Privacy Policy
Information about the collection, processing and use of personal data on this website under the GDPR.
Contents
- Overview
- Controller
- Hosting
- Legal Basis for Processing
- Data Retention
- Your Rights
- SSL / TLS Encryption
- Cookies and Consent Management
- Server Log Files
- Contact Forms and Direct Contact
- Google Tag Manager
- Google Analytics
- Payments and eCommerce
- Social Media and Embedded Content
- Newsletter
- Security and Payment Encryption
- Objection to Promotional Emails
Overview
This Privacy Policy explains what personal data is collected when you visit the BLACKWATER website, how it is processed, and which rights you have under the General Data Protection Regulation (GDPR). Personal data means any information that can identify you directly or indirectly.
Some data is provided by you voluntarily, for example when you use a contact form, place an order, subscribe to a newsletter or contact us by email. Other data is collected automatically by technical systems when you visit the website, such as browser type, operating system, time of access, IP address and server log data.
Controller
The controller responsible for data processing on this website is WALUTEC Germany GmbH, Neheimer Str. 10, 59469 Ense, Germany. Email: office@blackwater-shop.de.
The controller is the natural or legal person who determines the purposes and means of processing personal data.
Hosting
This website is externally hosted. Personal data collected on this website may be stored on the servers of the hosting provider, including IP addresses, contact requests, metadata, communication data, contract data, names, website access data and other data generated through a website.
Hosting is used to provide a secure, fast and efficient online service and to fulfil contractual or pre-contractual obligations. The hosting provider is webgo GmbH, Heidenkampsweg 81, 20097 Hamburg, Germany.
Legal Basis for Processing
Where consent has been obtained, processing is based on Art. 6(1)(a) GDPR and, where relevant, §25 TDDDG for cookies and access to information on your device. Processing necessary for contracts or pre-contractual measures is based on Art. 6(1)(b) GDPR. Processing required by law is based on Art. 6(1)(c) GDPR. Processing based on legitimate interests is based on Art. 6(1)(f) GDPR.
You may withdraw consent at any time with future effect. The lawfulness of processing before withdrawal remains unaffected.
Data Retention
Unless a more specific retention period is stated in this policy, personal data remains with us until the purpose of processing no longer applies. If you request deletion or withdraw consent, your data will be deleted unless legal retention obligations or other lawful reasons require continued storage.
Your Rights
You have the right to obtain information about your stored personal data, its origin, recipients and purpose. You also have the right to request correction, deletion, restriction of processing and data portability.
You may object to processing based on Art. 6(1)(e) or Art. 6(1)(f) GDPR for reasons arising from your particular situation. You may also object to direct marketing at any time.
You have the right to lodge a complaint with a competent supervisory authority.
SSL / TLS Encryption
This website uses SSL or TLS encryption to protect confidential content such as orders or inquiries. You can recognize an encrypted connection by the HTTPS address and the lock symbol in your browser.
Cookies and Consent Management
This website uses cookies. Cookies are small data packages stored on your device. Some cookies are technically necessary for website functions such as the shopping cart, while others may be used for analytics, marketing or third-party services.
Where required, cookies and comparable technologies are used only after your consent. The website may use ConsentManager to obtain and document your cookie consent in a GDPR-compliant manner.
Server Log Files
The hosting provider automatically collects and stores information in server log files that your browser transmits automatically. This may include browser type and version, operating system, referrer URL, host name, time of the server request and IP address. These data are processed to ensure technically error-free display and optimization of the website.
Contact Forms and Direct Contact
If you contact us by form, email, telephone or other communication channels, your request including the contact details provided will be stored and processed to handle your inquiry and possible follow-up questions. Data will not be passed on without your consent unless legally permitted or required.
Google Tag Manager
This website uses Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager allows us to manage tracking, statistics and other technologies through one interface. Google Tag Manager itself does not create user profiles, does not store cookies and does not perform independent analyses.
Google Analytics
This website may use Google Analytics, a web analytics service provided by Google Ireland Limited. Google Analytics enables us to understand how visitors use the website, including page views, dwell time, device data and user origin.
Google Analytics may use cookies or comparable technologies. Processing is based on your consent where required. Google may transfer data to the United States. Google participates in the EU-US Data Privacy Framework.
Payments and eCommerce
When you place an order, personal customer, contract and payment data are processed to fulfil the purchase contract and handle payment, delivery and customer service. Necessary data may be passed to shipping providers and payment service providers.
Payment services such as PayPal and Stripe may process payment data independently under their own privacy policies. PayPal is provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. Stripe services in the EU are provided by Stripe Payments Europe, Ltd., Dublin, Ireland.
Social Media and Embedded Content
The website may include social media elements or links, including Facebook, Instagram, LinkedIn or XING. If such elements are active, personal data such as your IP address may be transmitted to the respective provider.
Embedded content such as YouTube videos or Google Maps may also lead to data transmission to third-party providers when activated.
Newsletter
If a newsletter is offered, your email address and consent information are processed to send the requested information. You can withdraw your consent at any time using the unsubscribe link or by contacting us.
Security and Payment Encryption
Payment transactions and sensitive communications are protected through encrypted SSL/TLS connections. Payment data cannot be read by third parties during encrypted transmission.
Objection to Promotional Emails
The use of contact details published in the legal notice for sending unsolicited advertising or information material is hereby objected to. We reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.
