Privacy policy

1)    Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 Data controller on this website within the meaning of the

General Data Protection Regulation (GDPR) is Katharina Ali Khan, Wood Kids World, Hannemannstrasse 27F, 12347 Berlin, Germany, Tel.: 0175 7372036, E-Mail: wood_kids_world@web.de. The controller of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2)    Data collection when you visit our website

2.1 If you use our website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the site server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

• Our visited website
• Date and time at the time of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate

interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller). You can recognize an encrypted connection by the string "https://" and the lock icon in your browser line.

3)    Hosting & Content-Delivery-Network

Shopify

For the hosting of our website and the presentation of the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data will also be transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

In the case of a data transfer to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

4)    Cookies

In order to make your visit to our website attractive and to encourage the use of certain

functions, we use cookies, which are small text files that are stored on

on your device. In some cases, these cookies are automatically deleted after closing the browser (so-called "session cookies"), in some cases, these cookies remain on your device for a longer period of time and enable you to save page settings (so-called "persistent cookies"). In the latter case, you can find the storage period in the cookie settings overview of your web browser.

If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 (1) (b) GDPR either for the execution of the contract, in accordance with Art. 6 (1) (a) GDPR in the case of consent or in accordance with Art. 6 (1) (f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.

You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5)    Contact

When contacting us (e.g. via contact form or e-mail), personal data will be processed – exclusively for the purpose of processing and answering your request and only to the extent necessary for this purpose.

The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Art. 6 (1) (f) GDPR. If your contact is aimed at a contract, an additional legal basis for the

Processing Art. 6 para. 1 lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the facts in question have been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

6)    Data processing when opening a customer account

In accordance with Art. 6 (1) (b) GDPR, personal data will continue to be collected and processed to the extent necessary in each case if you provide it to us when opening a customer account. You can find out which data is required for opening an account in the input mask of the corresponding form on our website.

Your customer account can be deleted at any time and can be done by sending a message to the above-mentioned address of the controller. After the deletion of your customer account, your data will be deleted, provided that all contracts concluded in connection with it have been fully processed, there are no statutory retention periods to the contrary and there is no legitimate interest on our part in further storage.

7)    Use of customer data for direct marketing

7.1 Signing up for our email newsletter

If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter, which ensures that you

Newsletter only if you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the e-mail address provided.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 (1) (a) GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to prevent possible misuse of your e-mail

address at a later date. The data collected by us when registering for the newsletter will be used strictly for a specific purpose.

You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the responsible person named at the beginning. After unsubscribing, your e-mail address will be deleted immediately from our newsletter distribution list, unless you expressly agree to further use of your

data or we reserve the right to use data for a longer period of time, which is permitted by law and about which we inform you in this statement.

7.2  Notification of availability of goods by e-mail

For items that are temporarily unavailable, you can sign up to receive merchandise availability notifications email. We will send you an e-mail

Mail a one-time message about the availability of the one you have selected

Article. The only mandatory information for sending this notification is your e-mail address. The provision of further data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure for sending e-mails, which ensures that you will only receive a notification if you have expressly confirmed your consent to this by clicking on a verification link sent to the e-mail address provided.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 (1) (a) GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to prevent possible misuse of your e-mail

address at a later date. The data collected by us when you register for our e-mail notification service on the availability of goods will be used strictly for a specific purpose.

You can change the availability notifications at any time by means of appropriate

unsubscribe from the message to the person in charge mentioned at the beginning. After

If you unsubscribe, your e-mail address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.

7.3 Shopping cart reminders by e-mail

In the event that you cancel your purchase with us before completing your order, you have the option of being reminded once by e-mail of the contents of your virtual shopping cart.

The only mandatory information for sending this reminder is your e-mail address. The provision of further data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure for sending e-mails, which ensures that you will only receive a notification if you have expressly confirmed your consent to this by clicking on a verification link sent to the e-mail address provided.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 (1) (a) GDPR for the purposes of

Sending a shopping cart reminder. In doing so, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of the

to prevent possible misuse of your e-mail address at a later date.

time. The data collected by us when you register for our e-mail notification service will be used strictly for a specific purpose.

You can unsubscribe from the shopping cart reminders at any time by sending a corresponding message to the responsible person mentioned at the beginning. After you have unsubscribed, your e-mail address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.

8)    Data processing for order processing

8.1 Insofar as necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) (b) GDPR.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details provided by you when placing an order (name, address, e-mail address) in order to inform you within the scope of our statutory information obligations pursuant to Art. 6 (1) (c)

GDPR by appropriate communication channel (e.g. by post or e-mail) about upcoming updates in person within the legally stipulated period. Your contact details will be used strictly for the purpose of informing you of updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.

In order to process your order, we also work together with the following service provider(s) who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transferred to these service providers in accordance with the following information.

8.2 Disclosure of personal data to shipping service providers

-DHL

As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We will pass on your e-mail address and/or telephone number to the provider in accordance with Art. 6 para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or delivery announcement, provided that you have given your express consent to this during the ordering process. Otherwise, for the purpose of

pursuant to Art. 6 (1) (b) GDPR, only the name of the recipient and the

delivery address to the provider. The transfer will only take place insofar as this is necessary for the

delivery of goods is required. In this case, it is not possible to coordinate the delivery date with the provider in advance or the delivery announcement.

The consent can be revoked at any time with effect for the future vis-à-vis the above-mentioned controller or the provider.

8.3 Use of payment service providers (payment services)

- PayPal

On this website there are one or more online payment methods of the following

Provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from the provider for which you pay in advance, your payment details provided during the order process (including

name, address, bank and payment card information, currency and

transaction number) as well as information about the content of your order in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of processing payments with the provider and only to the extent necessary for this purpose.

If you select a payment method for which we pay in advance, you will be notified in the

During the order process, you will also be asked to provide certain personal data (first and last name, street, house number, zip code, city, date of birth, e-mail address, telephone number, if applicable, data on an alternative means of payment).

In such cases, in order to determine our legitimate interest in determining your

In order to maintain solvency, this data will be forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 (1) (f) GDPR. On the basis of the personal data you provide as well as other data (such as shopping cart, invoice amount, order history, payment history), the provider checks whether the payment option you have selected can be granted with regard to payment and/or bad debt risks.

The credit report can contain probability values (so-called score values).

Insofar as score values are included in the result of the credit report, they have their

basis in a scientifically recognized mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual payment processing. - Shopify Payments

On this website there are one or more online payment methods of the following

Provider: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

If you select a payment method from the provider for which you pay in advance (such as credit card payment), your payment will be sent to them as part of the order process.

(including name, address, bank and

payment card information, currency and transaction number) as well as information about the content of your order in accordance with Art. 6 (1) (b) GDPR. The

In this case, your data will be passed on exclusively for the purpose of

Payment processing with the provider and only to the extent necessary for this purpose.

9)    Web Analytics Services

Google Analytics 4

This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, Google Analytics 4 sets cookies when you visit the website, which are stored on your device as small text modules and collect certain information. The scope of this information also includes your IP address, which, however, is shortened by Google by the last digits in order to exclude direct personal reference.

The information is transmitted to Google's servers and processed there. Transfers to Google LLC based in the USA are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services related to website activity and internet usage. The IP address transmitted and shortened by your browser as part of Google Analytics will not be merged with other Google data. The data collected in the context of the use of Google Analytics 4 will be stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the end device used, will only take place if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR.

Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "Cookie Consent Tool" provided on the Website.

We have concluded a data processing agreement with Google that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

For more legal information on Google Analytics 4, see https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de, and https://policies.google.com/technologies/partner-sites

Demographic Merkmale

Google Analytics 4 uses the special "demographic characteristics" function and can use it to create statistics that make statements about the age, gender and interests of site visitors. It does this by analyzing third-party advertising and information. This allows target groups for marketing activities to be identified. However, the collected data cannot be assigned to a specific person and will be deleted for a period of two months after storage.

Google Signals

As an extension to Google Analytics 4, Google Signals can be used on this website to generate cross-device reports. If you have activated personalized ads and have linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Art. 6 (1) (a) GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analytics, you can turn off Ads Personalized in your Google Account settings. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de For more information about Google Signals, please visit the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs

As an extension to Google Analytics 4, the "UserIDs" function can be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 (1) (a) GDPR, have set up an account on this website and log in with this account on different devices, your activities, including conversions, can be analysed across devices.

For data transfers to the USA, the provider has committed itself to the EU-US

Data Protection Framework (EU-US Data Privacy Framework), which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

10)     Retargeting/ Remarketing und Conversion-Tracking

Meta Pixel

Within our online offering, we use the "Meta Pixel" service of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta")

If a user clicks on one of our Facebook and/or Instagram

Advertisement, the URL of our linked page is extended by a parameter with the help of "Meta Pixel". This URL parameter is then entered into the user's browser after being forwarded by a cookie that our linked site sets itself.

On the one hand, this makes it possible for Meta to determine the visitors of our online offer as the target group for the display of advertisements (so-called "ads").

Accordingly, we use the service to display the Facebook and/or Instagram ads placed by us only to those users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products that are determined on the basis of the websites visited), which we transmit to Meta (so-called "Custom Audiences").

On the other hand, the "Meta Pixel" can be used to track whether users were redirected to our website after clicking on an advertisement and what execution actions they take there (so-called "conversion tracking").

The data collected is anonymous to us, so it does not allow us to draw any conclusions about the identity of the users. However, the data is stored and processed by Meta so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes.

All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for

revoke the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

The information generated by Meta is usually transmitted to a Meta server and stored there; in this context, there may also be a transfer to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has committed itself to the EU-US

Data Protection Framework (EU-US Data Privacy Framework), which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

11)     Site functionalities

11.1 Google reCAPTCHA

On this website, we use the CAPTCHA service of the following provider: Google

Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland

Data may also be transmitted to: Google LLC, USA. For the visual design of the captcha window, the provider uses "Google Fonts", i.e. fonts downloaded by Google from the Internet. There is no processing of further information than that mentioned above, which is already transmitted to Google via the ReCaptcha functionality.

The service checks whether an input is made by a natural person or abusively through machine and automated processing, and blocks spam, DDoSAttacks and similar automated malicious access. In order to ensure that an action is carried out by a human and not by an automated bot, the Provider collects the IP address of the device used, identification data of the browser and operating system type used, as well as the date and duration of the visit and transmits them to the Provider's servers for evaluation. Cookies can be used here, i.e. small text files that are stored in the browser of the end device.

If the processing described above is based on cookies, they will only be set if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in establishing individual personal responsibility on the Internet and avoiding abuse and spam in accordance with Art. 6 (1) (f) GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has committed itself to the EU-US

Data Protection Framework (EU-US Data Privacy Framework), which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/

11.2 Google Customer Reviews (formerly Google Certified Merchant Program)

We work with Google as part of the Google Customer Reviews program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin,

D04 E5W5, Ireland ("Google"). This program gives us the opportunity to:

Collect customer reviews from users of our website. After making a purchase on our website, you will be asked whether you would like to participate in an e-mail survey from Google.

If you give your consent in accordance with Art. 6 (1) (a) GDPR, we will transmit your email address to Google. You'll receive an email from Google Customer Reviews asking you to rate the buying experience on our site. The rating you submit will then be combined with our other reviews and displayed in our Google Customer Reviews logo and in our

Merchant Center dashboard. In addition, your rating for Google

Seller ratings. As part of the use of Google

Customer reviews, personal data may also be transmitted to the servers of Google LLC. in the USA.

You can withdraw your consent at any time by sending a message to the data controller or to Google.

For data transfers to the USA, the provider has committed itself to the EU-US

Data Protection Framework (EU-US Data Privacy Framework), which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Further information on Google's privacy policy can be found here:

https://business.safety.google/intl/de/privacy/

12)     Tools and Miscellaneous

12.1 - Billbee

To handle the accounting, we use the service of the cloud-based

Accounting software from the following provider: Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany

The provider processes incoming and outgoing invoices and, if necessary, also the bank transactions of our company in order to automatically enter invoices, match them to the transactions and create financial accounting from them in a semi-automated process.

If personal data is also processed in this context, the

Processing on the basis of our legitimate interest in the efficient organisation and documentation of our business transactions in accordance with Art. 6 (1) (f) GDPR.

12.2 Cookie-Consent-Tool

This website uses a so-called "CookieConsent Tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "Cookie Consent Tool" is displayed to users when the page is accessed in the form of an interactive user interface, on which consent can be given for certain cookies and/or cookie-based applications by ticking the box. By using the tool, all cookies/services requiring consent are only loaded if the respective user gives corresponding consent by ticking the box. This ensures that such cookies are only placed on the user's respective end device if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is not processed in this process.

If, in an individual case, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.

Another legal basis for the processing is Art. 6 (1) (c) GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

Further information on the operator and the setting options of the CookieConsent tool can be found directly in the corresponding user interface on our website.

13)     Rights of the data subject

13.1 The applicable data protection law grants you the following rights of data subjects (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis mentioned for the respective conditions for exercising:

• Right of access pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure in accordance with Art. 17 GDPR;
• Right to restriction of processing in accordance with Art. 18 GDPR;
• Right to information pursuant to Art. 19 GDPR;
• Right to data portability in accordance with Art. 20 GDPR;
• Right to revoke consent given in accordance with Art. 7 para. 3 GDPR;- Right to lodge a complaint in accordance with Art. 77 GDPR.

13.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE COLLECT YOUR PERSONAL DATA

DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST

YOU HAVE THE RIGHT AT ANY TIME TO DO SO FOR REASONS ARISING FROM

TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL TERMINATE THE

PROCESSING OF THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS

IF WE HAVE COMPELLING REASONS WORTHY OF PROTECTION FOR THE

PROCESSING THAT OVERRIDES YOUR INTERESTS, FUNDAMENTAL RIGHTS AND

FUNDAMENTAL FREEDOMS PREVAIL, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

WILL YOUR PERSONAL DATA BE PROCESSED BY US IN ORDER TO:

DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME

OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14)     Duration of storage of personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and – if relevant – additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of explicit consent in accordance with Art. 6 (1) (a) GDPR, the data concerned will be stored until you revoke your consent.

If there are statutory retention periods for data that are processed within the framework of legal or quasi-contractual obligations on the basis of Art. 6 (1) (b) GDPR, these data will be processed after the expiry of the period

retention periods are routinely deleted if they are no longer used for

performance of the contract or the initiation of a contract and/or there is no legitimate interest on our part in the further storage.

When processing personal data on the basis of Art. 6 (1) (f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert,  Exercising or defending legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) (f) GDPR, this data will be stored until you exercise your right to object in accordance with Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this Statement about specific processing situations, stored personal data will also be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.