Privacy Policy

Privacy Policy

1. Introduction and Contact Information of the Data Controller

1.1 We are pleased that you are visiting our website and appreciate your interest. Below, we inform you about how we handle your personal data when using our website. Personal data refers to any information that can identify you personally.

1.2 The data controller for the processing of personal data on this website, in accordance with the General Data Protection Regulation (GDPR), is Rami Fakih, Oberer Grifflenberg 140, 42119 Wuppertal, Germany, Email: info@rameva.net. The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2. Data Collection When Visiting Our Website

2.1 When using our website for informational purposes only, meaning when you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically required to display the website:

• The website you visited
• Date and time of access
• Amount of data sent in bytes
• Source/referer from which you came to the page
• Used browser
• Used operating system
• Used IP address (possibly anonymized)

The processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. No data is shared or otherwise used. However, we reserve the right to review server log files later if there are concrete indications of illegal use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize a secure connection by the "https://" prefix and the padlock symbol in your browser's address bar.

3. Hosting & Content Delivery Network

Shopify

For hosting our website and displaying content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

All data collected on our website is processed on the provider's servers. We have entered into a data processing agreement with the provider to ensure the protection of our visitors' data and prevent unauthorized disclosure to third parties.

When data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4. Cookies

To make our website more attractive and to enable the use of certain features, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device for a longer period, allowing for the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the duration of storage in your browser's cookie settings.

If personal data is processed through certain cookies we use, the processing is carried out in accordance with Art. 6 (1) lit. b GDPR either to fulfill the contract, in accordance with Art. 6 (1) lit. a GDPR in the case of consent, or in accordance with Art. 6 (1) lit. f GDPR to protect our legitimate interests in ensuring the best functionality of the website and a user-friendly and effective design of your visit.

You can configure your browser to inform you about the setting of cookies and allow you to decide individually whether to accept them, or to exclude the acceptance of cookies for specific cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5. Contacting Us

When you contact us (e.g., via a contact form or email), we process personal data solely for the purpose of handling and responding to your request and only to the extent necessary.

The legal basis for the processing of this data is our legitimate interest in responding to your request according to Art. 6 (1) lit. f GDPR. If your contact is intended to lead to a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted when it becomes clear that the matter has been conclusively resolved, provided no legal retention periods are in place.

6. Commenting Feature

With the comment feature on this website, alongside your comment, the time of comment creation and the name you choose to identify yourself will be stored and published. Additionally, your IP address will be logged and stored. This IP address storage is for security purposes and in case a person infringes the rights of third parties or posts illegal content through their comment. We need your email address to contact you in case a third party objects to your published content as illegal.

The legal basis for storing your data is Art. 6 (1) lit. b and f GDPR. We reserve the right to delete comments if they are objected to by third parties as illegal.

7. Use of Customer Data for Direct Marketing

7.1 Subscription to Our Email Newsletter

When you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for the newsletter subscription is your email address. Providing additional information is voluntary and helps us address you personally. We use the so-called double opt-in method for sending the newsletter, which ensures that you will only receive the newsletter once you have explicitly confirmed your consent by clicking on a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 (1) lit. a GDPR. We store the IP address assigned to you by your Internet Service Provider (ISP) as well as the date and time of registration to trace any misuse of your email address in the future. The data collected during your newsletter subscription will be used strictly for this purpose.

You can unsubscribe from the newsletter at any time via the provided link in the newsletter or by contacting the responsible party mentioned above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have explicitly agreed to further use of your data or we reserve the right to use your data in a manner that is legally permitted, which we will inform you about in this statement.

7.2 Klaviyo

Our email newsletter is sent via the following provider: Klaviyo, 225 Franklin St, Boston, MA 02110, USA.

Based on our legitimate interest in effective and user-friendly newsletter marketing, we share the data you provided during the newsletter subscription with this provider in accordance with Art. 6 (1) lit. f GDPR so that they can handle the newsletter distribution on our behalf.

Subject to your explicit consent in accordance with Art. 6 (1) lit. a GDPR, the provider also conducts statistical success analysis of newsletter campaigns via web beacons or tracking pixels embedded in the sent emails, which measure open rates and specific interactions with the content of the newsletter. Device information (e.g., time of access, IP address, browser type, and operating system) is collected and evaluated, but not combined with other data records.

You can revoke your consent for newsletter tracking at any time with effect for the future.

We have entered into a data processing agreement with the provider to protect the data of our website visitors and prohibit its transfer to third parties.

For data transfers to the USA, the provider has joined the EU-U.S. Data Privacy Framework, ensuring compliance with the European data protection standards based on an adequacy decision by the European Commission.

7.3 Shopping Cart Reminder Emails

If you abandon your shopping process before completing your order, you have the option to receive an email reminder about the contents of your virtual shopping cart.

The only required information for sending this reminder is your email address. Additional data is voluntary and may be used to address you personally. We use the so-called double opt-in method to ensure you will only receive the reminder after explicitly confirming your consent by clicking on a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 (1) lit. a GDPR for sending a shopping cart reminder. We store the IP address assigned to you by your Internet Service Provider (ISP) as well as the date and time of registration to trace any misuse of your email address in the future. The data collected during your shopping cart reminder subscription is used solely for this purpose.

You can unsubscribe from shopping cart reminders at any time by contacting the responsible party mentioned above. After unsubscribing, your email address will be immediately deleted from our reminder distribution list, unless you have explicitly agreed to further use of your data or we reserve the right to use your data in a manner that is legally permitted, which we will inform you about in this statement.

8) Data Processing for Order Processing

8.1 Submission of Image Files for Order Processing via Upload Function

On our website, we offer customers the opportunity to personalize products by submitting image files through an upload function. The submitted image is used as a template for the product personalization.

Using the upload form on our website, the customer can submit one or more image files directly via an automated, encrypted data transfer from the device’s storage. We collect, store, and use the transmitted files solely for the purpose of creating the personalized product as described on our website. If the submitted image files are shared with specific service providers for the creation and fulfillment of the order, you will be explicitly informed about this in the following paragraphs. No further sharing will take place. If the submitted files or digital images contain personal data (especially images of identifiable people), all processing activities mentioned above are carried out solely for the purpose of processing your online order in accordance with Art. 6 (1) b GDPR.

Once the order is completed, the submitted image files are automatically and completely deleted.

8.2 For contract fulfillment related to delivery and payment purposes, we will share the collected personal data with the transport company and the assigned financial institution as per Art. 6 (1) b GDPR.

If, based on a contract, we owe you updates for goods with digital elements or digital products, we process the contact details you provided at the time of the order (name, address, email) to inform you of upcoming updates within the legally specified period, in compliance with our legal information obligations per Art. 6 (1) c GDPR, via appropriate communication channels (e.g., mail or email). Your contact details are strictly used for notifications about updates we owe and will be processed only as necessary for each notification.

For order fulfillment, we work with the following service providers who support us in carrying out the concluded contracts. Certain personal data will be transmitted to these service providers as per the information below.

8.3 In order to fulfill our contractual obligations to our customers, we collaborate with external shipping partners. We will share your name, delivery address, and, if necessary, your phone number, solely for the purpose of delivery as per Art. 6 (1) b GDPR.

8.4 Use of Payment Service Providers

• Amazon Pay

This website offers one or more online payment methods from the following provider: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg.

If you choose a payment method where you pay in advance (e.g., credit card payment), your payment data (including name, address, bank and payment card information, currency, and transaction number) along with information about your order will be transmitted to the provider as per Art. 6 (1) b GDPR. The data is shared solely for payment processing and only as needed.

• Apple Pay

If you choose the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Cork, Ireland, payment is processed through the “Apple Pay” function of your iOS, watchOS, or macOS device by charging a payment card registered with Apple Pay. Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. To authorize a payment, you will need to enter a code you set previously or verify via "Face ID" or "Touch ID" on your device.

For payment processing, the information you provided during the order process along with the order details will be securely transmitted to Apple. Apple will then encrypt the data with a developer-specific key before transmitting it to the payment service provider of the registered payment card. After the payment is completed, Apple will send your device account number and a transaction-specific dynamic security code to the website for confirmation of the payment success.

If personal data is processed during these transmissions, it is done so exclusively for payment processing per Art. 6 (1) b GDPR.

Apple stores anonymized transaction data, including the approximate purchase amount, date, and time, as well as whether the transaction was successful. Anonymization ensures no personal identification is possible. Apple uses this anonymized data to improve "Apple Pay" and other Apple products and services.

• giropay

This website offers one or more online payment methods from the following provider: paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany.

If you choose a payment method where you pay in advance (e.g., credit card payment), your payment data (including name, address, bank and payment card information, currency, and transaction number) along with information about your order will be transmitted to the provider as per Art. 6 (1) b GDPR. The data is shared solely for payment processing and only as needed.

• Google Pay

If you choose the "Google Pay" payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, payment is processed through the "Google Pay" application on your Android device with NFC functionality by charging a payment card or verified payment system registered in Google Pay (e.g., PayPal). For payments over €25, you will need to unlock your device with the set verification method (e.g., facial recognition, password, fingerprint, or pattern).

For payment processing, the information you provided during the order process, along with the order details, will be transmitted to Google. Google will then transmit your Google Pay payment information in the form of a one-time transaction number to the originating website to verify that the payment has been made. This transaction number does not contain any actual payment data and serves as a unique numeric token for the transaction.

If personal data is processed during these transmissions, it is done so exclusively for payment processing per Art. 6 (1) b GDPR.

Google reserves the right to collect, store, and analyze specific transaction information for each transaction made via Google Pay. This includes transaction date, time, amount, merchant location and description, purchased goods or services, and additional data.

According to Google, this processing is done exclusively under Art. 6 (1) f GDPR for the legitimate interest of proper billing, transaction data verification, and optimizing the Google Pay service.

Further information about Google Pay's privacy policy can be found at:
https://support.apple.com/en-us/HT203027

• Klarna

This website offers one or more online payment methods from the following provider: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If you choose a payment method where you pay in advance (e.g., credit card payment), your payment data (including name, address, bank and payment card information, currency, and transaction number) along with information about your order will be transmitted to the provider as per Art. 6 (1) b GDPR. The data is shared solely for payment processing and only as needed.

If you choose a payment method where the provider pays in advance (e.g., invoice or installment payment), you will also be asked to provide personal data (first name, last name, street, house number, postal code, city, date of birth, email, phone number, and possibly data for an alternative payment method).

To ensure our legitimate interest in determining the payment capability of our customers, this data will be forwarded to the provider for a credit check per Art. 6 (1) f GDPR.

9) Retargeting/Remarketing and Conversion Tracking

9.1 Meta Pixel

Within our online offering, we use the "Meta Pixel" service from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta").

When a user clicks on an advertisement placed by us on Facebook and/or Instagram, "Meta Pixel" extends the URL of our linked page with a parameter. This URL parameter is then entered into the user’s browser after the redirection through a cookie set by our linked page.

This allows Meta to determine the visitors of our online offer as a target audience for displaying advertisements (so-called "Ads"). We use this service to show our Facebook and/or Instagram ads only to those users who have already shown interest in our online offer or have certain characteristics (e.g., interests in specific topics or products, determined by the visited websites), which we transmit to Meta (so-called "Custom Audiences").

Additionally, "Meta Pixel" allows us to track whether users were redirected to our website after clicking on an advertisement and what actions they take there (so-called "Conversion Tracking").

The collected data is anonymous and does not provide us with any conclusions about the users' identity. However, the data is stored and processed by Meta, so a connection to the respective user profiles is possible, and Meta can use the data for its own advertising purposes.

All of the processes described above, especially the setting of cookies, are only carried out if you have given us your explicit consent in accordance with Art. 6 (1) a DSGVO.