Privacy policy
Last Updated: October 9, 2024
This Privacy Policy explains how nubas (the “Website,” “we,” “us,” or “our”) collects, uses, and shares personal data when you visit nubas.de (the “Website”), use our services, make a purchase, or otherwise interact with us regarding the Website (collectively, the “Services”). In this Privacy Policy, “you” and “your” refer to you as a user of the Services, regardless of whether you are a customer, website visitor, or any other individual whose information we collect under this Privacy Policy.
Please read this Privacy Policy carefully.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. The revised Privacy Policy will be posted on the Website, the “Last Updated” date will be updated, and we will take any other steps required by law.
How We Collect and Use Your Personal Data
To provide the Services, we collect information as outlined below. The information we collect and use varies depending on how you interact with us.
In addition to the specific purposes listed below, we may use the information collected about you to communicate with you, provide or improve the Services, comply with legal obligations, enforce applicable terms of service, and protect or defend the Services, our rights, and the rights of other users or third parties.
What Personal Data Do We Collect?
The type of personal data we collect depends on how you interact with our Website and Services. When we use the term “personal data,” we mean information that identifies, relates to, describes, or could be associated with you. Below, we describe the categories and specific types of personal data we collect:
Information You Provide Directly to Us
The information you provide through the Services may include:
- Contact Details: Your name, address, phone number, and email address.
- Order Information: Your name, billing address, shipping address, payment confirmation, email address, and phone number.
- Account Information: Your username, password, security questions, and other details used for account security.
- Customer Support Information: Details you include in communications with us, such as messages sent through the Services.
Certain features of the Services may require you to provide specific information about yourself. Choosing not to provide this information may limit your ability to access or use certain features.
Information We Collect About Your Usage
We may automatically collect certain information about how you interact with the Services (“Usage Data”) using cookies, pixels, and similar technologies (“Cookies”). Usage Data may include details such as how you access and use our Website and your account, including device information, browser details, network connection information, IP address, and other interaction-related data.
Information Received from Third Parties
We may receive information about you from third parties, including vendors and service providers who collect information on our behalf, such as:
- Companies Supporting Our Website and Services: For example, Shopify.
- Payment Processors: Collect payment details (e.g., bank account, credit or debit card information, billing address) to process payments, fulfill orders, and deliver requested products or services to fulfill our contract with you.
- Online Tracking Partners: When you visit our Website, open or click on our emails, or interact with our ads or Services, we or third parties we collaborate with may collect information using technologies like pixels, web beacons, SDKs, third-party libraries, and cookies.
Any information we receive from third parties is treated under this Privacy Policy. For details, see the "Third-Party Websites and Links" section below.
How We Use Your Personal Data
1. Provision of products and services. We use your personal information to provide you with the Services and to perform our contract with you, including processing your payments, fulfilling your orders, sending you notifications regarding your account, purchases, returns, exchanges or other transactions, creating, maintaining and otherwise managing your account, organising shipping, facilitating returns and exchanges, and other features and functionality related to your account. We may also enhance your shopping experience by enabling Shopify to match your account with other Shopify services that you may choose to use. In this case, Shopify will process your data in accordance with its Privacy Policy and Consumer Privacy Policy.
2. Marketing and advertising. We may use your personal data for marketing and advertising purposes, for example to send you marketing and advertising messages by email, SMS or post and to show you adverts for products or services. This may include using your personal data to better customise the services and advertising on our website and other websites. If you are located in the EEA, the legal basis for these data processing activities is our legitimate interest in selling our products in accordance with Art. 6, para. 1 (f) GDPR.
3. Security and fraud prevention. We use your personal information to detect, investigate or take action regarding possible fraudulent, illegal or malicious activity. If you choose to use the Services and register an account, you are responsible for the security of your account credentials. We strongly recommend that you do not disclose your username, password or other login information to anyone. If you believe your account has been compromised, please contact us immediately. If you are located in the EEA, the legal basis for these data processing activities is our legitimate interest in ensuring the security of our website for you and other customers, in accordance with Art. 6, para. 1 (f) GDPR.
4. Communication with you and service improvement. We use your personal data to provide you with customer support and to improve our services. This is in our legitimate interest to be able to respond to you, provide you with effective services and maintain our business relationship with you, in accordance with Art. 6, para. 1 (f) GDPR.
Cookies
Like many websites, we use cookies on our website. For specific information about the cookies we use in connection with the provision of our shop via Shopify, please visit https://www.shopify.com/legal/cookies. We use cookies to operate and improve our website and services (including remembering your actions and preferences), to perform analytics and to better understand user interaction with the services (in our legitimate interest to administer, improve and optimise the services). We may also allow third parties and service providers to use cookies on our website to better customise the services, products and advertising on our website and other websites.
Most browsers automatically accept cookies by default. However, you can set your browser to remove or reject cookies via the browser controls. Please note that removing or blocking cookies may affect your user experience and may result in some of the Services, including certain features and general functionality, not working properly or becoming unavailable. In addition, blocking cookies may not completely prevent us from sharing information with third parties, such as our advertising partners.
Sharing Your Personal Data
In certain circumstances, we may disclose your personal data to third parties for the purposes of contract fulfilment, legitimate purposes and for other reasons subject to this Privacy Policy. These circumstances may include:
...with vendors or other third parties who provide services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, order fulfilment and shipping).
...with business and marketing partners to provide you with services and to advertise to you. Our business and marketing partners use your data in accordance with their own privacy policies.
...When you instruct, request or otherwise give us your consent to share certain information with third parties, for example to send you products or through your use of social media widgets or login integrations, and with your consent.
...with our subsidiaries or otherwise within our group of companies, in our legitimate interest to conduct a successful business.
...In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including responding to subpoenas, search warrants and similar requests), to enforce any applicable terms of service, and to protect or defend the Services, our rights and the rights of our users or others.
We disclose: the following categories of Personal Data and Sensitive Personal Data about Users for the purposes set out above under ‘How We Collect and Use Your Personal Data’ and ‘How We Disclose Personal Data’:
|
Category |
Categories of recipients |
|
|
We do not use or publish your personal data without your consent or for the purpose of inference.
With your consent, we share personal data for the purpose of carrying out advertising and marketing activities as follows.
Third party websites and links
Our website may contain links to websites or other online platforms operated by third parties. If you follow links to websites that are not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions. We make no warranty or representation regarding the privacy or security of such websites, including the accuracy, completeness or reliability of the information found on such websites. Information you provide in public or semi-public places, including information you share on third party social networking platforms, may also be viewed by other users of the Services and/or users of such third party platforms, without restriction as to use by us or third parties. Our inclusion of such links does not automatically constitute an endorsement of the content of such platforms or their owners or operators, except as disclosed in the Services.
Data from children
The Services are not intended for use by children and we do not knowingly collect personal data from children. If you are the parent or legal guardian of a child who has provided us with their personal data, you can contact us using the contact details below and request that we delete this data.
As of the effective date of this Privacy Policy, we have no actual knowledge that we ‘share’ or ‘sell’ (as those terms are defined in applicable law) personal information of individuals under the age of 16.
Your rights
Depending on where you live, you may have some or all of the rights listed below in relation to your personal data. However, these rights are not absolute and only apply in certain circumstances. In certain cases, we may refuse your request to the extent permitted by law.
- Right of access/information: You may have the right to request access to the personal data we hold about you, including details of how we use and share your data.
- Right to erasure: You may have the right to request the erasure of the personal data we hold about you.
- Right to rectification: You may have the right to request the correction of inaccurate personal data that we hold about you.
- Right to portability: You may have the right to obtain a copy of the personal data we hold about you and, in certain circumstances and with certain exceptions, to request the transfer of that data to a third party.
- Right to Object to Sale, Sharing or Targeted Advertising: You may have the right to instruct us not to ‘sell’ or ‘share’ your personal information or to object to the processing of your personal information for purposes that are considered ‘targeted advertising’ under applicable data protection laws. Please note: If you visit our website with the ‘Global Privacy Control’ opt-out preference signal enabled, depending on your location, we will automatically treat this as a request to opt-out of the ‘sale’ or ‘sharing’ of information for the device and browser you use to visit the website.
-
Restriction of processing: You may have the right to ask us to stop or restrict the processing of your personal data.
Withdrawal of consent: Where we rely on your consent to process your personal data, you may have the right to withdraw that consent. - Right to appeal: If we refuse to process your request, you may have the right to appeal our decision. You can do this by responding directly to our refusal.
- Manage communication preferences: We may send you promotional emails and you can opt out of receiving these emails at any time by using the unsubscribe option shown in our emails to you. If you unsubscribe, we may still send you non-promotional emails, for example about your account or orders.
Sie können diese Rechte wie auf unserer Website angegeben ausüben oder indem Sie uns über die unten angegebenen Kontaktdaten kontaktieren.
Wir werden Sie nicht diskriminieren, wenn Sie eines dieser Rechte ausüben. Möglicherweise müssen wir zur Überprüfung Ihrer Identität Informationen von Ihnen erfassen, etwa Ihre E-Mail-Adresse oder Kontoinformationen, bevor wir eine inhaltliche Antwort auf die Anfrage geben können. Gemäß den geltenden Gesetzen können Sie einen autorisierten Vertreter benennen, der in Ihrem Namen Anfragen zur Ausübung Ihrer Rechte stellt. Bevor wir eine solche Anfrage eines Vertreters annehmen, müssen wir von diesem den Nachweis erbringen, dass Sie ihn bevollmächtigt haben, in Ihrem Namen zu handeln. Zudem müssen wir unter Umständen Ihre Identität direkt bei uns bestätigen. Wir werden Ihre Anfrage zeitnah beantworten, wie es das geltende Recht erfordert.
Complaints
If you have any complaints about the way we process your personal data, please contact us using the contact details below. If you are not satisfied with our response to your complaint, depending on where you live, you may have the right to appeal our decision by contacting us using the contact details below or by lodging your complaint with your local data protection authority. For the European Economic Area (EEA), you can find a list of the relevant data protection supervisory authorities here.
International users
Please note that we may transfer, store and process your personal data outside the country in which you live. Your personal data will also be processed by employees and external service providers and partners in these countries.
When we transfer your personal data outside of Europe, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses or equivalent contracts from the relevant UK authority, unless the transfer is to a country that has been determined to provide an adequate level of protection.
Contact Us
If you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of the rights to which you are entitled, please call or email us at anna@nubas.de or contact us at Marienhausgasse 2, Konstanz, 78462, DE.
For the purposes of applicable data protection laws and unless expressly stated otherwise, we are the controller of your personal data.