Privacy policy

As a globally active company, the protection of your data and the lawful handling of it are particularly important to us. For this reason, we process personal data exclusively in accordance with applicable law.

In the following, we present the information relating to data protection on our website:

Person responsible within the meaning of Art. 4 No. 7 DSGVO 

ICRUSH GmbH
vertreten durch die Geschäftsführerin: Lei Zhang
Sülzburgstr. 11
50937 Köln
E-Mail:  [email protected]
Amtsgericht Köln, HRB 89188

Contact person for data protection

If you have any questions about the processing of your personal data or your rights and claims relating to data protection, please contact us at the following address:

ICRUSH GmbH
-Datenschutzbeauftragter-
Sülzburgstr. 11
50937Köln

E-Mail:  [email protected]

General information, terminology and legal basis

Data protection on our website is very important to us. Therefore, we strictly adhere to the legal provisions when collecting, processing and using your personal data. This means that we only process your personal data if there is a legal basis for doing so. Data processing is therefore only carried out if this is necessary for the provision of our contractual services (e.g. processing of orders) and online services, or if it is required by law, or if we have your consent as a user, or if we have a legitimate interest in the processing. Such an interest lies, for example, in the analysis, optimisation and economic operation as well as the security of our online offer within the meaning of Art. 6 Para. 1 lit. f. DSGVO, the measurement of reach, the creation of profiles for advertising and marketing purposes as well as the collection of access data and the use of third-party services.

The legal bases can be found in the following articles of the GDPR:

• Consents: Art. 6 para. 1 lit. a. and Art. 7 DSGVO;
• Processing for the fulfilment of our services and implementation of contractual measures: Art. 6 para. 1 lit. b. DSGVO;
• Processing for the fulfilment of our legal obligations: Art. 6 para. 1 lit. c. DSGVO
• Processing for the protection of our legitimate interests: Art. 6 para. 1 lit. f. DSGVO. For details on the transfer of data, please refer to the passage in this data protection declaration.

„Passing on data“

In order for you to feel secure when visiting our website, we would like to inform you about what data we process, when and for what purpose and on what legal basis. In addition, we will provide you with information on how the protection of your personal data is ensured and which data subject rights you have when your personal data is processed.

This privacy policy can be accessed, saved and printed at any time at https://icrush.de/datenschutz saved and printed out at any time.

The terms used in the following, in particular "personal data", are taken from the General Data Protection Regulation (GDPR). The legal meaning of the individual terms can be found in Article 4 of the GDPR, which contains definitions of the respective terms. All terms used in the masculine are to be understood as gender-neutral.

Collection and storage of personal data and the type and purpose of their use Log files

When you visit our website www.icrush.de, information is automatically sent to our website server by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automatic deletion:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which the access is made (referrer URL)
• The browser used and, if applicable, the operating system of your computer as well as the name of your access provider. The above data is processed by us for the following purposes:
• Ensuring a smooth connection of the website
• Ensuring a comfortable use of our website
• Evaluation of system security and stability as well as for other administrative purposes. The legal basis for the data processing follows from Art. 6 para. 1 p. 1 lit. f. DSGVO. Our legitimate interest lies in the above-mentioned purposes of data collection. In no case do we use the collected data for the purpose of drawing conclusions about your person. An evaluation of this data for the purpose of marketing takes place.

The information processed is only stored for as long as necessary for the intended purpose or as required by law.

The recipient of the data is our server host, who works for us under a commissioned data agreement.

Fulfilment of the contract

In order to fulfil our contractual obligations and services, we process your inventory and contract data in accordance with Art. 6 Para. lit. b. DSGVO. DSGVO Inventory data includes in particular name and address. Contractual data includes in particular all services used and payment information.

Customer account/orders

You can create a user account on our website. In particular, you can view your orders and your contact details. In the registration process, it is necessary to provide personal data. The user accounts created with us are not public. You can only access them by entering your user name and the corresponding password.

During the registration or login process as well as when you use our website services, we store your IP address as well as the time of your respective activity on our website. This data is stored on the basis of our legitimate interests and also to protect against unauthorised use. This stored data is only passed on in legally permissible cases, cf. the passage "Disclosure of data" of this data protection declaration.

If data is entered in the contact form or in the user profile, we process this data - as well as the usage data, which includes in particular entries in the contact form or in the user profile - in order to show you product information (based on the services used to date), for example.

To protect against misuse of your data, you must "activate" your customer account for successful registration. For this purpose, we send an e-mail with an activation link to the e-mail address on which the registration is based. We will then confirm the successful creation of your customer account by e-mail. If the customer account is not activated within 7 days, your specified data will be automatically deleted. As a registered ICRUSH customer, you have the option of conveniently and easily ordering our services on our website. For the execution of the orders we have to store certain personal data. For your order, we need your correct name, i.e. your clear name, as well as your address data. We need your e-mail address so that we can confirm receipt of your order and otherwise communicate with you. You can view and change this information at any time after logging in.

You also have the option of logging in to us with your Facebook account. For details, please refer to the passage in this privacy policy, "Facebook Connect“.

For the use of your data stored in the customer account for advertising purposes (e.g. newsletter dispatch), we will always obtain your additional express consent.

If you are no longer interested in your customer account, you can cancel it at any time. To do so, send us an e-mail via the e-mail address on which the customer account is based to [email protected], clearly stating your intention to terminate the account. Legal relationships still to be settled remain unaffected by this. This applies in particular to orders that have already been placed and have not yet been completed.

In the event that the user account is terminated, we will delete the data stored there without delay, provided that there are no commercial or tax law reasons or other mandatory legal provisions within the meaning of Art. 6 Para. 1 lit. c. DSGVO are opposed. For this reason, it is your responsibility to save your data stored in the user account in good time before the end of the contract in the event of termination.

As part of the deletion of the customer account, your personal data generated here will also be deleted if you have made a request to this effect and there are no legal obligations to retain the data, or if the data is no longer required to fulfil the purpose for which it was stored, or if its storage is inadmissible for other legal reasons. The request must be made either by e-mail or by letter to the address given under the heading "Contacte" in this data protection declaration.

Passing on data

Your personal data will not be transferred to third parties for purposes other than those listed below.

We will only share your personal information with third parties if:

• you have given your express consent in accordance with Art. 6 para. 1 p. 1 lit. a. DSGVO have given your express consent to this
• the disclosure is necessary in accordance with Art. 6 para. 1 p. 1 lit. f. DSGVO is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data.
• in the event that a legal obligation exists for the disclosure pursuant to Art. 6 para. 1 p. 1 lit. c. DSGVO a legal obligation exists, as well as
• this is legally permissible and required according to Art. 6 para. 1 p. 1 lit. b. DSGVO, this is necessary for the processing of contractual relationships with you.

Data transfer to shipping service providers

If you have given us your express consent to do so during or after your order, we will pass on your e-mail address to the selected shipping service provider on the basis of this consent in accordance with Art. 6 (1) sentence 1 lit. a DSGVO so that the shipping service provider can contact you before delivery for the purpose of delivery notification or coordination.

Consent can be revoked at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Deutschland

Für die Lagerung, das Verpacken und Versenden unserer Produkte arbeiten wir mit der FIEGE Logistik Stiftung & Co. KG. zusammen. Damit diese Prozesse reibungslos ablaufen können, werden Ihr Name, Ihre Adresse und ihre Bestellungsdetails an die FIEGE Logistik Stiftung & Co. KG. weitergeleitet. Diese Daten werden lediglich zur Erfüllung des Vertragszweckes weitergegeben.
Weitre Informationen über die Fiege Logistik Stiftung & Co. KG finden Sie unter: https://www.fiege.com/de.

Cookies

We use cookies on our site. These are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our site. The cookies used here do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookie that arises in connection with the specific end device used. However, this does not mean that we gain direct knowledge of your identity.

The use of cookies serves, on the one hand, to make the use of our offer more pleasant for you. We also use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimise the user-friendliness of our website, which are stored on your end device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognised that you have already been to our site and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. These cookies enable us to automatically recognise that you have already been to our website when you visit it again. These cookies are automatically deleted after a defined period of time.

The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests as well as the legitimate interests of third parties pursuant to Art. 6 (1) p. 1 lit. f. DSGVO necessary.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.

You can delete stored cookies in the system settings of your browser.

You are free to refuse the use of cookies, which in particular also serve range measurement and advertising purposes, via the deactivation page of the Network Advertising Initiative http://optout.networkadvertising.org/as well as via http://www.youronlinechoices.com/uk/your-ad-choices/ as well as via http://www.aboutads.info/choices to object.

Use of tracking and analysis tools

We use the tracking and analysis tools listed below with the aim of continuously optimising our website and ensuring a user-friendly design. The use of these services also enables us to statistically evaluate the use of our website and to further develop our website and the shopping experience of our customers. Based on this legitimate interest, we are permitted to use the tools used in accordance with Art. 6 (1) sentence 1 lit. f DSGVO. In the event that your consent to the use of a tool is required in accordance with this privacy policy, the legality is determined accordingly in accordance with Art. 6 (1) sentence 1 lit. a DSGVO.

The descriptions of the individual analysis tools provide you with information on the data processed and the purposes for which it is processed. In addition to the deactivation options described in each case, you can change the cookie settings in your browser at any time or deactivate them in this way (see section "Cookies").

Google Analytics

This website uses functions of the web analysis service Google Analytics of the company Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. The advertising agency morefire GmbH (Hohenstaufenring, 29-37, 50674 Cologne, Germany, [email protected]) has been commissioned with the use and monitoring of this service within the framework of an order processing agreement.

These services also use cookies. The information generated by the cookies is usually transferred to a Google server located in the USA and stored there. Due to the IP anonymisation (anonymizeIp) on our website, your IP address will be transmitted by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area beforehand in a shortened and incomplete form. Only in exceptional cases will the full IP address be transmitted to a Google server and shortened there.

Google is a certified member state of the Privacy Shield agreement (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). This guarantees that Google complies with European data protection law.  

Google uses the information obtained through the cookies on our behalf to evaluate user behaviour on our website and to compile reports on website activity. In addition, Google also uses the information to provide us with other services related to the use of the website and the internet. The IP address transmitted in this context will not be merged with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

You can prevent the collection of your data by Google Analytics by clicking on the following link: Deactivate Google Analytics. An opt-out cookie will be set, which will prevent the collection of your data during future visits to this website.

At http://www.google.de/intl/de/policies/privacy/ you will also find more detailed information on Google Analytics and Google's data protection policy.

The legal basis for the use of Google Analytics is Art. 6 para. 1 lit. f. DSGVO.

We would like to inform you that we have concluded an order processing contract with Google in accordance with Art. 28 DSGVO. The strict requirements of the German data protection authorities are fully implemented in the use of Google Analytics.

Your personal data will be deleted or anonymised after 14 months.

Google Ads

For a targeted response to market behaviour and the placement of the best possible offers for interested users, we use Google Ads Conversion (Google Ads) functions of the company Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. The advertising agency morefire GmbH (Hohenstaufenring, 29- 37, 50674 Cologne, Germany, [email protected]) has been commissioned with the use and control within the framework of a contract processing agreement.

The use of Google Ads enables us to advertise our offers with Google ads on external websites and to draw users' attention to our products. At the same time, we can use the data obtained to check how successful the individual Google Ads advertising measure is. The aim of using Google Ads is to show you advertising tailored to your interests and thus provide you with a better shopping experience.

When a user is redirected to our website via an advertisement placed by means of Google Ads, a cookie is stored on his or her terminal device. The validity period of this cookie is usually 30 days and should neither contain personal data nor serve the purpose of personal identification. With the help of this cookie, Google can recognise the Internet browser used the next time the user visits our website. As soon as the user visits our website and the cookie is still active, Google or we can track that the user was previously directed to our website via a specific Google advertisement. By analysing the interaction of users on our website, targeted advertising can be displayed to users on other pages even after they have visited our website. Thus, we can use the statistical evaluations of the individual advertising measures to check the effectiveness of our various advertising measures and make optimisations.

In the context of the use of Google Ads on our website, we do not receive any further data about the users; in particular, it is not possible for us to identify the individual user on the basis of the data transmitted.

Google Ads will only be activated after your consent. Visitors to our website will be shown a corresponding Consent banner for the setting when they visit our website for the first time. If you do not wish to participate in the tracking, you can object to this use at any time by preventing the installation of cookies through a corresponding setting in your browser software (deactivation option). You will then not be included in the conversion tracking statistics.

Furthermore, you can deactivate personalised advertising for you in Google's advertising settings: https://adssettings.google.com/anonymous?sig=ACi0TChGcXzAjlPL5OHwadSn3vAn7QdWrUgscCeCMoUv7zpOWZtpJDX5mDgaIVaC-kA2VG4SD5RoaOGTgyqLkdZjjSKcxP7ywiAqtAfQciJsSvLvYrC2B9A&hl=de. You can find instructions on how to do this at https://support.google.com/ads/answer/2662922?hl=de.

Information on Google's privacy settings can be found at https://privacy.google.com/take-control.html?categories_activeEl=sign-in. For more information about how Google uses data from websites and apps that use Google's services, please visit https://policies.google.com/technologies/partner-sites. Google's privacy policy can be found at : https://policies.google.com/technologies/ads?hl=de, https://policies.google.com/privacy?gl=de

Google Ads Customer Match

As part of the use of Google Ads, we use the Customer Match function. We offer registered customers the opportunity to participate in personalised advertising measures and campaigns. After prior consent, the customer's email address is uploaded to Google in encrypted form. After the creation of corresponding target groups, the transmitted email addresses are matched with existing Google customers. If there are matches, we will display personalised advertising measures and campaigns to these target groups in Google Search, Google Shopping or on the YouTube platform. In this context, only the user's email address is processed.

According to Google, the data is stored encrypted to prevent unauthorised access. The data is also treated confidentially and protected with industry-leading standards. Furthermore, the information transmitted is not used to create or expand the data usage profiles of the users.

Further information from Google on the processing and storage of data within the Costumer Match function can be found at: https://support.google.com/google-ads/answer/6334160?hl=de.

We would like to point out that we only use Customer Match with your prior consent within the meaning of Art. 6 Para. 1 lit. a DSGVO.

You have the option to revoke your consent at any time. To do so, please write us an e-mail with your revocation to [email protected].

We would like to inform you that we have concluded an order processing contract with Google in accordance with Art. 28 DSGVO. The strict requirements of the German data protection authorities are fully implemented.

Google’s Privacy & Terms

More about how Google will use personal data

https://policies.google.com/technologies/partner-sites?hl=de

Facebook Pixel

As a further tracking tool, we have integrated the visitor action pixel ("Facebook Pixel") of Facebook Ireland Limited ("Facebook"), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland on our website. Facebook Pixel serves as an analytics tool that can be used to measure the effectiveness of our advertising. After users are directed to our website via a Facebook advertisement, we can track the users' further actions on our website. This enables us to record the effectiveness of our Facebook ads for statistical purposes and to evaluate them for the purpose of market research and to optimise future advertising measures.

The data collected is not visible to us, so we cannot draw any conclusions about the identity of the individual users. However, the data is stored and processed by Facebook. Therefore, Facebook can link the stored data with the data of a Facebook account and use the data for its own advertising purposes in accordance with the data protection guidelines (https://www.facebook.com/about/privacy/) use. We cannot influence this use of this data.

The use of Facebook Pixel is based on Art. 6 para. 1 lit. f DSGVO. As a website operator, we have a legitimate interest in constantly optimising our advertising measures on the social media channels we use and delivering them more efficiently.

If you are logged in to Facebook, you can deactivate usage-based advertising in the "Ad settings" area under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen deactivate.

If you are not registered on Facebook, you can deactivate Facebook's usage-based advertising on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

As part of our use of Facebook Custom Audiences, we also use Facebook's Custom Audiences from your Customer List feature. If you register as a customer via our website, we offer you the opportunity to participate in personalised advertising measures and campaigns. With prior consent, we may upload email addresses or phone numbers of our customers to the Adverts Manager of our Facebook company account. According to Facebook, this data is encrypted before transmission to Facebook, so that the email address is transmitted as a hash value (combination of letters and numbers). Facebook can match this hash value with the corresponding hash values of email addresses of its Facebook users. Customers who are also Facebook users can thus be shown our personalised advertising measures and campaigns on the Facebook platform.

We would like to point out that we only use Customer Match with your prior consent within the meaning of Art. 6 Para. 1 lit. a DSGVO.

You have the option to revoke your consent at any time. To do so, please send us an email with your revocation to [email protected].

We are supported in the implementation by the advertising agency Adbaker GmbH (Kalscheurener Str. 19A, 50354 Hürth, [email protected]) within the framework of an order processing contract.

For more information about protecting your privacy and Facebook's data policy, please visit https://www.facebook.com/policy.php and https://www.facebook.com/ads/about/?entry_product=ad_preferences.

Social networks

In addition to this website, we also maintain presences in various social media. You can access these via corresponding buttons on our website.

If you visit our website in the respective social network in this way, personal data may be transmitted to the respective provider of the social network. In addition, there is also the possibility that these process further data and information from you that go beyond those that have been specifically entered by you in this social network. This may include in particular the most important data of the computer system from which you visit the social network, which includes in particular the IP address as well as the processor type used and the respective browser version and finally also the plug-in.

In the event that you are logged in with your personal user account on the respective network while visiting the social network via our website, the network can assign the visit to your account.

Our website contains social plug-ins from

• Facebook (Operator: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland)
• Instagram (Operator: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA).

You can recognise these by the respective - generally known - logo of the operator.

Facebook's Privacy Shield certification (https://www.privacyshield.gov/list) shows that Facebook is committed to complying with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework on the collection, use and retention of personal data from the member states of the EU and Switzerland, respectively. Facebook has declared through certification that it complies with the Privacy Shield Principles. Further information can be found at https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

The purpose and scope of the data collection by the social network as well as the further processing of your data there as well as your rights in this regard can be found in the respective provisions of the respective responsible party, e.g. under:

• Facebook: https://de-de.facebook.com/about/privacy/
• Instagram: https://help.instagram.com/519522125107875.

We would like to point out that we have no influence on the processing of data on these external websites.

The use of these social plug-ins is based on our legitimate interest, which follows from Art. 6 para. 1 lit. f. DSGVO. This lies in the analysis, optimisation and economic operation of our website.

Facebook Connect

We offer you the possibility to log in to our site with your Facebook access data. An additional registration with us is then not necessary. Facebook Connect is a service of the social network Facebook, which is operated by Facebook Ireland Limited, (4 Grand Canal Square, Dublin 2, Ireland) ("Facebook").

If you register with us in this way, your Facebook profile will be linked to our services. This means that Facebook automatically sends us the information that you have previously consented to on Facebook. This includes your first name, last name, email address, profile picture, gender and friends list. We use this information to identify you when you use ICRUSH.

The legal basis for this data processing is Art. 6 para. 1 lit. a. DSGVO.

For more information on Facebook Connect and privacy settings, please see the privacy notice: https://www.facebook.com/about/privacy.

Further integration of third-party content and services

In order to pursue our legitimate interests pursuant to Art. 6 para. 1 lit. f. DSGVO, we use further content or service offers ("services") from third-party providers on our website. In this way, we can integrate and use third-party services. In this case, these third-party providers also perceive your IP address, as without such perception the content cannot be sent to the browser. In any case, we always endeavour to only use content whose respective providers only use the IP address to deliver the content.

We would like to point out that third-party providers may use so-called pixel tags for statistical or marketing purposes. These are invisible graphics, also known as "web beacons". Using these, it is possible to evaluate various information, such as in particular visitor traffic, on this website. It is possible that this pseudonymous information is stored in cookies on your end device and contains technical information about your browser and operating system, referring websites or time of visit as well as other information about the use of our online offer. In addition, it is possible that this information can also be linked to such information from other sources.

When using the services of third parties, the terms and conditions as well as the data protection information of the respective providers apply, which can be found on the respective website or transaction applications.

Payment service provider

The integrated third-party services also include the payment services PayPal, Klarna and Stripe.

The use of these payment services is based on our legitimate interest, which follows from Art. 6 para. 1 lit. f. DSGVO and on the basis of an order processing agreement pursuant to Art. 28 DSGVO. The legitimate interest here is to offer you various payment options and to ensure orderly payment processing in the context of the website.

Payment processing via PayPal and Stripe

For payment processing, you can use, among others, the services of the payment service provider PayPal (Europe) S.à. r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal") or the payment service provider Stripe Inc. with headquarters at 185 Berry Street Suite 550, San Francisco, CA 94107 ("Stripe"). You will be redirected to the PayPal or Stripe website as part of your order. This makes it clear to you that you are leaving our website and accessing external content. The collection, use and storage of your data there is the sole responsibility of PayPal or Stripe as the site operator.

If you select PayPal or Stripe as a payment option, your data will be automatically transmitted to PayPal or Stripe. By selecting this payment option, you consent to the transmission of personal data required for payment processing.

The personal data transmitted is usually the first name, last name, address, e-mail address, IP address, telephone number, mobile phone number or other data necessary for the processing of payments. Also necessary for the processing of the purchase contract are such personal data that are related to the respective order. The transmission of the data is suitable to facilitate the payment processing and to prevent fraud.

It is possible that this personal data may also be transmitted by PayPal or Stripe to credit agencies. This transmission takes place for the purpose of checking identity and creditworthiness. It cannot be ruled out that PayPal may pass on the personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary for the fulfilment of contractual obligations or the data is to be processed on behalf.

You have the option to revoke your consent to the handling of personal data at any time vis-à-vis PayPal or Stripe. We would like to point out that a revocation does not affect personal data that must be processed, used or transmitted in order to process payments in accordance with the contract.

Stripe is certified under the Privacy Shield agreement and thus offers an additional guarantee of compliance with European data protection law if data is processed in the USA(https://www.privacyshield.gov/participant?id=a2zt0000000TQOUAA4&status=Active).

For details, please read the privacy notices of PayPal and Stripe at

• PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full;
• Stripe: https://stripe.com/de/privacy.

Google Web Fonts

In particular, we also use external fonts from Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland A., https://www.google.com/fontsso-called Google Fonts. The integration of Google Fonts takes place via a server call at Google (usually in the USA). You can find the data protection declaration for this at https://www.google.com/policies/privacy/, (Opt-Out: https://www.google.com/settings/ads/).

The integration of the web fonts takes place via an interface ("API") to the Google services. It is possible that Google collects information, such as personal data in particular, through the integration of the web fonts and processes this information. It cannot be ruled out that Google also transmits the information to a server in a third country. We ourselves do not collect any data in the context of providing the Google Fonts.

Our legitimate interest in using this service lies in the possibility of a uniform display of fonts. In this way, the design effort can be kept lower than if a reaction to font standards of different operating systems or browsers would have to take place with own graphically adapted web pages.

Google also has a legitimate interest in the collected (personal) data, as this enables it to improve its own services.

Google Maps

We use maps from the "Google Maps" service of the company Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland on our website.

From the Privacy Shield certification of Google (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active) indicates that Google is committed to complying with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework on the collection, use and retention of personal data from the member states of the EU and Switzerland, respectively. Google, including Google LLC and its wholly owned subsidiaries in the US, has declared by certification that it complies with the Privacy Shield Principles. Further information can be found at https://www.google.de/policies/privacy/frameworks/.

We have no influence on what data Google actually collects and processes. However, Google states that in principle the following information in particular, which includes personal data, may be processed:

• Log data (in particular the IP address)
• Site-related information
• and similar technologies
• Unique application numbers

If you are logged into your Google account when you use our site, there is a possibility that Google may add the processed information to your account - depending on your account settings - and treat it as personal data, see esp. https://www.google.de/policies/privacy/partners.

To prevent this data from being added directly, you can log out of your Google account or make the appropriate account settings in your Google account.

Google provides further information, in particular on your options to prevent the use of data, under the following links:

• https://policies.google.com/privacy
• https://www.google.com/settings/ads/(so-called "Opt-Out")
• Click here to stop the data use.

Our legitimate interest in the use of this service follows from Art. 6 para. 1 lit. f. DSGVO. This lies here in enabling the localisation of shops that offer our products.

Bootstrap - Content Distribution Networks (CDN)

On our website, we use the services of Bootstrap, a CDN from NetDNA, LLC (3575 Cahuenga Blvd. West, Suite 330, Los Angeles, CA 90068, USA; "MaxCDN").

CDNs have the effect of shortening the loading times of common Java script libraries and fonts, as the files are transferred via fast servers that are close to the location or have a low load. Among other things, your IP address is transmitted to MaxCDN. We would like to point out that the provider operates servers in the EU, however, it cannot be ruled out that your browser also accesses servers outside the EU during data processing.

NetDNA, LLC is certified under the Privacy Shield agreement, thereby providing an additional guarantee of compliance with European data protection law where data is processed in the USA. Details can be found at

https://www.privacyshield.gov/participant?id=a2zt0000000CbahAAC&status=Active.

The communication as well as the contents of our services are not handled via CDN.

If you would like to prevent the execution of JavaScript altogether, you can install a JavaScript blocker in your browser. You can find more information on the data protection of the providers at https://www.maxcdn.com/legal/#privacy.

The use of these services is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f. DSGVO. This lies in the better presentation of our website.

Klaviyo

Newsletter dispatch 

On our website, we also offer you the opportunity to register to receive a newsletter. In this newsletter, we will regularly inform you about numerous offers and new products from specific jewellery lines that interest you.

The newsletter will only be sent to you after you have given your consent. In the following, we would like to inform you about the registration, sending and unsubscription procedure as well as the static evaluation. Finally, we will also inform you about your rights of objection.

If you would like to receive our newsletter, we require an e-mail address from you to which the newsletter should be sent. After you have registered for the newsletter, you will regularly receive an e-mail with a confirmation link for the newsletter (double-opt-in procedure) before it is sent for the first time. If you are the legal owner of the e-mail address provided, you can confirm your wish to receive a newsletter by clicking on the link. By clicking on the link, you declare that you agree to receive the newsletter. You will then receive the newsletter from us.

If you enter your name in the newsletter registration process, we will use it to address you personally in the newsletter. The specification of the name is optional.

The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address.

The dispatch of the newsletter and the associated performance measurement is based on your consent in accordance with Art. 6 Para. 1 lit. a, Art. 7 DSGVO in conjunction with § 7 Para. 2 No. 3 UWG or on the basis of the legal permission in accordance with § 7 Para. 3 UWG.

The basis for logging the registration process is the pursuit of our legitimate interests pursuant to Art. 6 para. 1 lit. f. DSGVO. Our interest is based on the possibility of offering you a user-friendly and secure newsletter system that serves both our business interests and the possibility of proving your consent, as well as meeting your expectations.

You can revoke the consent you have given us to store the data, the e-mail address and the use of this data to send the newsletter at any time. Simply unsubscribe via the "Unsubscribe" link, which you will find in the footer of every newsletter sent. In this case you will not receive any further messages from us. We may store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them, in particular to be able to prove consent previously given.

The processing of this data is limited solely to the purpose of a possible defence against claims. An individual deletion request is possible at any time, provided that you confirm at the same time that consent had previously existed.

E-mail advertising without subscribing to the newsletter and your right to object

If we receive your e-mail address in connection with the sale of a product or service and you have not objected to this, we reserve the right, on the basis of Section 7 (3) of the German Unfair Competition Act (UWG), to regularly send you offers by e-mail for similar products to those already purchased from our range. This serves to protect our legitimate interests in addressing our customers in an advertising manner, which outweigh our interests in the context of a balancing of interests.

You can object to this use of your e-mail address at any time by sending a message to the contact option described below or via a link provided for this purpose in the advertising e-mail, without incurring any costs other than the transmission costs according to the basic rates.

Woocommerce and German Market

On our website we use plug-ins, Woocommerce and German Market. These tools are local plug-ins. With these, it is possible to ensure the sale of items is technically smooth. We manage personal data of our customers with this online shop system.

This is done on the basis of Art. 6 para. 1 lit. b. DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Behind Woocommerce is the provider Automattic Inc, 60 29th Street #343, San Francisco, CA 94110-4929, USA. For more details, see https://woocommerce.com/ and https://woocommerce.com/terms-conditions/.

The provider assigns customer and invoice numbers. We create invoices as PDF files via Woocommerce and send them by e-mail. The personal data is stored for this purpose in our database and on our server.

Our legitimate interest within the meaning of Art. 6 para. 1 lit. f. DSGVO for the use of this tool is to provide you with a reliable online shop system.

We have concluded a contract with our provider for commissioned data processing (Art. 28 DSGVO) and fully implement the strict requirements of the German data protection authorities when using servers or hosting.

We would like to point out that the provider Automattic Inc. is certified under the Privacy Shield agreement, thereby providing an additional guarantee that European data protection law is complied with when processing data, insofar as data is processed in the USA (https://www.privacyshield.gov/participant?id=a2zt0000000CbqcAAC&status=Active).

Contact

As a visitor you have the following possibilities to get in contact with us:

• by e-mail to [email protected]
• by post via ICRUSH GmbH, Sülzburgstr. 11, 50937 Cologne, Germany
• via our contact form

If you contact us by e-mail, your e-mail address, the time of the e-mail and the data resulting from the message text and, if applicable, from the attachments will be processed.

If you contact us by telephone, your telephone number and, if necessary, your name, your e-mail address, the time of the call and details of your specific request will be processed.

If you contact us by post, your address data in particular, such as your surname, first name, street, place of residence and postcode, as well as the date and time of receipt of the post and the data resulting from your letter itself, may be processed.

When contacting us via the contact form on our website, the data you enter in the input fields will be processed by us. The mandatory data includes:

• Name
• E-mail address

You can provide the following information here on a voluntary basis:

• Content of your subject
• Content of your message

By sending your message via the contact form, the following data will also be stored:

• Your IP address
• Date and time of sending

The purpose of processing the above-mentioned data in the context of the respective contact is to process the contact request and to be able to contact you in order to respond to your request.

The other personal data processed during the sending of your contact request within the framework of the contact form (IP address, date and time of sending) serve to prevent misuse of our contact form.

As soon as the data is no longer required to achieve the purpose for which it was collected, it is deleted. When processing your data, we treat mandatory and voluntary information in the same way.

The legal basis for the processing of personal data in the context of your contact is Art. 6 para. 1 lit. b. DSGVO.

Our legitimate interest in this context follows from Art. 6 para. 1 lit. f. DSGVO. This lies in the fact that we can offer you the possibility to contact us at any time and we have the possibility to answer your enquiries. The personal data will only be processed as long as this is necessary for the processing of the specific contact request.

The recipient of the data is our server host, who works for us under a commissioned data agreement.

Web hosting via 1&1 

We use the services of 1&1 Internet SE, Elgendorfer Str. 57, 56410 Montabaur, for web hosting for our websites and have also concluded a contract for commissioned processing pursuant to Art. 28 DSGVO with 1&1 Internet SE. For further information, please refer to the privacy policy of 1&1 Internet SE at https://hosting.1und1.de/terms-gtc/terms-privacy/.

The legal basis for the use of this service is our legitimate interest pursuant to Art. 6 para. 1 p. 1 lit. f. DSGVO. This lies in the operation and maintenance of proper operational security of these websites.

Data subjects' rights

As a person concerned, you have the right:

• in accordance with Art. 15 DSGVO Informationabout your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details.
• in accordance with Art. 16 DSGVO without delay Correctionrequest the correction of incorrect or incomplete personal data stored by us.
• in accordance with Art. 17 DSGVO the Deletion your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.
• in accordance with Art. 18 DSGVO Restriction of processingdemand the erasure of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO.
• in accordance with Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to transfer itTransmission to another person in charge
• in accordance with Art. 7 Para. 3 DSGVO, to revoke your consent. revoke your consent at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future, and
• complain to a data protection supervisory authority in accordance with Art. 77 DSGVO. complain. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company.

If you would like to make use of your data subject rights, you are welcome to contact [email protected]. In these cases, we would like to point out that we must ensure that the respective request is actually about the data subject who is asserting the rights.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority.

We would like to inform you that automated decision-making does not take place on our website.

Right of objection / revocation of consent

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f. DSGVO, you have the right to object to the processing of your personal data in accordance with Art. 21 DSGVO, insofar as there are grounds for doing so that arise from your particular situation, or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.

You have the right to revoke your consent at any time with effect for the future without affecting the legality of the processing carried out on the basis of the consent until revocation.

If you wish to exercise your right of revocation or objection, simply send an e-mail with the relevant content to [email protected]

Data security

We use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser when visiting the website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction and against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Up-to-dateness and amendment of this privacy policy

This privacy policy is currently valid and has the status: 04.02.2020.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration.

The current data protection declaration can be accessed and printed out by you at any time on the website at https://icrush.de/datenschutz and can be printed out at any time.