Privacy policy

We are pleased about your interest in our website. The protection of your privacy is very important to us. Compliance with the statutory provisions on data protection is therefore a matter of course for us. Below, we provide you with detailed information about how we handle your data.

General information and mandatory information

Designation of the responsible entity

The responsible entity for data processing on this website is:

WEICH Textil GmbH
David Kuttschrütter, Jannik Weich
Taunusstraße 59-61
55118 Mainz

Our data protection officer can be reached at: hello@weich-alpaca.com

The responsible entity decides alone or jointly with others on the purposes and means of processing personal data (e.g., names, contact details, etc.).

Withdrawal of your consent to data processing

Some processes of data processing are only possible with your express consent. You can revoke your consent at any time. A revocation of your already given consent is possible at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

Right to lodge a complaint with the supervisory authority

In the event of a breach of data protection laws, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. The provision is made in a machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done to the extent that it is technically feasible.

Right to information, correction, blocking, deletion

You have the right to free information about your stored personal data, origin of the data, their recipient and the purpose of data processing and, if applicable, a right to correction, blocking or deletion of these data. In this regard and also for further questions regarding personal data, you can contact us at any time using the contact options listed in the imprint.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https://" address line of your browser and by the lock symbol in the browser line.

Data protection officer

We have appointed a data protection officer.

Jannik Weich
Taunusstraße 59-61
55118 Mainz
Email: hello@weich-alpaca.com

Server log files

In server log files, the provider of the website automatically collects and stores information that your browser automatically transmits to us. These are:

Visited page on our domain
Date and time of the server request
Browser type and browser version
Operating system used
Referrer URL
Hostname of the accessing computer
IP address

These data will not be combined with other data sources. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

Data transmission upon conclusion of a contract for online shops, retailers, and the shipment of goods

Personal data will only be transmitted to third parties if there is a need to do so within the scope of contract processing. Third parties may include payment service providers or logistics companies. Further transmission of the data will not take place or will only take place if you have expressly consented to it.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

Registration on this website

To use certain functions, you can register on our website. The data transmitted is used exclusively for the purpose of using the respective offer or service. Mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.

In case of important changes, for example, for technical reasons, we will inform you by email. The email will be sent to the address provided during registration.

The processing of the data provided during registration is based on your consent (Art. 6 para. 1 lit. a GDPR). A revocation of your already given consent is possible at any time. For the revocation, an informal notification by email is sufficient. The legality of the data processing already carried out remains unaffected by the revocation.

We store the data collected during registration for the period you are registered on our website. Your data will be deleted if you cancel your registration. Legal retention periods remain unaffected.

Contact form

Data transmitted via the contact form, including your contact details, will be stored in order to process your request or to be available for follow-up questions. These data will not be passed on without your consent.

The processing of the data entered in the contact form is based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). A revocation of your already given consent is possible at any time. For the revocation, an informal notification by email is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

Data transmitted via the contact form will remain with us until you request deletion, revoke your consent to storage, or there is no longer any need for data storage. Mandatory statutory provisions - especially retention periods - remain unaffected.

Newsletter data - Klaviyo

To send our newsletter, we need an email address from you. Verification of the provided email address is necessary and the receipt of the newsletter must be consented to. Additional data is not collected or is voluntary. The data will be used exclusively for sending the newsletter.

The data provided during newsletter registration is processed based on your consent (Art. 6 para. 1 lit. a GDPR). A revocation of your already given consent is possible at any time. For the revocation, an informal notification by email or you unsubscribe via the "Unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

Data entered to set up the subscription will be deleted in the event of cancellation. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us.

Cookies

Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us to make our offer more user-friendly, effective, and secure.

Some cookies are "session cookies." Such cookies are deleted by themselves at the end of your browser session. However, other cookies remain on your device until you delete them yourself. Such cookies help us to recognize you when you return to our website.

You can monitor, restrict, or prevent the setting of cookies with a modern web browser. Many web browsers can be configured to delete cookies automatically when the program is closed. Disabling cookies may result in limited functionality of our website.

The setting of cookies, which are necessary for the performance of electronic communication processes or the provision of certain functions desired by you (e.g., shopping cart), is based on Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in the storage of cookies for the technically error-free and smooth provision of our services. If other cookies (e.g., for analysis functions) are set, they are treated separately in this privacy policy.

YouTube Videos

Type and scope of processing

We have integrated YouTube videos on our website. YouTube Video is a component of the video platform operated by YouTube, LLC, where users can upload content, share it over the Internet, and receive detailed statistics. YouTube Video allows us to integrate platform content into our website.

YouTube Video uses cookies and other browser technologies to analyze user behavior, recognize users, and create user profiles. This information is used, among other things, to analyze the activity of the viewed content and to create reports. If a user is registered with YouTube, LLC, YouTube Video can assign the played videos to the profile.

When you access this content, you establish a connection to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted.

Purpose and legal basis

The use of the service is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, especially the USA. In cases where there is no adequacy decision by the European Commission (e.g., in the USA), we have agreed with the recipients of the data other appropriate safeguards within the meaning of Art. 44 et seq. GDPR. These are – unless otherwise stated – standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of these standard contractual clauses can be viewed at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR before such a third-country transfer, which you grant via consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that there may be risks in detail with third-country transfers (e.g., data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence and of which you may not become aware).

Storage period

The specific storage period of the processed data cannot be influenced by us but is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube Video: https://policies.google.com/privacy.

Google Analytics

Art and Scope of Processing

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service to statistically evaluate our online offering. This includes, for example, the number of visits to our online offering, visited subpages, and the duration of visits by users. Google Analytics uses cookies and other browser technologies to analyze user behavior and recognize users. This information is used, among other things, to compile reports on website activity.

Purpose and Legal Basis

The use of Google Analytics is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision by the European Commission (e.g., in the USA), we have agreed other suitable safeguards with the recipients of the data within the meaning of Art. 44 et seq. GDPR. These are - unless otherwise stated - standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a GDPR before such a third-country transfer, which you grant via consent in the consent manager (or other forms, registrations, etc.). We would like to point out that there may be unknown risks in detail in the case of transfers to third countries (e.g., data processing by security authorities of the third country, the exact scope of which and their consequences for you we do not know, over which we have no influence and which you may not become aware of).

Storage Duration

The specific storage period of the processed data is not influenced by us but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

Google reCAPTCHA

Art and Scope of Processing

We have integrated components from Google reCAPTCHA on our website. Google reCAPTCHA is a service of Google Ireland Limited and allows us to distinguish whether a contact request comes from a natural person or is automated by means of a program. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the duration of stay and mouse movements of the user in order to distinguish automated requests from human ones. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google reCAPTCHA.

Purpose and Legal Basis

The use of Google reCAPTCHA is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG.

Storage Duration

Google Maps

Art and Scope of Processing

We use the Google Maps mapping service to create directions. Google Maps is a service of Google Ireland Limited, which displays a map on our website. When you access this content on our website, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google Maps.

Purpose and Legal Basis

The use of Google Maps is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG.

Storage Duration

Google Tag Manager

Art and Scope of Processing

We use the Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface and allows us to control the precise integration of services on our website.

This allows us to integrate additional services flexibly to evaluate user access to our website.

Purpose and Legal Basis

The use of Google Tag Manager is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG.

Storage Duration

PayPal

Our website allows payment via PayPal. The provider of the payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

When you pay with PayPal, your payment data entered will be transmitted to PayPal.

The transmission of your data to PayPal is based on Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing for the performance of a contract). A revocation of your already given consent is possible at any time. Past data processing operations remain in effect in the event of a revocation.

Klarna

Our website allows payment via Klarna. The provider of the payment service is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.

When paying with Klarna (Klarna Checkout solution), Klarna collects various personal data from you. You can find details in Klarna's privacy policy at: https://www.klarna.com/de/datenschutz/.

Klarna uses cookies to optimize the Klarna Checkout solution. This optimization represents a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Cookies are small text files that are stored on your end device. Klarna cookies remain on your end device until you delete them. Details on the use of Klarna cookies can be found at: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.

The transmission of your data to Klarna is based on Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing for the performance of a contract). A revocation of your already given consent is possible at any time. Past data processing operations remain in effect in the event of a revocation.

Sofortüberweisung

Our website allows payment via "Sofortüberweisung." The provider of the payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich.

With the help of the "Sofortüberweisung" procedure, we receive a payment confirmation from Sofort GmbH in real time and can immediately begin to fulfill our obligations.

When paying by "Sofortüberweisung," your PIN and TAN are transmitted to Sofort GmbH. The payment provider then logs into your online banking account, automatically checks your account balance, and carries out the transfer. It then sends an immediate transaction confirmation. Your sales, the credit limit of your overdraft facility, and the existence of other accounts as well as their balances are also automatically checked after logging in.

In addition to the PIN and TAN, the transmission to Sofort GmbH also includes payment data and data about your person. The data about your person includes first and last name, address, telephone number(s), email address, IP address, and, if applicable, further data necessary for payment processing. There is a need for this data transmission to unambiguously identify you and to prevent fraud attempts.

The transmission of your data to Sofort GmbH is based on Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing for the performance of a contract). A revocation of your already given consent is possible at any time. Past data processing operations remain in effect in the event of a revocation.

Details about payment with Sofortüberweisung can be found at: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.

Google Ads

Type and Scope of Processing

We have integrated Google Ads on our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to analyze user behavior and recognize users.

Google Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of the advertisements. Furthermore, Google Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features are transmitted to the provider.

If you are registered with a Google Ireland Limited service, Google Ads can assign the visit to your account. Even if you are not registered with or logged in to Google Ireland Limited, it is possible for the provider to determine and store your IP address and other identification features.

The transfer of your data in this case is made to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose and Legal Basis

The use of Google Ads is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision by the European Commission (e.g., in the USA), we have agreed other suitable guarantees with the recipients of the data in accordance with Art. 44 ff. GDPR. These are – unless otherwise stated – standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, we obtain your consent in accordance with Art. 49 (1) sentence 1 lit. a GDPR before such a transfer to a third country. We would like to point out that in the case of transfers to third countries, there may be risks that are unknown in detail (e.g., the processing of data by security authorities of the third country, the exact scope thereof, and the consequences for you, which we do not know, over which we have no influence, and which you may not become aware of).

Storage Duration

The specific storage period of the processed data is not influenced by us, but determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.

Facebook Pixel

Type and Scope of Processing

We use Facebook Pixel from Meta Platforms Ireland Limited to create so-called custom audiences, segment visitor groups of our online offering, determine conversion rates, and then optimize them. This happens especially when you interact with advertisements that we have placed with Meta Platforms Ireland Limited.

Purpose and Legal Basis

The use of Facebook Pixel is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision by the European Commission (e.g., in the USA), we have agreed other suitable guarantees with the recipients of the data in accordance with Art. 44 ff. GDPR. These are – unless otherwise stated – standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

Storage Duration

The specific storage period of the processed data is not influenced by us, but determined by Meta Platforms Ireland Limited. Further information can be found in the privacy policy for Facebook Pixel: https://www.facebook.com/privacy/explanation.

Google AdSense

Our website uses Google AdSense. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google AdSense is used to integrate advertisements and uses cookies. Cookies are small text files that your web browser stores to analyze the use of the website. Google AdSense also uses web beacons. Web beacons are invisible graphics that allow an analysis of visitor traffic on our website.

The information generated by cookies and web beacons is transferred to Google servers and stored there. Server location is the USA. Google may pass this information on to contractual partners. However, Google will not merge your IP address with other data stored by you.

The storage of AdSense cookies is based on Art. 6 (1) (f) GDPR. We as the website operator have a legitimate interest in analyzing user behavior in order to optimize our website and advertising.

You can monitor, restrict, and prevent the setting of cookies with a modern web browser. Disabling cookies may limit the functionality of our website. By using our website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Google Web Fonts

Type and Scope of Processing

We use Google Fonts from Google Ireland Limited as a service for providing fonts for our online offering. To obtain these fonts, a connection is made to servers of Google Ireland Limited, with your IP address being transmitted.

Purpose and Legal Basis

The use of Google Fonts is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision by the European Commission (e.g., in the USA), we have agreed other suitable guarantees with the recipients of the data in accordance with Art. 44 ff. GDPR. These are – unless otherwise stated – standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

Storage Duration

Source: Privacy configurator from Mein-Datenschutzbeauftragter.de

TikTok Pixel

We use TikTok Pixel on our website, a conversion tracking tool for advertisers. The service provider is the Chinese company TikTok. For the European region, the responsible company is TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland).

TikTok processes data from you, among other things, also in the USA. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This can be associated with various risks for the lawfulness and security of data processing.

As the basis for data processing with recipients domiciled in third countries (outside the European Union, Iceland, Liechtenstein, Norway, especially in the USA) or a transfer of data there, TikTok uses so-called standard contractual clauses (= Art. 46 (2) and (3) GDPR). Standard contractual clauses (Standard Contractual Clauses – SCC) are model contracts provided by the EU Commission and are intended to ensure that your data also comply with European data protection standards if they are transferred to third countries (such as the USA) and stored, processed, and managed there. Through these clauses, TikTok undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses, among other places, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.

You can find out more about the standard contractual clauses and the data processed by using TikTok Pixel in the privacy policy at https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE or at https://ads.tiktok.com/i18n/official/policy/controller-to-controller.