Privacy Policy

Privacy Policy

1 Information about the collection of personal data

(1) Below we provide information about the collection of personal data when using our website/online shop https://sterrenstore.de. Personal data is all data that can be personally related to you, e.g., name, address, email addresses, and user behavior.

(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is Sterrenstof BV, Hoofdveste 2, 3992 DG Houten, Netherlands. The contact person for data protection is Mr. C. de Hollander.

(3) When you contact us by email, telephone, or via a contact form, the data you provide (e.g., your email address, your name, and your telephone number, if applicable) will be stored by us in order to answer your questions. We will delete the data collected in this context once storage is no longer required or restrict processing if statutory retention periods apply.

(4) If we use contracted service providers for individual functions of our offering or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also state the established criteria for the storage period.

2 Your rights

(1) You have the following rights with regard to your personal data:

– Right to information,

– Right to rectification or erasure,

– Right to restriction of processing,

– Right to object to processing,

– Right to data portability.

(2) You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

(3) To exercise your rights under paragraph 1, simply send a message to the following email address: info@sterrenstore.nl or to our postal address: Sterrenstof BV, Hoofdveste 2, 3992DG Houten, the Netherlands

3 Collection of personal data when visiting our website

(1) If you use the website for purely informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and ensure stability and security (the legal basis is Art. 6 (1) (f) GDPR):

– IP address

– Date and time of the request

– Time zone difference to Greenwich Mean Time (GMT)

– Content of the request (specific page)

– Access status/HTTP status code

– amount of data transferred

– Website from which the request comes

– Browser

– Operating system and its interface

– Language and version of the browser software.

(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files stored on your hard disk associated with the browser you use. They allow certain information to be sent to the location that placed the cookies (here, this is us). Cookies cannot run programs or transmit viruses to your computer. They are designed to make the internet more user-friendly and effective.

(3) Use of cookies:

a) This website uses the following types of cookies, the scope and functionality of which are explained below:

– Transient cookies (see b)

– Persistent cookies (see c).

b) Transient cookies are automatically deleted when you close your browser. This includes, in particular, session cookies. These store a so-called session ID, which allows various requests from your browser to be assigned to the shared session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
c) Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete cookies at any time in your browser's security settings.
d) You can configure your browser settings according to your preferences and, for example, refuse the acceptance of third-party cookies or all cookies. Please note that you may not be able to use all functions of this website.
e) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.

4 Additional features and offers on our website

(1) In addition to the purely informational use of our website, we offer various services that you may use if you are interested. To do so, you will generally be required to provide additional personal data, which we will use to provide the respective service and to which the aforementioned data processing principles apply.

(2) We sometimes use external service providers to process your data. These providers have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored.

(3) We may also share your personal data with third parties if we offer participation in promotions, contract conclusions, or similar services together with partners. You will receive further information about this when you provide your personal data or in the description of the offer below.

(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.

5 Objection or revocation against the processing of your data

(1) If you have given your consent to the processing of your data, you can revoke it at any time. Such revocation affects the legality of the processing of your personal data after you have expressed it to us.

(2) If we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case, in particular, if the processing is not necessary to fulfill a contract with you, which we will explain in the following description of the functions. If you exercise such an objection, we ask you to explain the reasons why we should not process your personal data as we do. If your objection is justified, we will examine the situation and either stop or adapt the data processing or explain to you our compelling legitimate reasons for continuing the processing.

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the following contact details:

Email: info@sterrenstore.nl

Post: Sterrenstof BV, Hoofdveste 2, 3992DG Houten, Netherlands

6 Use of our webshop

(1) If you wish to order from our online shop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. Mandatory information required for contract processing is marked separately; further information is voluntary. We process the data you provide to process your order. For this purpose, we may pass on your payment details to our main bank or the payment service providers Klarna and PayPal. The legal basis for this is Art. 6 (1) (b) GDPR.

You can voluntarily create a customer account, which allows us to save your data for future purchases. When you create an account, the data you provide will be stored revocably. You can delete all other data, including your user account, at any time in the customer area.

We may also process the data you provide to inform you about other interesting products from our portfolio or to send you emails with technical information.

(2) Due to commercial and tax law, we are obligated to store your address, payment, and order data for a period of ten years. However, after two years, we restrict processing, meaning your data will only be used to comply with legal obligations.

(3) To prevent unauthorized access by third parties to your personal data, in particular financial data, the ordering process is encrypted.

7 Newsletter

(1) With your consent, you can subscribe to our newsletter, which will inform you about our current, interesting offers. The advertised goods and services are listed in the consent form.

(2) We use the so-called double opt-in procedure to register for our newsletter. This means that after your registration, we will send you an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the times of registration and confirmation. The purpose of this procedure is to verify your registration and, if necessary, to investigate any possible misuse of your personal data.

(3) The only mandatory information required to receive the newsletter is your email address. Providing additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your email address for the purpose of sending you the newsletter. The legal basis is Art. 6 (1) (a) GDPR.

(4) You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in each newsletter email, by sending an email to info@sterrenstore.nl, or by sending a message to the contact details provided in the imprint on this website.

8 Use of Google Analytics

(1) This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, Google will shorten your IP address beforehand within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.

(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google.

(3) You can prevent cookies from being saved by selecting the appropriate settings in your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore, you can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension "_anonymizeIp()." This means that IP addresses are truncated and processed, thus preventing any personal reference. If the data collected about you is personally identifiable, this will be immediately excluded and the personal data will be deleted immediately.

(5) We use Google Analytics to analyze and regularly improve the use of our website. Using the statistics obtained, we can improve our offering and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 (1) (f) GDPR.

(6) Information from the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, and the data protection declaration: http://www.google.de/intl/de/policies/privacy .

9 DoubleClick by Google

(1) This website also uses the online marketing tool DoubleClick by Google. DoubleClick uses cookies to display ads relevant to users, improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed multiple times. In addition, DoubleClick can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later visits the advertiser's website using the same browser and makes a purchase there. According to Google, DoubleClick cookies do not contain any personal information.

(2) Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the scope and further use of the data collected through the use of this tool by Google and therefore inform you according to our state of knowledge: By integrating DoubleClick, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and save your IP address.

(3) You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly. In particular, suppressing third-party cookies will prevent you from receiving ads from third-party providers; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com” at https://www.google.de/settings/ads. This setting will be deleted if you delete your cookies; c) by deactivating interest-based ads from providers that are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices. This setting will be deleted if you delete your cookies; d) by permanently deactivating cookies in your Firefox, Internet Explorer or Google Chrome browsers at the link http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all the functions of this offer to their full extent.

(4) The legal basis for the processing of your data is Art. 6 (1) (f) GDPR. Further information on DoubleClick by Google can be found at https://www.google.de/doubleclick and http://support.google.com/adsense/answer/2839090, as well as on data protection at Google in general: https://www.google.de/intl/de/policies/privacy. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

10 Facebook Custom Audiences

(1) Furthermore, the website uses the "Custom Audiences" remarketing feature of Facebook Inc. ("Facebook"). This allows website users to be shown interest-based advertisements ("Facebook Ads") when they visit the social network Facebook or other websites that also use this feature. We thereby pursue the interest of showing you advertising that is of interest to you in order to make our website more interesting for you.

(2) Due to the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. We have no influence on the scope and further use of the data collected through the use of this tool by Facebook and therefore inform you according to our state of knowledge: By integrating Facebook Custom Audiences, Facebook receives the information that you have accessed the corresponding web page on our website or clicked on an ad from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will find out and save your IP address and other identification features.

(3) The deactivation of the “Facebook Custom Audiences” function is possible [here and] for logged-in users at https://www.facebook.com/settings/?tab=ads#_.

(4) The legal basis for the processing of your data is Art. 6 (1) (f) GDPR. Further information on data processing by Facebook can be found at https://www.facebook.com/about/privacy .

11 Use of Facebook Connect

(1) Our website offers you the option of registering for our service using Facebook Connect. Additional registration is therefore not possible. To register, you will be redirected to the Facebook page, where you can log in with your user data. This will link your Facebook profile and our service. Through the link, we automatically receive access to your public profile and email address from Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA. This information is essential for the conclusion of the contract in order to identify you.

(2) For more information about Facebook Connect and privacy settings, please see the privacy policy and terms of use of Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

12 Use of Google Tag Manager

(1) Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The Tag Manager tool itself (which implements the tags) is a cookieless domain. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If deactivation has been performed at the domain or cookie level, this deactivation remains in place for all tracking tags implemented with Google Tag Manager.

Google may ask for your permission to share some product data (such as your account information) with other Google products to enable certain features, such as facilitating the addition of new AdWords conversion tracking tags. Google developers also occasionally review product usage information to further optimize the product. However, Google will never share this type of data with other Google products without your consent.

(2) For more information, see the usage guidelines for this product: https://www.google.com/intl/de/tagmanager/use-policy.html

13 Use of GA Audience

(1) Our website uses GA Audience, a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: GA Audience).

(2) GA Audience uses, among other things, cookies that are stored on your computer and other mobile devices (e.g. smartphones, tablets, etc.) and that enable an analysis of the use of the corresponding devices. The data is partly evaluated across devices. Google Audience receives access to the cookies created as part of the use of Google AdWords and Google Analytics. During use, data such as the IP address and user activities may be transmitted to a Google server and stored there. Google may transfer this information to third parties if required to do so by law or if this data is processed by third parties.

(3) You can prevent the collection and forwarding of personal data (in particular your IP address) as well as the processing of this data by deactivating the execution of Java Script in your browser or by installing a tool such as 'NoScript'. You can also prevent Google from collecting the data generated by the Google cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

(4) Further information on data protection when using GA Audience can be found at the following link: https://support.google.com/analytics/answer/2700409?hl=en&ref_topic=2611283

14 Use of Tidio

(1) We use the Tidio live chat on our website. This tool allows users to contact our staff directly. The chat tool is provided by Tidio LLC, San Francisco, USA.

(2) To contact us via the chat tool, we need your email address and a name. We also receive the information you enter into the chat tool. We use Tidio to offer visitors to our website the opportunity to submit a direct support request to us in real time and to come into direct contact with interested parties of any kind. The legal basis for processing is your consent in accordance with Art. 6 (1) (a) GDPR. Your request will be deleted after three months.

(3) A direct connection to the services is established. At a minimum, the IP address and device-related information are collected and used. Tidio may place cookies on your device. Read here how Tidio handles your data: https://www.tidio.com/privacy-policy/. Your data will be transferred to the USA and possibly other third countries outside the EU/EEA that do not have data protection laws comparable to those in the EU.

(4) You can prevent the use of this tool by selecting the appropriate settings in your browser software. If you would like to contact us via a method other than the chat tool, please click on the "Contact" menu item at the bottom of the website.

15 Use of TikTok Analytics

(1) TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland) provides us with so-called page insights (analytics) for our TikTok page: https://www.tiktok.com/analytics. This is aggregated data that allows us to gain insight into how people interact with our page. Page insights may be based on personal data collected in connection with a visit to or interaction with our page and its content. According to Art. 6 (1) (f) GDPR, this serves to safeguard our legitimate interests, which prevail within the framework of a balancing of interests, in an optimized presentation of our offer and effective communication with customers and interested parties.

(2) Please carefully review which personal data you share with us via TikTok. We expressly point out that TikTok stores the data of users of its services (e.g., personal information, IP address, etc.) and may also use this data for business purposes. Further information on TikTok's data processing can be found in TikTok's privacy policy at: https://www.tiktok.com/legal/privacy-policy-eea?lang=de

(3) We have no influence on the collection and further processing of data by TikTok. Furthermore, we cannot determine the extent, location, and duration of data storage, the extent to which TikTok complies with existing deletion obligations, the evaluations and links made to the data, and to whom the data is shared.

(4) You can object to the processing of your data for the aforementioned purposes at any time by changing your advertising settings in your TikTok user account accordingly by adjusting the “personalized advertising” in the settings under “Settings and privacy”.

16 Using Snapchat for Business

(1) On our website, we use the Snapchat for Business service; https://forbusiness.snapchat.com/ . The service provider is Snap Inc., 63 Market Street Venice, CA 90291 USA.

(2) Snap Inc. (provides us with so-called Page Insights (Analytics) for our Snapchat page: https://forbusiness.snapchat.com/. This is aggregated data that allows us to gain insight into how people interact with our page. Page Insights may be based on personal data collected in connection with a visit to or interaction with our page and its content. According to Art. 6 (1) (f) GDPR, this serves to safeguard our legitimate interests, which predominate within the framework of a balancing of interests, in an optimized presentation of our offering and effective communication with customers and interested parties.

(3) Snap Inc. Privacy Policy: https://www.snap.com/de-DE/privacy/privacy-policy/.

17 Using WhatsApp

(1) We offer our customers the opportunity to contact us via the WhatsApp messenger service.

(2) WhatsApp is a messaging service provided by Facebook. Its headquarters are at WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. WhatsApp is certified by the US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000TSnwAAG&status=Active) and can therefore evaluate personal data in the US, in accordance with Article 45 of the GDPR.

(3) If you contact us via the WhatsApp messenger service, you will automatically provide us with your mobile number.

(4) The terms of use and privacy policy of WhatsApp apply www.whatsapp.com/legal

18 Use of social media plug-ins

(1) We currently use the following social media plug-ins: [Facebook and Instagram]. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the plug-in providers. You can recognize the plug-in provider by the marking on the box above its initial letter or logo. We give you the option of communicating directly with the plug-in provider via the button. Only if you click on the marked field and thereby activate it will the plug-in provider receive the information that you have accessed the corresponding website of our online offering. In the case of Facebook, according to the respective provider in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, your personal data is therefore transmitted to the respective plug-in provider and stored there (in the case of US providers in the USA). Since the plug-in provider collects data primarily via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the grayed-out box.

(2) We have no influence on the data collected and data processing procedures, nor are we aware of the full scope of data collection, the purposes of processing, or the retention periods. We also have no information regarding the deletion of the collected data by the plug-in provider.

(3) The plug-in provider stores the data collected about you as user profiles and uses these for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right you must contact the respective plug-in provider. Via the plug-ins we offer you the opportunity to interact with the social networks and other users so that we can improve our offering and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 (1) (f) GDPR.

(4) The data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data we collect will be directly assigned to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider will also save this information in your user account and publicly share it with your contacts. We recommend that you log out regularly after using a social network, especially before activating the button, as this will prevent your data from being assigned to your profile with the plug-in provider.

(5) Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the privacy policies of these providers provided below. There you will also find further information on your rights in this regard and setting options for protecting your privacy.

(6) Addresses of the respective plug-in providers and URL with their data protection information:

a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .
b) Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA, https://help.instagram.com/155833707900388/ .

Questions and suggestions

We regularly review our compliance with this privacy policy. If you have any questions about this privacy policy, please contact us at any time.

The operator of the website and the webshop is

Sterrenstof BV

Authorized managing directors:

Galaxy Holding BV (Houten, Netherlands)

Universe Holding BV (Houten, Netherlands)

Address:

Hoofdveste 2

3992DG Houten

Netherlands

Contact: