This translation is for information only. The German version is legally binding.
Privacy policy
1. Controller
The controller responsible for data processing on this website is:
Party Deko World, owner Stephan Santos de Sousa
Uhlandstraße 20, 70182 Stuttgart, Germany
Phone: 0711-12893009
Email: shop@partydekoworld.de
2. Collection and storage of personal data
When you visit our shop, our hosting provider Shopify automatically records information (server log files) transmitted by your browser, including browser type, operating system, referrer URL, IP address and time of the request. This data is used for the technical provision and security of the shop (Art. 6 Abs. 1 lit. f DSGVO).
3. Order processing
To process the contract, we collect your name, address, email address, phone number and payment details. To process your order, this data is passed on to the shipping company commissioned with delivery and to the payment service provider commissioned with processing the payment, insofar as this is necessary to perform the contract (Art. 6 Abs. 1 lit. b DSGVO).
4. Customer account
If you create a customer account, we store the data you provide (name, address, email address, order history) to perform the contract and to make future orders easier (Art. 6 Abs. 1 lit. b DSGVO). You can have your customer account deleted at any time.
5. Cookies
Our shop uses cookies, some of which are technically necessary (e.g. the cart function) and some for analysis purposes. Necessary cookies are used on the basis of Art. 6 Abs. 1 lit. f DSGVO; all others only with your consent under Art. 6 Abs. 1 lit. a DSGVO, which is obtained via our cookie banner.
6. Contacting us
If you contact us by email, phone or contact form, your details are stored in order to process your enquiry (Art. 6 Abs. 1 lit. b or f DSGVO).
7. Withdrawal via „Vertrag widerrufen“ (cancel contract)
If you withdraw from a contract using the „Vertrag widerrufen“ (cancel contract) button, we process your name, the order number and your email address. If you state which items you are withdrawing from, we also process this information. We need this data to match the withdrawal to your order and to confirm its receipt to you by email with the date and time. We are obliged to do so under § 356a BGB. The legal basis is Art. 6 Abs. 1 lit. c DSGVO. We note the withdrawal on your order in Shopify. We send the confirmation from our mailbox shop@partydekoworld.de, and a copy goes to us.
The form runs on a service provided by Cloudflare, Inc. (USA), which acts on our behalf (Art. 28 DSGVO). Cloudflare is certified under the EU-U.S. Data Privacy Framework. The transfer to the USA is based on the adequacy decision of the EU Commission of 10 July 2023 (Art. 45 DSGVO). You can find the entry at dataprivacyframework.gov/list.
To protect against forms being sent in bulk, Cloudflare stores your IP address for a maximum of one hour. This is our legitimate interest under Art. 6 Abs. 1 lit. f DSGVO. We delete your form details at Cloudflare 30 days after the withdrawal has been processed. We keep the confirmation of receipt and the note on your order for as long as described in section 10.
8. Loyalty card
You collect stamps on a loyalty card for purchases in our shop and in the online shop. With 10 stamps you receive a discount code. For this we store with your customer record at Shopify: the number of your stamps, a history (date, shop or online order, number of stamps, the order number for online orders and, where applicable, the receipt number for in-store purchases) and your discount codes. The history also shows which member of staff added the stamps. We do not store the amount of your purchase for the loyalty card.
You only collect stamps if you join the loyalty card. In our shop we set up the card if you want it. For this we store your mobile number or email address and, if you give it, your name. Online you join in your customer account under “My loyalty card”. We store when you joined and add the stamps for orders placed from then on, 14 days after the order. In both cases the legal basis is Art. 6 Abs. 1 lit. b DSGVO (participation in the loyalty card). You can stop at any time: with “Leave the loyalty card” in your customer account or by email to shop@partydekoworld.de. After that you no longer collect new stamps; open codes remain valid.
When your card is full, we send you the discount code by email if we have your address. You can see your balance, your codes and the history (without staff names) in your customer account under „My loyalty card“. It also shows a QR code that we scan in the shop. It only contains your customer number with a checksum, no other data.
The loyalty card runs on services of Cloudflare, Inc. (USA) on our behalf; what section 7 says about the EU-U.S. Data Privacy Framework applies. The data is stored only at Shopify, not at Cloudflare. We store the loyalty card data for as long as your customer account exists. If you also want your status and history deleted after leaving, an email to shop@partydekoworld.de is enough. Discount codes have no expiry date.
9. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to the processing of your personal data. To do so, please contact us at the contact address given above. You also have the right to lodge a complaint with a data protection supervisory authority.
10. Storage period
We only store personal data for as long as is necessary for the purposes stated or as required by statutory retention periods (in particular periods under commercial and tax law).