1) Introduction and contact details of the person responsible

1.1 We are pleased that you are visiting our website and
thank you for your interest. Below we will inform you about
the handling of your personal data when using our
Website. Personal data is all data with which you
can be personally identified.

1.2 Person responsible for data processing on this
Website within the meaning of the General Data Protection Regulation (GDPR) is Flávia
Regina Dos Santos Troppmann, Santoclay Handmade, Mortonstrasse 16, 80937
Munich, Germany, Tel.: +49 15787755391, Email:
santoclayhandmade@gmail.com. The controller responsible for processing
The controller of personal data is the natural or
legal person who alone or jointly with others controls the
Purposes and means of processing personal data
decides.

2) Data collection when visiting our website

2.1 When using our website for informational purposes only,
So if you do not register or otherwise provide us with information
we only collect data that your browser transmits to the
page server (so-called “server log files”). If you use our
When you visit our website, we collect the following data, which is technically necessary for us
are necessary to display the website to you:

Our visited website

Date and time of access

Amount of data sent in bytes

Source/reference from which you came to the page

Browser used

Operating system used

IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of
our legitimate interest in improving stability and
functionality of our website. Any transfer or other
The data will not be used. However, we reserve the right
to subsequently check the server log files, should concrete
There are indications of illegal use.

2.2 For security reasons and to protect your privacy, this website uses
the transfer of personal data and other confidential
Contents (e.g. orders or inquiries to the person responsible)
SSL or TLS encryption. You can use an encrypted connection
by the string “https://” and the lock symbol in your
Detect browser line.

3) Hosting & Content Delivery Network

Shopify

For hosting our website and displaying the page content
we use the system of the following provider: Shopify International
Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4,
D04 XN32, Ireland (“Shopify”)

Data will also be transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is stored on the servers
of the provider. We have a
A data processing agreement has been concluded which ensures the protection of data
of our site visitors and prevents unauthorized disclosure to
Third parties prohibited.

When transferring data to Canada, an appropriate
Data protection level through an adequacy decision of the European
Commission guaranteed.

4) Cookies

In order to make visiting our website more attractive and to improve the use
To enable certain functions, we use cookies, which are small
Text files that are stored on your device. Some
These cookies are automatically deleted after closing the browser
(so-called “session cookies”), some of these cookies remain on your computer for longer
Your device and enable the storage of page settings
(so-called “persistent cookies”). In the latter case, you can
Storage period of the overview of the cookie settings of your
web browser.

If individual cookies used by us also
personal data are processed, the processing
pursuant to Art. 6 (1) lit. b GDPR either for the performance of the
Contract, pursuant to Art. 6 (1) lit. a GDPR in the case of a granted
Consent or pursuant to Art. 6 (1) lit. f GDPR to safeguard our
legitimate interests in the best possible functionality of the website
and a customer-friendly and effective design of the
page visit.

You can set your browser so that you are informed about the setting of
Cookies are informed and decide individually about their acceptance
or the acceptance of cookies for specific cases or in general
can exclude.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact us

When you contact us (e.g. via contact form or
E-mail) – solely for the purpose of processing and
Answering your request and only to the extent necessary for this purpose –
personal data is processed.

The legal basis for the processing of this data is our
legitimate interest in answering your request in accordance with Art. 6
Paragraph 1 lit. f GDPR. If your contact is aimed at a contract,
is additional legal basis for processing Art. 6 para. 1 lit. b
GDPR. Your data will be deleted if the circumstances
that the matter in question has been finally clarified
and provided that there are no statutory retention periods to the contrary.

6) Data processing for order processing

6.1 Insofar as delivery and
If necessary for payment purposes, the data we collect
personal data pursuant to Art. 6 (1) lit. b GDPR to the
commissioned transport company and the commissioned credit institution
passed on.

If we provide you with information on the basis of a corresponding contract
Updates for goods with digital elements or for digital
Products, we process the data you provide when ordering
transmitted contact details (name, address, email address) to contact you in
Within the scope of our legal information obligations pursuant to Art. 6 Para. 1
lit. c GDPR by suitable means of communication (e.g. by post or by
Mail) about upcoming updates in the legally required
period of time. Your contact details will be
strictly for the purpose of communicating information about payments owed by us
Updates and for this purpose by us only to the extent
processed as necessary for the respective information.

To process your order, we also work with the
the following service providers, who assist us in whole or in part with
support the implementation of concluded contracts.
Service providers will, in accordance with the following information,
personal data is transmitted.

6.2 Use of payment service providers (payment services)

- Shopify Payments

This website offers one or more online payment methods of the
of the following provider: Shopify International Limited,
Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

If you select a payment method from the provider where you
If you make advance payments (such as credit card payments), your
Payment details provided during the ordering process (including name,
Address, bank and payment card information, currency and
transaction number) and information about the contents of your order
in accordance with Art. 6 (1) lit. b GDPR. The transfer of your
In this case, data is processed exclusively for the purpose of
Payment processing with the provider and only to the extent that they are
is required.

7) Rights of the data subject

7.1 The applicable data protection law grants you rights in relation to
Controller regarding the processing of your personal data
Data the following data subject rights (right to information and
Intervention rights), whereby the respective conditions for exercising
reference is made to the legal basis stated:

Right to information pursuant to Art. 15 GDPR;

Right to rectification pursuant to Art. 16 GDPR;

Right to erasure pursuant to Art. 17 GDPR;

Right to restriction of processing pursuant to Art. 18 GDPR;

Right to information pursuant to Art. 19 GDPR;

Right to data portability according to Art. 20 GDPR;

Right to revoke consent granted in accordance with Art. 7 Para. 3 GDPR;

Right to complain according to Art. 77 GDPR.

7.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA AS A RESULT OF A BALANCING OF INTERESTS
DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST
PROCESSING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE DATA PROCESSING FOR REASONS ARISING FROM
YOUR PARTICULAR SITUATION, TO THIS PROCESSING
OBJECTION WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL TERMINATE THE
PROCESSING OF THE DATA CONCERNED. FURTHER PROCESSING REMAINS
RESERVED IF WE HAVE COMPELLING LEGITIMATE GROUNDS FOR THE
PROCESSING WHICH OVERRIDES YOUR INTERESTS, FUNDAMENTAL RIGHTS AND
FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING OF THE
ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

WE PROCESS YOUR PERSONAL DATA TO
TO OPERATE DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME
AGAINST THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR
PURPOSES OF SUCH ADVERTISING. YOU CAN OBJECT AS FOLLOWS
EXERCISE AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

8) Duration of storage of personal data

The duration of storage of personal data is determined
based on the respective legal basis, the purpose of processing and –
where applicable – in addition to the respective statutory
Retention period (e.g. commercial and tax law
retention periods).

When processing personal data on the basis of a
explicit consent in accordance with Art. 6 (1) lit. a GDPR, the
affected data will be stored until you give your consent
withdraw.

Are there statutory retention periods for data collected within the framework of
legal or quasi-legal obligations on
the basis of Art. 6 (1) lit. b GDPR,
this data is routinely deleted after expiry of the retention periods,
if they are no longer necessary for the performance or initiation of a contract
are necessary and/or we have no legitimate interest in
the continued storage continues.

When processing personal data on the basis of
Art. 6 para. 1 lit. f GDPR, these data will be stored until
You exercise your right of objection according to Art. 21 Para. 1 GDPR, unless
because we can demonstrate compelling legitimate grounds for the processing
which overrides your interests, rights and freedoms, or
the processing serves to assert, exercise or defend
of legal claims.

When processing personal data for the purpose of
Direct advertising based on Art. 6 (1) lit. f GDPR, these
Data will be stored until you exercise your right of objection in accordance with Art. 21
Paragraph 2 GDPR.

Unless the other information in this declaration on
Unless otherwise specified in specific processing situations,
stored personal data will be deleted if they
for the purposes for which they were collected or otherwise processed
are no longer necessary.