We are very pleased about your interest in our company. Data protection is of a particularly high priority for the management of SEFSHOPINC. The use of the www.sefshopinc.com website is possible without any indication of personal data. However, if you want to use our services processing of personal data could become necessary. If processing of personal data is necessary and there is no legal basis for such processing, we will generally obtain the consent of the data subject.
With the following privacy policy, we inform you about the nature, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or jointly with others on the purposes and means of the processing. In addition, we inform you below about the third-party components we use for optimization purposes and to increase the quality of use, insofar as third parties process data on their own responsibility.
Personal data are processed by us only as necessary and for the purpose of providing a functional and user-friendly website, including its contents and the services offered there.
SEFSHOPINC respects your right to privacy when you use our website or when you contact us. By using our website or providing us with personal information, you accept the practices described in this Privacy Policy. If you do not agree with this privacy policy, we recommend that you do not use or visit our website or provide any personal data.
SEFSHOPINC reserves the right to change this privacy policy at any time. You should therefore check it regularly for changes. Changes will become effective upon their posting on this website, and we will notify you appropriately of any material changes.
In accordance with the General Data Protection Regulation (hereinafter referred to as "GDPR"),
· "personal data" is any information relating to an identified or identifiable living individual. Various pieces of information that together can lead to the identification of a specific person also constitute personal data. Personal data that have been anonymized, encrypted or pseudonymized, but can be used to re-identify an individual, remain personal data and fall within the scope of the General Data Protection Regulation. Personal data that have been anonymized in such a way that the data subject cannot be identified or can no longer be identified are no longer considered personal data. For the data to be truly anonymized, the anonymization must be irreversible.
· "processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Our Principles:
SEFSHOPINC respects your right to privacy and is committed to the following key principles:
· We protect your privacy and aim to provide you with a service that is tailored to your needs.
· Personal data is collected for specific purposes based on your consent or a legitimate interest when you contact us.
· You have the right to information and access to your personal data at any time and may request its correction or deletion.
· We do not sell your personal data to third parties. However, if necessary and if explicitly mentioned afterwards or if you have consented, we may share your data with group companies, brand licensees, partners and other service providers. In this case, their own privacy policies may also apply.
· We take all reasonable measures to ensure the security and protection of your data from misuse.
We are pleased that you are visiting and using our website, online store, and social media presences. We hope that during your visit you will learn more interesting facts about SEFSHOPINC, the history of our brands and our products and services.
Information about us as the responsible party
The responsible party for processing or the “Controller” in the sense of data protection law is:
SEFSHOPINC
Web: www.sefshopinc.com
E-mail: sefshopinc@gmail.com
Rights of users and persons concerned and the legal bases of processing
If you are a California resident, you have the right to:
· request, up to two times each year, access to categories and specific pieces of personal information about you that we collect, use, disclose, and sell.
· request that we delete personal information that we collect from you, subject to applicable legal exceptions.
· “opt out” of the “sale” of your “personal information” to “third parties”
In addition, under California’s “Shine the Light” law, California residents who provide personal information (as defined in the statute) to obtain services are entitled to request and obtain from us, once per calendar year, information about the personal information we shared, if any, with other businesses for marketing uses. If applicable, this information would include the categories of personal information and the names and addresses of those businesses with which we shared such personal information for the immediate prior calendar year (e.g., requests made in the current year will receive information about the prior year).
If you are a Citizen of the EU, you are entitled to the following rights under the conditions specified in each of the articles:
· the right to information in accordance with Article 15 of the GDPR,
· the right to rectification in accordance with Article 16 GDPR,
· the right to erasure in accordance with Article 17 GDPR,
· the right to restriction of processing pursuant to Article 18 GDPR,
· the right to data portability under Article 20 GDPR,
· the right to object pursuant to Article 21 GDPR,
· the right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR,
· the right to revoke consent given at any time, without this affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
The above rights may be limited in some circumstances, for example, if fulfilling your request would reveal personal information about another person, if you ask us to delete information which we are required to have by law, or if we have compelling legitimate interests to keep it. We will let you know if that is the case and will then only use your information for these purposes. You may also be unable to continue using our services if you want us to stop processing your personal information.
We encourage you to get in touch if you have any concerns with how we collect or use your personal information
The legal bases for processing are listed below and at least one of these must apply whenever we process personal data:
· Art. 6 (1) lit. a GDPR serves as our legal basis for processing operations where we obtain your consent for a specific processing purpose.
· Art. 6 (1) lit. b GDPR, insofar as the processing of personal data is necessary for the performance of a contract, e.g. if you purchase a product. The same applies to such processing operations that are necessary for the performance of pre-contractual measures, for example in the case of inquiries about our products or services.
· Art. 6 (1) lit. c GDPR, insofar as we are subject to a legal obligation that requires the processing of personal data, such as for the fulfillment of tax obligations.
· Art. 6 (1) lit. d GDPR in the event that vital interests of you or another natural person require the processing of personal data.
· Art. 6 (1) lit. f GDPR applies on the basis of our legitimate interests, e.g. when using service providers as part of order processing, such as shipping service providers or when carrying out statistical surveys and analyzes and logging registration procedures. Our interest is directed towards the use of a user-friendly, appealing and secure presentation as well as optimization of our website, which serves our business interests as well as meeting your expectations.
Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of the storage no longer applies, the deletion of the data does not conflict with any legal obligations to retain data and no other information is provided below on individual processing procedures.
Server data
For technical reasons, in particular to ensure a secure and stable Internet presence, data is transmitted by your Internet browser to us or to our web space provider. These so-called server log files include the type and version of your internet browser, the operating system, the website from which you accessed our website (referrer URL), the website(s) of our website that you visit, the date and time of the respective access as well as the IP address of the internet connection from which our website is used.
The data collected in this way is temporarily stored, but not together with other data about you. This storage takes place on the legal basis of our legitimate interest. Our legitimate interest lies in the improvement, stability, functionality and security of our website. The data is deleted again after seven days at the latest, unless further storage is required for evidence purposes. Otherwise, the data is exempt from deletion in whole or in part until the final clarification of an incident.
Cookies
We use so-called cookies with our internet presence. Cookies are small text files or other storage technologies that are placed and stored on your end device by the Internet browser you use. These cookies are used to process certain information about you on an individual basis, such as your browser or location data or your IP address.
This processing makes our website more user-friendly, effective and secure. The legal basis for this processing is a contract, insofar as these cookies data are processed for the purpose of initiating or executing a contract. If the processing does not serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our website. In this case, the legal basis is our legitimate interest.
If you wish to learn more about cookies in general and how they work, please visit www.allaboutcookies.org. If you want to read more about the cookies we use, please refer to our Cookie Policy.
Hosting
The hosting services underlying this site are provided by GoDaddy LLC in the USA. Go Daddy offers Software as a Service (SaaS) services in the context of cloud hosting. GoDaddy LLC automatically collects and stores server log files with information that your browser transmits to us. This is: Browser type, Operating system, Referrer URL, (previously visited page), Host name (IP address).
Go Daddy LLC cannot assign this data to specific persons. A combination of this data with other data sources is not made. The data is deleted after a statistical analysis after 7 days at the latest. Further information can be found in the privacy policy of GoDaddy LLC. These can be viewed here.
Contacting Us
If you contact us, the data you provide will be used to process your inquiry. The provision of the data is necessary for the processing and answering of your inquiry - without the provision of this data we cannot answer your inquiry or at best only to a limited extent. The legal basis is the execution of a contract. If the processing does not serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our website. In this case, the legal basis is our legitimate interest. Your data will be deleted as soon as your inquiry has been finally answered and there are no legal obligations to retain data, e.g. for the subsequent processing of a contract.
Order Process, Customer Account
We process personal data if you provide it to us as part of your order or when opening a customer account. Which data is collected can be seen from the respective input forms. The deletion of your customer account is possible at any time and can be done by sending a message to the contact option described above. The data stored in the customer account will then be automatically deleted. The data collected in the context of an order will be deleted after the expiry of the tenth calendar year after the order, subject to your consent to further processing or longer statutory retention obligations.
We use the data collected from you in this way in accordance with Art. 6 para. 1 lit b) GDPR for the purpose of contract processing and execution.
Data Processing For Order Handling
To process your order, we cooperate with various service providers who support us in whole or in part in the execution of concluded contracts. Personal data concerning you will be transmitted to these service providers in accordance with the following.
The personal data collected by us will be passed on to the carrier commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods ordered by you. In the context of the dispatch of the goods, we will only pass on your e-mail address to the carrier for the purpose of coordinating a delivery date or for delivery notification if you have given your express consent to this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the carrier for the purpose of delivery.
We pass on your payment data to the commissioned payment service provider within the framework of payment processing, insofar as this is required for payment processing. For individual payment methods (in particular purchase on account), in addition to the transmission of your payment data, it is also necessary for us or the payment service provider to carry out an identity and credit check. However, such a check is only carried out if you have given your express consent to this when selecting the payment method.
The forwarding of your e-mail address to the carrier is based on your consent in accordance with Art. 6 Para. 1 lit a) GDPR. The transmission of the name of the recipient and the delivery address is carried out in accordance with Art. 6 para. 1 lit b) GDPR for the fulfillment of our contract concluded with you. The transfer of the information required to process the payment to the payment service provider takes place in accordance with Art. 6 para. 1 lit a) GDPR, insofar as you have expressly consented in an identity and credit check as part of the ordering process, and otherwise Art. 6 para. 1 lit b) GDPR for the performance of the contract.
Sending information
We use your data for sending information ordered by you about our offer and other promotions from us to the e-mail address provided by you.
a) Newsletter registration on our website
On our website there is the possibility to subscribe to a free newsletter. When you register for the newsletter, the data from the input mask is transmitted to us, i.e. at least your e-mail address. The registration is carried out by means of the so-called double opt-in procedure.
After registration, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can register with other people's e-mail addresses. For the processing of the data, your consent is obtained during the registration process and reference is made to this data protection notice. If you register for our newsletter, which informs you about our latest products and services, the personal data you provide in this context (such as name, address and e-mail address) will be processed by us for the purpose of sending you the newsletter.
b) Dispatch due to the sale of goods
If you purchase goods or services on our website, we may send you information on our own similar goods to your specified e-mail address even without your consent. The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. f GDPR, because advertising related products and services by way of direct advertising represents a legitimate interest for us as the provider of this website. You may object to the processing of your personal data for the purpose of direct advertising at any time. We will then refrain from further processing for such purposes. You can send us your objection as described below. In addition, you can object to the sending of such newsletters at any time in the future without giving reasons by unsubscribing via the unsubscribe link at the end of each newsletter or by contacting us in any other way.
We would like you to enjoy reading our e-mails. Therefore, we try to only include content that you are likely to be interested in. We therefore measure and store opening and click-through rates in your usage profile, i.e. whether and when you open our emails, which content of the emails you click on and when, as well as whether and why our emails could possibly not be delivered. We also use this data for statistical purposes. In particular, this serves our legitimate interest to evaluate the performance of the individual newsletter campaigns and to define optimization measures in order to make the newsletter as attractive and suitable as possible for you. The legal basis for the processing is therefore Art. 6 para. 1 lit. f GDPR.
Of course, you can unsubscribe from receiving our information at any time, i.e. revoke your consent with effect for the future or object to data processing. For this purpose, you will find a corresponding unsubscribe link in every mail or newsletter and can confirm the unsubscription on our website. You can also contact us for a cancellation at any time.
Disclosure of personal data to third parties
Your personal data will only be passed on if there is a legal obligation to do so or to service providers and partner companies that have been carefully selected in advance and are contractually obliged to comply with the requirements of data protection law.
a) Disclosure within affiliated companies pursuant to Art. 6 Para. 1 lit. b GDPR
We pass on your personal data for the conclusion and processing of contracts for offers on our website to affiliated companies. This is particularly necessary so that you can use all our offers. If you contact a store or our customer hotline with questions, complaints or returns as well as other complaints, they will also receive access to your order data in order to be able to process your request.
b) Disclosure to service providers according to Art. 6 para. 1 lit. b and f GDPR
For the operation and optimization of our website and our services and for the processing of contracts, various service companies work for us, e.g. for central IT services or the hosting of our website, for the payment and delivery of products or for the dispatch of newsletters, to whom we pass on the data required for the fulfillment of the task (e.g. name, address).
Some of these companies act for us by way of commissioned processing and may therefore use the data provided exclusively in accordance with our instructions. In this case, we are legally responsible for appropriate data protection precautions at the companies we commission. We therefore agree on specific data security measures with these companies and monitor them regularly.
In contrast to order processing, in the following cases we transmit data to third parties for their own use in order to process the contract:
· In the case of delivery of goods to logistics companies and the postal service provider specified when the order was placed.
In the case of payment for goods to the payment service provider specified when the order was placed.
We do not collect or store any payment transaction information such as credit card numbers or bank details during the payment process. You only provide this information directly to the respective payment service provider.
c) Disclosure to other third parties pursuant to Art. 6 para. 1 lit. c and f GDPR
Place of processing
We ourselves do not transfer your personal data to countries outside the United States, except in cases where it is permitted under applicable data protection law.
Existence of automated decision making
We do not use automated decision making or profiling.
When you send a data subject access request
The legal basis for the processing of your personal data in the context of handling your data subject access request is our legal obligation and the legal basis for the subsequent documentation of t data subject access request is both our legitimate interest and our legal obligation. The purpose of processing your personal data in the context of processing data when you send a data subject access request is to respond to your request. The subsequent documentation of the data subject access request serves to fulfill the legally required accountability.. Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the processing of a data subject access request, this is three years after the end of the respective process. You have the possibility at any time to object to the processing of your personal data in the context of the processing of a data subject access request for the future. In this case, however, we will not be able to further process your request. The documentation of the legally compliant processing of the respective data subject access request is mandatory. Consequently, there is no possibility for you to object.
Legal defense and enforcement of our rights
The legal basis for the processing of your personal data in the context of legal defense and enforcement of our rights is our legitimate interest. The purpose of processing your personal data in the context of legal defense and enforcement of our rights is the defense against unjustified claims and the legal enforcement and assertion of claims and rights. Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The processing of your personal data in the context of legal defense and enforcement is mandatory for legal defense and enforcement of our rights. Consequently, there is no possibility for you to object.
Online Payment, Secure data transmission and Credit card information
The transmission of your personal information during an order transaction is encrypted using industry standard Secure Socket Layer ("SSL") technology, (SSL encryption version 3). Any credit card information you provide will not be stored by us, but will be encrypted and collected directly from our payment service provider via hypertext transfer protocol secure ("https").We may share information with our payment service provider, and you may need to provide credit or debit card information directly to the provider in order to process payment details and authorize payment following a secure link. The information which you supply to in such cases is not within our control and is subject to our payment service provider’s own Privacy Notice and Terms and Conditions.
Data recipients and international data transfers
In the course of our business, including in connection with some client services, and personal data collected on the Websites may be transferred from time to time to our third-party service providers located around the world, including to countries where local laws may give you fewer rights than you have in your own country. In addition, we and our third-party providers' websites may be viewed and hosted anywhere in the world. To the extent required by law, we have put in place legal measures designed to ensure that your personal data processed by third-party providers is adequately protected, such as when your personal data is transferred to countries other than your country of residence. By using the Sites and providing information thereon, you consent to such cross-border transfer and hosting of such data.
We will not intentionally disclose or transfer (and will take reasonable steps to prevent unauthorized or inadvertent disclosure) your personal information to third parties without your consent, or unless otherwise permitted by law, whether for such third parties' own marketing purposes or otherwise, except in the following circumstances. We may provide access to your personal information to third parties engaged by us to provide services in connection with the Sites, and in connection with our business activities, including with respect to certain services, as agreed in our service contracts. We maintain procedures to ensure that any processing of personal data by external service providers is carried out in accordance with this Privacy Policy and to protect the confidentiality, availability and integrity of your personal data.
We may also share your personal data with third-party service providers who perform services and tasks on our behalf in support of our interactions with you, such as, but not limited to, processing recruitment materials, administering surveys or contests, or communicating with you.
In addition, we may share information about you:
· if we are required to do so by law or by legal process;
· to police and regulatory authorities or other public administration bodies;
· if we believe that such disclosure is necessary or appropriate to prevent physical harm or financial loss or in the course of an investigation into suspected or actual unlawful activity;
· where disclosure is necessary to protect an individual's vital interests;
· to enforce our terms of use;
· to protect our property, services and rights;
· to prevent fraud against Current Lab, its subsidiaries, affiliates and/or business partners;
· to support the internal audit, compliance and corporate governance functions; or
· to comply with all applicable laws.
In addition, we may disclose or transfer your personal information in the event of a reorganization, business combination, sale, joint venture, assignment or other transfer or disposition of all or part of our business.
Duration Of Data Processing
Unless otherwise stated, we do not store or process personal data of users of our web site beyond the termination of actual use. However, this does not apply if we are obliged to retain such data due to the respective applicable statutory retention periods (e.g. retention periods under commercial and tax law).
Necessity Of Data Collection
The collection of your personal data described in more detail is neither legally required nor contractually prescribed for the use of our web site, but is necessary for the realization of the purposes described in each case.
Consent Given
You may revoke any consent you may have given for data processing, in whole or in part, at any time with effect for the future. The revocation does not affect the lawfulness of the processing of the personal data that took place until the revocation.
Right Of Objection Of The Data Subject Pursuant To Art. 21 GDPR
In accordance with Art. 21 GDPR, you have the right to object at any time with future effect to the processing of personal data relating to you that is carried out on the basis of Article 6(1)(f) GDPR, for reasons arising from your particular situation.
We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.
Social Media
The data you enter on our social media pages, such as comments, videos, pictures, likes, public messages, etc. are published by the social media platform and are not used or processed by us for any other purpose at any time. We only reserve the right to delete content if this should be necessary. Where applicable, we share your content on our site if this is a function of the social media platform and communicate with you via the social media platform. The legal basis is our legitimate interest. The data processing is carried out in the interest of our public relations and communication.
If you wish to object to certain data processing over which we have an influence, please contact us. We will then examine your objection. If you send us a request on the social media platform, we may also refer you to other secure communication channels that guarantee confidentiality, depending on the response required. You always have the option of sending us confidential inquiries to our address stated in the imprint.
As already stated, where the social media platform provider gives us the opportunity, we take care to design our social media pages to be as data protection compliant as possible. With regard to statistics that the provider of the social media platform makes available to us, we can only influence these to a limited extent and cannot switch them off. However, we make sure that no additional optional statistics are made available to us.
Data processing by the operator of the social media platform
The operator of the social media platform uses web tracking methods. The web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As already explained, we can unfortunately hardly influence the web tracking methods of the social media platform. We cannot, for example, switch this off.
Please be aware: It cannot be ruled out that the provider of the social media platform uses your profile and behavioral data, for example to evaluate your habits, personal relationships, preferences, etc. We have no influence on this. In this respect, we have no influence on the processing of your data by the provider of the social media platform.
Security
We have implemented generally accepted technical and organizational security standards to protect personal information from loss, misuse, alteration or destruction. Only authorized Current Lab employees and our third-party vendors are granted access to personal information, and these employees and third-party vendors are required to keep this information confidential. Despite these safeguards, we cannot guarantee that unauthorized persons will not gain access to your personal information.
Data storage
We store personal data as required for the duration of the relevant business relationship. We may also retain personal data for longer than the duration of the business relationship if we need to retain it to defend ourselves against legal claims, for analytical or historical data retention purposes, or to comply with our information management policies and plans. If you make a request for deletion of your personal information, we will make reasonable efforts to completely delete all units of information. For information about accessing, correcting or deleting personal information, please see the "Your rights" section of this Privacy Policy.
Children
Children need particular protection when collecting and processing their personal data because they may be less aware of the risks involved. Compliance with the data protection principles and in particular fairness is central to all our processing of children’s personal data. Where we process a child’s personal data consent from whoever holds parental responsibility for the child is obtained. Children have the same rights as adults over their personal data. These include the rights to access their personal data; request rectification; object to processing and have their personal data erased.
Am I Obliged To Provide Data?
The processing of your data is necessary for the conclusion or fulfillment of the contract you have entered into with us. If you do not provide us with this data, we will usually have to refuse to conclude the contract or will no longer be able to perform an existing contract and consequently have to terminate it. However, you are not obliged to give your consent to data processing with regard to data that is not relevant for the fulfillment of the contract or that is not required by law.
Do Not Sell My Personal Information
We do not sell information that directly identifies you, like your name, address or phone records.
Accuracy
It is important that the data we hold about you is accurate and current, therefore please keep us informed of any changes to your personal data.
Closing
By using the Sites, you consent to the collection, use and storage of your personal information by us in the manner described in this Privacy Policy and elsewhere on the Sites. We reserve the right to make changes to this Privacy Policy from time to time. We will notify you of such changes by posting an updated version of this Privacy Policy. If we make material changes to this Privacy Policy that expand our rights to use the personal information we have previously collected about you, we will obtain your consent either by sending an email to your registered email address or by prominently posting a notice of the changes on our websites.
Contact us
If you have any questions about our privacy policy, or if you would like to contact us you can reach us using sefshopinc@gmail.com.
We use cookies to analyze website traffic and optimize your website experience. By accepting our use of cookies, your data will be aggregated with all other user data.