you wish to receive our newsletter at this email address by clicking on a link contained in this email.

c. Use of Cookies and Related Functions/Technologies
To make visiting our website attractive and enable the use of certain functions, we use so-called cookies in some areas. Cookies are text files that are stored on your hard drive or in the cache of your internet browser when you visit our website. A cookie contains a characteristic string of characters that enables a unique identification of the browser when the website is visited again. In addition, we also refer to as "cookies" web beacons and other comparable storage technologies for tracking user activities. Web beacons are mostly transparent graphic/image elements, usually no larger than 1 x 1 pixel, which are embedded in the website and can recognize cookies on your devices.

We use cookies, on the one hand, to store session-relevant information within the website. These cookies expire at the end of the session/browser session (so-called transient cookies) and are not permanently stored. Other cookies remain on your computer beyond the respective browser session and enable us to recognize your computer on your next visit (so-called persistent cookies). Persistent cookies are automatically deleted after a predetermined period, which may vary depending on the type of cookie.

Of course, you can also visit our website without using cookies. You can deactivate the use of cookies on your computer by changing the browser settings for cookies. You can regularly find out how to deactivate cookies through the "Help" function of your internet browser. However, please note that these settings may affect the full availability and functionality of our website. For further cookie-specific settings and deactivation options, please also see the individual explanations of the cookies and associated functions/technologies used during your visit to our website:

Strato
We host our website with Strato. The provider is Strato AG, Pascalstraße 10, 10587 Berlin (hereinafter referred to as "Strato"). When you visit our website, Strato collects various log files including your IP addresses.

For more information, please refer to Strato's privacy policy: https://www.strato.de/datenschutz/.

The use of Strato is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in presenting our website as reliably as possible. If consent has been requested, the processing is based exclusively on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Shopify
We use Shopify and the services offered by Shopify International Ltd. on our website, Shopify International Ltd., Attn: Data Protection Officer, c/o Intertrust 2nd Floor 1-2 Victoria Buildings, Haddington Road. Dublin 4, D04 XN32 Ireland. Further information on data processing can be found in Shopify's privacy policy: https://www.shopify.com/de/legal/privacy/app-users.

Marketprint
Our print-on-demand service runs through Marketprint. To process your order, we send the information of your order to Marketprint, which creates the desired products based on this information. Data processing is associated with the use of Shopify. You can find Marketprint's privacy policy at: https://marketprint.de/datenschutzerklaerung/.

Use of PayPal
All PayPal transactions are subject to PayPal's privacy policy. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Klarna Checkout
The checkout solution is provided by Klarna AB (Sveavägen 46, 111 34 Stockholm, Sweden) and uses cookies to provide you with an ideal, tailored online experience when using the checkout. Processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until revocation. You can prevent the storage of cookies by selecting the appropriate technical settings in your browser software; however, please note that in this case you may not be able to use all functions of this website to their full extent. A detailed list of cookies and an explanation of their respective purposes can be found here: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_at/checkout.pdf.

Use of Google Maps
Nature and purpose of processing:
On this website, we use the Google Maps service. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google").

For more information about data processing by Google, please refer to Google's privacy policies. There, you can also change your personal privacy settings in the privacy center.

For detailed instructions on managing your data in connection with Google products, click here.


IV. Categories of Recipients

Initially, only our employees have knowledge of your personal data. Furthermore, we share your personal data with other recipients who provide services related to our website, to the extent permitted or required by law, or if you have given us your consent as part of cookie usage for the website. We limit the disclosure of your personal data to what is necessary. In some cases, our service providers receive your personal data as data processors and are strictly bound by our instructions when handling your personal data. In some cases, the recipients act independently with your data that we transmit to them.

Below, we list the categories of recipients of your personal data:

• IT service providers for the administration and hosting of our website,
• Possibly other companies, especially as far as necessary for the purpose of processing and responding to your contact inquiries or otherwise within the scope of the defined uses and for sending our own mailings based on your consent,
• Possibly legal advisors in asserting our claims.


V. Transfer to Third Countries

We do not transfer your personal data to countries outside the EU or the EEA or to international organizations.