Privacy Policy
Privacy Policy
The person responsible for data processing is:
Hubert Krämer
Peddenöder Straße 2
58256 Ennepetal
Germany
hello@kanijune.de
Protecting your privacy is important to us. Below, we provide detailed information about how we handle your data.
1. Access data and hosting
You can visit our website without providing any personal information. Each time you access a website, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data), and documents the access. This access data is evaluated solely for the purpose of ensuring the smooth operation of the website and improving our offering. This serves to safeguard our legitimate interests in the correct presentation of our offering, which prevail within the framework of a balancing of interests, in accordance with Art. 6 (1) (f) GDPR. All access data is deleted no later than seven days after your website visit.
2. Data processing for contract processing, contact and when opening a customer account
We collect personal data when you voluntarily provide it to us as part of your order or when you contact us (e.g., via contact form or email). Mandatory fields are marked as such, as in these cases we absolutely need the data to process the contract or to contact you, and without it you cannot send the order or contact you. The data collected is evident from the respective input forms. We use the data you provide to process the contract and process your inquiries in accordance with Art. 6 (1) (b) GDPR.
If you have given your consent in accordance with Art. 6 (1) (a) GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account. Further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this data protection declaration. After the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after the retention periods under tax and commercial law have expired in accordance with Art. 6 (1) (c) GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR or we reserve the right to use the data in any other way that is permitted by law and about which we will inform you in this declaration. Your customer account can be deleted at any time and can be done either by sending a message to the contact option described in this data protection declaration or via a function provided for this purpose in the customer account.
3. Data processing for shipping purposes
In order to fulfil the contract in accordance with Art. 6 (1) (b) GDPR, we will pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.
7. Use of cookies and other technologies for web analysis and advertising purposes
If you have given your consent in accordance with Art. 6 (1) (a) GDPR, we use the following cookies and other third-party technologies on our website. Once the purpose no longer applies and we no longer use the respective technology, the data collected in this context will be deleted. You can revoke your consent at any time with future effect. Further information on your options for revoking consent can be found in the "Cookies and other technologies" section. Further information, including the basis of our collaboration with the individual providers, can be found under the individual technologies. If you have any questions about the providers and the basis of our collaboration with them, please use the contact options described in this privacy policy.
7.1 Use of Google Services
We use the technologies described below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google technologies about your use of our website is generally transferred to a server of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, and stored there. There is no adequate decision from the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. If your IP address is collected via Google technologies, it will be shortened by activating IP anonymization before being stored on Google's servers. Only in exceptional cases will the full IP address be transmitted to a Google server and shortened there. Unless otherwise stated for the individual technologies, data processing is based on an agreement concluded for the respective technology between joint controllers in accordance with Art. 26 GDPR. Further information about data processing by Google can be found in the Privacy Policy of Google .
Google Analytics
For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website). This data is used to create user profiles using pseudonyms. Cookies may be used for this purpose. Your IP address will generally not be merged with other data held by Google. Data processing is based on a contract processing agreement with Google.
7.2 Use of Facebook Services
Facebook Analytics
Within the scope of Facebook Analytics, statistics about visitor activity on our website are created from the data collected with the Facebook Pixel about your use of our website. Data processing is carried out on the basis of a contract processing agreement with Facebook. Your analysis serves to optimally present and market our website.
Facebook Ads
We advertise this website on Facebook and other platforms using Facebook Ads. We determine the parameters of each advertising campaign. Facebook is responsible for the precise implementation, in particular the decision regarding the placement of ads for individual users. Unless otherwise stated for the individual technologies, data processing is based on an agreement between joint controllers in accordance with Art. 26 GDPR. Joint controllership is limited to the collection of data and its transmission to Facebook Ireland. This does not include subsequent data processing by Facebook Ireland.
4. Data processing for payment processing
To process payments in our online shop, we work with the following partners: technical service providers, credit institutions, and payment service providers.
4.1 Data processing for transaction processing
Depending on the selected payment method, we will pass on the data required for payment processing to our technical service providers, who work for us as part of a contract processing agreement, or to the commissioned credit institutions or the selected payment service provider, insofar as this is necessary for payment processing. This serves the purpose of fulfilling the contract in accordance with Art. 6 (1) (b) GDPR. In some cases, the payment service providers collect the data required for payment processing themselves, e.g., on their own website or via a technical integration in the ordering process. The privacy policy of the respective payment service provider applies in this regard.
If you have any questions about our payment processing partners and the basis of our cooperation with them, please use the contact options described in this privacy policy.
4.2 Data processing for fraud prevention and optimization of our payment processes
If necessary, we may share additional data with our service providers, who, together with the data required for payment processing, will use this data as our processors for fraud prevention and the optimization of our payment processes (e.g., invoicing, handling payment disputes, accounting support). Pursuant to Art. 6 (1) (f) GDPR, this serves to safeguard our legitimate interests in fraud prevention and efficient payment management, which prevail within the framework of a balancing of interests.
5. Advertising by email
E-mail newsletter with registration
If you subscribe to our newsletter, we will use the data required for this purpose or separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 (1) (a) GDPR.
You can unsubscribe from the newsletter at any time by sending a message to the contact option described in this privacy policy or via a link provided for this purpose in the newsletter.
After unsubscribing, we will delete your email address from the recipient list unless you have expressly consented to further use of your data or we reserve the right to use your data in any other way that is permitted by law and about which we will inform you in this declaration.
6. Cookies and other technologies
General information
To make visiting our website more attractive and enable the use of certain functions, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (persistent cookies).
We use technologies that are absolutely necessary for the use of certain functions of our website (e.g., the shopping cart function). These technologies collect and process your IP address, the time of your visit, device and browser information, as well as information about your use of our website (e.g., information about the contents of your shopping cart). This serves the overriding legitimate interest in an optimized presentation of our offering in accordance with Art. 6 (1) (f) GDPR.
We also use technologies to fulfill our legal obligations (e.g., to verify consent to the processing of your personal data), as well as for web analytics and online marketing. Further information on this, including the respective legal bases for data processing, can be found in the following sections of this Privacy Policy.
You can find the cookie settings for your browser under the following links: Microsoft Edge™/Safari™/Chrome™/Firefox™/Opera™
If you have consented to the use of the technologies in accordance with Art. 6 (1) (a) GDPR, you can revoke your consent in accordance with Art. 6 (1) (a) GDPR at any time by sending a message to the contact option described in the data protection declaration.
8. Social Media
8.1 Social Plugins from Facebook and Instagram
Our website uses social buttons from social networks. These are embedded exclusively as HTML links, so no connection to the servers of the respective providers is established when you visit our website. Clicking on one of the buttons opens the website of the respective social network in a new browser window. There you can, for example, click the "Like" or "Share" button.
8.2 Our online presence on Facebook and Instagram
If you have given the respective social media provider your consent in accordance with Art. 6 (1) (a) GDPR, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presence on the aforementioned social networks. Pseudonymized user profiles are created, which can be used, for example, to present you with interest-based advertisements both within and outside the platforms. Cookies are generally used for this purpose. Detailed information on the processing and use of your data by the respective social media provider, as well as contact information and your related rights and setting options for protecting your privacy, can be found in the providers' privacy policies linked below. If you require further support, please feel free to contact us.
Facebook is a service of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). The information automatically collected by Facebook Ireland about your use of our Facebook presence is usually transferred to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision from the European Commission for the USA. Our cooperation with you is based on the standard data protection clauses of the European Commission. Data processing when you visit a Facebook fan page is based on an agreement between joint controllers in accordance with Art. 26 GDPR. Further information (on Insights data) can be found here.
Instagram is also offered by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). The information automatically collected by Facebook Ireland about your use of our Instagram presence is generally transferred to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on the European Commission's standard data protection clauses. Data processing when you visit an Instagram fan page is based on an agreement between joint controllers in accordance with Art. 26 GDPR. Further information (on Insights data) can be found here.
9. Contact options and your rights
As a data subject, you have the following rights:
According to Art. 15 GDPR, you have the right to receive information about your personal data processed by us to the extent described therein;
According to Art. 16 GDPR, you have the right to immediately request the rectification of inaccurate or incomplete personal data stored by us;
According to Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, provided that further processing is not necessary;
to exercise the right to freedom of expression and information;
to fulfill a legal obligation;
for reasons of public interest; or
to assert, exercise or defend legal claims;
According to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data, insofar as
you dispute the accuracy of the data;
the processing is unlawful, but you refuse to erase the data;
we no longer need the data, but you require it to assert, exercise or defend legal claims; or
You have objected to the processing pursuant to Art. 21 GDPR;
pursuant to Art. 20 GDPR, the right to receive the personal data you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller;
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. You can contact the supervisory authority of your habitual residence, place of work, or our company headquarters.
If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data, as well as revocation of consent given or objection to a specific use of data, please contact us directly using the contact details in our legal notice.
Right of objection
Right of objection: If we process personal data as described above to protect our legitimate interests, which override ours in the context of a balance of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you only have the right to object if there are reasons arising from your particular situation. In this case, we will no longer process your personal data for these purposes.
user name
E-mail address
At the time the message is sent, the following data is also stored:
User's IP address
Date and time of registration
Your consent to the processing of your data will be obtained during the sending process and reference will be made to this privacy policy.
Alternatively, you can contact us via the email address provided. In this case, the personal data transmitted with the email will be stored.
In this context, the data will not be shared with third parties. The data will be used exclusively for processing the conversation.
12a. Legal basis for data processing
The legal basis for the processing of data is Art. 6 (1) (a) GDPR if the user has given his consent.
The legal basis for processing data transmitted when sending an email is Art. 6 (1) (f) GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
12b. Purpose of data processing
The processing of personal data from the input form serves solely to process the contact. In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data.
The additional personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
12c. Duration of storage
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data from the input form and data sent via email, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the matter in question has been conclusively resolved.
All additional personal data collected during the sending process will be deleted no later than seven days after collection.
12d. Right of objection and possibility of removal
The user has the option to revoke their consent to the processing of their personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
Please send an email to: hello@kanijune.de
In this case, all personal data stored during the contact process will be deleted.
13. Comment function in the blog on the website
Kanijune offers users the opportunity to leave individual comments on individual blog posts in a blog on the controller's website. A blog is a publicly accessible platform on a website where one or more people—so-called bloggers or web bloggers—can publish articles or exchange opinions. These posts can, in turn, be commented on by third parties.
When a comment is submitted to the blog of this public website, in addition to the comment itself, information about the time of comment submission and the pseudonym or username used are saved and published. The IP address is also logged. This storage is done for security reasons and in case the person submits a comment that violates the rights of third parties or posts illegal content. This data will not be passed on to third parties unless required by law or for the legal defense of the controller.
User account
To place orders through this website, each customer must create a password-protected customer account. This account contains an overview of completed orders and active order transactions. If the customer leaves the online shop, they will be automatically logged out.
The operator assumes no liability for password misuse unless it was caused by the operator.
14. Ordering process
All data entered during the ordering process is saved. This includes:
First and Last Name
address
Payment details
E-mail address
Data that is absolutely necessary for delivery or order processing will be passed on to external service providers. As soon as storage of your data is no longer necessary or legally required, it will be deleted.
15. PayPal
The controller has integrated PayPal components into this website. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which represent virtual private or business accounts. PayPal also offers the option of processing virtual payments via credit cards if a user does not have their own PayPal account. A PayPal account is managed via an email address; there is no traditional account number. PayPal enables users to initiate or receive online payments to third parties. PayPal also performs escrow functions and offers buyer protection services.
The European operating company of PayPal is PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
If the data subject selects "PayPal" as a payment option during the ordering process in our online shop, the data subject's data will be automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transmission of personal data required for payment processing.
The personal data transmitted to PayPal typically includes your first name, last name, address, email address, IP address, telephone number, mobile phone number, or other data necessary for payment processing. Personal data related to the respective order is also necessary for processing the purchase contract.
The purpose of transmitting data is to process payments and prevent fraud. The controller will transmit personal data to PayPal in particular if there is a legitimate interest in doing so. The personal data exchanged between PayPal and the controller may be transmitted by PayPal to credit reporting agencies. This transmission is for the purpose of identity and credit checks.
PayPal may share personal data with affiliated companies, service providers or subcontractors if this is necessary to fulfill contractual obligations or if the data is to be processed on their behalf.
The data subject has the option of revoking their consent to the processing of personal data by PayPal at any time. Revoking this consent does not affect personal data that must be processed, used, or transmitted for (contractual) payment processing.
PayPal's applicable privacy policy can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
16. Use of social media plugins
This website uses Facebook Social Plugins, operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). The integrations are recognizable by the Facebook logo or the terms "Like," "Like," or "Share" in Facebook's colors (blue and white). Information about all Facebook plugins can be found at the following link:
https://developers.facebook.com/docs/plugins/
The plugin establishes a direct connection between your browser and the Facebook servers. The website operator has no influence on the nature and extent of the data transmitted by the plugin to the Facebook Inc. servers. Further information can be found here:
https://www.facebook.com/help/186325668085084
The plugin informs Facebook Inc. that you have visited this website. Your IP address may be saved. If you are logged into your Facebook account while visiting this website, the information will be linked to your Facebook account.
If you use the functions of the plugin – for example, by sharing or liking a post – this information will also be transmitted to Facebook Inc.
If you would like to prevent Facebook Inc. from linking this data to your Facebook account, please log out of Facebook before visiting this website.
This website also uses the Google Plus "+1" button, operated by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). When you visit a page with the "+1" button, a direct connection is established between your browser and the Google servers. The website operator has no influence whatsoever on the nature and extent of the data that the plugin transmits to the Google Inc. servers. If you click the "+1" button while logged in to Google+, you share the page's content on your public Google+ profile.
According to Google Inc., personal data is only collected when you click the button. Even for logged-in Google users, information such as the IP address is stored. If you wish to prevent Google Inc. from storing this data and linking it to your account, please log out of your Google Account before visiting this website.
We collect device information using the following technologies:
"Cookies" are files placed on your device or computer, often containing an anonymous, unique identifier. For more information about cookies and how to disable them, please visit http://www.allaboutcookies.org.
“Log files” record actions on the website, and collect data such as your IP address, browser type, Internet service provider, referring/exit pages, and date and time stamps.
“Web beacons,” “tags,” and “pixels” are electronic files that record information about your browsing behavior on the Website.
Additionally, when you make or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. We refer to this information as "Order Information."
When we refer to “personal information” in this Privacy Policy, we mean both device information and order information.
HOW DO WE USE YOUR PERSONAL DATA?
We generally use the order information we collect to process orders placed through the website (including processing your payment information, arranging shipping, and providing invoices and/or order confirmations). It is also used to optimize services such as Google Analytics 4, Google Tag Manager, and Google Merchant Center.
We use order information in particular to:
to communicate with you;
to review our orders for potential risks or fraud; and
To send you information or advertising about our products or services based on your preferences. This includes creating shipping labels and, if you sign up for our newsletter, registering you.
We use the device information we collect (in particular, your IP address) to detect potential risks and fraud and generally to improve and optimize our website. This includes targeted marketing (e.g., by analyzing website behavior and customer interactions, and evaluating the success of our marketing and advertising campaigns).
SHARING YOUR PERSONAL DATA
We share your personal information with third parties to help us use your personal information as described above. For example, we use Shopify for our online store. For more information about Shopify's use of your personal information, please visit: https://www.shopify.com/legal/privacy.
We also use Google Analytics to understand how our customers use the website. For more information about how Google uses your personal data, please visit: https://policies.google.com/privacy?hl=de.
You can also deactivate Google Analytics here: https://tools.google.com/dlpage/gaoptout.
Finally, we may also share your personal information to comply with applicable laws and regulations, to respond to subpoenas, search warrants, or other lawful requests for information.
DO NOT TRACK
Please note that we do not alter our website's data collection and use practices when your browser sends a "Do Not Track" signal.
YOUR RIGHTS
If you are a European resident, you have the right to access your personal data and to request that it be corrected, updated, or deleted. If you wish to exercise this right, please contact us using the contact information below.
If you are a European resident, please note that we are processing your information in order to fulfill contracts we might have with you (for example, if you make an order through the Site) or to pursue our legitimate business interests as listed above.
Please also note that your data will be transferred outside of Europe, including to Canada and the USA.
DATA STORAGE
If you place an order through the website, we will store your order data until you request us to delete it.
CHANGES
We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal or regulatory reasons.
Data Protection Officer (if applicable)
If your company is based in the EU and exceeds certain thresholds (e.g. in terms of number of employees or data processing), the appointment of a data protection officer may be required.
Rights of data subjects
Right to object: Data subjects have the right to object to the processing of their data, in particular in connection with direct marketing.
Right to data portability: Users can request that their personal data be provided in a structured, commonly used and machine-readable format.
Right to restriction of processing: Users can also request that their data be processed only under certain conditions.
International data transfers
If your data is transferred outside the EU (e.g. to the USA), please ensure that appropriate safeguards are in place (e.g. EU Standard Contractual Clauses or Privacy Shield, where applicable).
Data processing on our behalf
When we use third-party services (such as Shopify or Google), they may process personal data on our behalf as data processors. Contractual agreements ensure that they handle your data in compliance with data protection regulations.
Automated decision-making and profiling
If automated decision-making or profiling (e.g. for advertising purposes) is used, we will explain this in the privacy policy.
Cookies
In the EU in particular, a cookie policy is required that describes in detail the types of cookies and their purposes and provides a mechanism for consenting or rejecting cookies.
CONTACT
If you have any questions about our privacy practices, need more information, or would like to make a complaint, please contact us by email at hello@kanijune.de or by mail at the following address:
engtrade GmbH
Peddenoeder Straße 2
58256 Ennepetal
Germany