Data protection

Data Protection

The controller responsible for data processing is:
Exim Welt GmbH
Am alten Bushof 10
16259 Bad Freienwalde
Germany
Tel: +49 30 52015150 
contact@neandertaler-feuer.de 


We appreciate your interest in our online store. Protecting your privacy is very important to us. Below, we provide detailed information about how your data is handled.


1. Access Data and Hosting

You can visit our website without providing personal information. Every time a webpage is accessed, the web server automatically stores a server log file, which contains information such as the name of the requested file, your IP address, date and time of access, the amount of data transferred, and the requesting provider (access data). This data is used solely to ensure the smooth operation of the website and to improve our offerings. This processing serves our legitimate interests in ensuring proper presentation of our services in accordance with Art. 6 (1) (f) GDPR. All access data is deleted no later than seven days after your visit to the site.

Hosting Services by a Third Party

As part of data processing on our behalf, a third-party provider provides hosting and website presentation services. All data collected as described in this privacy policy is processed on its servers. Data is only processed on other servers as specified in this policy.
The service provider is based in a country within the European Union (EU) or the European Economic Area (EEA).


2. Data Collection and Use for Contract Processing, Contact Requests, and Account Creation

We collect personal data if you voluntarily provide it to us as part of your order, when contacting us (e.g., via contact form or email), or when opening a customer account. Mandatory fields are marked as such, as the data is necessary for contract processing or handling your contact request. Without it, you may not be able to complete your order or contact us. The data collected is evident from the respective input forms.
We use the data you provide in accordance with Art. 6 (1) (b) GDPR to process contracts and handle your inquiries.
If you have given your consent in accordance with Art. 6 (1) (a) GDPR, we will use your data for the purpose of creating your customer account.
After full contract execution or deletion of your customer account, your data will be restricted for further processing and deleted after expiration of retention periods under tax and commercial law, unless you have explicitly consented to further use of your data or we are legally permitted to process your data as outlined in this privacy policy. You can delete your customer account at any time by contacting us or using the corresponding function in the account settings.


3. Data Sharing

For Contract Fulfillment

To fulfill the contract in accordance with Art. 6 (1) (b) GDPR, we share your data with the shipping company tasked with delivery, as necessary to deliver the ordered goods. Depending on the payment service provider you select during the order process, we share the payment data collected for payment processing with the payment institution responsible for the payment or with any payment service providers selected.
Certain payment service providers may also collect this data directly if you create an account with them. In such cases, you must log in with the payment service provider during the ordering process using your access data. The privacy policy of the respective payment service provider applies.

Sharing Data with Shipping Providers

If you have expressly consented during or after your order in accordance with Art. 6 (1) (a) GDPR, we will share your email address and phone number with the selected shipping provider so they can contact you to arrange delivery.
You can withdraw your consent at any time by contacting us. Once withdrawn, we delete the data unless you have explicitly consented to further use or we are legally permitted to process it as outlined in this privacy policy.


4. Email Newsletter

Newsletter Subscription

If you subscribe to our newsletter, we will use your email address to regularly send you our newsletter based on your consent in accordance with Art. 6 (1) (a) GDPR.
You can unsubscribe from the newsletter at any time by contacting us or using the link provided in the newsletter. Upon unsubscribing, your email address will be removed from the mailing list unless you have explicitly consented to further use or we are legally permitted to use it as outlined in this privacy policy.

Promotional Emails Without Newsletter Subscription

If we receive your email address in connection with the sale of goods or services and you have not objected, we reserve the right to regularly send you offers for similar products via email in accordance with § 7 (3) UWG. This is based on our legitimate interest in promotional communication with our customers.
You can object to this use of your email address at any time by contacting us or using the unsubscribe link in the promotional email.


5. Cookies and Web Analysis

To make our website more attractive, enable certain functions, and conduct market research, we use cookies on various pages. This serves our legitimate interests in optimizing our services in accordance with Art. 6 (1) (f) GDPR.
Cookies are small text files stored on your device. Some cookies are deleted after your session (session cookies), while others remain to recognize your browser on future visits (persistent cookies). You can configure your browser to notify you of cookies, decide on a case-by-case basis, or block cookies entirely.


6. Contact and Your Rights

As a data subject, you have the following rights:

  • Access (Art. 15 GDPR): Obtain information about your personal data processed by us.

  • Rectification (Art. 16 GDPR): Correct inaccurate or incomplete data.

  • Erasure (Art. 17 GDPR): Request deletion of your data under certain conditions.

  • Restriction of Processing (Art. 18 GDPR): Limit data processing under specific circumstances.

  • Data Portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format or request its transfer to another controller.

  • Complaint (Art. 77 GDPR): File a complaint with a supervisory authority.


For questions or concerns regarding the collection, processing, or use of your data, or to exercise your rights, please contact us using the details provided in our Impressum.