Privacy Policy

Data Controller

Marvin Kirsch
Stuvkamp 19
22081 Hamburg
Germany
Email: info@matchmemo.org

Thank you for your interest in our online shop. Protecting your privacy is very important to us. Below we inform you in detail about how we handle your data.

Only the Data Controller has access to the information you provide us. Order information like what was purchased, when it was purchased and where it should be sent, and Customer information like your name, email address, and billing and shipping information. The Data Controller has access to this information to help fulfill orders, process refunds and support you.

What personal data we collect

While you visit our site, we’ll track:

Products you’ve viewed: we’ll use this to, for example, show you products you’ve recently viewed
Location, IP address and browser type: we’ll use this for purposes like estimating taxes and shipping
Shipping address: we’ll ask you to enter this so we can, for instance, estimate shipping before you place an order, and send you the order!

We’ll also use cookies to keep track of cart contents while you’re browsing our site.

When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like username and password. We’ll use this information for purposes, such as, to:

Send you information about your account and order
Respond to your requests, including refunds and complaints
Process payments and prevent fraud
Set up your account for our store
Comply with any legal obligations we have, such as calculating taxes
Improve our store offerings
Send you marketing messages, if you choose to receive them

If you create an account, we will store your name, address, email and phone number, which will be used to populate the checkout for future orders.

We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for 10 years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses.

We will also store comments or reviews, if you choose to leave them.

You can visit our website without providing any personal information. Whenever a webpage is accessed, the web server automatically stores a server log file, which includes the name of the requested file, your IP address, the date and time of the access, the transferred data volume, and the requesting provider (access data). This access data is used solely for the purpose of ensuring a trouble-free operation of the site and improving our offering in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

Our website is hosted and displayed by service providers who process data on our behalf. All access data and all data collected via forms on this website are processed on their servers.

For the purpose of contract fulfillment, in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we collect personal data that you voluntarily provide to us during your order. This data is necessary for contract processing. After complete contract processing, your data is restricted for further processing and deleted in accordance with tax and commercial retention periods unless explicit consent has been given for further use.

With your consent under Art. 6 para. 1 sentence 1 lit. a GDPR, we store your data to set up a customer account. You may delete your account at any time, upon which the data will also be deleted unless there is a legal basis for its retention.

In order to process your inquiries under Art. 6 para. 1 sentence 1 lit. b GDPR, we collect any data that you voluntarily provide to us. After complete processing of your inquiry, your data is deleted unless further use has been authorized.

Personal data collected for contract processing will be stored in accordance with statutory retention periods (e.g., tax and commercial law).

Data Processing for Shipping and Payment Processing

To fulfill the contract under Art. 6 para. 1 sentence 1 lit. b GDPR, we transfer data to shipping service providers and payment providers as necessary for delivery and payment processing. Data is transferred to relevant partners or institutions based on the chosen payment method, as required. Please refer to the privacy policies of payment providers.

To provide match-related data and statistics, we use third-party APIs. These services process data on our behalf in compliance with GDPR.

We offer payment via PayPal on our website. The provider of this payment service is:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal, L-2449 Luxembourg
Website: https://www.paypal.com

If you choose to pay using PayPal, the payment data you provide will be transmitted to PayPal in order to process the payment. This may include:

Name
Email address
Billing/shipping address
Payment details (e.g. bank or card data)
IP address

The data transfer to PayPal is based on Art. 6(1)(b) GDPR (performance of a contract) and, if applicable, Art. 6(1)(f) GDPR (legitimate interest in effective and secure payment processing).

PayPal may conduct identity and credit checks where applicable. For further details, please refer to PayPal’s privacy policy:
https://www.paypal.com/webapps/mpp/ua/privacy-full

We also use WooPayments, a payment service that allows customers to pay by credit or debit card. WooPayments is provided by:

Automattic Inc.
60 29th Street #343, San Francisco, CA 94110, USA
Website: https://woocommerce.com/woopayments/

When you pay by card, your payment information will be processed securely via WooPayments and their payment partners (including Stripe). The following data may be collected and transmitted to them:

Name
Email address
Card details (e.g. card number, expiry date)
Billing address
IP address
Purchase details

This data processing is necessary for the performance of a contract (Art. 6(1)(b) GDPR). WooPayments/Automattic may also transfer data to the USA under appropriate safeguards such as Standard Contractual Clauses (Art. 46 GDPR).

For more information, please see Automattic’s privacy policy:
https://automattic.com/privacy/

Cookies and Other Technologies

We use cookies to improve user experience and functionality on our website. Cookies may include session cookies, which are deleted after your session ends, and persistent cookies, which remain on your device until they expire or are deleted.

Users can control and disable cookies through their browser settings.

When you leave a comment, we collect the data shown in the comment form, your IP address, and browser user agent to detect spam. An anonymized hash of your email address may be sent to the Gravatar service to check if you are using it. Gravatar’s privacy policy can be found here: https://automattic.com/privacy/. Once approved, your profile picture is visible in the comment context.

If you upload images to the website, avoid uploading images with embedded location data, as visitors may download and extract this data.

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Social Media

Our website includes social media buttons as HTML links. When clicked, the respective social media platform opens in a new window, allowing you to, for example, “like” or “share” content.

With your consent under Art. 6 para. 1 sentence 1 lit. a GDPR, your data may be used for market research and advertising purposes when visiting our social media presence. Instagram (Meta) is provided by Meta Platforms Ireland Ltd., Dublin. The data transferred may be stored in the USA. Data processing occurs under a joint responsibility agreement according to Art. 26 GDPR. More information can be found here: Meta’s Privacy Policy.

Data may be transferred to third countries outside the EU/EEA, such as the United States, where the level of data protection may differ. In such cases, we ensure appropriate safeguards, such as standard contractual clauses, in accordance with Art. 46 GDPR.

Your Rights and Contact Information

You have the following rights under the GDPR:

Right to Access your data as processed by us in accordance with Art. 15 GDPR,
Right to Rectification of incorrect or incomplete data in accordance with Art. 16 GDPR,
Right to Erasure of your data in accordance with Art. 17 GDPR, unless further processing is required,
Right to Restrict Processing in accordance with Art. 18 GDPR, under specific conditions,
Right to Data Portability in accordance with Art. 20 GDPR,
Right to Object in accordance with Art. 21 GDPR, if data processing is based on legitimate interests,
Right to File a Complaint with a supervisory authority in accordance with Art. 77 GDPR.

If you have given us your consent for specific data processing activities, you can withdraw this consent at any time with future effect. The legality of processing carried out before revocation remains unaffected.

We do not use any automated decision-making processes, including profiling, as described in Art. 22 GDPR.

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

Where your data is sent

Visitor comments may be checked through an automated spam detection service.

Contact Information

For questions regarding data processing, correction or deletion requests, or objections to specific data usage, please contact us using the contact information provided in our legal notice.