Data protection
Data Protection Information
I. Controller, Collection, Processing, Use and Disclosure of Personal Data
1. The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union, and other provisions with data protection character is:
KNIT KNIT Belinda Sykora & Lisa Benischek GbR Linienstr. 154 10115 Berlin
Phone: +49-30-98366430 Email: mail@knitknit.de
2. When you visit our website without registering or using a contact form, a series of general data and information is collected with each access to the website by you or an automated system. This general data and information is stored in the server's log files. The following may be recorded: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrer), (4) the sub-websites which are accessed on our website via an accessing system, (5) the date and time of an access to the website, (6) an Internet Protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) other similar data and information that serves to avert danger in the event of attacks on our information technology systems. This information is used exclusively for the operation of the website and for preventing dangers.
3. We also use your email address for our own advertising purposes, provided you have expressly consented to this. You can revoke your consent to the use of your email address for advertising purposes at any time with effect for the future.
4. Within the scope of contract processing, we pass on your data to the transport company commissioned with the delivery, insofar as this is necessary for the delivery of the goods.
5. After complete processing of the contract, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to the further use of your data.
6. When you contact us by email, your information will be stored by us to answer your question(s). No further data will be collected. The storage serves solely the purpose of answering your inquiry.
II. Cookies
We use cookies on our website to make visiting our website attractive and to enable the use of certain functions. These are small text files that are stored on your computer. Most of the cookies we use are deleted from your hard drive after the end of the browser session (so-called session cookies). Other cookies remain on your computer and allow us to recognize your computer on your next visit (so-called long-term cookies). If you do not want cookies to be installed on your computer, you can change this in your browser's security settings. You can read how this works in your browser's help section. It may be that certain areas of our offering are then only available to a limited extent.
III. Google Services
1. Our website uses Google Analytics, a web analysis service of Google Ireland Ltd. ("Google"). Google Analytics uses "cookies." The information generated by the cookie about the use of this website by users is usually transmitted to a Google server in the USA and stored there.
However, if IP anonymization is activated on this website, the IP address of users will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information to evaluate the use of the website by users, to compile reports on website activity, and to provide other services related to website and internet use to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Users can prevent the storage of cookies by adjusting their browser software settings; however, this offer advises users that in this case they may not be able to fully use all functions of this website. Users can also prevent the collection of data generated by the cookie and related to their use of the website (including their IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
2. On our website, we use Google Maps (API) from Google Ireland Ltd. (“Google”). Google Maps is a web service for displaying interactive (country) maps to visually display geographical information. By using this service, our location is shown to you and any journey is made easier.
Already when calling up the sub-pages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there. This happens regardless of whether you are logged in via a Google user account or whether no user account exists. If you are logged in via a Google user account, this data is immediately assigned to the respective user account. If you do not want this, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates these. Such an evaluation takes place in particular in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of Google's legitimate interests in displaying personalized advertising, market research, and/or needs-based design of its website. You have a right to object to the use of these user profiles vis-à-vis Google.
If you do not agree with the future transmission of your data to Google within the scope of using Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.
You can view Google's terms of use at http://www.google.de/intl/de/policies/terms/regional.html, and the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html
Detailed information on data protection in connection with the use of Google Maps can be found on Google's website ("Google Privacy Policy"): http://www.google.de/intl/de/policies/privacy/
3. This site uses so-called web fonts provided by Google Ireland Ltd. ("Google") for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.
For this purpose, the internet browser you use establishes a connection with Google's servers. Your IP address is transmitted to Google so that Google knows that you have accessed our website. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, a standard font from your computer will be used.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/
4. We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. The provider is Google Ireland Ltd. ("Google").
Through the use of reCAPTCHA, we check whether the data entered in our contact form is entered by a human or by an automated computer program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g., IP address, duration of the website visitor's stay on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offers from abusive automated espionage and from SPAM.
Further information on Google reCAPTCHA and Google's privacy policy can be found at the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.
5. Data transfer to Google and, in particular, to the USA, takes place in accordance with Art. 46 para. 2 lit. c) GDPR on the basis of so-called Standard Contractual Clauses (SCC) for the transfer of personal data to third countries.
IV. Mailchimp
This website uses the services of MailChimp from Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, for sending newsletters.
The data you enter will be stored on MailChimp's servers in the USA.
With the help of MailChimp, we can analyze our newsletter campaigns. When you open an email sent by MailChimp, a file contained in the email (so-called web beacon) connects to MailChimp's servers in the USA. This allows us to determine whether a newsletter message has been opened and which links, if any, have been clicked. Technical information is also collected (e.g., time of retrieval, IP address, browser type, and operating system). This information cannot be assigned to the respective newsletter recipient. It serves exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.
If you do not want MailChimp to analyze your data, you must unsubscribe from the newsletter. We provide a corresponding link for this in every newsletter message. Furthermore, you can also unsubscribe from the newsletter directly on the website.
Data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The lawfulness of the data processing operations already carried out remains unaffected by the revocation.
The data you have stored with us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from both our servers and MailChimp's servers after you unsubscribe. Data stored by us for other purposes (e.g., email addresses for the member area) remains unaffected by this.
For more details, please refer to MailChimp's privacy policy at: https://mailchimp.com/legal/terms/.
The data transfer takes place in accordance with Art. 46 Para. 2 lit. c) GDPR on the basis of so-called Standard Contractual Clauses (SCC) for the transfer of personal data to third countries.
V. Bootstrap CDN:
Our website loads JavaScript code from LLC. NetDNA, 3575, Cahuenga Blvd Suite 630, Los Angeles, CA 90068, USA (hereinafter: Bootstrap CDN). If you have JavaScript enabled in your browser and have not installed a JavaScript blocker, your browser may transmit personal data, e.g., your IP address, to Bootstrap CDN. We do not know what data Bootstrap CDN links with the received data and for what purposes Bootstrap CDN uses this data. Further information can be found in Bootstrap CDN's privacy policy (https://www.maxcdn.com/legal/). To prevent the execution of JavaScript code from Bootstrap CDN entirely, you can install a JavaScript blocker (e.g., www.noscript.net or www.ghostery.com).
The data transfer takes place in accordance with Art. 46 Para. 2 lit. c) GDPR on the basis of so-called Standard Contractual Clauses (SCC) for the transfer of personal data to third countries.
VI. Shopify
For the operation of our online shop, we use Shopify, a service of Shopify International Limited, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland. If you place an order with us, your data will be stored on a Shopify server in the USA. Further information can be found in Shopify's privacy policy at http://www.shopify.com/legal/privacy.
The legal basis for this data processing is Art. 6 (1) lit. b) GDPR. Upon complete fulfillment of the contract and full payment of the purchase price, your data will be blocked for further use and deleted, unless legal requirements mandate longer storage. If you have created a customer account, your data will generally remain stored until you delete the customer account. If no orders are placed via a customer account for more than two years, we will delete the account including the data.
VII. Payment Service Providers
1. Paypal: We offer you the option to pay for your orders via the payment service provider PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg. If you choose PayPal as a payment method, your billing data required for the payment process and your IP address will be automatically transmitted to PayPal.
The data transmitted to PayPal may be transmitted by PayPal to credit agencies. This transmission is for the purpose of identity and creditworthiness checks. PayPal may also pass on your data to third parties if this is necessary to fulfill contractual obligations or if the data is to be processed on behalf of PayPal. You can view PayPal's data protection regulations at https://www.paypal.com/de/webapps/mpp/ua/privacy-full/.
The legal basis for data processing is Art. 6 para. 1 b) GDPR, as the processing of data is necessary for payment with PayPal and thus for the performance of the contract.
2. Apple Pay: We also offer payment via Apple Pay. The provider of this payment service is Apple Inc., Infinite Loop, Cupertino, CA 95014. If you select Apple Pay as a payment method, your billing data required for the payment process and your IP address will be automatically transmitted to Apple.
The data transmitted to Apple may be transmitted by Apple to credit agencies. This transmission is for the purpose of identity and creditworthiness checks. Apple may also pass on your data to third parties if this is necessary to fulfill contractual obligations or if the data is to be processed on behalf of Apple. You can view Apple Pay's data protection regulations at
https://support.apple.com/de-de/HT201469
https://support.apple.com/de-de/HT203027
https://www.apple.com/legal/privacy/de-ww/
https://www.apple.com/de/privacy/
view.
The legal basis for data processing is Art. 6 para. 1 b) GDPR, as the processing of data is necessary for payment with Apple Pay and thus for the performance of the contract.
3. Amazon Pay: In addition, we offer payment via Amazon Pay. The provider of this payment service is Amazon Payments Europe s.c.a., 5, Rue Plaetis L 2338 Luxembourg. If you choose Amazon Pay as your payment method, your billing data required for the payment process and your IP address will be automatically transmitted to Amazon Payments Europe s.c.a., and secondarily to Amazon EU SARL, Amazon Services Europe SARL and Amazon Media EU SARL, all three based at 5, Rue Plaetis L 2338 Luxembourg.
The data transmitted to Amazon may be forwarded by Amazon to credit agencies. This transmission serves the purpose of identity and creditworthiness checks. Amazon may also pass on your data to third parties if this is necessary for the fulfillment of contractual obligations or if the data is to be processed on its behalf. You can view Amazon Pay's privacy policy at pay.amazon.com/de/help/201751600
The legal basis for data processing is Art. 6 para. 1 b) GDPR, as the processing of data is necessary for payment with Amazon Pay and thus for the performance of the contract.
VIII. Your Rights and Contact
1. Right of access: You have the right to free information at any time about what data we process about you and how this processing takes place. This includes:
a. the categories of personal data that are processed;
b. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
c. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
d. the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing concerning the data subject or to object to such processing;
e. the right to lodge a complaint with a supervisory authority;
f. where the personal data are not collected from the data subject, any available information as to their source;
g. the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
2. Right to rectification: If our data about you is incomplete or incorrect, you have the right to have us rectify or complete this data immediately.
3. Right to erasure: If the conditions of Art. 17 para. 1 GDPR are met, you have the right to demand the erasure of your personal data. This is the case if,
a. the data is no longer necessary for the purpose for which it was collected by us.
b. you have withdrawn your consent for us to use the data and we have no other legal reason for storage.
c. you object to the processing of your data and there are no overriding legitimate grounds on our part that permit us to continue processing the data.
d. your personal data has been processed unlawfully by us.
e. the erasure of the data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which we are subject.
f. the personal data has been collected in relation to information society services offered pursuant to Art. 8 para. 1 GDPR.
However, this right does not exist if processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.
4. Right to restriction of processing: You have the right to have the data stored by us restricted if:
a. the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data,
b. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
c. we no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims, or
d. you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether our legitimate grounds override yours.
In this case, we can only use it for the establishment, exercise or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest.
5. Right to notification: If you have asserted your right to rectification, erasure or restriction of processing against us, we are obliged to inform all those to whom your data has been disclosed. This does not apply if notification is impossible or involves disproportionate effort. You also have the right to be informed about these recipients.
6. Right to data portability: You have the right to receive all data you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller, if technically possible.
7. Right to withdraw consent: You have the right to withdraw consent given for data processing at any time with effect for the future. In the event of withdrawal, we will immediately delete the data concerned, unless further processing can be based on another legal basis that does not require consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal;
8. Right to complain: If you believe that our processing of your data violates data protection regulations, you have the option to complain to the competent supervisory authority. Your judicial remedies remain unaffected by this.
Right to object:
If we process your personal data based on a balancing of interests in our favor in accordance with Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time with effect for the future, for reasons arising from your particular situation.
In the event of an objection, we will no longer process your data unless there are compelling legitimate grounds for the processing that override your interests, rights, and freedoms or the processing serves the establishment, exercise, or defense of legal claims.
In the event that we process your personal data to send you direct marketing, you can object to this processing at any time with effect for the future. In this case, we will immediately stop processing for direct marketing purposes.
You can find the contact details for asserting the aforementioned rights in our imprint.