Privacy Policy

1. Hosting

To provide our online presence, we use the services of web hosting providers who process all data related to the operation of this website (including log files from website visits) on our behalf.

The legal basis for this data processing is our overriding legitimate interest in providing and operating our website, according to Art. 6 (1) (f) GDPR.

For hosting, we use the service provider Shopify Inc., 151 O’Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada. There is an adequacy decision from the EU Commission for data transfers to Canada.

2. Data Processing for Contract Fulfillment, Contacting Us, and Opening a Customer Account

We collect personal data when you voluntarily provide it to us during your order process or when contacting us (e.g., through a contact form or email). Mandatory fields are clearly marked, as we require this information to fulfill your order or process your inquiry. Without providing this information, you will not be able to submit your order or contact us. The data we collect is outlined in the respective input forms. We use the data you provide for contract fulfillment and to address your inquiries in accordance with Art. 6 (1) Sentence 1 lit. b GDPR.
If you have given your consent in accordance with Art. 6 (1) Sentence 1 lit. a GDPR to open a customer account, we will also use your data for this purpose. For more information on how we process your data, particularly regarding sharing with our service providers for order, payment, and shipping processing, please refer to the following sections of this privacy policy. After the complete fulfillment of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the expiration of tax and commercial retention periods in accordance with Art. 6 (1) Sentence 1 lit. c GDPR, unless you have explicitly consented to further use of your data in accordance with Art. 6 (1) Sentence 1 lit. a GDPR or we reserve the right to use your data in a manner that is legally permissible and of which we inform you in this statement. You can delete your customer account at any time by sending us a message to the contact option described in this privacy policy or by using the corresponding feature in your customer account.

3. Data Processing for Shipping Fulfillment

To fulfill the contract in accordance with Art. 6 (1) Sentence 1 lit. b GDPR, we will pass your data on to the shipping service provider engaged to deliver the ordered goods, as far as this is necessary for the delivery.

Data Sharing with Shipping Service Providers for Delivery Notification

If you have given us your explicit consent during or after your order, we will share your email address and phone number with the selected shipping service provider so that they can contact you prior to delivery for the purpose of delivery notification or coordination in accordance with Art. 6 (1) Sentence 1 lit. a GDPR.
You can revoke your consent at any time by sending a message to the contact address specified in this privacy policy or directly to the shipping service provider at the contact address provided below. After your revocation, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to a legally permissible further use of your data, of which we inform you in this statement.

4. Email Marketing

4.1 Email Newsletters with Registration

We offer you the opportunity to sign up for our newsletter free of charge on our website. To do this, we need your email address along with your consent. We will only send you the newsletter after you confirm your subscription by clicking on a link in a confirmation email we send you for this purpose. This step ensures that only you can subscribe to the newsletter. You must confirm your subscription promptly after receiving the confirmation email, as otherwise, your newsletter registration will be automatically deleted from our database. The legal basis for sending the newsletter and any additional voluntary information is Article 6(1)(a) of the GDPR. By submitting your newsletter registration, you consent to the processing of your data by us. Additionally, we will store the time (date and time) when you sent us your data and your IP address as part of your newsletter registration. For the confirmation email sent for verification purposes, we also store the date and time of the click on the confirmation link and your IP address. Processing this data is based on our legitimate interest under Article 6(1)(f) of the GDPR to ensure the security of our systems and to prevent abuse. Your data will only be processed in connection with sending newsletters. The purpose of processing your email address is to be able to deliver the newsletter to you. Additional data collected during the registration process is used to either address you personally or to ensure the security of our services and prevent misuse of the email address provided. Your data will be stored only as long as necessary to achieve this purpose. Therefore, your email address will be retained for the duration of your active newsletter subscription if you have given your consent. The data we automatically collect during your registration (IP address, date, and time) will be deleted at the latest when you unsubscribe from the newsletter.

Unsubscribing from the Newsletter

You can unsubscribe from our newsletter at any time. The link to do this is found at the end of every newsletter. By unsubscribing, you revoke your consent or object to further use of your data for the purpose of sending newsletters. The legality of the processing of personal data up to the point of withdrawal remains unaffected by the revocation.

4.2 Email Newsletters and Product Recommendations

We offer email newsletters to users who register on our website. Additionally, if you provide your email address during the use of our services, such as when making a purchase, we may use it to send you newsletters or product recommendations. This will be done solely for the purpose of direct advertising of our own or similar products and services, in accordance with § 7 (3) UWG. In cases where you have made a purchase, we may also send you product recommendations related to your recent orders, even if you haven't specifically subscribed to our newsletter.

Unsubscribing from the Newsletter

You can unsubscribe from our newsletter at any time. The link to do this is found at the end of every newsletter. By unsubscribing, you revoke your consent or object to further use of your data for the purpose of sending newsletters. The legality of the processing of personal data up to the point of withdrawal remains unaffected by the revocation.

4.3 Newsletter Dispatch

Our newsletter may also be sent by our service providers on our behalf. If you have questions about our service providers and the basis of our collaboration with them, please refer to the contact information described in this privacy policy.

Our service providers may be located in and/or use servers in the US and other countries outside the EU and EEA. These countries do not have an adequacy decision from the European Commission. Our collaboration with them is based on the Standard Contractual Clauses of the European Commission.

4.4 Email Reminders for Incomplete Purchases

If you begin a purchase process but do not complete it, we may send you a reminder email regarding your incomplete order. This is based on our legitimate interest under Article 6(1)(f) of the GDPR, aimed at providing you with a smooth user experience and ensuring you can finalize your purchase in case of any technical or other difficulties. If you no longer wish to receive such reminders, you can opt out at any time by using the unsubscribe link included in the email or by contacting us directly. These reminder emails will be sent only as long as you have not opted out.

5. Use of Cookies

We use cookies on our website. Cookies are small text files that are stored on your device (PC, smartphone, tablet, etc.) and saved by your browser.

For detailed information about the specific cookies we use, their providers, and their purposes, please refer to our consent banner. Through the consent banner, you can give your consent to specific services.

Our Consent Banner

To document your choices regarding certain data processing activities and to fulfill our legal obligations, we use a consent banner. When you visit our website, your cookie preferences are requested via this banner. We then set a cookie that stores data about the consents you have given or revoked. This data processing is carried out to fulfill our legal obligations under Article 6(1)(c) of the GDPR.

6. Use of Meta (Facebook) Services

Use of Meta (Facebook) Pixel

We use the Meta (Facebook) Pixel as part of the technologies provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta" or "Facebook"). The Meta Pixel automatically collects and stores data (such as IP address, time of visit, device and browser information, and information about your use of our website based on events specified by us, such as visiting a webpage or signing up for a newsletter). This data is used to create user profiles under pseudonyms. Additionally, as part of the so-called "Advanced Matching," hashed information that can identify individuals (such as names, email addresses, and phone numbers) is collected and stored for matching purposes. When you visit our website, a cookie is automatically set by the Meta Pixel, which allows your browser to be recognized when visiting other websites using a pseudonymous cookie ID. Meta (formerly Facebook) combines this information with other data from your Facebook / Instagram account and uses it to compile reports on website activities and to provide other services related to website usage, particularly personalized and group-based advertising.

The information automatically collected by Meta technologies about your use of our website is generally transmitted to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. The USA does not have an adequacy decision from the European Commission. If the data transfer to the USA falls under our responsibility, our cooperation is based on the European Commission's Standard Contractual Clauses. For more information on Meta's data processing, please refer to Meta's (Facebook's) privacy policy.

Meta (Facebook) Analytics

As part of Meta Analytics, statistics on visitor activities on our website are created from the data collected by the Meta Pixel about your use of our website. The data processing is based on an agreement with Meta for data processing. The analysis is used to optimize the presentation and marketing of our website.

Meta (Facebook) Ads

We advertise this website on Facebook and other platforms through Meta Ads. We set the parameters for each advertising campaign. Meta (formerly Facebook) is responsible for the precise implementation, including deciding where the ads are placed for individual users. Unless otherwise specified for the individual technologies, data processing is based on a joint responsibility agreement according to Article 26 of the GDPR. Joint responsibility is limited to data collection and its transmission to Meta Ireland. The subsequent data processing by Meta Ireland is not covered by this agreement.

Based on the statistics generated by Meta Pixel regarding visitor activities on our website, we conduct group-based advertising on Facebook through Meta Custom Audience, where we define the characteristics of the target audience. In the context of the advanced data matching used to determine the respective target audience (see above), Meta acts as our data processor.

Based on the pseudonymous cookie ID set by Meta Pixel and the data collected about your usage behavior on our website, we conduct personalized advertising through Meta Pixel Remarketing.

Through Meta Pixel Conversions, we measure your subsequent user behavior for web analytics and event tracking when you access our website via a Facebook Ads advertisement. The data processing is based on an agreement with Meta for data processing.

7. Social Media

Our Online Presence on Facebook, Instagram, YouTube, LinkedIn

If you have given your consent to the respective social media operator in accordance with Article 6(1)(1)(a) GDPR, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presence on the above-mentioned social media platforms. Usage profiles are created from this data using pseudonyms, which may be used to display advertisements both within and outside the platforms that are likely to match your interests. Cookies are typically used for this purpose. For detailed information on the processing and use of data by the respective social media operator, as well as contact information and your rights and settings to protect your privacy, please refer to the data protection notices of the providers mentioned below. If you still need assistance, you can contact us.

Facebook is offered by Meta Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Ireland"). The information automatically collected by Meta Ireland about your use of our online presence on Facebook/Instagram is generally transmitted to and stored on a server of Meta, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. There is no adequacy decision from the European Commission for the USA. Our cooperation with them is based on the European Commission’s Standard Contractual Clauses. Data processing as part of visiting a Facebook Fanpage is based on an agreement between joint controllers under Article 26 GDPR. Further information (regarding Insights data) can be found here.

Instagram is offered by Meta Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Ireland"). The information automatically collected by Meta Ireland about your use of our online presence on Instagram is generally transmitted to and stored on a server of Meta, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. There is no adequacy decision from the European Commission for the USA. Our cooperation with them is based on the European Commission’s Standard Contractual Clauses. Data processing as part of visiting an Instagram Fanpage is based on an agreement between joint controllers under Article 26 GDPR. Further information (regarding Insights data) can be found here.

YouTube is offered by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google about your use of our online presence on YouTube is generally transmitted to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. There is no adequacy decision from the European Commission for the USA. Our cooperation with them is based on the European Commission’s Standard Contractual Clauses.

LinkedIn is offered by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). The information automatically collected by LinkedIn about your use of our online presence on LinkedIn is generally transmitted to and stored on a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. There is no adequacy decision from the European Commission for the USA. Our cooperation with them is based on the European Commission’s Standard Contractual Clauses.

8. Use of Google Services

We utilize various technologies provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected through these Google services regarding your use of our website is typically transferred to and stored on servers located in the USA by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The USA does not have an adequacy decision by the European Commission for data protection, but our collaboration with Google is based on the Standard Contractual Clauses approved by the European Commission. If your IP address is collected through Google services, it is anonymized by shortening the IP before it is stored on Google’s servers. In rare cases, the full IP address may be transmitted to a Google server and then shortened. Unless otherwise specified, data processing for these technologies is based on a joint controller agreement according to Article 26 GDPR. For more details about how Google processes data, please refer to their privacy policies.

Google Analytics

We use Google Analytics to analyze the use of our website. This involves automatically collecting and storing data such as your IP address, device and browser information, and how you interact with our website. This data helps us create pseudonymized user profiles and may involve the use of cookies. Your IP address is never combined with other Google data. This data processing is carried out under a data processing agreement with Google.

We also utilize the data-sharing settings of Google Analytics to enhance the marketing of our website. With this setting enabled, Google can access and use the data processed through Google Analytics to improve its own services. This data-sharing takes place based on a separate joint controller agreement with Google. Once the data is shared with Google, we have no further control over how it is processed by them.

Through Google Signals, a feature of Google Analytics, cross-device tracking is enabled for web analysis. If your internet-connected devices are linked to your Google account and you have personalized ads activated in your Google account, Google may create reports on your usage patterns across devices. These reports are generated based on pseudonymized data, and we do not process any personal data ourselves, receiving only aggregated statistics.

Moreover, DoubleClick cookies are used as an extension of Google Analytics for web analysis and advertising purposes. These cookies allow Google to recognize your browser when you visit other websites, and Google uses this information to generate reports on website activities and provide related services.

Google Ads

To serve targeted ads within Google search results and on third-party websites, we use Google Remarketing. When you visit our website, a Google Remarketing cookie is placed in your browser, which collects and processes data (such as your IP address, device information, and usage of our website). This cookie assigns a pseudonymized cookie ID and tracks your visits across websites to show you relevant ads. If you have enabled personalized ads in your Google account, Google will combine this data with data from Google Analytics to create cross-device remarketing lists and target ads accordingly. If you're logged in to your Google account during your visit, Google will also use this data to personalize ads based on your previous interactions.

We also track your subsequent activities on our website, such as page visits or newsletter sign-ups, through Google Ads Conversion Tracking. This allows us to measure the effectiveness of our ads and involves the use of cookies and pseudonymized usage profiles based on the collected data (IP address, device/browser information, time of visit, and predefined events).

9. General Information and Mandatory Disclosures

Data Protection

The operators of this website take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data refers to any data that can be used to identify you personally. This privacy policy explains what data we collect, how we use it, and for what purpose.

Please note that data transmission over the internet (e.g., communication via email) may be subject to security vulnerabilities. A complete protection of data from third-party access is not possible.

Information about the Responsible Party

The responsible party for data processing on this website is:

S. Lautz UG (haftungsbeschränkt)
im AQUARIANA
Am Tempelhofer Berg 7 d
10965 Berlin
Email: hello@vesuv-design.com

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Duration

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you make a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., retention periods required by tax or commercial law); in such cases, deletion will occur after these reasons no longer apply.

Right to Object to Data Collection in Specific Cases and to Direct Marketing (Art. 21 DSGVO)

If data processing is based on Art. 6(1)(e) or (f) DSGVO, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims (objection under Art. 21(1) DSGVO).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection under Art. 21(2) DSGVO).

Right to File Complaints with Regulatory Authorities

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the location of the alleged infringement. This right to complain is without prejudice to any other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data that we process based on your consent or in fulfillment of a contract in a commonly used, machine-readable format or to have it transferred directly to another controller, where technically feasible.

Right to Access, Deletion, and Rectification

You have the right, within the scope of applicable legal provisions, to obtain at any time, free of charge, information about your stored personal data, its origin, its recipients, and the purpose of the data processing, and, if applicable, a right to rectify or delete this data. You can contact us at any time regarding this and other questions on the subject of personal data.

Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data. To do this, you can contact us at any time. The right to restrict processing applies in the following cases:

• If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. During the verification period, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
• If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of processing instead of deletion.
• If you have filed an objection pursuant to Art. 21(1) DSGVO, a balance must be struck between your and our interests. As long as it has not been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data—apart from being stored—may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.