Privacy policy

––––––––––––––––––––
Privacy Policy
––––––––––––––––––––

1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data are all data that can be used to personally identify you.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Athanasios Vlachos, Bürgermeister-Mahr-Str. 20, 63179 Obertshausen, Germany, Tel.: +491605550250, Email: info@memes-ger.de. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website
2.1 When using our website purely informatively, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:
- The website you visited
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you accessed the page
- Browser used
- Operating system used
- IP address used (if applicable, in anonymized form)
Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to review the server log files retrospectively should there be concrete indications of illegal use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the "https://" character string and the lock symbol in your browser's address bar.

3) Hosting & Content Delivery Network
Shopify
For hosting our website and displaying the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)
Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
All data collected on our website is processed on the provider's servers. We have entered into a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
When transferring data to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device longer and allow for storing page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the cookie settings overview of your web browser.
If personal data is processed by individual cookies used by us, processing is carried out in accordance with Art. 6 (1) (b) GDPR either for the performance of the contract, in accordance with Art. 6 (1) (a) GDPR in case of consent, or in accordance with Art. 6 (1) (f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can configure your browser to inform you about the setting of cookies and to decide individually on their acceptance or to exclude the acceptance of cookies for specific cases or generally.
Please note that the functionality of our website may be limited if cookies are not accepted.

5) Contacting Us
5.1 Judge.me
For review reminders, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom
Only on the basis of your explicit consent according to Art. 6 (1) (a) GDPR, we transmit your email address and possibly other customer data to the provider so that they can contact you with a review reminder via email.
You can revoke your consent at any time with effect for the future to us or to the provider.
We have entered into a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
When transferring data to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
5.2 In the context of contacting us (e.g., via contact form or email), personal data will be processed solely for the purpose of handling and responding to your request and only to the extent necessary.
The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) (f) GDPR. If your contact is aimed at a contract, then the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted once it is clear that the relevant issue has been finally resolved and provided that there are no legal retention obligations.

6) Comment Function
In the context of the comment function on this website, along with your comment, the time of creation of the comment and the name you chose as a commentator will be stored and published on this website. Furthermore, your IP address will be logged and stored. This storage of the IP address is done for security reasons and in case the person concerned violates the rights of third parties or posts illegal content through a comment. We need your email address to contact you in case a third party should claim that your published content is illegal.
The legal bases for storing your data are Art. 6 (1) (b) and (f) GDPR. We reserve the right to delete comments if they are deemed illegal by third parties.

7) Data Processing When Opening a Customer Account
According to Art. 6 (1) (b) GDPR, personal data will be collected and processed to the extent necessary when you provide it to us when opening a customer account. The data required for account creation can be found in the input mask of the relevant form on our website.
Deleting your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. After deleting your customer account, your data will be deleted, provided all contracts closed in this regard have been fully settled, no legal retention periods stand in the way, and there is no legitimate interest on our part in further storage.

8) Use of Customer Data for Direct Advertising
8.1 Subscription to Our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The mandatory information for sending the newsletter is only your email address. Providing additional data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive newsletters after you have explicitly confirmed your consent to receive the newsletter by clicking on a verification link sent to the specified email address.
By activating the confirmation link, you give us your consent to use your personal data according to Art. 6 (1) (a) GDPR. We store the IP address registered by the Internet Service Provider (ISP) and the date and time of registration to trace any misuse of your email address at a later time. The data collected during newsletter registration is used solely for the purpose of sending the newsletter.
You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending an appropriate message to the initially mentioned controller. After unsubscribing, your email address will be promptly removed from our newsletter distribution list, unless you have explicitly consented to further use of your data or we reserve any further data use that is legally permitted and of which we inform you in this statement.
8.2 Sending the Email Newsletter to Existing Customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular offers for similar goods or services from our range by email. For this purpose, we do not need to obtain a separate consent from you according to § 7 (3) UWG. The data processing is carried out solely on the basis of our legitimate interest in personalized direct marketing in accordance with Art. 6 (1) (f) GDPR. If you initially objected to the use of your email address for this purpose, no email will be sent by us.
You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with future effect by notifying the initially mentioned controller. Only transmission costs according to the basic rates will be incurred for you. Upon receipt of your objection, the use of your email address for advertising purposes will be immediately stopped.
8.3 Shopify Email
The sending of our email newsletters is carried out by this provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
Based on our legitimate interest in effective and user-friendly newsletter marketing, we transmit the data you provided during newsletter registration according to Art. 6 (1) (f) GDPR to this provider so that they can handle the newsletter sending on our behalf.
Subject to your explicit consent according to Art. 6 (

1) (a) GDPR, we also allow the provider to use the data for their own marketing purposes, in particular to create user profiles and to personalize newsletters. This consent can be revoked at any time with effect for the future.

9) Data Processing for Order Processing
9.1 To process your order, we work together with the following service providers, who support us fully or partially in the execution of concluded contracts:
- Shopify Payments: For processing payments, we use Shopify Payments. The data necessary for processing the payment will be passed on to Shopify Payments, 150 Elgin Street, Ottawa, ON K2P 1L4, Canada.
- Delivery Service Providers: If necessary for the delivery of the goods, we will provide your data to the commissioned delivery service provider, which you have selected during the ordering process, as necessary for the delivery of the goods.
- Payment Service Providers: In the context of payment processing, we use the services of external payment service providers (e.g., PayPal, Klarna, etc.) The data required for payment processing will be provided to these service providers.
9.2 The legal basis for the processing of your data is Art. 6 (1) (b) GDPR, which permits the processing of data for the performance of a contract.

10) Data Protection Rights
As a data subject, you have the following rights:
- According to Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of processing, or objection, the origin of your data if not collected from you, and the existence of automated decision-making, including profiling and, where applicable, meaningful information about its details.
- According to Art. 16 GDPR, you have the right to immediately request the correction of incorrect or completion of your personal data stored by us.
- According to Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless processing is required to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims.
- According to Art. 18 GDPR, you have the right to request the restriction of processing of your personal data if you contest the accuracy of the data, the processing is unlawful, but you oppose the deletion of the data and we no longer need the data, but you need it for the assertion, exercise, or defense of legal claims or you have objected to processing according to Art. 21 GDPR.
- According to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format and to request the transmission of this data to another controller.
- According to Art. 77 GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the location of our registered office for this purpose.

11) Right to Object
If your personal data is processed based on legitimate interests in accordance with Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data according to Art. 21 GDPR, provided that there are reasons arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without specifying a particular situation.

12) Data Security
We use appropriate technical and organizational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

13) Updates to This Privacy Policy
We may update this privacy policy from time to time to ensure it remains in compliance with legal requirements or to reflect changes in our services. The current version of the privacy policy can be accessed and printed from our website at any time.

11) Web Analysis Services

11.1 Google Analytics 4
This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows the analysis of your use of our website.
By default, when visiting the website, Google Analytics 4 sets cookies, which are small text files stored on your device that collect certain information. This information includes your IP address, which Google truncates to exclude the last digits to prevent direct personal identification.
The information is transmitted to Google's servers and processed there. This may also include transmissions to Google LLC based in the USA.
Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide other services related to website and internet use. The IP address transmitted by your browser in connection with Google Analytics will not be merged with other Google data. Data collected through Google Analytics 4 will be stored for two months and then deleted.
All processing described above, particularly setting cookies on the device used, only occurs if you have given us explicit consent in accordance with Art. 6 (1) (a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service via the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with Google that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://policies.google.com/privacy?hl=en&gl=en and https://policies.google.com/technologies/partner-sites.

Demographic Features
Google Analytics 4 uses the special "demographic features" function to create statistics that provide information about the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third parties. This allows the identification of target groups for marketing activities. However, the collected data cannot be assigned to any specific person and will be deleted after being stored for two months.

Google Signals
As an extension of Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google, subject to your consent for the use of Google Analytics under Art. 6 (1) (a) GDPR, can analyze your usage behavior across devices and create database models, including cross-device conversions. We receive no personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the “Personalized Ads” function in your Google account settings. For instructions, visit https://support.google.com/ads/answer/2662922?hl=en. Further information on Google Signals can be found at https://support.google.com/analytics/answer/7532985?hl=en.

UserIDs
As an extension of Google Analytics 4, the "UserIDs" function may be used on this website. If you have consented to the use of Google Analytics 4 under Art. 6 (1) (a) GDPR, created an account on this website, and log in on different devices with this account, your activities, including conversions, can be analyzed across devices.
For data transmissions to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

11.2 Google Tag Manager
This website uses the “Google Tag Manager,” a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).
The Google Tag Manager provides a technical foundation for bundling various web applications, including tracking and analysis services, and calibrating, controlling, and conditioning them through a unified user interface. The Google Tag Manager itself does not store or read information on user devices. It does not perform independent data analysis. However, the Google Tag Manager may transmit your IP address to Google upon page access and this may be stored. A transmission to Google LLC servers in the USA is also possible.
This processing only takes place if you have given us explicit consent according to Art. 6 (1) (a) GDPR. Without this consent, the use of Google Tag Manager will not occur during your visit to the site. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.
For data transmissions to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

12) Retargeting/ Remarketing and Conversion Tracking

12.1 Meta Pixel with Enhanced Data Matching
Within our online offering, we use the "Meta Pixel" service in enhanced data matching mode from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”).
When a user clicks on an ad we have placed on Facebook or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel." This URL parameter is then entered into the user’s browser via a cookie set by our linked page. Additionally, this cookie collects specific customer data such as email addresses, which we gather on our page linked to the Facebook or Instagram ad during actions like purchases, account logins, or registrations (enhanced data matching). The cookie is read, and the data, including specific customer data, is transmitted to Meta.
We use "Meta Pixel" with enhanced data matching to make our ads (so-called "Ads") on Facebook and/or Instagram more effective and ensure they match user interests or specific characteristics (e.g., interests in certain topics or products identified from visited websites), which we transmit to Meta (so-called "Custom Audiences").
Additionally, we analyze the effectiveness of our ads by tracking whether users were redirected to our website after clicking an ad (conversion). Compared to the standard version of "Meta Pixel," the enhanced data matching function helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.
All transmitted data is stored and processed by Meta, enabling association with the respective user profile and allowing Meta to use the data for its own advertising purposes according to Meta’s data use policies (https://www.facebook.com/about/privacy/). The data may enable Meta and its partners to display ads on and off Facebook.
All processing described above, particularly setting cookies to read information on the device used, only occurs if you have given us explicit consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.
Information generated by Meta is generally transferred to a Meta server and stored there; this may also involve transfer to servers of Meta Platforms Inc. in the USA.
For data transmissions to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

12.2 Pinterest Tag Conversion Tracking
This website uses the conversion tracking technology of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
If you have arrived at our website from an ad on the provider’s domain, the success of the ad can be tracked using cookies and/or similar technologies (tracking pixels, web beacons, pings, or HTTP requests).
For this purpose, the tracking technology reads certain device and browser information, including possibly your IP address, to record and evaluate predefined user actions (e.g., completed transactions, leads, searches on the website, product page views). This allows us to create statistics on user behavior on our website following redirection from an ad, which helps us optimize our offerings.
All processing described above, particularly setting cookies to read information on the device used, only occurs if you have given us explicit consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

12.3 TikTok Pixel
This website uses the conversion tracking technology of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
If you have arrived at our website from an ad on the provider’s domain, the success of the ad can be tracked using cookies and/or similar technologies (tracking pixels, web beacons, pings, or HTTP requests).
For this purpose, the tracking technology reads certain device and browser information, including possibly your IP address, to record and evaluate predefined user actions (e.g., completed transactions, leads, searches on the website, product page views). This allows us to create statistics on user behavior on our website following redirection from an ad, which helps us optimize our offerings.
All processing described above, particularly setting cookies to read information on the device used, only occurs if you have given us explicit consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

Here is the English translation of the provided text:

---

**15) Rights of the Data Subject**

**15.1 The applicable data protection laws grant you the following rights concerning the processing of your personal data by the data controller (right of access and intervention), with the specific conditions for exercising these rights being referred to in the legal basis cited:**
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent pursuant to Art. 7 (3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.

**15.2 RIGHT TO OBJECT**
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS RELATED TO YOUR PARTICULAR SITUATION, TO SUCH PROCESSING WITH FUTURE EFFECT.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING MAY BE RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES. YOU CAN EXERCISE THIS RIGHT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

**16) Duration of Storage of Personal Data**
The duration of storage of personal data is determined by the respective legal basis, the processing purpose, and, where applicable, the statutory retention periods (e.g., commercial and tax retention periods).
When processing personal data based on an explicit consent according to Art. 6 (1) (a) GDPR, the data will be stored until you withdraw your consent.
If there are statutory retention periods for data processed in the context of contractual or similar obligations based on Art. 6 (1) (b) GDPR, such data will be routinely deleted after the expiration of these retention periods, provided that they are no longer necessary for contract fulfillment or initiation, and/or we no longer have a legitimate interest in further storage.
When processing personal data based on Art. 6 (1) (f) GDPR, the data will be stored until you exercise your right to object under Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
When processing personal data for direct marketing purposes based on Art. 6 (1) (f) GDPR, the data will be stored until you exercise your right to object under Art. 21 (2) GDPR.
Unless stated otherwise in the specific processing situations described in this statement, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.