Privacy policy
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Non-provision has no consequences. This only applies as long as no other information is provided in the following processing operations.
"Personal data" is any information relating to an identified or identifiable natural person.
Contact
Responsible party
Contact us if you wish. The person responsible for data processing is: Mathias dos Santos Held, Gohliser Straße 4, 04105 Leipzig, Germany, +49 (0) 341 561 29 505, ola@brasilheroe.com
Initiative contact by the customer via email
If you initiate contact with us via email, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves to process and respond to your contact request.
If the contact is for the purpose of carrying out pre-contractual measures (e.g., consultation in case of purchase interest, creation of offers) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR.
We only use your email address to process your request. Your data will then be deleted in accordance with legal retention periods, unless you have consented to further processing and use.
When using the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves the purpose of contacting you.
If the contact is for the purpose of carrying out pre-contractual measures (e.g., consultation in case of purchase interest, creation of offers) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR.
We only use your email address to process your request. Your data will then be deleted in accordance with legal retention periods, unless you have consented to further processing and use.
Customer Account Orders
Customer account
When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on the consent until the revocation. Your customer account will then be deleted.
Reviews Advertising
Data collection when writing a comment
When commenting on an article or a post, we collect your personal data (name, email address, comment text) only to the extent you provide it. The processing serves the purpose of enabling commenting and displaying comments. By submitting the comment, you consent to the processing of the transmitted data. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on the consent until the revocation. Your personal data will then be deleted.
When publishing your comment, only the name you provide will be published.
Website logo for Google Customer Reviews
The website logo for Google Customer Reviews from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") is embedded on our website.
The integration serves the purpose of displaying the number and results of the reviews we have received so far via Google and promoting participation in this program.
To display the logo on our website and to show you personalized ads on Google, Google uses cookies. Among other things, your IP address may be processed and transmitted to Google.
Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://privacy.google.com/businesses/controllerterms/.
The use of cookies or comparable technologies takes place with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.
More information about the terms of use and privacy when using Google Customer Reviews can be found at https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html and at https://policies.google.com/privacy?hl=de
We use the Google Customer Reviews rating tool from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") for our website.
After your order, we would like to ask you to rate and comment on your purchase with us. For this purpose, you will be contacted by us via email, using Google's survey opt-in module. Among other things, the following information may be processed and transmitted to Google: order details (e.g., order ID, delivery country, expected delivery date, GTIN of the ordered products) as well as your email address.
Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://privacy.google.com/businesses/controllerterms/ and https://business.safety.google/adscontrollerterms.The processing is based on Art. 6 para. 1 lit. a GDPR with your consent, provided you have explicitly agreed to the transfer of your data and the receipt of the review request. You can revoke your consent at any time with effect for the future without affecting the lawfulness of the processing carried out based on the consent until the revocation.
We use your personal data (name, address) that we have received in the context of the sale of a good or service to send you postal advertising, provided you have not objected to this use. The provision of this data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded.
The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your address data at any time by notifying us. The contact details for exercising the objection can be found in the imprint.
Use of the email address for sending newsletters
We use your email address exclusively for our own advertising purposes for sending newsletters, independently of the contract processing, provided you have given your explicit consent. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.
Your data will be passed on to an email marketing service provider within the scope of order processing. No further transfer to other third parties takes place.
Use of the email address for sending direct advertising
We use your email address, which we have received in connection with the sale of a product or service, for the electronic transmission of advertising for our own goods or services that are similar to those you have already purchased from us, provided you have not objected to this use. Providing the email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. The contact details for exercising the objection can be found in the imprint. You can also use the designated link in the advertising email. No costs other than the transmission costs according to the basic tariffs will be incurred.
Shipping service provider Inventory management
Disclosure of the email address to shipping companies for information about the shipping status
We pass on your email address to the shipping company as part of contract processing, provided you have expressly consented to this during the ordering process. The transfer serves the purpose of informing you by email about the shipping status. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the shipping company without affecting the lawfulness of the processing carried out based on the consent until the revocation.
Use of an external merchandise management system
We use a merchandise management system for contract processing as part of order processing. For this purpose, your personal data collected during the order will be sent to
Billbee GmbH, Paulinenstrasse 54, 32756 Detmold
transmitted.
Payment service provider Credit report
Use of PayPal
All PayPal transactions are subject to the PayPal privacy policy. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Data collection and processing in credit checks
If we advance payment, e.g. for payment by invoice or direct debit, we reserve the right to obtain a credit report based on mathematical-statistical methods using Klarna, Chausseestraße 117, 10115 Berlin, if necessary. For this purpose, we transmit the personal data required for a credit check there and use the information obtained about the statistical probability of a payment default for a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, which include address data in their calculation. Your legitimate interests are taken into account in accordance with legal provisions. The data processing serves the purpose of credit checking for contract initiation. The processing is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in protection against payment default when we advance payment. You have the right to object at any time to this processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation by notifying us. Providing the data is necessary for concluding the contract with the payment method you have chosen. Failure to provide the data will result in the contract not being concluded with the payment method you have selected.
Use of personal data when selecting Klarna payment options
To offer you Klarna payment options, we will transmit personal data, such as contact details and order data, to Klarna. This allows Klarna to assess whether you can use the payment options offered via Klarna and to tailor the payment options to your needs. General information about Klarna is available at: https://www.klarna.com/de/. Your personal data will be processed by Klarna in accordance with applicable data protection regulations and according to the information in Klarna's privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.
Cookies
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Analysis Advertising Tracking Communication
Use of Google Analytics
We use the web analytics service Google Analytics from Google Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities, and to provide other services related to website and internet usage to the website operator. Among other things, the following information may be collected: IP address, date and time of page access, click path, information about the browser and device you use, visited pages, referrer URL (website from which you accessed our website), location data, purchase activities. The IP address transmitted by your browser within Google Analytics is not merged with other data from Google.
Google Analytics uses technologies such as cookies, web storage in the browser, and tracking pixels that enable an analysis of your use of the website. The information generated about your use of this website is usually transmitted to a Google server in the USA and stored there. There is no adequacy decision by the EU Commission for the USA. Data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, viewable at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adsprocessorterms/. Both Google and US government authorities have access to your data. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and all other data Google has about you.
IP anonymization is enabled on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
The use of cookies or comparable technologies takes place with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.
Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/ as well as at https://policies.google.com/technologies/cookies?hl=de.
Use of the Facebook Pixel
We use the remarketing function "Custom Audiences" of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland "Facebook") on our website.
Meta Platforms Ireland and we are jointly responsible for the collection of your data and the transmission of this data to Facebook when the service is integrated. This is based on an agreement between us and Meta Platforms Ireland regarding the joint processing of personal data, which defines the respective responsibilities. The agreement can be accessed at https://www.facebook.com/legal/controller_addendum. According to this, we are particularly responsible for fulfilling the information obligations pursuant to Articles 13, 14 GDPR, for complying with the security requirements of Article 32 GDPR regarding the correct technical implementation and configuration of the service, as well as for complying with the obligations under Articles 33, 34 GDPR, insofar as a breach of the protection of personal data concerns our obligations under the joint processing agreement. Meta Platforms Ireland is responsible for enabling the data subject rights according to Articles 15 - 20 GDPR, complying with the security requirements of Article 32 GDPR regarding the security of the service, and fulfilling the obligations under Articles 33, 34 GDPR, insofar as a breach of the protection of personal data concerns the obligations of Meta Platforms Ireland under the joint processing agreement.
The application serves the purpose of addressing visitors to the website with targeted interest-based advertising on the social network Facebook. For this purpose, the Facebook remarketing tag has been implemented on the website. This tag establishes a direct connection to the Facebook servers when visiting the website. This transmits to the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the social network Facebook, you will then be shown personalized, interest-based Facebook ads.
Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest to address site visitors with targeted interest-based advertising. You have the right to object at any time to this processing of personal data concerning you for reasons arising from your particular situation. You can deactivate the remarketing function "Custom Audiences" here.
Further information on the collection and use of data by Facebook, your related rights, and options to protect your privacy can be found in Facebook's privacy policy at https://www.facebook.com/about/privacy/.
We use the online advertising program "Google Ads" on our website and, within this framework, conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
If you click on an ad placed by Google, a cookie for conversion tracking is placed on your computer. These cookies have a limited validity, contain no personal data, and therefore do not serve personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Thus, there is no possibility that cookies can be tracked across the websites of Ads customers.
The information collected using the conversion cookie is used to create conversion statistics. In this process, we learn the total number of users who clicked on one of our ads and were redirected to a page marked with a conversion tracking tag. However, we do not receive any information that would allow us to personally identify users.
Your data may be transmitted to the servers of Google LLC in the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adscontrollerterms/.
Further information as well as Google's privacy policy can be found at: https://www.google.de/policies/privacy/
We use the Pinterest Tag from Pinterest Europe Limited (Palmerston House, 2nd, Fenian Street, Floor, Dublin 2, Ireland "Pinterest") on our website.
The application serves the purpose of targeting visitors of the website with interest-based advertising on the social network Pinterest. For this purpose, the Pinterest conversion tag has been implemented on the website. This tag establishes a direct connection to the Pinterest servers when visiting the website. This transmits to the Pinterest server which of our pages you have visited. Pinterest assigns this information to your personal Pinterest user account if you are logged into the social network. When you visit Pinterest, personalized, interest-based Pinterest ads are then displayed to you.
If you reach our website via a Pin on the social network Pinterest, a cookie for conversion tracking is placed on your computer. These cookies have a limited validity, contain no personal data, and therefore do not serve personal identification. If you visit certain pages of our website and the cookie has not yet expired, Pinterest and we can recognize that you clicked on the Pin and were redirected to this page. The information collected with the help of the conversion cookie is used to create conversion statistics and thus to optimize our website. Among other things, the following information may be processed: total number of users who clicked on one of our Pins and were redirected to our website, subpages visited on our website (e.g., category or product pages), search queries on our website, your shopping cart contents, completed transactions.
Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest to address site visitors with targeted interest-based advertising. You have the right to object at any time to the processing of personal data concerning you for reasons arising from your particular situation. You can deactivate personalized advertising in the personalization settings on Pinterest or via the AdChoices website optout.aboutads.info. You can prevent the storage of cookies by selecting the appropriate technical settings of your browser software; however, we point out that in this case you may not be able to use all functions of this website fully.
More information about the collection and use of data by Pinterest, about your related rights and options to protect your privacy can be found in Pinterest's privacy policy at https://policy.pinterest.com/de/privacy-policy.
We use the live chat system of Zendesk Inc. (1019 Market Street, 6th Floor, San Francisco, California 94103, USA; "Zendesk") on our website.
The system serves the purpose of communication between you and us as the provider. Usage profiles can be created from this data under a pseudonym. Cookies are used for this purpose. The cookies enable the recognition of the internet browser.
Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transmission is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data. Zendesk will provide you with a copy of the standard contractual clauses upon request.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in direct customer communication. You have the right to object at any time to the processing of personal data concerning you for reasons arising from your particular situation.
You can prevent the storage of cookies by selecting the appropriate technical settings of your browser software; however, we point out that in this case you may not be able to use all functions of this website fully.
More information on the collection and use of data by Zendesk, your related rights, and options to protect your privacy can be found in Zendesk's privacy policy at https://www.zendesk.com/company/customers-partners/privacy-policy/.
Plug-ins and Others
We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application manages JavaScript tags and HTML tags used for the implementation of tracking and analytics tools in particular. The data processing serves the purpose of demand-oriented design and optimization of our website.
The Google Tag Manager itself does not store cookies nor are personal data processed through it. However, it enables the triggering of other tags that can collect and process personal data.
More information on terms of use and privacy can be found here.
Use of Google Maps
We use the function to embed Google Maps from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, "Google") on our website.
The function enables the visual representation of geographical information and interactive maps. When pages containing Google Maps are accessed, Google also collects, processes, and uses data from the visitors of the websites.
Your data may also be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks.
The use of cookies or comparable technologies takes place with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.
More information about the collection and use of data by Google can be found in Google's privacy policy at https://www.google.com/privacypolicy.html. There, you also have the option in the privacy center to change your settings so that you can manage and protect your data processed by Google.
Use of YouTube
We use the function to embed YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube"). YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
The function displays videos stored on YouTube in an iFrame on the website. The "Enhanced Privacy Mode" option is enabled. This means that YouTube does not store any information about the visitors of the website. Only when you watch a video, information about it is transmitted to YouTube and stored there. Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks.
The use of cookies or comparable technologies takes place with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.
More information on the collection and use of data by YouTube and Google, on your related rights and options to protect your privacy can be found in YouTube's privacy policy at https://www.youtube.com/t/privacy.
Use of Vimeo
We use plug-ins from Vimeo Inc. (555 West 18th Street New York, New York 10011, USA; “Vimeo”) on our website to embed videos from the “Vimeo” portal.
When you visit pages of our website containing such a plug-in, a connection to the servers of Vimeo is established and the plug-in is displayed on the page by communicating with your browser. This transmits both your IP address and the information about which of our pages you have visited to the servers of Vimeo.
If you are logged in to Vimeo at the same time, Vimeo assigns this information to your personal user account. When using the plug-in functions (e.g. by starting a video by pressing the corresponding button), this information is also assigned to your Vimeo account.
Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or comparable technologies takes place with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.
More information on the purpose and scope of the collection as well as on the further use and processing of the data by Vimeo and on your related rights and options to protect your privacy can be found in Vimeo's privacy policy: https://vimeo.com/privacy
Rights of the data subjects and storage duration
Duration of storage
After the complete fulfillment of the contract, the data will initially be stored for the duration of the warranty period, then taking into account legal, in particular tax and commercial law retention periods, and will be deleted after the expiration of the period, unless you have consented to further processing and use.
Rights of the data subject
You have the following rights under Art. 15 to 20 GDPR if the legal requirements are met: right to access, right to rectification, right to erasure, right to restriction of processing, right to data portability.
In addition, you have the right to object under Art. 21 para. 1 GDPR against processing based on Art. 6 para. 1 f GDPR, as well as against processing for the purposes of direct marketing.
Right to complain to the supervisory authority
You have the right under Art. 77 GDPR to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.
You can file a complaint with the supervisory authority responsible for us, which you can reach at the following contact details:
Saxon Data Protection Officer
Devrientstraße 5
01067 Dresden
Tel.: +49 351 85471101
Fax: +49 351 85471109
E-Mail: saechsdsb@slt.sachsen.de
Right to object
If the personal data processing listed here is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR, you have the right to object to these processing activities at any time with effect for the future for reasons arising from your particular situation.
After an objection has been made, the processing of the affected data will be terminated unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.
If the processing of personal data is for the purposes of direct marketing, you can object to this processing at any time by notifying us. After an objection has been made, we will cease processing the affected data for the purposes of direct marketing.
last update: 10.01.2022