This privacy statement is intended to inform you as user of this website on the nature, scope and purpose of the collection and use of personal data that we process as website operator of our website Before7am.co (hereinafter referred to as the "Website") or application managed by us and the services offered thereon (hereinafter referred to as the "Services"). Annabel Kleijweg (Kleinunternehmer) is the owner of website before7am.co (hereinafter referred to as the "Before 7am").
What kind of personal data do we collect on our website?
Orders on website
When you submit an order, we only collect and use your personal data where this is necessary for the fulfilment and handling of your requests. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of art. 6 (1) lit. b GDPR and is required for the fulfilment of a contract with you. We will not forward your data to third parties without your explicit consent. This only excludes our service partners which we require in order to handle the contractual relationship or service providers we use to process an order. Along with the recipients named in the clauses of this data protection declaration, these may be recipients in the following categories: Shipping providers, payment service providers, merchandise management service providers, service providers for order processing, web hosts, IT service providers and dropshipping dealers. We will comply strictly with legal requirements in every case. The scope of data transmission is restricted to a minimum.
Newsletters via Mailchimp
Before 7am offers a newsletter in which it informs you about current events, offers and advertising. If you would like to subscribe to the newsletter, you must provide a valid e-mail address. If you subscribe to the newsletter, you agree to receive the newsletter and the procedures described above.
The newsletter is sent by Before 7am via the platform Mailchimp.
Termination of newsletter: you can revoke your consent to receive the newsletter at any time and cancel your newsletter subscription. After your cancellation, your personal data will be deleted. Your consent to receive the newsletter will expire at the same time. At the end of each newsletter you will find the link to unsubscribe.
You can find more detailed information on the terms and conditions of use and data protection at https://www.google.com/analytics/terms/ and at https://policies.google.com/?hl=en.
Processing is carried out on the basis of § 15 (3) TMG (Telemedia Act) as well as art. 6 (1) lit. f GDPR due to our justified interest in the purposes above.
Using the links below, you can find out how to manage cookies (or deactivate them, among other things) in major browsers:
Chrome Browser: https://support.google.com/accounts/answer/61416?hl=en
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
External payment systems
We use payment systems in the course of order processing for the purposes of payment by credit card/debit card and Paypal. For this purpose your personal data as collected in the course of the order will be sent to:
All Stripe Transactions are covered by the Stripe privacy shield which can be found here: https://stripe.com/de/privacy
All PayPal transaction are covered by the PayPal Data Privacy Statement. You can found this at https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=en_GB
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.
How long do we store and process the personal data?
Before 7am shall process the personal data for a period of two years after your last order, or for as long as legally required or necessary and allowed for the purpose(s) for which it was obtained. Immediately after these periods we will destroy the personal data and/or anonymise them.
The criteria used to determine our retention periods include: (i) the duration of our ongoing relationship with you and the Services we offer you; (ii) whether or not there is a legal obligation to which we are subject; and (iii) whether or not custody is advisable due to our legal position (such as applicable limitation period(s), a court case or investigations by a supervisor).
Notwithstanding article 5.1, Before 7am may process the personal data for a longer period (i) if you ask Before 7am to keep data for a new two-year period, (ii) in order to comply with statutory retention periods (for example laid down in tax legislation) or (iii) in order to prove that it complies with applicable statutory obligations (for example with respect to the GDPR or e-mail marketing legislation).
Your rights with respect to your personal dataIf the legal requirements are fulfilled, you have the following rights according to art. 15 to 20 GDPR: Right to information, correction, deletion, restriction of processing, data portability. You also have a right of objection against processing based on art. 6 (1) GDPR, and to processing for the purposes of direct marketing, according to art. 21 (1) GDPR. Contact us at any time at firstname.lastname@example.org.
How do we protect the personal data?
We shall take appropriate technical and organisational measures to safeguard and protect the personal data against any accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access or against any other unlawful or unauthorised processing of such personal data. Taking into account the state of technology and the costs of execution, these measures guarantee an appropriate level of security given the risks that come with processing and the nature of the data to be processed. For example, we make use of a secure SSL connection during the order process and when completing the registration form.
Use by minors
Revisions of this statement
Berlin, Germany, April 2019.