Privacy Policy

Below we inform you about the nature, scope, and purpose of the processing of your personal data when using our shop at "www.unique-bild.de." Personal data is all information relating to an identified or identifiable natural person.

1. Person responsible

The controller within the meaning of the EU General Data Protection Regulation (GDPR) is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data. The controller for the personal data processed in this shop within the meaning of the GDPR is: Anton Toukhcherer & Philipp Dony GbR, Willhelm-Hammann-Str. 11, 64572 Büttelborn, telephone +49 (0) 1731587592, email info@unique-bild.de (hereinafter "we").

2. When you visit our website

When you visit our website, our server collects the following information from your device: browser type and version, operating system, the previously visited website (“referrer”), IP address and time of page access.

We collect and process this data to ensure the smooth operation of our website and to detect, prevent, and prosecute any misuse of our services. Furthermore, we use the collected data for statistical purposes, for example, to evaluate which devices and browsers are used to access our shop, in order to continuously adapt and improve our offering to user needs. This data processing is based on Article 6 (1) (f) GDPR.

We delete all of the above-mentioned personal data no later than twelve months after it was collected.

3. When you order from us

When you place an order in our store, we process your name, delivery address, and email address as you provide them during the ordering process. If you voluntarily provide additional information with your order (e.g., a different billing address or telephone number), we also process this data.

We process this data electronically for the proper fulfillment of the contract, in particular for delivery, invoicing, recording payments, and processing returns and complaints. If we are obligated to provide you with updates for a digital product or for goods with digital elements, we will also process your contact details for this purpose. This data processing is based on Article 6 (1) (b) GDPR.

We will retain this data until all mutual claims arising from the respective contractual relationship with you have been fully settled and the retention periods under commercial and tax law to which we are subject have expired.

For a contract to be concluded between you and us, we require your name, delivery address, and email address. The requirement to provide this data arises from legal regulations (e.g., Section 312i Paragraph 1 Item 3 of the German Civil Code (BGB), Section 14 Paragraph 4 of the German Value Added Tax Act (UStG). Therefore, without providing this data, you cannot conclude a contract with us.

When deciding whether to conclude a contract, we do not use automated decision-making or profiling.

4. Customer account

You have the option of creating a customer account in our online shop. The data required for this purpose and processed by us is shown in the input mask for opening the customer account. The customer account is created exclusively at your request. The legal basis is therefore your consent in accordance with Article 6 (1) (a) GDPR. We retain the personal data associated with the customer account until you delete the customer account or request us to delete it. For personal data from previously concluded contracts, the retention periods set out in the section "When you order from us" remain in effect, regardless of the existence of the customer account.

5. Delivery and payment

If we send physical goods under the purchase contract, we will transmit the name and address of the recipient and, if you have consented to this, your email address to Deutsche Post (Deutsche Post AG, 53113 Bonn), DHL (DHL Paket GmbH, 53113 Bonn), DPD (DPD Deutschland GmbH, 63741 Aschaffenburg), GLS (General Logistics Systems Germany GmbH & Co. OHG, 36286 Neuenstein), Hermes (Hermes Germany GmbH, 22419 Hamburg) or UPS (United Parcel Service Deutschland S.à rl & Co. OHG, 41460 Neuss) as shipping service providers for the purpose of delivering the shipment, if necessary including a prior email notification of the expected delivery time, and for the purpose of a possible return of your shipment to us on the basis of Article 6 (1) (b) GDPR.

To pay for your purchase, the payment service provider you choose collects and processes your name, email address, card or account number, and/or other data, as required for the payment method you choose. The contractual and data protection provisions of the payment service provider you choose also apply.

When we receive a payment, we process the data that the payment service provider sends us.

When we receive a transfer to our account, we process in particular the name of the transferring account holder, the account number (IBAN and BIC) and the intended purpose provided.

Processing is based on Article 6, Paragraph 1, Letter b of the GDPR. We retain this data until all mutual claims arising from the respective contractual relationship with you have been fully settled and the retention periods to which we are subject under commercial and tax law have expired.

6. Processor

To support our operational processes, we use the services of Oberlo (D04 XN32 Dublin 4) and Shopify International Limited (D04 XN32 Dublin 4) as processors in accordance with Article 28 GDPR.

To operate our website on the Internet, we use the technical services of Shopify (Shopify International Limited, Dublin 4, D04 XN32, Ireland) as a processor in accordance with Article 28 GDPR.

7. Contact

If you use the contact form on our website, we process the data you enter in the form, in particular your name, your email address and your message.

If you send us a message by email, we will save your message along with the sender information transmitted with it (name, email address, and any other information added by your email program and the transmitting servers). For the receipt, storage, and sending of emails, we use services from Strato (Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin) as a processor in accordance with Article 28 of the GDPR.

The legal basis for this data processing is our legitimate interest in answering your message and responding to any follow-up questions you may have (Article 6 (1) (f) GDPR). We will delete the data collected with your message no later than twelve months after the last communication with you regarding your request, subject to the provisions in the following paragraph.

If you send us a legally relevant declaration relating to the contractual relationship (e.g., a revocation or a complaint), the legal basis for processing, regardless of the method of transmission, is also Article 6, Paragraph 1, Letter b of the GDPR. In such a case, we will delete the data associated with your declaration as soon as all mutual claims arising from the contractual relationship have been finally settled and the retention periods under commercial and tax law have expired.

8. Newsletter

If you subscribe to our newsletter, we will inform you by email about new offers and features in our shop. You will not receive more than one newsletter per week. You can withdraw your consent to the use of your email address for advertising purposes at any time without incurring any costs other than the transmission costs according to the basic rates.

This data processing is based on your consent in accordance with Article 6, Paragraph 1, Letter a of the GDPR. If you revoke your consent to the use of your email address for advertising purposes, we will delete your email address from our newsletter distribution list.

9. Comments and ratings

If you write a comment or review about one of our products in our shop, we will publish your comment in the appropriate place on our shop website along with your username, for which you can also provide a pseudonym. To prevent misuse of our service, we store the IP address of the device from which you are posting for a period of twelve months (Article 6 (1) (f) GDPR). We reserve the right to delete irrelevant or thematically inappropriate posts at any time. Otherwise, we only delete published posts upon request from the respective author.

10. Google services

If you have given your consent, we use certain Google services on our website. If you visit our site from a location in the European Union, Norway, Iceland, Liechtenstein, or Switzerland, "Google" refers to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; otherwise, it refers to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

General information about Google's use of data can be found at https://policies.google.com/technologies/partner-sites ("How we use data from websites or apps that use our services").

11. Google Analytics

If you have consented, we use Google Analytics, a web analytics service provided by Google. Google places cookies on your device. These cookies allow Google to collect information about how you use our website. This information is transmitted to a Google server, evaluated there, and made available to us. We use this information to better understand what visitors to our website are interested in, the success of our advertising, and how we can improve our offering.

The legal basis for this processing is your consent (Article 6 (1) (a) GDPR).

To create the usage analyses, Google acts as our processor (Article 28 GDPR), based on a processing agreement that incorporates the EU standard data protection clauses. The content of the agreement with Google ("Data Processing Terms") can be accessed online at privacy.google.com/businesses/processorterms .

We use Google Analytics with activated IP anonymization. This means that, within the scope of the GDPR, your IP address is generally shortened so that it can no longer be used to identify you. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser will not be merged with other Google data. You can prevent cookies from being saved by setting your browser software accordingly.

12. Facebook Pixel, Custom Audience, Conversion Tracking

On our website we use the “Facebook Pixel” service from Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, or, if you are based in the USA or Canada: Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA). This technology makes it possible to define visitors to our website as a target group (“Custom Audience”) for advertisements delivered by Facebook (“Facebook Ads”). To do this, we use an invisible graphics file that we integrate into our website to analyze your user behavior and derive products or topics that may be of interest to you. Facebook Pixel also allows us to determine the effectiveness of Facebook Ads, namely whether and how you respond to one of our advertisements (“Conversion Tracking”).

This data processing is carried out on the basis of Article 6 (1) (f) GDPR, namely in our legitimate interest to promote our offers primarily to groups of people who are likely to be interested in our products and to analyze the effectiveness of the online advertising we use.

13. Social Media

Social media buttons may be displayed in our shop; they can be identified by the logos of the social media platforms (hereinafter "platforms") (Facebook: "f" logo, Twitter: bird silhouette, Instagram: square camera, Pinterest: "p"). These are links to the respective platforms based in the USA. Clicking on such a link calls up the website of the respective platform, whereby the IP address of the calling device and the address of the page from which the link is made ("referrer") are transmitted to the called platform in the USA. However, we do not collect or process any data ourselves in connection with the social media buttons.

14. Your rights

You have the following rights with regard to the personal data we process about you:

You have the right to request confirmation from us as to whether we process personal data concerning you. If this is the case, we will inform you of the personal data stored about you and the other information in accordance with Article 15 (1) and (2) GDPR.

You have the right to have inaccurate personal data concerning you rectified without undue delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data, including by means of providing a supplementary statement.

You can request that we immediately delete the personal data concerning you under the conditions of Article 17 (1) GDPR, unless their processing is necessary pursuant to Article 17 (3) GDPR.

You can request that we restrict the processing of your data if one of the conditions set out in Article 18, Paragraph 1 of the GDPR is met. In particular, you can request restriction instead of deletion.

We will notify any rectification or erasure of your personal data, or any restriction of processing, to all recipients to whom we have disclosed your personal data, unless doing so proves impossible or involves disproportionate effort. We will also inform you about these recipients upon your request.

You have the right to receive the personal data you have provided to us in a structured, common and machine-readable format and may request that we transmit this data to another controller without hindrance, where technically feasible.

If data processing is based on your consent, you have the right to revoke your consent at any time. Revoking your consent does not affect the legality of the data processing that has taken place up to the time of your revocation.

RIGHT OF OBJECTION: FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, YOU MAY OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME. This right of objection applies to data processing carried out on the basis of Article 6 (1) (f) GDPR to protect our or a third party's legitimate interests, unless your interests or fundamental rights and freedoms that require the protection of personal data prevail. If you exercise your right of objection, we will no longer process the data in question unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing serves to assert, exercise, or defend legal claims.

IN THE EVENT THAT WE PROCESS PERSONAL DATA FOR DIRECT MARKETING (E.G. NEWSLETTERS), YOU CAN OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING, WITH THE CONSEQUENCE THAT WE WILL NO LONGER PROCESS YOUR DATA FOR THESE PURPOSES.

If you believe that the processing of your personal data violates the GDPR, you may lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. This does not preclude other administrative or judicial remedies.