Privacy policy

 

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This only applies insofar as no other information is provided in the following processing operations.
“Personal data” means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our website without providing any personal information.
Each time our website is accessed, usage data is transmitted by your internet browser to us or our web host / IT service provider and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, date and time of access, IP address, amount of data transferred, and the requesting provider. Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our offering.

Your data may be transferred to third countries outside the European Union for which an adequacy decision by the EU Commission exists. Where no adequacy decision exists (e.g. transfers to the USA), data transfers are based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at:
https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de

Contact

Controller
You may contact us at any time. The controller responsible for data processing is:
Alexandra Petrikat
Linienstrasse 83A
10119 Berlin
Germany
Email: alex@teethlovers.de

Customer-Initiated Contact via Email

If you contact us by email, we collect your personal data (name, email address, message content) only to the extent you provide it. Data processing serves the purpose of handling and responding to your inquiry.

If the contact serves the implementation of pre-contractual measures (e.g. advice for purchase interest, preparation of offers) or concerns an existing contract, processing is based on Art. 6(1)(b) GDPR.
If contact is made for other reasons, processing is based on Art. 6(1)(f) GDPR due to our legitimate interest in handling your request. You have the right to object to this processing at any time for reasons arising from your particular situation.

Your email address will only be used to process your request. Your data will then be deleted in accordance with legal retention periods unless you have consented to further processing.

Collection and Processing When Using the Contact Form

When using the contact form, we collect your personal data (name, email address, message content) only to the extent you provide it. Processing serves the purpose of establishing contact.

Legal bases and your rights correspond to those described above for email contact. Your data will be deleted in accordance with legal retention obligations unless you have consented to further use.

Customer Account & Orders

Customer Account
When opening a customer account, we collect personal data as specified there. Processing serves to improve your shopping experience and simplify order processing. Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time. Your account will then be deleted.

Orders
When placing an order, we collect and process your personal data only as necessary to fulfill and process your order and handle inquiries. Processing is based on Art. 6(1)(b) GDPR.

Your data may be shared with shipping providers, dropshipping partners, payment providers, order processing services, and IT service providers. Data sharing is limited to the minimum necessary.

Data may also be transferred to third countries (see section above on safeguards).

Reviews & Advertising

Data Collection When Posting Comments or Reviews
When submitting a comment or review, we collect personal data (name, email, content) only to the extent provided. Processing is based on your consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time. Your data will then be deleted.

When published, your name and email address may be displayed.

Newsletter
We use your email address for newsletter distribution only if you have explicitly consented. Processing is based on Art. 6(1)(a) GDPR. You may unsubscribe at any time. Your email will then be removed from the distribution list.

Shipping & Service Providers

Shipping Providers
Your email address may be shared with the shipping provider (with your consent) to inform you about shipping status.

Shopify
We use Shopify (Shopify International Limited, Ireland) as our e-commerce platform. Personal data such as IP address, name, address, and payment details are processed. Data may be transferred to third countries based on standard contractual clauses.

Klaviyo
We use Klaviyo (USA) for email marketing and analytics. Data processing is based on standard contractual clauses.

SealSubscriptions
Used for managing subscription services and recurring payments.

Payment Providers

PayPal
We use PayPal (Luxembourg). Data processing is based on Art. 6(1)(b) GDPR.

Stripe
We use Stripe (Ireland). Data processing is based on Art. 6(1)(b) GDPR.
Stripe may perform credit checks based on legitimate interest (Art. 6(1)(f) GDPR). You have the right to object.

CNAME Cloaking

We use CNAME cloaking to route third-party service requests through our domain. This may involve transferring personal data to third parties outside the EU based on standard contractual clauses. You may object at any time.

Cookies

Our website uses cookies (small text files stored on your device). You have full control via your browser settings. Cookies are used to ensure functionality, usability, and security.

Processing is based on §25(2) TTDSG and Art. 6(1)(f) GDPR. You have the right to object.

Borlabs Cookie
We use Borlabs Cookie for consent management. Processing is based on Art. 6(1)(c) GDPR.

Tracking & Advertising

Facebook Pixel (Meta)
Used for targeted advertising and remarketing. Data may be transferred to the USA based on standard contractual clauses.

Microsoft Advertising
Used for conversion tracking and marketing analysis.

Pinterest Tag
Used for personalized advertising and conversion tracking.

Plugins & Tools

Google Tag Manager
Manages tracking and analytics tags. Does not store personal data itself.

Google Maps
Used to display maps. Data may be transferred to the USA.

Data Retention

Data is stored for the duration of contract fulfillment, then according to statutory retention periods, and deleted thereafter unless further processing is consented to.

Your Rights

You have the following rights under GDPR:

  • Right of access (Art. 15)

  • Right to rectification (Art. 16)

  • Right to erasure (Art. 17)

  • Right to restriction of processing (Art. 18)

  • Right to data portability (Art. 20)

  • Right to object (Art. 21)

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority.

Responsible authority:
State Commissioner for Data Protection Lower Saxony
Prinzenstraße 5
30159 Hanover
Germany
Phone: +49 511 1204500
Email: poststelle@lfd.niedersachsen.de

Right to Object

If processing is based on legitimate interest (Art. 6(1)(f) GDPR), you may object at any time. Processing will cease unless compelling legitimate grounds override your interests.

Last updated: November 29, 2022