Privacy Policy

 

Privacy Policy

Person responsible for data processing:
SWEET PUMPKIN LTD
71-75, Shelton Street, Covent Garden, London, WC2H 9JQ, UNITED KINGDOM
info@pufino.com
We are happy that you are interested in our online shop. Protecting your privacy is very important to us. In the following, we inform you in detail about the processing of your data.
1. ACCESS DATA AND HOSTING
You can visit our website without providing any personal information. Each time a website is called up, the web server automatically saves the so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the call, the amount of data transferred to and from the requesting provider (access data) and documents the call. This access data is evaluated solely for the purpose of ensuring the smooth operation of the site and to improve our offer. This serves to safeguard our overriding legitimate interests in the correct presentation of our offer in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR. All access data will be deleted at the latest seven days after the end of your visit to the website.
HOSTING
The services for hosting and displaying the website are partly provided by our service providers as part of the processing on our behalf. Unless otherwise stated in this data protection declaration, all access data and all data collected in the forms provided on this website are processed on their servers. If you have any questions about our service providers and the basis for our cooperation with them, please use the contact option described in this data protection declaration.
Our service providers are located and/or use servers in the USA and other countries outside the EU and EEA. There are no adequacy decisions issued by the European Commission for these countries. Our cooperation with them is based on the standard data protection provisions of the European Commission.
Our service providers are located and/or use servers in countries outside the EU and EEA. There is no adequacy decision issued by the European Commission for these countries. Our cooperation with them is based on the standard data protection provisions of the European Commission.
Our service providers are located and/or use servers in the following countries where the European Commission has determined an adequate level of data protection: Canada
2. DATA PROCESSING FOR CONTRACT MANAGEMENT AND COMMUNICATION
2.1 DATA PROCESSING FOR CONTRACT MANAGEMENT
For the purposes of contract processing pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR, we collect personal data if you voluntarily provide it to us as part of your order. Mandatory fields are marked as such, because in these cases we need the data to process the contract and cannot send the order without giving it. Which data is collected can be seen in the respective input forms.
Further information about the processing of your data, in particular the transfer to our service providers for ordering, payment and shipping, can be found in the following sections of this data protection declaration. After completion of the contract, your data will be restricted for further processing and deleted after the tax and commercial retention periods pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, unless you have expressly consented to the further use of your data. In accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO, we reserve or reserve the right to use the data beyond this, which is permitted by law and which we have informed you of in this declaration
2.2 CUSTOMER ACCOUNT
We collect personal data if you voluntarily provide it to us when opening a customer account. Mandatory fields are marked as such because in these cases we need the data to open the customer account and you cannot complete the account opening process without providing it. Which data is collected can be seen in the respective login forms. We use the data you provide to process the Agreement and to process your inquiries in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR. Deletion of your customer account is possible at any time and can be done by sending a message to the contact option described in this data protection declaration or using a function in the customer account provided for this purpose. Once your customer account has been deleted, your data will be deleted unless you have expressly consented to the further use of your data in accordance with Art. 6 Paragraph 1 Sentence 1 lit.
2.3 CONTACT
As part of customer communication, when contacting us (e.g. . . . Mandatory fields are marked as such because in these cases we need the data to process your communication. Which data is collected can be seen in the respective input forms. After your request has been fully processed, your data will be deleted unless you have expressly consented to the further use of your data in accordance with Art. 6 Paragraph 1 Sentence 1, which we inform you about in this notice.

3. DATA PROCESSING FOR SHIPMENT PURPOSES
   Insofar as it is necessary for the delivery of the ordered goods, we transmit your data to the transport service provider entrusted with the delivery in order to fulfill the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.
   The same applies to the transfer of data to our manufacturers or wholesalers if they undertake the transport for us (drop shipping). These are considered transportation service providers for the purposes of this data protection declaration.
   Our service providers are located and/or use servers in the following countries: China
   There are no qualification decisions issued by the European Commission for these countries. Our cooperation with you is based on the following guarantees: European Commission standard data protection clauses
   4. DATA PROCESSING FOR PAYMENT PROCESSING
   When processing payments in our online store, we work with the following partners: technical service providers, banks, payment service providers.
   4.1 DATA PROCESSING FOR TRANSACTION PROCESSING
   Depending on the chosen payment method, we transmit the data necessary for the processing of the payment transaction to our technical service providers who work for us within the framework of order processing or to commissioned credit institutions or to the chosen payment service provider, insofar as this is necessary for the processing of the payment. This serves the fulfillment of the contract pursuant to Art. 6 (1) sentence 1 lit. b GDPR. In some cases, payment service providers collect the data necessary to process the payment, for example on their own websites or through technical integration in the ordering process.
   data protection declaration applies.
   If you have any questions about our payment processing partners and the basis of our cooperation with them, please use the contact options described in this data protection declaration.
   4.2 DATA PROCESSING FOR FRAUD PREVENTION AND OPTIMIZATION OF OUR PAYMENT PROCESSES
   We may provide our service providers with additional data that they, as our processors, use in combination with the data necessary to process the payment in order to prevent fraud and optimize our payment processes (e.g. invoicing, processing of disputed payments, accounting support). In accordance with Art. 6 Paragraph 1 Sentence 1 Letter f GDPR, this serves to protect our protection against fraud and our legitimate interests in efficient payment management, which outweigh in the context of weighing interests.
   4.3 IDENTITY AND CREDIT CHECK WHEN CHOOSING KLARNA PAYMENT SERVICES
   Buy accounts on Klarna
   If you decide to use the payment services of Klarna Bank AB (publish), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter referred to as Klarna), we ask for your consent in accordance with Art. 6 Para. 1 S. 1 lit. A DSGVO, whereby we are permitted to transmit the data necessary to process the payment and the identity and credit check to Klarna. In Germany, the credit institutions specified in Klarna's data protection declaration [https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy] can be used for identity and credit checks. Klarna uses the information received about the statistical probability of non-payment for a balanced decision on the establishment, implementation or termination of the contractual relationship. You can revoke your consent at any time by sending a message to the contact option specified in this data protection declaration. As a result, we may no longer be able to offer you certain payment options. You may also revoke your consent to this use of personal data at any time by contacting Klarna.
   5. ADVERTISING BY E-MAIL
   5.1 REGISTERED E-MAIL NEWSLETTER
   If you sign up for our newsletter, we will use the data required for this or separately provided by you to send you our e-mail newsletter regularly based on your consent in accordance with Art. 6 Paragraph 1 Sentence 1 lit. Unsubscribing from the newsletter is possible at any time and can be done by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address from the list of recipients, unless you have expressly consented to the further use of your data in accordance with Art. 6 Paragraph 1 Sentence 1 lit. permitted by law and we have informed you in this statement.
   5.2 NEWSLETTER DISTRIBUTION
   The newsletter may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis for our cooperation with them, please use the contact option described in this data protection declaration.
   Our service providers are based and/or use servers in the USA. The European Commission has not issued an adequacy decision for the USA. Our cooperation with them is based on the standard data protection provisions of the European Commission.
   6.COOKIES AND OTHER TECHNOLOGIES

GENERAL INFORMATION
We use technologies, including cookies, on various pages to make visiting our website attractive and to enable the use of certain functions. Cookies are small text files that are automatically stored on your end device. Some cookies we use are deleted after the browser session ends, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and allow us to recognize your browser on your next visit (persistent cookies).
We use technologies that are strictly necessary for the use of certain functions of our website (e.g. the shopping cart function). These technologies collect and process IP address, time of visit, device and browser information and information about your use of our website (e.g. information about the contents of the shopping cart). In the framework of the weighing of interests, this serves overriding legitimate interests in an optimized presentation of our offer in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
Furthermore, we use technologies to fulfill legal obligations to which we are subject (e.g. to be able to prove that you have consented to the processing of your personal data) as well as for web analytics and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this data protection declaration.
You can find the cookie settings for your browser at the following links: Microsoft Edge™ [https://support.microsoft.com/de-de/help/4027947/microsoft-edge-delete-cookies] / Safari™ [https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14] / Chrome™ [https://support.google.com/chrome/answer/95647?hl=de&hlrm =en] / Firefox™ [https://support.mozilla.org/de/products/firefox/protect-your-privacy/cookies] / Opera™ [https://help.opera.com/de/latest/web -preferences/#cookies]
If you have consented to the use of the technologies pursuant to Art. 6 (1) sentence 1 lit. a GDPR, you can revoke your consent at any time by sending a message to the contact option described in the data protection declaration. .
7. USE OF COOKIES AND OTHER TECHNOLOGIES FOR WEB ANALYSIS AND ADVERTISING PURPOSES
We use the following cookies and other third-party technologies on our website if you have consented to this pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR. After the use of the respective technology by us has ended, the data collected in this context will be deleted. With effect for the future, you can revoke your consent at any time. You can find more information about your revocation options in the section "Cookies and other technologies". See each technology for more information, including how we work with each vendor. If you have any questions about the vendors and the basis of our cooperation with them, please use the contact option described in this data protection declaration.
7.1 USE OF GOOGLE SERVICES FOR WEB ANALYTICS AND ADVERTISING PURPOSES
We use the following technologies provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google technologies about your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. The European Commission has not issued an adequacy decision for the USA. If your IP address is collected via Google technologies, it will be shortened before being stored on Google servers by activating IP anonymization. Only in exceptional cases will the full IP address be sent to a Google server and shortened there. Unless otherwise specified for individual technologies, data processing takes place on the basis of an agreement concluded between the persons jointly responsible for the respective technology in accordance with Art. 26 GDPR. Further information on data processing by Google can be found in Google's data protection information [https://policies.google.com/privacy?hl=de].
GOOGLE ANALYTICS
For the purpose of website analysis, data (IP address, time of visit, device and browser information as well as information about your use of our website) are automatically collected and stored with Google Analytics and user profiles are created using these data. pseudonyms. Cookies can be used. In principle, your IP address will not be merged with other Google data. The data is processed by Google on the basis of a contract for order processing.

In order to optimize the marketing of our website, we have activated the data sharing settings for "Google products and services". This allows Google to access the data collected and processed by Google Analytics and then use it to improve Google services. The publication of data to Google as part of these data publication settings is based on an additional contract between the responsible parties. We have no influence on the subsequent data processing by Google.
YOUTUBE VIDEO PLUGIN
In order to integrate third-party content, data (IP address, time of visit, device and browser information) is collected in the extended data protection mode that we use via the YouTube video plug-in, transmitted to Google and then processed by Google, but only when playing videos.
7.2 USE OF FACEBOOK SERVICES FOR WEB ANALYTICS AND ADVERTISING PURPOSES
FACEBOOK PIXEL USAGE
We use the Facebook pixel as part of the Facebook Ireland Ltd technologies described below [https://de-de.facebook.com/facebookdublin/]., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). With the Facebook pixel, data (IP address, time of visit, device and browser information and information about your use of our website based on events specified by us, such as visiting a website or subscribing to a newsletter) is automatically collected and stored where user profiles are created from pseudonyms. As part of the so-called extended data comparison, hashing information by which persons can be identified (e.g. names, e-mail addresses and telephone numbers) is also collected and stored for comparison purposes. For this purpose, a cookie is automatically set by the Facebook pixel when you visit our website, which enables automatic recognition of your browser via a pseudonymized cookie ID when you visit other websites. Facebook will combine this information with other data from your Facebook account and use it to compile reports on website activity and provide other services related to website usage, in particular personalized and group-based advertising.
The information automatically collected by Facebook technologies about your use of our website is generally transferred to and stored on a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. If we are responsible for data transfer to the USA, our cooperation is based on the standard data protection provisions of the European Commission. Further information on data processing by Facebook can be found in Facebook's data protection information [https://de-de.facebook]. .com/policy.php].
FACEBOOK ANALYSES
As part of Facebook Analytics, statistics on visitor activity on our website are generated from data collected by the Facebook pixel about your use of our website. The data processing takes place on the basis of an agreement on order processing by Facebook. Your analysis serves the optimal presentation and marketing of our website.
FACEBOOK ADVERTISING
We use Facebook Ads to promote this website on Facebook and other platforms. We determine the parameters of the respective advertising campaign. Facebook is responsible for the precise implementation, in particular the decision on the placement of advertisements with individual users. Unless otherwise stated for individual technologies, the data processing is based on an agreement between joint controllers in accordance with Article 26 GDPR. Joint responsibility is limited to the collection and transmission of data to Facebook Ireland. This does not include subsequent data processing by Facebook Ireland.
Based on the statistics generated by Facebook Pixel about visitor activity on our website, we carry out group-based advertising on Facebook via Facebook Custom Audience by identifying the characteristics of the respective target group. As part of the extended data comparison (see above) to determine the respective target group, Facebook acts as our processor.
Based on the pseudonymous cookie ID set by the Facebook pixel and the data collected about your usage behavior on our website, we execute personalized advertising through Facebook pixel remarketing.
If you came to our website via an advertisement from Facebook Ads, we use Facebook Pixel Conversions to measure your subsequent usage behavior for web analytics and event tracking. The data is processed by Facebook on the basis of an agreement on order processing.
8. SOCIAL MEDIA
8.1 SOCIAL PLUGINS FROM FACEBOOK, INSTAGRAM

Our website uses social buttons from social networks. These are integrated into the page only as HTML links, so that no connection to the servers of the respective provider is established when our website is opened. If you click on one of the buttons, the website of the respective social network opens in a new window in your browser, where you can, for example, press the Like or Share button.
8.2 OUR ONLINE PRESENCE ON FACEBOOK, INSTAGRAM, YOUTUBE
If you have given your consent to the respective social media operator pursuant to Art. 6 Paragraph 1 Sentence 1 lit. 1, the creation of usage profiles using pseudonyms is automatically collected and stored for advertising purposes. These can be used, for example, to place advertisements on and off platforms, possibly corresponding to your interests. Cookies are usually used for this. For detailed information on the processing and use of data by the respective social media operator, as well as a contact option and your rights in this regard and the setting of options for the protection of your privacy, please refer to the data protection notices of the providers linked below. If you still need help with this, you can contact us
Facebook [https://www.facebook.com/about/privacy/] is an offering by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). The online presence on Facebook is usually transmitted to and stored on a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. The European Commission has not issued an adequacy decision for the USA. Our cooperation with them is based on the standard data protection provisions of the European Commission. The data processing when visiting a Facebook fan page is based on an agreement between the joint controllers pursuant to Article 26 GDPR. Further information (information on Insights data) can be found here [https://www.facebook.com/legal/terms/information_about_page_insights_data].
Instagram [https://help.instagram.com/519522125107875] is an offer by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). Your use of our online presence on Instagram is generally transferred to and stored on a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. The European Commission has not issued an adequacy decision for the USA. Our cooperation with them is based on the standard data protection provisions of the European Commission. Data processing when visiting an Instagram fan page is based on an agreement between the joint controllers in accordance with Article 26 GDPR. Further information (information on Insights data) can be found here [https://www.facebook.com/legal/terms/information_about_page_insights_data].
YouTube [https://policies.google.com/privacy?hl=de] is an offer by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google about your use of our online presence on YouTube is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. The European Commission has not issued an adequacy decision for the USA. Our cooperation with them is based on the standard data protection provisions of the European Commission.
9. HOW YOU CAN CONTACT US AND YOUR RIGHTS
9.1 YOUR RIGHTS
As a data subject, you have the following rights:
* the right, pursuant to Article 15 of the GDPR, to request information about your personal data processed by us to the extent specified therein;
* pursuant to Art. 16 GDPR, the right to immediately request the rectification of inaccurate or incomplete personal data stored by us;
* the right, pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us for as long as they are not further processed
* exercising the right to freedom of expression and information;
* to comply with a legal obligation;
* for reasons of public interest or
* necessary to assert, exercise or defend legal claims;
* pursuant to Article 18 DSGVO
the right to request restriction of the processing of your personal data within the scope of
* the accuracy of the data is contested by you;
* the processing is unlawful but you oppose its deletion;
* we no longer need the data, but you need it to assert, exercise or defend legal claims; or
* You have objected to processing pursuant to Article 21 GDPR;
* according to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible;
* the right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our company headquarters.
Right to object

As long as we process personal data as described above to protect our legitimate interests that outweigh the interests, you may object to this processing with effect for the future. If the processing is for direct marketing purposes, you may exercise this right at any time as described above. If the processing is for other purposes, you only have the right to object if there are reasons arising from your particular situation.
Once you have exercised your right to object, we will no longer process your personal data for these purposes, except where we can demonstrate legitimate grounds for the processing that outweigh your interests, rights and freedoms, or where the processing is not necessary for the assertion, exercise or defense of legal claims.
This does not apply if the processing is for direct marketing purposes. Then we will no longer process your personal data for this purpose.
9.2 CONTACT OPTIONS
If you have any questions regarding the collection, processing or use of your personal data, the rectification of information, the restriction or erasure of data and the withdrawal of consent given or objection to a particular use of data, please contact us directly using the contact details in our edition