1. General information on the collection of personal data

(1) In the following privacy policy, we would like to explain how we handle the personal data that is transmitted to us when you use our website or our offers. Personal data is all data that can be related to you personally, e.g. name, address, email addresses or user behaviour

(2) Controller pursuant to Art. 4 No. 7 GDPR:

happy rain Würflingsdobler GmbH

Industriestr. 9

84359 Simbach am Inn

DEUTSCHLAND

Phone: +49 (0) 8571 91 19 – 0

E-mail address: shop@happy-rain.de

(3) You can contact our company data protection officer at

datenschutzbeauftragter@happy-rain.de

2. Rights of data subjects

(1) You have the following rights vis-à-vis us with regard to your personal data:

• Right of access (Art. 15 GDPR) to your personal data processed by us;
• Right to rectification (Art. 16 GDPR) or completion of your personal data processed by us;
• Right to erasure (Art. 17 GDPR) of your personal data processed by us, unless processing is exceptionally required under Art. 17 (3) GDPR
• Right to restriction of processing (Art. 18 GDPR);
• Right to information (Art. 19 GDPR);
• Right to data portability (Art. 20 GDPR);
• Right to withdraw consent once given to us (Art. 7 para. 3 GDPR). The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

(2) You also have the right to submit a complaint with a data protection supervisory authority if you are of the opinion that the processing of your personal data by us is unlawful.

(3) Objection to the processing of your data

Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which is described by us in each case in the corresponding description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing. Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the following contact details: happy rain Würflingsdobler GmbH, Industriestr. 9, 84359 Simbach am Inn, Tel: +49 (0) 8571 91 19 – 0, e-mail address: shop@happy-rain.de

(4) Data security

As the security of your data is important to us, your personal data is transmitted using secure SSL or TLS encryption/connection. TLS (Transport Layer Security) or its predecessor SSL (Secure Socket Layer) is a protocol for encrypting data transmissions on the internet. We use it to protect your personal data from unauthorized access.  You can recognize the encryption of the connection in the browser line by the sign "https//:" or the lock symbol.

We also use technical and organizational measures to protect our website and other systems against loss, destruction, access, modification or dissemination of your data by unauthorized persons. Despite regular checks, however, complete protection against all risks is not possible.

3. Visiting our website

If you use our website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. As soon as you request a file from our website, access data is received and stored by default.

This data record consists of:

• the page from which the file was requested,
• the name of the file,
• the date and time of the request,
• the amount of data transferred in each case,
• the access status / HTTP status code (i.e. whether the file was transferred or possibly not found, etc.),
• a description of the type and version of the web browser used,
• the installed operating system, the language of the operating system and the set resolution,
• the IP address used.

This data is necessary for us to display our website to you and to ensure stability and security. It is also analyzed for internal statistical purposes and for the technical administration of the website. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the aforementioned purposes of data collection.

4. Use of our online shop

(1) If you wish to place an order in our online store, you must provide personal data during the ordering process, such as

• name
• address
• e-mail address

during the ordering process. Which data is collected for this purpose can be seen from the respective input masks, whereby the necessary mandatory information is specially marked in each case. All other information are optional .

The purpose of providing your personal data is that it is required for the conclusion of the contract and the processing of your order. The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR.

(2) You have the option of creating a customer account. For the purpose of using your personal data for further, subsequent orders, the data you provide will be stored and processed on a revocable basis. The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR.

(3) Due to the requirements of commercial and tax law, we are obliged to store your address, payment and order data for a period of ten years. Your data will therefore not be completely deleted even if storage is no longer required for the contract concluded. However, processing will be restricted to the extent necessary to comply with legal obligations. The legal basis is Art. 6 para. 1 sentence 1 lit. c GDPR.

(4) We will only use the data that you have transmitted to us in the course of your order to process your order. We use the following external service providers to process your order: Your address data must be forwarded to our parcel service providers in order to deliver the goods. They are obliged to treat your data confidentially and to store and use it exclusively for the purpose of delivery and to delete it again after successful delivery. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.

5. When contacting us by e-mail or contact form and callback service

(1) When you contact us by email or via the contact form on our website, personal data is collected and stored by us. Which personal data is collected when you contact us via the contact form can be seen from the contact form. When you contact us by e-mail, the following personal data is collected and stored by us: e-mail address and e-mail text as well as other data provided voluntarily. We process the data you provide exclusively to process your contact request. The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR or our legitimate interest in responding to your request in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

(2) When ordering our callback service, you agree that we may use your telephone number to contact you.

Permission to contact you by telephone

I agree that my telephone number may be used by Kesper to contact me. I can revoke this consent to the use of my telephone number at any time for the future, e.g. by sending an e-mail to e-mail: shop@happy-rain.de.

The legal basis for the use of your telephone number for the callback service is Art. 6 para. 1 sentence 1 lit. a GDPR.

(3) By ordering our callback service by fax, you agree that we may use your fax number to contact you.

Permission to contact you by fax

I agree that my fax number may be used by Kesper to contact me. I can revoke this consent to the use of my fax number at any time for the future, e.g. by sending an e-mail to e-mail: shop@happy-rain.de.

The legal basis for the use of your fax number for contacting you is Art. 6 para. 1 sentence 1 lit. a GDPR.

(4) If storage is no longer required, we will delete all personal data collected in this context. If there is a legal obligation to retain data, processing will be limited to this purpose. The legal basis is Art. 6 para. 1 lit. c GDPR.

6. When registering for our newsletter

(1) By subscribing to our newsletter, you agree that we may use your e-mail address for our own advertising purposes (so-called direct advertising).

Permission to send the newsletter

"I would like to be informed regularly by e-mail about interesting offers on goods from happy-rain brand store. I can cancel this consent to the use of my e-mail address at any time for the future. The newsletter is sent in accordance with our privacy policy"

(2) Registration for our newsletter is carried out using the so-called double opt-in procedure, i.e. after registering with your e-mail address, you will first receive an e-mail with an activation link with which you must confirm your registration. Registration is only complete once you have clicked on the activation link. As part of the registration process, we store your IP address and the time of registration and confirmation in addition to your e-mail address. This is done in order to be able to clarify any misuse of third-party data at a later date and to prove your registration.

(3) If a registration is not confirmed within 24 hours via the activation link, we will automatically delete the data stored during the registration process.

(4) Only your e-mail address is required to register for the newsletter. The provision of further, separately marked data is voluntary and is used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter, in the context of which we inform you about our products and services or products.  The legal basis for the processing of your personal data is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

(5) You can cancel your consent to the storage and use of your e-mail address for sending the newsletter at any time with effect for the future and unsubscribe from the newsletter, e.g. by sending an e-mail to: shop@happy-rain.de or by clicking on the link at the end of each newsletter.

7. Cookies

(1) This website uses cookies. Cookies are small text files that your internet browser stores on your end device (PC, laptop, tablet, smartphone, etc.). They are used to make the use of our website more pleasant and convenient for you or for analytical purposes. If you call up the corresponding page again, the cookies enable your end device to be recognized. This means, among other things, that data you have entered once will be available when you fill out the form again or that the order process for items already placed in the shopping cart can be continued. If the cookies are used for the purpose of concluding or executing the contract, the legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR. If the cookies are used to ensure our legitimate interests in the pleasant and convenient functionality as well as analysis and improvement of our website, the legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

(2) This website uses the types of cookies listed below:

• In most cases, we use cookies that are automatically deleted from your hard disk when you close your browser or log out (transient cookies, in particular session cookies).
• Other cookies remain on your computer and enable us to recognize your end device on your next visit (so-called persistent or permanent cookies). These cookies are automatically deleted from your system after a preset period of time, which differs depending on the cookie.

(3) This website includes content and services from other providers (e.g. Google), which in turn may use cookies and active components. In this respect, we refer you to our explanations below.

(4) You can change the storage of cookies in your browser settings at any time, e.g. refuse to accept cookies altogether, third-party cookies (cookies that are set by a third party, i.e. not by the actual website you are currently visiting) or individual cookies, or delete them. However, we would like to point out that in this case you may no longer be able to use our website to its full extent. To safeguard your privacy, we recommend that you delete the cookies on your end device and the browser history at regular intervals.

8. Analysis tools

The following tracking measures are used on our website to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user, as well as to measure the success of our advertising measures and optimize our advertising measures. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR, whereby our legitimate interest arises from the aforementioned purposes.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC (Google). Google Analytics uses so-called cookies (see also above under "Cookies" of this data protection declaration), which are text files that are stored on your computer and enable your use of the website to be analyzed.

The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. We would like to point out that this website uses Google Analytics with the extension "_anonymizeIp()" and that the IP addresses are therefore only processed in abbreviated form so that they cannot be traced back to specific individuals.

Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

You can also prevent the collection of data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website:

insert the following text as html code on your website:

<p><a onclick="alert('Google Analytics wurde deaktiviert');"

href="javascript:gaOptout()">» Google Analytics deaktivieren</a>

Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, which ensures compliance with the level of data protection applicable in the EU, https://www.privacyshield.gov/EU-US-Framework.

You can find more information on terms of use and data protection at http://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/privacy.

9. Storage period of personal data

The storage period of personal data depends on the respective statutory retention period (e.g. retention periods under commercial and tax law). Once the statutory retention periods have expired, we delete the respective personal data as long as and to the extent that the personal data is not required for the fulfillment or initiation of a contract or we no longer have a legitimate interest in storing it.

10. Disclosure of data in other cases

In addition to the cases mentioned above, we will only pass on your personal data to third parties in the following cases

• if you have given us your express consent for this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, or
• if there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, e.g. in the context of criminal prosecution or
• the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f is necessary for the assertion or defense of legal claims or the exercise of rights and it cannot be assumed that the disclosure conflicts with an overriding interest of the data subject worthy of protection.