Privacy Policy

Privacy Policy

Unless otherwise stated below, providing your personal data is neither legally nor contractually required, nor necessary for concluding a contract. You are not obliged to provide the data. Failure to provide data has no consequences. This only applies if no other indication is made in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.


Server Log Files
You can visit our websites without providing any personal information. 
Each time our website is accessed, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in log files (so-called server log files). These stored data include, for example, the name of the accessed page, date and time of access, IP address, amount of data transferred, and the requesting provider.
The processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our offerings. 

 
Your data may be transferred to third countries outside the EU, especially to Canada and the USA, and processed there. There is an adequacy decision by the EU Commission for Canada. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.

Contact

Data Controller
Contact us if you wish. The person responsible for data processing is: Pei-Hsi Lin, Oststraße 1c, 22844 Norderstedt Germany, +49403085860, info@thermaltake.de

Proactive Customer Contact via Email
If you proactively contact us by email, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves to handle and respond to your contact request.
If the contact serves to carry out pre-contractual measures (e.g., consultation for purchase interest, offer preparation) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in handling and responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR for reasons arising from your particular situation.
We use your email address only to process your inquiry. Your data will then be deleted in compliance with legal retention periods unless you have consented to further processing and use.


Collection and Processing When Using the Contact Form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves the purpose of making contact.

If the contact serves to carry out pre-contractual measures (e.g., consultation for purchase interest, offer preparation) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in handling and responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data concerning you based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.
We use your email address only to process your inquiry. Your data will then be deleted in compliance with legal retention periods unless you have consented to further processing and use.

Customer account      Orders      

Customer account
When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on the consent until the revocation. Your customer account will then be deleted.


Collection, processing, and sharing of personal data for orders
When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Providing the data is necessary for concluding the contract. Failure to provide the data means that no contract can be concluded. The processing is based on Art. 6 para. 1 lit. b GDPR and is necessary for the performance of a contract with you. 
Your data will be shared, for example, with the shipping companies and dropshipping providers you choose, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly comply with legal requirements. The scope of data transmission is limited to the minimum necessary.
 
Your data may be transferred to third countries outside the EU, especially to Canada and the USA, and processed there. There is an adequacy decision by the EU Commission for Canada. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.

Advertising      


Use of the email address to send newsletters
We use your email address independently of contract processing exclusively for our own advertising purposes to send newsletters, provided you have explicitly consented. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list. 


Shipping service provider      

Passing on the email address to the shipping company to inform about the shipping status
We pass on your email address to the shipping company as part of contract processing, provided you have explicitly consented to this during the ordering process. The transfer serves the purpose of informing you by email about the shipping status. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the shipping company without affecting the lawfulness of the processing carried out based on the consent until the revocation.


Payment service provider      

Use of PayPal
We use the payment service PayPal from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you payment via the payment service. By selecting and using payment via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR.

All PayPal transactions are subject to the PayPal privacy policy. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full


Use of PayPal Express
We use the PayPal Express payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable the recognition of your browser.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in a customer-oriented offering of various payment methods. You have the right to object at any time to the processing of personal data concerning you for reasons arising from your particular situation.
By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR. More information about data processing when using the PayPal Express payment service can be found in the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.


Use of PayPal Check-Out
We use the PayPal Check-Out payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR.

Cookies may be stored that enable the recognition of your browser. The data processing that takes place as a result is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in offering a customer-oriented selection of payment methods. You have the right to object at any time to the processing of your personal data concerning you for reasons arising from your particular situation.

Credit card via PayPal, direct debit via PayPal & "Pay later" via PayPal 
For certain payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay later" via PayPal, PayPal reserves the right to obtain a credit check based on mathematical-statistical methods using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default to make a balanced decision regarding the initiation, execution, or termination of the contractual relationship. The credit check may include probability values (score values) calculated using scientifically recognized mathematical-statistical methods, which incorporate address data among other factors. Your legitimate interests are taken into account in accordance with legal requirements. The data processing serves the purpose of credit assessment for contract initiation. The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when PayPal advances payment. 
You have the right to object at any time to the processing of your personal data concerning you based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation by notifying PayPal. Providing the data is necessary for concluding the contract with the payment method you selected. Failure to provide the data means that the contract cannot be concluded using the payment method you chose.

Third-party providers
When paying via a third-party payment method, the data required for payment processing will be transmitted to PayPal. This processing is based on Art. 6 para. 1 lit. b GDPR. For the execution of this payment method, the data may then be passed on by PayPal to the respective provider. This processing is based on Art. 6 para. 1 lit. b GDPR. Local third-party providers may include:

  • Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
  • giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)

Invoice purchase via PayPal 
When paying by invoice, the data required for payment processing is initially transmitted to PayPal. To carry out this payment method, the data is then passed on by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR. Ratepay may carry out a credit check based on mathematical-statistical methods (probability or score values) using credit agencies as described above. The data processing serves the purpose of credit assessment for contract initiation. The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when Ratepay advances payment. Further information on data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/

Further information on data processing when using PayPal can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.



Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that enables unique identification of the browser when the website is accessed again.
 
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the contained data. Cookies already stored can be deleted at any time. However, please note that you may not be able to use all functions of this website fully.
 
The links below provide information on how to manage (including disable) cookies in the most popular browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
 
Technically necessary cookies
Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies to make our offer more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after changing pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after changing pages.
 
The use of cookies or comparable technologies is based on § 25 para. 2 TDDDG. The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer.
You have the right to object at any time to the processing of your personal data concerning you for reasons arising from your particular situation.
 

Plug-ins and others

Inclusion of the Händlerbund membership logo
Our website includes the Händlerbund membership logo (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig). When you visit our website, the browser used on your device automatically sends information to the Händlerbund e.V. server. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without your intervention and stored until automatic deletion:
  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • Website from which access is made (referrer URL),
  • browser used and, if applicable, the operating system of your computer as well as the name of your access provider. 
The temporary storage of the IP address by the system is necessary to enable the delivery of the website. For this purpose, the IP address must be stored for the duration of the session. Storage in log files takes place to ensure the functionality of the website. Additionally, the data is used to optimize the website and to ensure the security of the information technology systems. These data are not stored together with other personal data. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

Inclusion of the “FairCommerce” initiative logo
Our website includes the logo of the “FairCommerce” initiative (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig). When you visit our website, the browser used on your device automatically sends information to the Händlerbund e.V. server. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without your intervention and stored until automatic deletion:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • Website from which access is made (referrer URL),
  • browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
The temporary storage of the IP address by the system is necessary to enable the delivery of the website. For this purpose, the IP address must be stored for the duration of the session. Storage in log files takes place to ensure the functionality of the website. Additionally, the data is used to optimize the website and to ensure the security of the information technology systems. These data are not stored together with other personal data. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

Data subject rights and storage duration

Duration of storage
After the contract has been fully completed, the data will initially be stored for the duration of the warranty period, then stored in consideration of legal retention periods, especially tax and commercial law retention periods, and then deleted after the expiration of these periods, unless you have consented to further processing and use.


Rights of the data subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: right to access, to rectification, to erasure, to restriction of processing, and to data portability.
In addition, according to Art. 21 para. 1 GDPR, you have the right to object to processing based on Art. 6 para. 1 f GDPR, as well as to processing for direct marketing purposes.


Right to complain to the supervisory authority
According to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.


You can file a complaint, among others, with the supervisory authority responsible for us, which you can reach at the following contact details:

Independent State Center for Data Protection Schleswig-Holstein
P.O. Box 71 16
24171 Kiel
Phone: +49 431 9881200
Fax: +49 431 9881223
Email: mail@datenschutzzentrum.de


Right to object
If the personal data processing listed here is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.
After an objection has been made, the processing of the affected data will be stopped unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.


last updated: 29.11.2023