Privacy Policy

Privacy Policy

  1. General

    The subject matter of this privacy policy is the processing of data in relation to the website helmade.com. Data will be processed exclusively within the limits of the data protection rules of the Federal Republic of Germany, especially the General Data Protection Regulation ("GDPR"). In the following we will inform you about the type, scope and purpose of the collecting and using of data.

    Controller in the sense of data protection laws is

    helmade GmbH,
    Grüneburgweg 106,
    60323 Frankfurt am Main

    General Manager: Sabrina Möhring
    Telephone: +49 69 95014377
    Email: service@helmade.com


  2. Collection and processing of data when visiting and using our website

    1. Data automatically processed when visiting our website

      Every time you visit our website, data is automatically collected and stored which is transmitted by your browser. These are stored in the log files of the server. This includes the following data ("log files data"):  

      - Information about browser type and version used,
      - User's operating system,
      - Internet service provider and IP address of the user,
      - Date and time of the request.

      We have log files data evaluated anonymously in order to continuously improve the website, adapt the website to the interests of the users and to find and correct errors more quickly. These purposes constitute our legitimate interest in data processing pursuant to Art. 6 (1) lit. f GDPR.

      In a non-anonymous form, the log files data are used exclusively to identify malfunctions and to guarantee system security, including the detection and tracking of unauthorized access attempts and attempts at fraud and misuse. They are stored for 7 to 10 days and then deleted. Log files data, the further storage of which is required for evidence purposes, are excluded from deletion until the respective incident has been finally clarified and can be passed on to investigative authorities in individual cases.

    2. When using the online shop

      In addition, we process your personal data that you actively transmit to us when you register with our online shop or place an order.

      When you register with our online shop or use the online shop as a registered user, we collect and process the following information from you:

      - First and last name,
      - Password,
      - Postal address,
      - Email address,
      - Phone number (optional),
      - Purchase order history.

      When you place an order, we will also collect and process the following information:

      - Items ordered,
      - Different delivery address, if applicable,
      - Invoice and payment data.

      We process the above data to maintain your registration and to process your orders. The legal basis is Art. 6 para. 1 lit. b) GDPR.

      We store the data collected for performance of contract until any legal or contractual warranty and guarantee claims expire. We then store the information required by commercial and tax law for the periods specified by law solely in the event of an audit by the tax authorities.

      Your payment data will be passed on to the respective payment service provider for payment processing. We will pass on the delivery address to the shipping partner commissioned by us. The respective data will be transmitted solely for the respective purposes and deleted after delivery.

    3. Newsletter

      You can also subscribe to a newsletter on our website. You will be asked to provide your email address and your consent to receive the newsletter. In this case, the legal basis for data processing is Art. 6 (1) lit. a) GDPR ("consent"). You can withdraw your consent at any time (e.g. by using the unsubscribe link contained in the e-mail). The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

      If you purchase goods or services on our website and provide us with your email address, we may subsequently use it to send you a newsletter in accordance with legal requirements. In such a case, the newsletter will only send direct advertising for similar goods or services of our own. In this case, the legal basis is Art. 6 (1) lit. f) GDPR, whereby our legitimate interest is the provision of legally compliant direct marketing. You can object to the further sending of the newsletter at any time (e.g. by using the unsubscribe link contained in the e-mail).

    4. If you contact us

      On our website you will find various ways to contact us. If you use one these and contact us e.g. by email, we process the data provided by you in the course of contacting us in order to respond to your inquiry.

      We have a legitimate interest in answering inquiries to us. The legal basis for data processing is Art. 6 (1) lit f) GDPR. If your request is aimed at concluding a contract, the legal basis is Art. 6 (1) lit b) GDPR.

      Data transmitted to us within the scope of contacting us will be deleted after completion of your inquiry, unless and insofar as we are not obliged to store it for commercial and tax law reasons.

    5. Transfer of data to third parties

      Your data will not be passed on to third parties. An exception to this applies if this is necessary for the performance of the contract (e.g. transmission of the delivery address to the deliverer) or if we are legally obliged to do so.

      If we use third parties to provide our website or to customize the orders, they will act on our behalf and on our instructions (" commissioned processor").

  3. Cookies

    When you use our website, we store certain information on the hard disk of your computer using so-called cookies (small text or image files). Cookies allow us to adapt the website to your interests and needs. For example, a cookie may contain information about the pages you visit, which enables us to adjust the website accordingly on your next visit. Cookies do not allow us access to other areas of your computer.

    Most internet browsers allow you to delete cookies or receive a warning before a cookie is stored on your hard drive. Please refer to your browser's documentation or help screen to learn more about this option. Please note, however, that you may not be able to use all services or offers on our website if you deactivate cookies.

  4. Google Analytics

    This website uses Google Analytics, a web analysis service of Google Inc. "("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google will shorten your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link.

    The legal basis for data processing is Art. 6 para. 1 lit f) GDPR, whereby we have a legitimate interest in the demand-oriented design and optimisation of our website.
  5. Notice regarding Facebook fanpage

    Our fan page is available at www.facebook.com/helmadewithpassion on the social network Facebook.com of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland ("Facebook"). When you visit our fan page, Facebook collects and, if necessary, processes data in the USA. This also happens if you are not a registered user of Facebook or have not just logged in to your Facebook account. We have no influence on the processing of the data collected, as it is carried out solely by Facebook. According to Facebook, the data collected includes IP address, information on the operating system, hardware versions and browser type, data about your usage behavior collected from cookies set by Facebook and other technical data. For more information, please see Facebook's privacy policy, which you can access HERE. Information from Facebook about cookies can also be found HERE.

    In addition, Facebook provides fan page operators with a tool ("Facebook Insights") with which statistical information about the use of their pages can be called up. Further information can be found HERE.
  6. Data subject rights

    According to the GDPR, data subjects have various rights at their disposal. These rights include in particular:

    • Right to information: In accordance with Art. 15 GDPR, you can request confirmation as to whether we are processing personal data relating to you. If such processing is available, you can also request further information about the processing from us.
    • Right of rectification: You have a right to rectification and/or completion in accordance with Article 16 of the GDPR if the personal data processed concerning you is incorrect or incomplete.
    • Right to restriction of processing: In accordance with Article 18 of the GDPR, you may request that the processing of personal data concerning you be restricted.
    • Right of erasure: In accordance with Art. 17 GDPR, you also have the right to request us to erase your personal data stored under certain conditions.
    • Right to data portability: In accordance with Art. 20 GDPR, you also have the right to receive personal data relating to you that you have been provided in a structured, current and machine-readable format and to transfer it from us to another person in charge without any impediment.
  7. Right to lodge a complaint

    You have the right to complain about the handling of your personal data to the data protection authority responsible for you or us. Responsible for us:

    Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
    Postfach 3163
    65021 Wiesbaden
  8. Right of objection

    If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.
  9. Contact us

    If you have any questions or concerns regarding the use of your personal data, please contact us by e-mail: service@helmade.com.