American Express

Data protection website:

1) Information about the collection of personal data and contact details of the person responsible

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we will inform you about how your personal data is handled when you use our website. Personal data is all data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Friederike Klingholz, Kilim, Dachstr. 43, 81243 Munich, Germany, Tel.: 0152/09952557, Email: info@kilim-store.de. The person responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or. TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

2) Data collection when you visit our website

If you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you came to the page
Browser used
Operating system used
IP address used (if necessary: in anonymous form)

Processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

3) Hosting & Content Delivery Network

Hosted by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify") for the purpose of hosting and displaying the online shop on the basis of a processing on our behalf. All data collected on our website is processed on Shopify’s servers. As part of the aforementioned Shopify services, data may also be processed as part of further processing on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc .or Shopify (USA) Inc. In the case of the transmission of data to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by the European Commission's adequacy decision. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than those of Shopify mentioned above only takes place within the scope communicated below.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device.

Some of these cookies are automatically deleted after you close the browser (so-called “session cookies”), while some of these cookies remain on your device for a longer period of time and enable you to save page settings (so-called “persistent cookies”). In the latter case, you can find out the storage period in the overview of the cookie settings in your web browser.

If personal data is also processed through individual cookies we use, the processing takes place in accordance with Art. 6 Para. 1 lit. b GDPR either to implement the contract, in accordance with Art. 6 Para. 1 lit in accordance with Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.

You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general.

Please note that if cookies are not accepted, the functionality of our website may be restricted.

5) Contact us

When you contact us (e.g. by email), personal data is processed - exclusively for the purpose of processing and answering your request and only to the extent necessary for this purpose.

The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR.

If your contact is aimed at a contract, the additional legal basis for the processing is Article 6 (1) (b) GDPR. Your data will be deleted if the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no legal retention obligations to the contrary.

6) Data processing for order processing

6.1 Insofar as it is necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned bank in accordance with Article 6 Paragraph 1 lit. b GDPR.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data you provide when ordering (name, address, e-mail address) in order to inform you within the framework of our legal information obligations in accordance with Art. 6 Para 1 lit. c GDPR via a suitable communication channel (e.g. by post or e-mail) about upcoming updates in the period stipulated by law. Your contact details will be used strictly earmarked for notifications about updates owed by us and will only be processed by us for this purpose to the extent that this is necessary for the information in question.

In order to process your order, we also work together with the following service provider(s), who support us in whole or in part in the implementation of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

6.2 Disclosure of personal data to shipping service providers

- DHL
If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will provide your e-mail address in accordance with Article 6 (1) (a) GDPR before the goods are delivered for the purpose of coordination of a delivery date or delivery notification to DHL, provided that you have given your express consent to this during the ordering process.

Otherwise, we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Article 6 (1) (b) GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or the delivery notification is not possible.

The consent can be revoked at any time with future effect from the person responsible above or from the transport service provider DHL.

6.3 Use of payment service providers (payment services)

- Klarna
If you select a Klarna payment service, payment is processed via Klarna Bank AB (publ), https://www.klarna.com/de/ , Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”).

In order to enable the payment to be processed, your personal data (first and last name, street, house number, postal code, city, gender, email address, telephone number and IP address, if applicable also the date of birth and your bank details) as well as Data related to the order (e.g. invoice amount, item, delivery method) will be passed on to Klarna for the purpose of identity and creditworthiness checks, provided that you expressly do so in accordance with Art. 6 Para. 1 lit. a GDPR as part of the ordering process have consented. You can see here which credit agencies your data can be forwarded to:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report can contain probability values (so-called score values). To the extent that score values are included in the results of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values. Klarna uses the information received about the statistical probability of a payment default to make a balanced decision about the establishment, implementation or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the person responsible for data processing or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for contractual payment processing.

Your personal information will be used in accordance with the applicable data protection regulations and in accordance with the information in Klarna's data protection regulations for those affected based in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for data subjects based in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy .

-Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment in installments" via PayPal, we pass on your payment data to PayPal (Europe) Sarl et Cie, SCA, 22- as part of the payment processing. 24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), continue. The transfer takes place in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent that this is necessary for payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment in installments" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The credit report can contain probability values (so-called score values). To the extent that score values are included in the results of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.

Further data protection information, including information on the credit agencies used, can be found in PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

- Paypal checkout
This website uses PayPal Checkout, an online payment system from PayPal that consists of PayPal's own payment methods and local payment methods from third-party providers.

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "Pay later" via PayPal, we pass on your payment details to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L as part of the payment processing -2449 Luxembourg (hereinafter "PayPal"), continue. The transfer takes place in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent that this is necessary for payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “Pay later” via PayPal.

For this purpose, your payment data may be passed on to credit agencies in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The credit report can contain probability values (so-called score values). To the extent that score values are included in the results of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

If you select the PayPal payment method “purchase on account”, your payment data will first be sent to PayPal to prepare the payment, after which PayPal will forward it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin (“Ratepay”) to carry out the payment. The legal basis is Article 6 Paragraph 1 Letter b GDPR. In this case, RatePay carries out an identity and creditworthiness check on its own behalf to determine solvency in accordance with the principle mentioned above and passes your payment data to credit agencies based on the legitimate interest in determining solvency in accordance with Article 6 Paragraph 1 Letter f of the GDPR further. A list of credit agencies that Ratepay can rely on can be found here: https://www.ratepay.com/legal-payment-creditagencies/

If you use the payment method of a local third-party provider, your payment data will first be passed on to PayPal to prepare the payment in accordance with Article 6 (1) (b) GDPR. Depending on your selection of an available local payment method, PayPal will then transmit your payment data to the relevant provider in order to carry out the payment in accordance with Art. 6 Para. 1 lit. b GDPR:
- Immediately (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z oo, ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA SAS, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
For further data protection information, please see PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

6.4 Credit check

If we make advance payments (e.g. delivery on account), we reserve the right to carry out a credit check based on mathematical and statistical procedures in order to protect our legitimate interest in determining our customers' solvency. We transmit the personal data necessary for a credit check to the following service provider in accordance with Article 6 Paragraph 1 Letter f of the GDPR:

Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden

The credit report can contain probability values (so-called score values). To the extent that score values are included in the results of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values. We use the result of the credit check in relation to the statistical probability of payment default for the purpose of deciding on the establishment, implementation or termination of a contractual relationship.
You can object to this processing of your data at any time by sending a message to the person responsible for data processing or to the aforementioned credit agency. However, we may still be entitled to process your personal data if this is necessary to process payments in accordance with the contract.

7) Rights of the person concerned

7.1 The applicable data protection law grants you the following data subject rights (rights of information and rights of intervention) vis-à-vis the person responsible for the processing of your personal data, whereby reference is made to the legal basis listed for the respective exercise requirements:

Right to information in accordance with Art. 15 GDPR;
Right to rectification in accordance with Art. 16 GDPR;
Right to deletion in accordance with Art. 17 GDPR;
Right to restriction of processing in accordance with Art. 18 GDPR;
Right to information in accordance with Art. 19 GDPR;
Right to data portability in accordance with Art. 20 GDPR;
Right to revoke consent given in accordance with Art. 7 Para. 3 GDPR;
Right to complain in accordance with Art. 77 GDPR.

7.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA INVOLVED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN PROVE COMPREHENSIVE REASONS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING IS FOR THE CERTIFICATION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT ADVERTISING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. YOU MAY OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA INVOLVED FOR DIRECT MARKETING PURPOSES.

8) Duration of storage of personal data

The duration of storage of personal data is determined based on the respective legal basis, the purpose of processing and - if relevant - additionally based on the respective legal retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of an express consent in accordance with Article 6 Paragraph 1 lit. a GDPR, this data is stored until the person concerned revokes his consent.

If there are statutory retention periods for data that are processed within the framework of legal or transaction-like obligations on the basis of Art. 6 Para. 1 lit and/or we have no legitimate interest in further storage.

When personal data is processed on the basis of Article 6 (1) (f) GDPR, this data is stored until the data subject exercises his or her right to object under Article 21 (1) GDPR, unless we can provide compelling reasons worthy of protection for processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct advertising on the basis of Article 6 Paragraph 1 lit. f GDPR, this data is stored until the data subject exercises his right of objection under Article 21 Paragraph 2 GDPR.

Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

Data protection Instagram:

1) Information about the collection of personal data and contact details of the person responsible

1.1 In the following we inform you about the handling of your personal data. Personal data is all data with which you can be personally identified.

Please carefully consider what personal information you share with us via Instagram. Instagram is part of the Meta group of companies and shares with Meta as well as with other meta companies ( https://www.facebook.com /help /111814505650678 ?ref=dp ) the infrastructure, systems and technology. We expressly point out that Meta stores the data of users of its services (e.g. personal information, IP address, etc.) and may also use it for business purposes. Further information about Meta's data processing on Instagram can be found in Instagram's privacy policy at https://help.instagram.com /help /instagram /519522125107875 /

We have no influence on data collection and further processing by Meta. Furthermore, it is not clear to us to what extent, at what location and for how long the data is stored, to what extent Meta complies with existing deletion obligations, what evaluations and links are made with the data and to whom the data is passed on. If you would like to avoid Meta processing any personal data you have provided to us, please contact us by other means. Our complete contact details can be found in our imprint on Instagram.

1.2 The person responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is Friederike Klingholz, Kilim, Dachstr. 43, 81243 Munich, Germany, Tel.: 015209952557, Email: info@kilim-store.de, insofar as we exclusively process the data you send to us via Instagram ourselves. To the extent that the data you send to us via Instagram is also or exclusively processed by Meta, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is also responsible for data processing within the meaning of data protection regulations. General Regulation (GDPR).

The person responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

2) Data protection officer

You can contact Meta's data protection officer using the online contact form provided at https://www.facebook.com /help /contact /540977946302970 to contact.

3) Data processing when contacting us

We collect personal data ourselves if you z. B. contact us via contact form or messenger. You can see which data we collect when you contact us via the contact form from the relevant contact form. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Article 6 (1) (b) GDPR. Your data will be deleted after your request has been processed, provided there are no legal storage requirements to the contrary. We assume final processing if the circumstances indicate that the matter in question has been conclusively clarified.

4) Rights of the person concerned

4.1 The applicable data protection law grants you comprehensive data subject rights (rights of information and rights of intervention) vis-à-vis the person responsible regarding the processing of your personal data, about which we will inform you below:

Right to information in accordance with Art. 15 GDPR;
Right to rectification in accordance with Art. 16 GDPR;
Right to deletion in accordance with Art. 17 GDPR;
Right to restriction of processing in accordance with Art. 18 GDPR;
Right to information in accordance with Art. 19 GDPR;
Right to data portability in accordance with Art. 20 GDPR;
Right to revoke consent given in accordance with Art. 7 Para. 3 GDPR;
Right to complain in accordance with Art. 77 GDPR.

4.2 RIGHT TO OBJECT

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA INVOLVED FOR DIRECT MARKETING PURPOSES.

5) Duration of storage of personal data

When processing personal data on the basis of an express consent in accordance with Article 6 Paragraph 1 lit. a GDPR, this data is stored until the person concerned revokes his consent.

6) Data protection information competition

Responsible for data processing in connection with the competition is:

kilim
Friederike Klingholz
0152/09952557
info@kiim-store.de

1.) Processing of your personal data as part of the competition

We process your personal data for the proper implementation and processing of the competition and in particular for sending the prize.

To carry out the competition, the profile name and, if available, first and last name of the respective participant are collected and stored.
In order to send the prize, we also collect the last name and first name as well as the address from the winner(s) and pass this data on to a shipping company commissioned by us. Your data will not be passed on to third parties beyond this.

The legal basis for this processing of your personal data is Article 6 Paragraph 1 Letter b GDPR (implementation of pre-contractual measures and fulfillment of a contract).

If we publish the first and last name of the winner(s) separately on our profile or our fan page or announce them externally, for example in our online shop, this will only take place if the winner(s) have given their express consent beforehand in accordance with Article 6 (1) (a) GDPR.

2.) Storage period

After the competition has ended, your personal data processed as part of the competition will be deleted no later than three months after the end of the competition, unless effective consent to further processing has been given and/or we have no legitimate interest in further storage.

3.) Your rights as a data subject

The applicable data protection law grants you the data subject rights listed below if the respective legal requirements are met:

Right to information according to Art. 15 GDPR
Right to rectification according to Art. 16 GDPR
Right to erasure according to Art. 17 GDPR
Right to restriction of processing in accordance with Art. 18 GDPR
Right to information according to Art. 19 GDPR
Right to data portability according to Art. 20 GDPR
Right to revoke granted consent in accordance with Art. 7 Para. 3 GDPR
Right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 GDPR