Data protection
Privacy Policy
We appreciate your trust and apply the utmost care and highest security standards to protect your personal data from unauthorized access.
The processing of personal data on our website www.giacomelli-trachten.com (hereinafter referred to as "website") is carried out in accordance with the provisions of the General Data Protection Regulation (GDPR), the Telecommunications-Digital Services Data Protection Act (TDDDG), and the Federal Data Protection Act (BDSG), as well as on the basis of this privacy policy.
1. Name and address of the data controller
The data controller within the meaning of the General Data Protection Regulation is:
Giacomelli Trachten, Inh. Nicoletta Giacomelli
Nördliche Hauptstraße 20
83700 Rottach-Egern am Tegernsee
Tel.: +49 160 89 80 765
Email: info@giacomelli-trachten.com
2. Contact person for data protection inquiries
For questions regarding the collection, processing, or use of your personal data, for information, correction, blocking, or deletion of data, please contact: info@giacomelli-trachten.com
3. Data processing when visiting our website
Each time the website is accessed by a data subject or an automated system, a series of general data and information is collected. This general data and information is stored in the server's log files. The following may be collected: (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches the website (so-called referrer), (4) the sub-websites accessed on our website via an accessing system, (5) the date and time of access to the website, (6) an internet protocol address (IP address), (7) the internet service provider of the accessing system, and (8) other similar data and information that serves to avert danger in the event of attacks on our information technology systems.
When using this general data and information, Giacomelli Trachten does not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) optimize the content of our website and the advertising for it, (3) ensure the permanent functionality of our information technology systems and the technology of our website, and (4) provide law enforcement agencies with the information necessary for prosecution in the event of a cyberattack. This pseudonymously collected data and information is therefore analyzed statistically by Giacomelli Trachten and further evaluated with the aim of increasing data protection and data security in our company, ultimately ensuring an optimal level of protection for the personal data we process. The pseudonymous data of the server log files are stored separately from all personal data provided by a data subject.
The access data collected during the use of our website is only retained for the period necessary to achieve the aforementioned purposes. Your IP address is stored on our web server for a maximum of 7 days for IT security purposes.
Insofar as you visit our website to inform yourself about or use our product and service offerings, the legal basis for the temporary storage and processing of access data is Art. 6 (1) sentence 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or for the implementation of pre-contractual measures.
Furthermore, Art. 6 (1) sentence 1 lit. f GDPR serves as the legal basis for the temporary storage of technical access data. Our legitimate interest here is to be able to provide you with a technically functioning and user-friendly website and to ensure the security of our systems.
4. Our Security Standards
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Encrypted payment transactions on this website
If, after the conclusion of a paid contract, there is an obligation to transmit your payment data (e.g., account number for direct debit authorization) to us, this data is required for payment processing.
Payment transactions using common payment methods (Visa/MasterCard, direct debit) are exclusively carried out via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
With encrypted communication, your payment data that you transmit to us cannot be read by third parties.
5. Contact options via the website
Our website contains, due to legal regulations, information that enables quick electronic contact with our company as well as direct communication with us, which also includes a general address for so-called electronic mail (email address). If a data subject contacts the data controller by email or via a contact form, the personal data transmitted by the data subject (e.g., name, email address, message) will be automatically stored. Such personal data transmitted voluntarily by a data subject to the data controller will be stored for the purpose of processing or contacting the data subject. This personal data will not be passed on to third parties, except to technical service providers who enable communication (e.g., email providers).
We base the processing on our legitimate interest in being able to contact and communicate with you (Art. 6 (1) sentence 1 lit. f GDPR). Insofar as you are interested in our offers, we base the processing on the implementation of pre-contractual measures (Art. 6 (1) sentence 1 lit. b GDPR).
We process the data you provide during contact and communication until the purpose for processing ceases to apply (e.g., after your inquiry has been processed) and no compelling legal provisions (e.g., retention obligations or rights) prevent deletion.
2. Cookies
Our website uses so-called "cookies". These are text files that are stored on your device via your browser, either temporarily as session cookies (deleted after visit) or permanently as persistent cookies (until you or your browser deletes them). Cookies can originate from us (first-party cookies) or third-party companies (third-party cookies), e.g., for integrating external services such as payments or analytics.
Cookies serve various purposes. Technically necessary cookies enable essential functions such as shopping carts and are set without consent in accordance with Section 25 (2) TDDDG and Art. 6 (1) lit. f GDPR (legitimate interest in a functional website). Other cookies (e.g., for analytics or advertising) are only used with your consent (Section 25 (1) TDDDG, Art. 6 (1) lit. a GDPR) via our cookie banner. Session cookies are deleted after your visit, persistent cookies remain stored for up to 12 months.
You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or generally, and to activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
You can find out which cookies and services are used on this website in this privacy policy.
a. Hosting and Content Delivery Networks (CDN)
External Hosting
This website is hosted by the following external service provider: SEO-Küche Internet Marketing GmbH & Co. KG, Fraunhoferstraße 6, 83059 Kolbermoor (hereinafter referred to as "Hoster"). The personal data collected on this website is stored on the Hoster's servers. This may include, in particular, IP addresses, contact inquiries, meta and communication data, contract data, contact data, names, website accesses, and other data generated via a website.
The Hoster is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 (1) lit. b GDPR) and in the interest of providing our online offering securely, quickly, and efficiently through a professional provider (Art. 6 (1) lit. f GDPR).
Our Hoster will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data. To ensure data protection-compliant processing, we have concluded a data processing agreement with our Hoster. The data will be stored until the purpose ceases to apply or legal retention periods (up to 10 years) are met.
b. GDPR Legal Cookies
We use "GDPR Legal Cookie" from iubenda s.r.l, Via San Raffaele, 1 – 20121 Milan (Italy), to manage cookie consents and support Google Consent Mode. The tool sets cookies to store your preferences and collect technical data such as truncated IP address or timestamp.
The legal basis for the use of GDPR Legal Cookie is our legitimate interest in privacy-compliant website management (Art. 6 (1) lit. f GDPR). Cookies are stored for up to 12 months. To ensure data protection-compliant processing, we have concluded a data processing agreement with GDPR Legal Cookies. Further information on data protection can be found at https://gdpr-legal-cookie.com/pages/datenschutzerklarung.
c. Shopify Analytics
We use Shopify Analytics from the provider Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
Shopify Analytics is a web analytics tool provided by Shopify that we use to analyze the usage of our online store. Collected data includes pages visited, time spent, demographic origin (country/region), sales figures, IP addresses, and landing pages from visitors of external websites. The goal is to improve website performance and user-friendliness.
Shopify Analytics uses cookies, which are set with your consent via our cookie banner (Section 25 (1) TDDDG, Art. 6 (1) lit. a GDPR). Without consent, we use anonymized data based on our legitimate interest (Art. 6 (1) lit. f GDPR). Cookies are stored for up to 30 months, and analytics data for up to 14 months, unless there are legal obligations. You can deactivate cookies via your browser, which does not, however, restrict the analytics function.
To ensure data protection-compliant processing, we have concluded a data processing agreement with Shopify.
Further information on Shopify's data protection can be found at the following internet address: https://www.shopify.com/legal/privacy.
d. Post & DHL Shipping
We use "Post & DHL Shipping" from DHL Paket GmbH, Sträßchensweg 10; 53113 Bonn, to create shipping labels for your orders on our website and to provide tracking services. Your shipping data, such as name, address, and email address, are processed to handle the shipping process and inform you about the delivery status.
Processing is carried out for the fulfillment of your purchase contract (Art. 6 (1) lit. b GDPR). To ensure data protection-compliant processing, we have concluded a data processing agreement with DHL Paket GmbH. Your data will be stored until the delivery is completed and legal retention periods (e.g., up to 10 years) are met. Further information on DHL Paket GmbH's data protection can be found at https://www.dhl.de/de/toolbar/footer/datenschutz.html.
3. eCommerce and Payment Providers
Data transfer upon conclusion of contract for online shops, merchants, and goods shipping
We transmit personal data such as name, address, and payment details to third parties (e.g., logistics companies, payment service providers) only if this is necessary for contract fulfillment. Any further transmission only takes place with your consent. Disclosure for advertising purposes without consent is excluded.
The legal basis is Art. 6 (1) lit. b GDPR. Data will be stored until the end of the contract and legal retention periods (up to 10 years).
a. PayPal
On this website, we offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal").
If you select payment via PayPal, the payment data you enter and which is required for payment processing will be transmitted to PayPal.
The transmission of your data to PayPal is based on Art. 6 (1) lit. b GDPR. Data will be stored until the end of the contract and statutory retention periods (up to 10 years). You have the option to withdraw your consent to data processing at any time.
Further information on data protection can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
b. Shop Pay
We offer payment via Shop Pay. Shop Pay is a service offered by Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. If you select this payment method, your payment data required for carrying out and processing the payment will be transmitted to Shopify. For this purpose, contact data as well as shipping and billing information will be processed. The personal data will be used for payment processing, account management, and refund management.
The legal basis for the processing of your personal data in connection with the use of Shop Pay results from Art. 6 (1) lit. b GDPR. Data will be stored until the end of the contract and statutory retention periods (up to 10 years). To ensure data protection-compliant processing, we have concluded a data processing agreement with Shopify. More detailed information on Shop Pay's data protection can be found at the following internet address: https://www.shopify.com/legal/privacy.
c. Google Pay
We offer payment via Google Pay. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
If you select payment via Google Pay, payment data such as credit card number, billing amount and other details will be transmitted to Google. Google processes this data to carry out the payment transaction.
The processing of your data is based on Art. 6 (1) lit. b GDPR. Data will be stored until the end of the contract and statutory retention periods (up to 10 years).
Further information on Google Pay's data protection can be found in Google's privacy policy: https://policies.google.com/privacy.
d. Klarna (Invoice purchase)
We offer payment via Klarna. The provider of this payment service is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.
If Klarna is selected as the payment method, personal data such as name, address, billing amount, payment details, and, if applicable, creditworthiness information will be transmitted to Klarna. Klarna may conduct a credit assessment to ensure your ability to pay.
The processing of your data is based on Art. 6 (1) lit. b GDPR and Art. 6 (1) lit. f GDPR (for creditworthiness security). Data will be stored until the end of the contract and statutory retention periods (up to 10 years).
Further information on Klarna's data protection can be found at: https://www.klarna.com/de/datenschutz/.
a. Credit Cards (Mastercard, Visa, American Express, Union Pay, Maestro)
We offer you the option to pay with the following credit cards: Mastercard, Visa, American Express, Union Pay, and Maestro. Payment processing is carried out via the respective payment systems of the card issuers and payment service providers.
As part of payment processing, the personal data required for the transaction (e.g., name, card number, expiry date, and security code) are transmitted to the respective payment service providers. This processing is necessary to fulfill the purchase agreement between you and us.
The legal basis for this data processing arises from Art. 6 (1) lit. b GDPR. If you consent to the storage of your card data for future transactions, this is done in accordance with Art. 6 (1) lit. a GDPR, which you can withdraw at any time.
Some payment service providers process data outside the EU. This transfer is carried out in compliance with the corresponding data protection safeguards according to Art. 46 GDPR. For further information on the privacy policies of the respective card issuers and providers, please visit their websites:
· Mastercard and Maestro: https://www.mastercard.de/de-de/datenschutz.html
· Visa: https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteilung.html
· American Express: https://www.americanexpress.com/de-de/firma/legal/datenschutz-center/?inav=de_legalfooter_privacycenter
· Union Pay: https://www.unionpayintl.com/en/privacyNotice/[MJA1] [KG2] [KG3]
1. Use of Facebook and Instagram Fanpages as well as Facebook Pixel
We operate pages on Facebook and Instagram (hereinafter "Fanpages") and use the Facebook Pixel cookie on our website. These services are offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter referred to as "Meta").
When you visit our Fanpages, Meta collects personal data such as IP address, device information, profile information (if logged in), and interactions (e.g., likes, comments, page views). The purpose is to provide the platform and create anonymized Page Insights, which provide us with statistics on page activities (e.g., reach, clicks). We use these insights to analyze and improve the Fanpages based on our legitimate interest (Art. 6 (1) lit. f GDPR). The Insights data is stored for up to 2 years. We cannot assign it to individual profiles.
The purpose and scope of data collection and the further processing and use of data by Instagram, as well as your related rights and settings options for protecting your privacy, can be found at https://help.instagram.com/155833707900388.
Meta offers the possibility to object to certain data processing; related information and opt-out options can be found at https://www.facebook.com/settings?tab=ads.
Our website uses the Facebook Pixel, an analytics tool from Meta. This sets cookies to record user interactions (e.g., visited pages, clicks, conversions) and optimize advertising. Collected data includes IP address, browser information, timestamps, and activities. The purpose is to evaluate website usage and deliver targeted advertising (e.g., retargeting). Processing only occurs with your consent via our cookie banner (§ 25 (1) TDDDG, Art. 6 (1) lit. a GDPR, § 25 (1) TDDDG), revocable in the cookie settings. Cookies are stored for up to 90 days.
We are jointly responsible with Meta for the processing of Insights data on the Fanpages (Art. 26 GDPR). The agreement for this can be found at: https://www.facebook.com/legal/terms/page_controller_addendum . Meta is primarily responsible for the platform infrastructure and Insights, which we cannot influence. Meta independently decides on the fulfillment of its obligations under this agreement.
Your data may be transferred to the USA or other third countries, secured by standard contractual clauses (Art. 46 GDPR). You have the right to information, rectification, erasure, restriction, and objection, which you can assert with us or Meta. Objection and setting options (e.g., advertising preferences) are offered by Meta at: https://www.facebook.com/settings?tab=ads. Further information on data use by Facebook and your rights can be found in Facebook's privacy policy at http://de-de.facebook.com/policy.php
9. Privacy information for customers
Personal data is only collected if you voluntarily provide it to us as part of your order. If you use our products or services via our website, by phone, email, or in person, we process your data such as name, email address, telephone number, delivery and billing address, ordered items, payment method, bank details, as well as inquiries or correspondence, to process your orders, deliver goods, process payments, issue refunds, handle your inquiries or complaints, and fulfill legal obligations such as invoicing or accounting.
We do this to fulfill your purchase agreement or pre-contractual measures (Art. 6 (1) lit. b GDPR), to fulfill legal obligations (Art. 6 (1) lit. c GDPR), and based on our legitimate interest in customer service or fraud prevention, provided your rights do not override (Art. 6 (1) lit. f GDPR). If you give us your consent, for example, to store your payment data for future purchases, we use this consent (Art. 6 (1) lit. a GDPR), which you can withdraw at any time via the contact details in Section 1.
Upon complete fulfillment of the contract and full payment of the purchase price, your data will be blocked for further use and deleted after the expiry of tax and commercial retention periods, unless you have expressly consented to the further use of your data.
We only pass on your data to third parties such as logistics companies or payment service providers mentioned in Section 7, insofar as this is necessary for processing. Information on your data subject rights can be found in Section 11 – for questions, please contact us using the contact details in Section 1.
10. Automated decision-making, profiling
Automated decision-making does not take place.
11. Your Data Subject Rights
Subject to the respective legal requirements, you have a right to information, rectification or erasure, restriction of processing, objection to processing, and data portability regarding your personal data. In particular, you have the right to object at any time to the processing of your data for advertising purposes, without incurring any costs other than the transmission costs at the basic rates of your provider (i.e., for example, the cost of an email = usually none). If the data processing is based on consent, you have the right to withdraw your consent at any time, without affecting the legality of the processing carried out based on the consent until withdrawal or processing based on another legal basis.
You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data, for example, with the supervisory authority responsible for us: Bayerisches Landesamt für Datenschutzaufsicht, Promenade 27, D-91522 Ansbach, Phone +49(0)981 53 1300, Fax +49(0)981 53 98 1300, E-Mail poststelle@lda.bayern.de.
12. Your Right to Object
Insofar as the processing of your personal data is based on Art. 6 (1) lit. e or f GDPR, you have the right to object to the processing in accordance with Art. 21 GDPR. If your objection is based on grounds relating to your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims. If your objection is directed against direct marketing, including profiling related to such direct marketing, we will no longer process your personal data for these purposes.
13. Routine deletion and blocking of personal data
The controller processes and stores personal data of the data subject only for the period necessary to achieve the purpose of storage or as far as this is provided for by law.
If the purpose of storage ceases to apply or a legally prescribed storage period expires and there are no opposing retention obligations or rights, the personal data will be routinely blocked or deleted in accordance with legal provisions.
Temporary further processing may be necessary, in particular, for the following purposes:
· Compliance with statutory retention obligations, which arise, for example, from the German Commercial Code (HGB, sections 238, 257 para. (4)) and the German Tax Code (AO, section 147 para. (3), (4)). The retention and documentation periods specified therein can be up to ten years.
· Preservation of evidence in consideration of limitation periods. According to sections 194 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being three years.
14. Amendment and Update of the Privacy Policy
This Privacy Policy is currently valid and was last updated in February 2025.
Due to the further development of our website and offerings or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy.