Data Policy

 

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for concluding a contract. You are not obligated to provide the data. Failure to provide the data has no consequences. This only applies if no other information is given in the subsequent processing operations.
"Personal data" refers to all information relating to an identified or identifiable natural person.


Server Log Files

You can visit our website without providing any personal information.
Each time our website is accessed, your internet browser transmits usage data to us or our web hosting provider/IT service provider and these data are stored in log files (server log files). These stored data include, for example, the name of the accessed page, date and time of retrieval, IP address, amount of data transferred, and the requesting provider.
Processing is carried out in accordance with Art. 6 (1) (f) GDPR, based on our legitimate interest in ensuring the smooth operation of our website and improving our services.


Customer Accounts & Orders

Customer Account

When creating a customer account, we collect your personal data to the extent specified therein. The processing of these data serves the purpose of improving your shopping experience and simplifying order processing. Processing is based on Art. 6 (1) (a) GDPR with your consent.
You may withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out before the withdrawal. Your customer account will then be deleted.

Collection, Processing, and Transfer of Personal Data in Orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Providing the data is necessary for the contract conclusion. Failure to provide the data will result in no contract being formed. The processing is based on Art. 6 (1) (b) GDPR as it is required for contract fulfillment.

Your data may be transferred, for example, to:

  • The shipping company you have chosen,
  • Dropshipping suppliers,
  • Payment service providers,
  • Order processing service providers,
  • IT service providers.

In all cases, we strictly comply with legal requirements, and the extent of data transmission is kept to a minimum.


Contact, Reviews & Newsletters

Data Collection When Using the Contact Form

When you use our contact form, we collect your personal data (name, email address, message text) only to the extent that you provide it. Processing serves the purpose of responding to your inquiry. By submitting your message, you consent to the processing of the data. The processing is based on Art. 6 (1) (a) GDPR.

You can withdraw your consent at any time by notifying us, without affecting the legality of the processing before withdrawal. Your email address is used solely to process your request and is deleted afterward, unless you have agreed to further processing.

Data Collection When Submitting a Comment

When you comment on an article or post, we collect your personal data (name, email address, comment text) only to the extent provided by you. The processing serves the purpose of allowing comments and displaying them. By submitting the comment, you consent to processing.
Processing is based on Art. 6 (1) (a) GDPR. You can withdraw your consent at any time, and your personal data will be deleted.

When publishing your comment, the name and email address you provide will be publicly displayed.

Use of Email Address for Newsletter Subscription

If you have explicitly agreed, we use your email address for sending our own promotional newsletters. Processing is based on Art. 6 (1) (a) GDPR.
You can withdraw your consent at any time by clicking the unsubscribe link in the newsletter or notifying us directly. After unsubscribing, your email address will be removed from the mailing list.

Your data may be shared with a third-party email marketing provider under a data processing agreement. No further disclosure to third parties occurs.

Your data may be transferred to a third country for which an adequacy decision by the European Commission exists.


Inventory Management System

Use of an External Inventory Management System

To process contracts, we use an inventory management system. Your personal data collected during the order process is transferred to:

  • Shopify

Payment Service Providers

Use of PayPal

All PayPal transactions are subject to PayPal's Privacy Policy, which you can view here:
PayPal Privacy Policy

Use of Amazon Payments

We use the Amazon Payments service, provided by Amazon Payments Europe S.C.A. (38 avenue John F. Kennedy, L-1855 Luxembourg). When using this payment service, Amazon Payments collects, stores, and analyzes data such as IP address, device type, operating system, browser type, and location.

Processing occurs in accordance with Art. 6 (1) (f) GDPR, based on our legitimate interest in offering various payment options. More details can be found in Amazon Payments' Privacy Policy.

Use of Klarna Checkout

We use Klarna Checkout, a service of Klarna AB (Sveavägen 46, 111 34 Stockholm, Sweden), which uses cookies to offer an optimized online shopping experience. Processing is based on Art. 6 (1) (a) GDPR with your consent.

For details on Klarna's cookies, see Klarna’s Cookie Policy.


Cookies & Analytics

Our website uses cookies to improve usability, effectiveness, and security. Some cookies are necessary for website functionality. You can control cookie settings in your browser:

Google Analytics

We use Google Analytics to analyze website traffic. Data is processed by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) and Google Ireland Ltd for EU users.

To prevent Google Analytics from collecting data, you can install the Google Opt-Out Plugin.


User Rights & Data Retention

Storage Period

After contract fulfillment, data is stored for the statutory retention periods and then deleted, unless further processing is legally required.

Your Rights Under GDPR

You have the right to:

  • Access your data (Art. 15 GDPR)
  • Correct inaccurate data (Art. 16 GDPR)
  • Request data deletion (Art. 17 GDPR)
  • Restrict processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing based on legitimate interests (Art. 21 GDPR)

To exercise your rights, contact us at info@weearth.eu.

Right to Lodge a Complaint

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with a data protection authority under Art. 77 GDPR.