Data Protection

Data protection declaration

1) Information about the collection of personal data and contact details
of the responsible person

1.1 We are pleased that you are visiting our website and thank you for your
interest. In the following, we inform you about the handling of your
personal data when using our website. Personal data in this context are all data with which you can be personally identified.

1.2 The responsible party for data processing on this website within the meaning of the Data Protection Regulation (DSGVO) is Fallons GmbH, Karl-Gustav-Weg 17b, 22453 Hamburg, Germany, Tel.: +4915237277702, e-mail: info@fallons.de. The person responsible for the controller of personal data is the natural or legal person who alone or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 This website uses for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or requests to the
inquiries to the responsible person) an SSL or TLS encryption. You can recognize an connection by the string "https://" and the lock symbol in your browser line.

2) Data collection when visiting our website
During the mere informational use of our website, i.e. when you do not
register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called "server log files"). On our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. A passing on or other use of the data does not take place. We reserve the right to check the server log files retrospectively, should we have concrete indications of unlawful use.

3) Hosting & Content-Delivery-Network
Hosting by Shopify
We use the store system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online store on the basis of a processing on our behalf. All data collected on our website is processed on the Shopify's servers. Within the scope of the aforementioned services provided by Shopify data may also be transferred as part of further processing on behalf to Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc, Shopify Payments (USA) Inc. or Shopify (USA) Inc. In the event of the transfer of data to Shopify Inc. in Canada is required by adequacy decision of the European Commission ensures the adequate level of data protection is guaranteed. Further information on the data protection of Shopify can be found at the following website:
https://www.shopify.de/legal/datenschutz
Further processing on servers other than the aforementioned of Shopify only takes place within the framework communicated below.

4) Cookies
In order to make the visit to our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. In some cases, these cookies are automatically deleted after you close your browser (so-called "session cookies"). Sometimes these cookies remain on your end device for a longer period of time and allow you to save page settings (so-called "persistent cookies"). In the latter case, you can change the storage period of the overview of the cookie settings of your web browser.
Insofar as individual cookies used by us also process personal data processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b DSGVO either for the performance of the contract, pursuant to Art. 6 para. 1 lit. a DSGVO in the event of a given consent or according to Art. 6 para. 1 lit. f DSGVO for the protection of our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can set your browser in such a way that you are informed about the setting of cookies and decide individually whether to accept them, or to refuse the use of cookies for certain cases or to generally exclude the acceptance of cookies.
Please note that the functionality of our website may be limited if you do not accept cookies.

5) Contacting us
In the context of contacting us (e.g. via contact form or e-mail), we will
- exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose - personal data is processed. The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f DSGVO. If your contact is aimed at a contract, then the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted if it is clear from the circumstances indicate that the matter in question has been conclusively clarified, and provided that there are no legal retention obligations to the contrary.

6) Data processing when opening a customer account Pursuant to Art. 6 Para. 1 lit. b DSGVO, personal data will continue to be collected and processed to the extent necessary, if you inform us of this when opening a customer account.
Which data is required for opening an account can be found in the input mask of the corresponding form on our website.
A deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. After deletion of the account, your data will be deleted, provided that all contracts concluded via it have been fully processed, no legal retention periods are in conflict and there is no legitimate interest on our part to continue storing the data.

7) Data processing for order processing
7.1 As far as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us pursuant to Art. 6 para. 1 lit. b DSGVO to the appointed transport company and the appointed credit institution. If, on the basis of a corresponding contract, we provide you with updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the data contact data (name, address, e-mail address) provided by you when placing the order, in order to inform you within the scope of our legal information obligations pursuant to Art. 6 para. 1 lit. c DSGVO by appropriate means of communication (e.g. by post or e-mail) about personally upcoming updates within the legally prescribed period.
Your contact data will be used strictly for the purpose of communications
updates owed by us and will be processed for this purpose by us only.
For the processing of your order, we also work with the following service provider(s), which support us in whole or in part in the execution of the concluded contracts. Certain personal data is transferred to these service providers through the following services:

7.2 Use of payment service providers (payment services)
- Klarna
If you select a Klarna payment service, the payment will be processed through
the Klarna Bank AB (publ), https://www.klarna.com/de/, Sveavägen 46, 111 34
Stockholm, Sweden (hereinafter "Klarna"). To enable the processing of the payment, your personal data (first and last name, street, house number, postal code, city, gender, e-mail address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, article
(e.g. invoice amount, article, delivery type) for the purpose of checking your identity and creditworthiness.
Klarna for the purpose of identity and credit checks, provided that you have expressly consented to this in accordance with Art. 6 Para. 1 lit. a DSGVO during the ordering process. Through which credit agencies your data can be forwarded, you can see here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called score values).
If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure.
The calculation of score values includes, but is not limited to, address data.
Klarna uses the information obtained about the statistical probability of non-payment for a weighted
decision on the establishment, execution or termination of the contractual relationship.
You may withdraw your consent at any time by sending a message to the Data Controller or to Klarna. However, Klarna may still be entitled to process your personal data, provided that this is necessary for the processing of payments in accordance with the contract.
Your personal data will be processed in accordance with the applicable data protection regulations and in accordance with the information in Klarna's Privacy Policy for Data Subjects Located in Germany
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for data subjects based in Austria
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
handled.

- Paypal
For payment via PayPal, credit card via PayPal, direct debit via PayPal or - if offered- "purchase on account" or "installment payment" via PayPal we give your payment data within the framework of payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal").
The transfer takes place in accordance with Art. 6 para. 1 lit. b DSGVO and only insofar as this is necessary for the processing of the payment.
PayPal reserves the right for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal the use of a credit check. For this purpose, your payment data, if necessary in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of the legitimate interest of PayPal's legitimate interest in determining your solvency to credit agencies.
The result of the credit check with regard to the statistical probability of non-payment is used by PayPal for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). As far as score values are included in the result of the creditworthiness report, they have their basis in a scientifically recognized mathematical-statistical methods. The calculation score values include, but are not limited to, address data.
For further information on data protection law, including information on the credit agencies used, please refer to PayPal's privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You may object to this processing of your data at any time by sending a message to PayPal
contradict. However, PayPal may continue to be entitled to process your personal data, provided that this is necessary for the contractual payment processing.

- Paypal Checkout
This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal's own payment methods and local third-party payment methods.
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if
offered - "Pay later" via PayPal, we give your payment data in the context of the
PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal,
L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. 6 Paragraph 1 lit. b DSGVO and only insofar as this is necessary for payment processing.
PayPal reserves the right for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "Pay later" via PayPal - the execution of a credit check. For this purpose, your payment data may be processed in accordance with Art. 6. (1) lit. f DSGVO on the basis of PayPal's legitimate interest in determining your solvency.
The result of the credit assessment with regard to the statistical probability of non-payment.
PayPal uses for the purpose of deciding on the provision of the respective payment method.
The credit report may contain probability values (so-called Score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical and statistical procedure. The score values are calculated using, among other things but not exclusively, address data is included in the calculation of the score values.
You can object to this processing of your data at any time by sending a message to PayPal.
However, PayPal may still be entitled to process your personal data, if this is
processing your personal data, provided that this is necessary for the contractual payment processing.
If you select the PayPal payment method "purchase on account", your payment data will first be payment, your payment data will first be transmitted to PayPal, whereupon PayPal will transfer them payment to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin, Germany ("Ratepay").
("Ratepay") for the execution of the payment. The legal basis in each case is Art. 6 para. 1 lit. b DSGVO. In this case, RatePay conducts an identity and credit check on its own behalf in order to determine solvency in accordance with the principle already mentioned above and discloses your payment data on the basis of the legitimate interest in the solvency pursuant to Art. 6 (1) lit. f DSGVO to credit agencies. A list of credit agencies that Ratepay may use can be found here:
https://www.ratepay.com/legal-payment-creditagencies/
If you use the payment method of a local third-party provider, your payment data will be used for the preparation of the payment is first passed on to PayPal in accordance with Art. 6 Para. 1 lit. b DSGVO.
Depending on your selection of an available local payment method PayPal then transmits your payment data for the execution of the payment pursuant to Art. 6 para. 1 lit. b DSGVO to the corresponding provider:
- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany).
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw,
Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2.
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further information regarding data protection, please refer to the
Privacy Policy of PayPal:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

- SOFORT
If you choose the payment method "SOFORT", the payment will be processed by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter referred to as "SOFORT"), to whom we transfer the information you provided during the ordering process with the information about your order in accordance with Art. 6 Para. 1 lit. b DSGVO. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider SOFORT and only insofar as it is necessary for this purpose. Under the following you can find more information about the privacy policy of SOFORT: .
of SOFORT: https://www.klarna.com/sofort/datenschutz.

8) Rights of the data subject
8.1 The applicable data protection law grants you vis-à-vis the controller the following rights with regard to the processing of your personal data (rights of information and intervention), whereby reference is made to the legal basis stated for the respective prerequisites for exercising these rights, please refer to the stated legal basis:
- Right to information pursuant to Art. 15 DSGVO;
- Right to rectification pursuant to Art. 16 DSGVO;
- Right to erasure pursuant to Art. 17 DSGVO;
- Right to restriction of processing pursuant to Art. 18 DSGVO;
- Right to information pursuant to Art. 19 DSGVO;
- Right to data portability pursuant to Art. 20 DSGVO;
- Right to withdraw consent given pursuant to Art. 7(3) DSGVO;
- Right to lodge a complaint pursuant to Art. 77 DSGVO.

8.2 RIGHT OF OBJECTION
IF, IN THE CONTEXT OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR PERSONAL
DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT
TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS
YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL TERMINATE THE
PROCESSING OF THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO
IF WE CAN DEMONSTRATE COMPELLING REASONS FOR THE PROCESSING THAT ARE WORTHY OF
PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR
FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ASSERTION, EXERCISE OR
ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSES OF
DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR
PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH
ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS
DESCRIBED ABOVE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL TERMINATE THE
PROCESSING OF THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

9) Duration of storage of personal data
The duration of the storage of personal data is measured on the basis of the
respective legal basis, the purpose of the processing and - if relevant - also the
the respective legal retention period (e.g. commercial and tax retention periods).
When processing personal data on the basis of an explicit
consent pursuant to Art. 6 para. 1 lit. a DSGVO, this data is stored for as long until the data subject revokes his or her consent.
If there are legal retention periods for data that is collected in the context of
legal business or similar obligations on the basis of Art. 6 Para. of Art. 6 Para. 1 lit. b DSGVO, this data will be routinely deleted after the expiry of the retention periods, provided they are no longer required for the contract performance or contract initiation and/or there is no legitimate interest on our part in the legitimate interest in the continued storage.
When processing personal data on the basis of Art. 6 para. 1 lit. f DSGVO, this data will be stored until the data subject exercises his or her right to object pursuant to Art. 21 (1) DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override the interests,
rights and freedoms of the data subject, or the processing serves the purpose of
the assertion, exercise or defense of legal claims.
When processing personal data for the purpose of direct advertising on the
based on Art. 6 Para. 1 lit. f DSGVO, this data will be stored until the data subject exercises his or her right to object pursuant to Art. 21 (2) DSGVO.
Unless otherwise stated in the other information in this declaration about specific
processing situations, stored personal data will be deleted when it is no longer needed or when they are no longer necessary for the purposes for which they were collected or otherwise processed.