Short and Crunch main artwork

Privacy policy

1. General

1.1 What is personal data
Personal data is information that discloses or can disclose the identity of the user. We adhere to the principle of data avoidance. As far as possible, we refrain from collecting personal data.

1.2 Handling of personal data
Personal data is used exclusively to establish the contract, define its content, implement or process the contractual relationship (Art. 6 I S. 1 b GDPR).

Beyond that, personal data will only be processed if we have received your consent to do so (Art. 6 I S. 1 a GDPR) or if it is data whose processing is necessary for our legitimate interests and insofar as the balancing process shows that no overriding interests, fundamental rights or freedoms on your part are opposed (Art. 6 I S. 1 f GDPR).

We may use order processors to process your personal data but will not pass on the personal data to third parties beyond this as a matter of principle.

Only for the fulfillment of the contract, the data will be passed on to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. For the payment processing, the payment data required for this will be passed on to the credit institution commissioned with the payment and, if applicable, to the authorized and selected payment service provider.

The processing of your personal data takes place exclusively within the EU unless otherwise stated below.

1.3 Usage data
When visiting the website, general technical information is collected. This is the IP address used, time, duration of the visit, browser type and, if applicable, the page of origin. This usage data is registered in a log file for technical reasons and can be used and stored for statistical evaluation of this website. This usage data is not linked to your other personal data.

1.4 Registration data
Registration is required for the extensive use of the functions of our website. The registration data is collected through your corresponding entries and used for the expressly stated purpose by your consent (Art. 6 I S. 1 a GDPR).

 

2. Your rights

2.1 Information
You can request information from us as to whether we process personal data about you. If this is the case, you have a right to information about this personal data and the further information mentioned in Art. 15 GDPR.

2.2 Right to rectification
You have the right to have inaccurate personal data concerning you corrected and, in accordance with Art. 16 GDPR, you may request that incomplete personal data be completed.

2.3 Right to deletion
You have the right to demand that we delete the personal data concerning you without delay. We are obliged to delete them without delay, in particular, if one of the following reasons applies:

Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
You revoke your consent on which the processing of your data was based, and there is no other legal basis for the processing.
Your data has been processed unlawfully.

The right to erasure does not exist insofar as your personal data is required for the assertion, exercise or defense of our legal claims.

2.4 Right to restriction of processing
You have the right to demand that we restrict the processing of your personal data if

you dispute the accuracy of the data, and we, therefore, verify the accuracy,
the processing is unlawful, and you refuse the deletion and demand the restriction of use instead
we no longer need the data, but you need it to assert, exercise or defend legal claims,
you have objected to your data processing, and it has not yet been determined whether our legitimate reasons outweigh your reasons.

2.5 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent or a contract and the processing is carried out by us with the help of automated processes.

2.6 Right of withdrawal
Insofar as your personal data processing is based on consent, you have the right to revoke this consent at any time.

2.7 General and right of appeal
The exercise of your above rights is generally free of charge for you. In the event of complaints, you have the right to contact the supervisory authority responsible for us, the State Data Protection Officer, directly.


3. Data security

3.1 Data security
All data on our website is secured by technical and organizational measures against loss, destruction, access, modification and distribution.

3.2 Sessions and cookies
To operate the website, we use cookies or server-side sessions in which data can be stored. We only use cookies or server-side sessions that are technically necessary for the operation of this website (e.g. spam protection for contact form, shopping cart function) and for which the assessment shows that there are no overriding interests on your part (Art. 6 I S. 1 f DSGVO).

 

4. Presence on social media platforms
We use the following social media platforms for company presentation and communication (explicit reference is made to the privacy statements and opt-out options linked below).

Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).
Privacy policy: www.facebook.com/about/privacy/.
Opt-Out: www.facebook.com/settings?tab=ads alternatively www.youronlinechoices.com

Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland).
Privacy policy: twitter.com/de/privacy/.

Opt-Out: twitter.com/personalization,

YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland)
Privacy policy: www.youtube.com/t/privacy/.

               

These social media platforms may process personal data outside the EU; we refer to the above privacy statements of the social media platforms.

The respective social media platforms may create usage profiles from your usage behavior and the resulting interests and actions on your part and store cookies on your computer in which your usage behavior is stored. If you have an account on the respective social media platform and are logged in, your usage behavior may even be stored independently of the device. Your usage profile can be used, for example, to place advertisements that presumably correspond to your interests.

We process the personal data exclusively for communicating with you via the social media platform you have chosen and for optimizing our online presence and ensure that no interests on your part are affected here that outweigh this legitimate interest on our part (Art. 6 I S. 1 f GDPR). Insofar as you have already given the respective operator of the social media platform effective consent to the corresponding data processing, the processing of your personal data will also be based on this consent (Art. 6 I S. 1 a GDPR).

 

5. Third party services

5.1 Use of YouTube
This website and the integrated offers contain so-called embeddings of videos on YouTube. These enable the connection to YouTube and the videos stored there. YouTube is an offer of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Here, no interests of the users are affected, which outweigh this technical necessity of the integration of the videos (Art. 6 I S. 1 f GDPR). For the purpose and scope of data collection and data use by Google, as well as your rights and settings options for protection as a customer of YouTube, please refer to the privacy notices of YouTube. These can be found at: www.youtube.com/t/privacy/.

5.2 Honeypot (Captcha)
To protect your orders via Internet form for spam protection, we use the service “Honeypot” of the company Honeypot GmbH in 10997 Berlin. The query is used to distinguish whether the input is made by a human or abusive by automated, machine processing. For more information on the privacy policy of Honeypot, please visit: www.honeypot.io/en/privacy_policy

5.3 Social media links
We have our own social media pages with third-party providers that can be reached via links from this website. Using the links will take you to third-party providers’ respective websites (e.g., Facebook, Twitter, Instagram). To avoid unnecessary data transfer, we recommend that you log out of the respective third-party provider before using a corresponding link, so that usage profiles cannot be created by the third-party provider only by using the link.

5.4 Use of YouTube
This website and the integrated offers contain so-called embeddings of videos on YouTube. These enable the connection to YouTube and the videos stored there. YouTube is an offer of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Here, no interests of the users are affected, which outweigh this technical necessity of the integration of the videos (Art. 6 I S. 1 f GDPR). For the purpose and scope of data collection and data use by Google, as well as your rights and settings options for protection as a customer of YouTube, please refer to the privacy notices of YouTube. These can be found at: www.youtube.com/t/privacy/.

 

6. Contacting
To contact us regarding data protection, you are welcome to use the following contact options. Responsible person in the sense of the GDPR:

Short and Crunch
Mr.  Kevin Liere, Marco Liere
Straße 158 Nr. 26
13053 Berlin
E-Mail: info@shortandcrunch.de
Phone: +49 176 83190276