Privacy Policy

In this privacy policy, we would like to inform you about the type, scope, and purpose of the personal data we collect, use, and process.

Personal data refers to any information that can be directly or indirectly related to you personally. This includes, for example, your name, address, email address, online identifiers, and your user behavior if you are identified or can be identified through this information or actions.

We use SSL encryption on our website to protect your personal data and other confidential content (e.g., during order processing and inquiries via our contact form).

If you have any questions about the collection, processing, or use of your personal data, or if you require information, correction, blocking, or deletion of data, as well as revocation of any consent given or objection to a specific data processing, please contact the person responsible as mentioned below.

I. Name and Contact Details of the Responsible Party

The responsible party within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR), other data protection laws applicable in the member states of the European Union, and other provisions related to data protection is:

Mr. Etienne Stander
Kössener Str. 29
81373 Munich
Email: etienne.stander@feelandflowsurf.com

II. Your Rights

1. Below we inform you about your rights regarding the personal data concerning you.
   
   You have the right to request free of charge:
   • Confirmation as to whether personal data concerning you is being processed by us (Art. 15 GDPR),
   • Information about your personal data processed by us (Art. 15 GDPR). In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details,
   • The rectification of inaccurate or completion of your personal data stored by us without delay (Art. 16 GDPR),
   • The erasure of your personal data stored by us, unless the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims (Art. 17 GDPR),
   • The restriction of processing of your personal data if you contest the accuracy of the data, the processing is unlawful, but you oppose the erasure, and we no longer need the data, but you need it for the establishment, exercise, or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR (Art. 18 GDPR),
   • To receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format or to request the transfer to another controller (Art. 20 GDPR),
   • To withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
2. If you have asserted the right to rectification, erasure, or restriction of processing against us, we are obliged to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom the personal data concerning you has been disclosed unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients (Art. 19 GDPR).
3. You also have the right to lodge a complaint with the supervisory authority responsible for us (http://www.datenschutz-bayern.de/) regarding the processing of your personal data by us (Art. 77 GDPR).

III. Provision of Our Website and Creation of Server Log Files

1. When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we collect only the personal data that your browser transmits to our server. If you visit our website, we collect the following data, which is technically necessary for us to display our website and ensure its stability and security:
   • IP address
   • Date and time of access
   • Time zone difference to Greenwich Mean Time (GMT)
   • Content of the request (specific page)
   • Access status/HTTP status code
   • The amount of data transferred in each case
   • Website from which the request comes
   • Websites you visit with us
   • Information about the browser type and version used
   • Operating system and its interface
   • Language and version of the browser software.
2. These general data and information are temporarily stored in the log files of our server separately from your personal data that you may provide to us voluntarily. The anonymously collected data and information in the log files are evaluated by us statistically with the aim of increasing data protection and data security in our company and ensuring an optimal level of protection for the personal data we process.
3. The legal basis for data processing in connection with server log files is Art. 6 para. 1 sentence 1 lit. f GDPR. The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is ended.
4. The collection of the data for providing the website and its storage in log files is mandatory for the operation of our website. Consequently, there is no possibility for you to object to this data processing.

IV. Use of Cookies

1. When using our website, we additionally use cookies. Cookies are small text files that are assigned and stored on your computer system by your browser.

   With cookies, we can improve the performance and offerings of our website. Some cookies are absolutely necessary for the operation of our website. Cookies allow us to:

   • Make it easier for you to use our website and make our offerings more effective and user-friendly,
   • Recognize you on a return visit to our website so that you do not have to re-enter your login data,
   • Temporarily store items placed in your virtual shopping cart,
   • Provide access to protected areas of our website,
   • Record previously entered text so that it is not lost when the page is refreshed.
2. We use two types of cookies on our website: session cookies and persistent cookies. Session cookies are temporary cookies stored on your computer system until you leave our website.

   Session cookies store a so-called session ID, which allows various requests from your browser to be assigned to a common session. The session cookies are deleted when you log out or close the browser.

   Persistent cookies are stored on your hard drive until you delete them or until they reach their respective expiration date. We use these persistent cookies to store your preferred settings on the website and to recognize you on a return visit to our website.

3. In addition to our own cookies, we also use third-party cookies. These are third-party providers such as Google, who also store cookies on your computer system when you visit our website so that the third-party providers can provide the services they offer. We inform you separately about third-party cookies in this privacy policy.
4. The legal basis for processing personal data using cookies is Art. 6 para. 1 sentence 1 lit. f GDPR.

   You can configure your browser settings to accept or reject third-party cookies or all cookies. We would like to point out that you may not be able to use all the functions of our website if you disable the acceptance of cookies in your browser.

V. Registration on Our Website (Customer Account)

1. We offer you the opportunity to register on our website by providing personal data and opening a customer account. For this purpose, the following data (mandatory information) are collected, transmitted to us, and stored:
   • Salutation
   • First name, last name
   • Address (street, postal code, city, country)
   • Email address
   • Password.

   When you register, we also store your IP address as well as the date and time of registration. Other data (such as your telephone number) are only stored by us if you voluntarily provide this data. The personal data you enter will be collected and stored exclusively for internal use and our own purposes. In your customer account, you can manage your personal data and view past and open orders.

2. Your registration is not necessary to use additional services of our company, such as the conclusion of purchase contracts via the shopping cart function. You can also place orders as a “guest” without opening a customer account by providing the data mentioned in section 1.) (except for the password).
3. The legal basis for processing the data is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can change or completely delete the personal data provided during registration from our database at any time. Statutory retention periods remain unaffected.
4. You can revoke your consent to the processing of your data at any time. If the data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, an early deletion of the data is only possible if no contractual or legal obligations prevent the deletion. The lawfulness of the processing based on consent before its withdrawal remains unaffected by the revocation.

VI. Use of Our Online Shop (Ordering Function)

1. If you want to place an order in our online shop, it is necessary for the conclusion of the contract that you provide your personal data according to section V. of this privacy policy. Failure to provide your data would result in you not being able to use the ordering function of our online shop.

   The data you provide will be processed by us to handle your order, including our services in case of cancellations, warranty claims, and to answer your inquiries.

2. Your personal data will only be transmitted to third parties if this is necessary for the processing of the contract and payment. Third parties commissioned by us, such as shipping partners and payment service providers, only receive personal data if its transmission is necessary for the delivery of your order and the processing of payments.
3. If you decide to pay with “PayPal” during the ordering process, your personal data will be automatically transmitted to PayPal. PayPal is an offer from PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal functions as an online payment service provider as well as a trustee and offers buyer protection services.

   The personal data transmitted to PayPal regularly includes first name, last name, address, email address, IP address, phone number, mobile phone number, or other data necessary for payment processing. Personal data related to the respective order, such as the number of items, item number, invoice amount, taxes, and other billing information, are also required for the processing of the purchase contract.

   The transmission of your data is necessary for payment processing via PayPal and is intended to confirm your identity and administer your payment order. PayPal may transmit your personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfill contractual obligations or if the data is processed on behalf of PayPal.

   The personal data transmitted by us to PayPal may be transmitted by PayPal to credit agencies. This transmission is intended for identity and credit checks. You can see which credit agencies are involved here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full#rAnnex

   You have the right to object to the processing of your personal data at any time. The lawfulness of processing based on consent before its withdrawal remains unaffected.

   You can access PayPal’s privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

4. If you choose to pay with “credit card” (VISA, MasterCard) during the ordering process, your personal data will be automatically transmitted to our payment service provider PAYONE (BS PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt/Main). You will be redirected to PAYONE’s secure website for payment processing after completing the order. Your credit card data will only be processed by PAYONE.

   The personal data transmitted to PAYONE regularly includes first name, last name, address, email address, IP address, or other data necessary for payment processing. Personal data related to the respective order, such as the number of items, item number, invoice amount, taxes, and other billing information, are also required for the processing of the purchase contract.

   The transmission of your data is necessary for payment processing via PAYONE and is intended to confirm your identity and administer your payment order.

   You have the right to object to the processing of your personal data at any time to PAYONE. The lawfulness of processing based on consent before its withdrawal remains unaffected.

   You can access PAYONE’s privacy policy here: https://www.bspayone.com/de/privacy

5. The legal basis for processing your data in connection with the fulfillment of a contract or pre-contractual measures is Art. 6 para. 1 sentence 1 lit. b GDPR.
6. We are obliged by commercial and tax regulations to store your address, payment, and order data in connection with a purchase contract for up to ten years. However, after two years, we restrict the processing, i.e., your data will only be stored to comply with legal obligations.

VII. Contact Form / Communication via Email

1. You can contact us at any time via the form provided by us. When you send your message, your email address (mandatory field) as well as the date and time will be stored by us.

   Alternatively, you can contact us at any time via the email address provided by us. In this case, only the personal data transmitted to us by you via email will be stored.

2. The legal basis for processing the data when using our contact form or the data you provide to us when sending an email is Art. 6 para. 1 sentence 1 lit. f GDPR.
3. We use the data exclusively to respond to your request. The data collected in this context will be deleted after the storage is no longer necessary, or the processing will be restricted if legal retention periods exist. You can object to the processing of your personal data transmitted via the contact form or by email at any time. Please direct your objection to the contact details provided in section I. However, the correspondence cannot be continued.

VIII. Use of Google Maps

1. We use Google Maps on our website, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). This allows us to display interactive maps directly on the website and enables you to use the map function conveniently in connection with our service offerings.
2. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. Additionally, the data mentioned in section III. is transmitted to Google. This occurs regardless of whether you are logged into your Google user account or do not have a user account. If you are logged in to Google, your data is directly assigned to your account. If you do not want your profile to be associated with Google, you must log out before using the map function. Google stores your data as usage profiles and uses them for advertising, market research, and/or need-based design of its website. Such evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these user profiles, and you must contact Google directly to exercise this right.
3. The legal basis for the use of Google Maps is Art. 6 para. 1 sentence 1 lit. f GDPR. Further information on the purpose and scope of data collection and processing by Google can be found in Google’s privacy policy: http://www.google.de/intl/de/policies/privacy. There you will also find further information about your rights and settings options to protect your privacy. Google processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

IX. Use of YouTube Videos

1. We have embedded YouTube videos on our website, which are stored on http://www.youtube.com and can be played directly from our website. YouTube is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

   These videos are embedded in “extended data protection mode,” meaning no data about you will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transmission.

2. By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. Additionally, the data mentioned in section III. of this statement is transmitted to YouTube. This occurs regardless of whether YouTube provides a user account that you are logged into or if no user account exists. If you are logged in to Google, your data is directly assigned to your account. If you do not want your profile to be associated with YouTube, you must log out before activating a video.

   YouTube uses cookies, stores your data as usage profiles, and uses them for advertising, market research, and/or need-based design of its website. Such evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. Regardless of the playback of the embedded videos, a connection to the Google “DoubleClick” network is established every time you visit our website, which triggers further data processing operations by Google that we cannot influence.

   You have the right to object to the formation of these user profiles, and you must contact YouTube directly to exercise this right.

3. The legal basis for the use of YouTube videos is Art. 6 para. 1 sentence 1 lit. f GDPR. Further information on the purpose and scope of data collection and processing by Google can be found in Google’s privacy policy: http://www.google.de/intl/de/policies/privacy.

   There you will also find further information about your rights and settings options to protect your privacy. Google processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

X. Routine Deletion and Blocking of Your Personal Data

We process and store your personal data only for the period necessary to achieve the storage purpose or as required by the European directives and regulations or any other legislator in laws or regulations to which we are subject. If the storage purpose ceases to apply or a storage period prescribed by the European directives and regulations or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions unless you have consented to further use of your data.

XI. RIGHT TO OBJECT (Art. 21 GDPR)

If we process your personal data based on our overriding legitimate interest within the framework of a balance of interests according to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future, free of charge.

If we process your personal data for direct marketing purposes, you also have the right to object to processing for such advertising purposes at any time with effect for the future, free of charge; this also applies to profiling to the extent that it is related to such direct marketing.

Please address your objection to the responsible party mentioned in section I (e.g., by email).