Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide data has no consequences. This only applies insofar as no other indication is made in the following processing operations.
"Personal data" means all information relating to an identified or identifiable natural person.
Contact
Controller
Contact us upon request. The controller for data processing is: Mathias dos Santos Held, Gohliser Straße 4, 04105 Leipzig Germany, +49 (0) 341 561 29 505, ola@brasilheroe.com
Initiated Contact by Customer via Email
If you initiate business contact with us by email, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves to handle and respond to your contact request.
If the contact serves the implementation of pre-contractual measures (e.g., consultation regarding purchase interest, offer preparation) or concerns an already concluded contract between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to this processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.
We use your email address only to process your inquiry. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.
When using the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves the purpose of contacting you.
If the contact serves the implementation of pre-contractual measures (e.g., consultation regarding purchase interest, offer preparation) or concerns an already concluded contract between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to this processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.
We use your email address only to process your inquiry. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.
Customer Account Orders
Customer Account
When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the lawfulness of the processing carried out based on the consent until revocation. Your customer account will then be deleted.
Reviews Advertising
Data Collection When Writing a Comment
When commenting on an article or post, we collect your personal data (name, email address, comment text) only to the extent you provide it. The processing serves the purpose of enabling commenting and displaying comments. By submitting the comment, you consent to the processing of the transmitted data. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the lawfulness of the processing carried out based on the consent until revocation. Your personal data will then be deleted.
When publishing your comment, only the name you provided will be published.
Website Logo for Google Customer Reviews
Our website includes the website logo for Google Customer Reviews of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
The integration serves the purpose of displaying the number and results of reviews we have received via Google so far and to advertise participation in this program.
To display the logo on our website and to show you personalized ads on Google, Google uses cookies. Among other things, your IP address may be processed and transmitted to Google.
Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://privacy.google.com/businesses/controllerterms/.
The use of cookies or similar technologies is based on your consent pursuant to § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until revocation.
More information on terms of use and data protection when using Google Customer Reviews can be found at https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html and at https://policies.google.com/privacy?hl=de
We use the Google Customer Reviews rating tool from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website.
After your order, we would like to ask you to rate and comment on your purchase with us. For this purpose, you will be contacted by us via email, using Google's survey opt-in module. Among other things, the following information may be processed and transmitted to Google: order details (e.g., order ID, delivery country, expected delivery date, GTIN of ordered products) as well as your email address.
Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://privacy.google.com/businesses/controllerterms/ and https://business.safety.google/adscontrollerterms.The processing is based on Art. 6 para. 1 lit. a GDPR with your consent, provided you have expressly agreed to the transfer of your data and receipt of the review request. You can revoke your consent at any time with effect for the future without affecting the lawfulness of the processing carried out based on the consent until revocation.
We use your personal data (name, address) obtained in the context of the sale of goods or services to send you postal advertising, provided you have not objected to this use. Providing this data is necessary for the conclusion of the contract. Failure to provide data means that no contract can be concluded.
The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your address data at any time by notifying us. The contact details for exercising the objection can be found in the imprint.
Use of Email Address for Sending Newsletters
We use your email address exclusively for our own advertising purposes for sending newsletters, regardless of contract processing, provided you have expressly consented. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.
Your data will be passed on to an email marketing service provider within the scope of order processing. No further transfer to third parties takes place.
Use of Email Address for Sending Direct Advertising
We use your email address obtained in the context of the sale of goods or services for the electronic sending of advertising for our own goods or services similar to those you have already purchased from us, provided you have not objected to this use. Providing the email address is necessary for the conclusion of the contract. Failure to provide data means that no contract can be concluded. The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. The contact details for exercising the objection can be found in the imprint. You can also use the designated link in the advertising email. No costs other than transmission costs according to the basic tariffs will be incurred.
Shipping Service Providers Inventory Management
Transfer of Email Address to Shipping Companies for Information on Shipping Status
We pass on your email address to the shipping company within the scope of contract processing, provided you have expressly consented during the ordering process. The transfer serves the purpose of informing you by email about the shipping status. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the shipping company without affecting the lawfulness of the processing carried out based on the consent until revocation.
Use of an External Inventory Management System
We use an inventory management system for contract processing within the scope of order processing. For this purpose, your personal data collected during the order will be transmitted to
Billbee GmbH, Paulinenstrasse 54, 32756 Detmold
.
Payment Service Providers Credit Check
Use of PayPal
All PayPal transactions are subject to the PayPal privacy policy. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Data Collection and Processing for Credit Checks
If we provide services in advance, e.g., payment by invoice or direct debit, we reserve the right to obtain a credit report based on mathematical-statistical methods using Klarna, Chausseestraße 117, 10115 Berlin. For this purpose, we transmit the personal data required for a credit check there and use the information obtained about the statistical probability of default to make a balanced decision about the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, which include address data in their calculation. Your legitimate interests are taken into account according to legal requirements. The data processing serves the purpose of credit checking for contract initiation. The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protection against default when we provide services in advance. You have the right to object at any time to this processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation by notifying us. Providing the data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide data means that the contract cannot be concluded with the payment method you have chosen.
Use of Personal Data When Selecting Klarna Payment Options
To offer you Klarna payment options, we will transmit personal data, such as contact details and order data, to Klarna. This allows Klarna to assess whether you can use the payment options offered via Klarna and to tailor the payment options to your needs. General information about Klarna can be found at: https://www.klarna.com/de/. Your personal data will be processed by Klarna in accordance with applicable data protection regulations and according to Klarna's privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.
Cookies
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Analysis Advertising Tracking Communication
Use of Google Analytics
We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. Among other things, the following information may be collected: IP address, date and time of page access, click path, information about the browser and device you use, visited pages, referrer URL (website from which you accessed our website), location data, purchase activities. The IP address transmitted by your browser within Google Analytics is not merged with other data from Google.
Google Analytics uses technologies such as cookies, web storage in the browser, and tracking pixels that enable analysis of your use of the website. The information generated about your use of this website is usually transmitted to a Google server in the USA and stored there. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adsprocessorterms/. Both Google and US government authorities have access to your data. Your data may be linked by Google with other data, such as your search history, personal accounts, usage data from other devices, and all other data Google has about you.
IP anonymization is activated on this website. This means your IP address is shortened by Google within member states of the European Union or other contracting states of the Agreement on the European Economic Area before transmission. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
The use of cookies or similar technologies is based on your consent pursuant to § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until revocation.
More information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/ as well as at https://policies.google.com/technologies/cookies?hl=de.
Use of the Facebook Pixel
We use the remarketing function "Custom Audiences" of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland "Facebook") on our website.
Meta Platforms Ireland and we are joint controllers for the collection of your data and transmission of this data to Facebook when the service is integrated. This is based on an agreement between us and Meta Platforms Ireland on joint processing of personal data, which defines the respective responsibilities. The agreement is available at https://www.facebook.com/legal/controller_addendum. We are particularly responsible for fulfilling the information obligations under Art. 13, 14 GDPR, for compliance with the security requirements of Art. 32 GDPR regarding the correct technical implementation and configuration of the service, and for compliance with the obligations under Art. 33, 34 GDPR insofar as a personal data breach concerns our obligations under the joint processing agreement. Meta Platforms Ireland is responsible for enabling data subject rights under Art. 15 - 20 GDPR, complying with the security requirements of Art. 32 GDPR regarding the security of the service, and fulfilling the obligations under Art. 33, 34 GDPR insofar as a personal data breach concerns Meta Platforms Ireland's obligations under the joint processing agreement.
The application serves the purpose of addressing visitors to the website with targeted interest-based advertising on the social network Facebook. For this purpose, the Facebook remarketing tag has been implemented on the website. This tag establishes a direct connection to Facebook servers when visiting the website. This transmits to the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the social network Facebook, you will then be shown personalized, interest-based Facebook ads.
Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in addressing website visitors with targeted interest-based advertising. You have the right to object at any time to this processing of personal data concerning you for reasons arising from your particular situation. You can deactivate the remarketing function "Custom Audiences" here.
More information on the collection and use of data by Facebook, your rights in this regard, and options for protecting your privacy can be found in Facebook's privacy policy at https://www.facebook.com/about/privacy/.
We use the online advertising program "Google Ads" on our website and conversion tracking (visit action evaluation) within this framework. Google Conversion Tracking is an analysis service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
If you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, contain no personal data, and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Therefore, it is not possible for cookies to be tracked across Ads customers' websites.
The information collected with the help of the conversion cookie serves the purpose of creating conversion statistics. We learn the total number of users who clicked on one of our ads and were redirected to a page marked with a conversion tracking tag. However, we do not receive any information that allows us to personally identify users.
Your data may be transmitted to the servers of Google LLC in the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adscontrollerterms/.
More information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/
We use the Pinterest Tag from Pinterest Europe Limited (Palmerston House, 2nd, Fenian Street, Floor, Dublin 2, Ireland "Pinterest") on our website.
The application serves the purpose of addressing visitors to the website with targeted interest-based advertising on the social network Pinterest. For this purpose, the Pinterest conversion tag has been implemented on the website. This tag establishes a direct connection to Pinterest servers when visiting the website. This transmits to the Pinterest server which of our pages you have visited. Pinterest assigns this information to your personal Pinterest user account if you are logged into the social network. When you visit Pinterest, you will then be shown personalized, interest-based Pinterest ads.
If you access our website via a pin on the social network Pinterest, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, contain no personal data, and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Pinterest and we can recognize that you clicked on the pin and were redirected to this page. The information collected with the help of the conversion cookie serves the purpose of creating conversion statistics and thus optimizing our website. Among other things, the following information may be processed: total number of users who clicked on one of our pins and were redirected to our website, subpages visited on our website (e.g., category or product pages), search queries on our website, your shopping cart contents, completed transactions.
Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in addressing website visitors with targeted interest-based advertising. You have the right to object at any time to this processing of personal data concerning you for reasons arising from your particular situation. You can deactivate personalized advertising in the personalization settings on Pinterest or via the AdChoices website optout.aboutads.info. You can prevent the storage of cookies by selecting appropriate technical settings in your browser software; however, we point out that you may not be able to use all functions of this website fully in this case.
More information on the collection and use of data by Pinterest, your rights in this regard, and options for protecting your privacy can be found in Pinterest's privacy policy at https://policy.pinterest.com/de/privacy-policy.
We use the live chat system from Zendesk Inc. (1019 Market Street, 6th Floor, San Francisco, California 94103, USA; "Zendesk") on our website.
The system serves the purpose of communication between you and us as the provider. Usage profiles can be created from this data under a pseudonym. Cookies are used for this purpose. The cookies enable the recognition of the internet browser.
Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data. Zendesk will provide you with a copy of the standard contractual clauses upon request.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in direct customer communication. You have the right to object at any time to this processing of personal data concerning you for reasons arising from your particular situation.
You can prevent the storage of cookies by selecting appropriate technical settings in your browser software; however, we point out that you may not be able to use all functions of this website fully in this case.
More information on the collection and use of data by Zendesk, your rights in this regard, and options for protecting your privacy can be found in Zendesk's privacy policy at https://www.zendesk.com/company/customers-partners/privacy-policy/.
Plugins and Others
We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application manages JavaScript tags and HTML tags used especially for implementing tracking and analysis tools. The data processing serves the purpose of demand-oriented design and optimization of our website.
The Google Tag Manager itself neither stores cookies nor processes personal data. However, it enables the triggering of other tags that may collect and process personal data.
More information on terms of use and data protection can be found here.
Use of Google Maps
We use the function to embed Google Maps maps from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, "Google") on our website.
The function enables the visual representation of geographical information and interactive maps. Google collects, processes, and uses data of website visitors when pages containing Google Maps maps are accessed.
Your data may also be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks.
The use of cookies or similar technologies is based on your consent pursuant to § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until revocation.
More information on the collection and use of data by Google can be found in Google's privacy policy at https://www.google.com/privacypolicy.html. There you also have the option in the privacy center to change your settings so that you can manage and protect your data processed by Google.
Use of YouTube
We use the function to embed YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
The function displays videos stored on YouTube in an iframe on the website. The "Enhanced Privacy Mode" option is activated. This means that YouTube does not store any information about visitors to the website. Only when you watch a video are information transmitted to YouTube and stored there. Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks.
The use of cookies or similar technologies is based on your consent pursuant to § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until revocation.
More information on the collection and use of data by YouTube and Google, your rights in this regard, and options for protecting your privacy can be found in YouTube's privacy policy at https://www.youtube.com/t/privacy.
Use of Vimeo
We use plugins from Vimeo Inc. (555 West 18th Street New York, New York 10011, USA; "Vimeo") to embed videos from the portal "Vimeo" on our website.
If you visit pages of our website equipped with such a plugin, a connection to the servers of Vimeo is established, and the plugin is displayed on the page by notifying your browser. This transmits both your IP address and the information about which of our pages you have visited to the servers of Vimeo.
If you are logged into Vimeo, Vimeo assigns this information to your personal user account. When using the plugin functions (e.g., starting a video by clicking the corresponding button), this information is also assigned to your Vimeo account.
Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or similar technologies is based on your consent pursuant to § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until revocation.
More information on the purpose and scope of data collection as well as further use and processing of data by Vimeo and your rights and options for protecting your privacy can be found in Vimeo's privacy policy: https://vimeo.com/privacy
Data Subject Rights and Storage Duration
Storage Duration
After complete contract processing, the data will initially be stored for the duration of the warranty period, then stored in compliance with statutory retention periods, especially tax and commercial law retention periods, and then deleted after the expiration of the period unless you have consented to further processing and use.
Rights of the Data Subject
You have the following rights under Art. 15 to 20 GDPR if the legal requirements are met: right of access, rectification, deletion, restriction of processing, data portability.
In addition, you have the right to object under Art. 21 para. 1 GDPR to processing based on Art. 6 para. 1 f GDPR and to processing for direct advertising purposes.
Right to Complain to the Supervisory Authority
You have the right under Art. 77 GDPR to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.
You can file a complaint, among others, with the supervisory authority responsible for us, which you can reach at the following contact details:
Saxon Data Protection Officer
Devrientstraße 5
01067 Dresden
Tel.: +49 351 85471101
Fax: +49 351 85471109
Email: saechsdsb@slt.sachsen.de
Right to Object
If the personal data processing listed here is based on our legitimate interest under Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation with effect for the future.
After objection, the processing of the affected data will be stopped unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.
If the personal data processing is for direct advertising purposes, you can object to this processing at any time by notifying us. After objection, we will stop processing the affected data for direct advertising purposes.
Last update: 10.01.2022