This privacy statement is intended to inform you as user of this website on the nature, scope and purpose of the collection and use of personal data that we process as website operator of our website Before7am.co (hereinafter referred to as the "Website") or application managed by us and the services offered thereon (hereinafter referred to as the "Services"). Annabel Kleijweg (Kleinunternehmer) is the owner of website before7am.co (hereinafter referred to as the "Before 7am").
What kind of personal data do we collect on our website?
Orders on website
When you submit an order, we only collect and use your personal data where this is necessary for the fulfilment and handling of your requests. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of art. 6 (1) lit. b GDPR and is required for the fulfilment of a contract with you. We will not forward your data to third parties without your explicit consent. This only excludes our service partners which we require in order to handle the contractual relationship or service providers we use to process an order. Along with the recipients named in the clauses of this data protection declaration, these may be recipients in the following categories: Shipping providers, payment service providers, merchandise management service providers, service providers for order processing, web hosts, IT service providers and dropshipping dealers. We will comply strictly with legal requirements in every case. The scope of data transmission is restricted to a minimum.
Newsletters via Mailchimp
Before 7am offers a newsletter in which it informs you about current events, offers and advertising. If you would like to subscribe to the newsletter, you must provide a valid e-mail address. If you subscribe to the newsletter, you agree to receive the newsletter and the procedures described above.
The newsletter is sent by Before 7am via the platform Mailchimp.
Termination of newsletter: you can revoke your consent to receive the newsletter at any time and cancel your newsletter subscription. After your cancellation, your personal data will be deleted. Your consent to receive the newsletter will expire at the same time. At the end of each newsletter you will find the link to unsubscribe.
You can find more detailed information on the terms and conditions of use and data protection at https://www.google.com/analytics/terms/ and at https://policies.google.com/?hl=en.
Use of the remarketing or “similar target groups” function by Google Inc.
Google Ads conversion tracking
Before 7am uses the online marketing programme “Google Ads”, including conversion tracking. Google conversion tracking is a service operated by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). If you click on adverts placed by Google, a cookie is placed on your computer for conversion tracking. These cookies have limited validity, do not contain any personal data and thus cannot be used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Google can recognise that you have clicked on the advert and were forwarded to this page. Every Google Ads customer receives a separate cookie. Therefore, it is not possible to track cookies relating to the websites of Google Ads customers. The information collected using the conversion cookie serves the purpose of producing conversion statistics. This allows us to find out the total number of users who have clicked on our adverts and were forwarded to a page equipped with a conversion tracking tag. However, they do not receive any information with which could be used to personally identify users. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in targeted marketing and analysis of the effectiveness and efficiency of this marketing.
You will find more information as well as Google’s data protection declaration at: https://www.google.de/policies/privacy/
Before 7am uses the remarketing function “Custom Audiences” by Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA; “Facebook”).This function serves to address the visitor to the website with interest-related advertising on the social network Facebook. We have implemented Facebook’s remarketing tag on our website for this purpose. This tag sets up a direct connection to Facebook’s servers when you visit our website. This informs the Facebook server which of our web pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the social network Facebook you will then be shown personalised, interest-related Facebook ads. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in the above purpose.
You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation.
Facebook Messenger Chat
Before 7am uses Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA; “Facebook”) messenger chat system. The system serves to facilitate communication between you and us in our role as provider. It also collects and stored information for marketing and optimisation purposes. If you would like us to delete you from the the Facebook Messenger chat history, please write to us at email@example.com
Before 7am uses YouTube LLC’s function for the embedding of YouTube videos. (901 Cherry Ave., San Bruno, CA 94066, USA; “YouTube”).
Processing is carried out on the basis of § 15 (3) TMG (Telemedia Act) as well as art. 6 (1) lit. f GDPR due to our justified interest in the purposes above.
Using the links below, you can find out how to manage cookies (or deactivate them, among other things) in major browsers:
Chrome Browser: https://support.google.com/accounts/answer/61416?hl=en
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
External payment systems
We use payment systems in the course of order processing for the purposes of payment by credit card/debit card and Paypal. For this purpose your personal data as collected in the course of the order will be sent to:
All Stripe Transactions are covered by the Stripe privacy shield which can be found here: https://stripe.com/de/privacy
All PayPal transaction are covered by the PayPal Data Privacy Statement. You can found this at https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=en_GB
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.
How long do we store and process the personal data?
Before 7am shall process the personal data for a period of two years after your last order, or for as long as legally required or necessary and allowed for the purpose(s) for which it was obtained. Immediately after these periods we will destroy the personal data and/or anonymise them.
The criteria used to determine our retention periods include: (i) the duration of our ongoing relationship with you and the Services we offer you; (ii) whether or not there is a legal obligation to which we are subject; and (iii) whether or not custody is advisable due to our legal position (such as applicable limitation period(s), a court case or investigations by a supervisor).
Notwithstanding article 5.1, Before 7am may process the personal data for a longer period (i) if you ask Before 7am to keep data for a new two-year period, (ii) in order to comply with statutory retention periods (for example laid down in tax legislation) or (iii) in order to prove that it complies with applicable statutory obligations (for example with respect to the GDPR or e-mail marketing legislation).
Your rights with respect to your personal data
If the legal requirements are fulfilled, you have the following rights according to art. 15 to 20 GDPR: Right to information, correction, deletion, restriction of processing, data portability. You also have a right of objection against processing based on art. 6 (1) GDPR, and to processing for the purposes of direct marketing, according to art. 21 (1) GDPR. Contact us at any time at firstname.lastname@example.org.
How do we protect the personal data?
We shall take appropriate technical and organisational measures to safeguard and protect the personal data against any accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access or against any other unlawful or unauthorised processing of such personal data. Taking into account the state of technology and the costs of execution, these measures guarantee an appropriate level of security given the risks that come with processing and the nature of the data to be processed. For example, we make use of a secure SSL connection during the order process and when completing the registration form.
Use by minors
Revisions of this statement
Berlin, Germany, April 2019.