Our Privacy Statement at a glance
We comply with the privacy legislation when processing personal data. This means that we:

• Record our purposes before we process your personal data, as set out in this Privacy Statement.
• Store as little personal data as possible and only the data necessary for our purposes.
• Ask for explicit consent for the processing of your personal data, should consent be required.
• Take the necessary security measures to protect your personal data. We also impose these obligations on parties who process personal data on our behalf.
• Respect your rights, such as the right of access, rectification or erasure of your personal data processed by us.

For what purposes do we process your personal data?
When you use our platform, we obtain various personal data from you. We specify for each purpose what data we obtain from you, for what purpose we process these data and for how long they are stored. If you have any questions or would like to know exactly what we store about you, please contact Leandro Junqueira. Our contact information is provided at the bottom of this Privacy Statement.

Creating an account
You can create an account on our website (execution of the agreement), after which you can place an order. If you want to know how these parties process your personal data, please read the privacy statement of the platform in question.

We process the following personal data for this purpose:

• Geschlecht
• Name
• E-Mail Addresse
• Login details
• IP-Adresse

We store your personal information until you cancel your account or up to 2 years after you last logged in to your account. We then assume that you no longer wish to use our services. Some data is stored longer if we are legally obligated to do so (e.g. because of the tax retention obligation).

We process the following personal data for this purpose:

• Name
• Address details
• Contact details (e-mail address and telephone number)
• Country
• Date of birth
• Geschlecht
• Login details
• Shopping history
• IP-Adresse

We store your personal information until you cancel your account or up to 2 years after you last logged in to your account. We then assume that you no longer wish to use our services. Some data is stored longer if we are legally obligated to do so (e.g. because of the 7 years tax retention obligation).

Contact
When you send us an e-mail, use our contact form, contact us by telephone or in any other way, you agree to our terms and conditions of contact (execution of the agreement).

We process the following personal data for this purpose:

• Name
• E-Mail Addresse
• Order number
• Any information you provide as part of the content of a message

We store your data for as long as this contact requires it or up to a maximum of 2 years after we last had contact with you; we want to make sure we have dealt with your query or complaint properly.

Placing and handling orders
When you place an order on our website, you enter certain information. This data is necessary for the purchase agreement between you and Leandro Junqueira (execution of the agreement).

We process the following personal data for this purpose:

• Namens- und Adressdaten
• Contact details (e-mail address and telephone number)
• Order confirmation
• Billing address
• Shipping address
• Payment details
• IP-Adresse

We store this information for up to 2 years after the purchase was made. Some data are stored longer if we are legally obligated to do so (e.g. because of the 7 years tax retention obligation).

Commercial messages
Leandro Junqueira sends out commercial messages. This could be a digital newsletter, but also push notifications or SMS text messages. You can subscribe to our commercial messages via the website and application. We only send out commercial messages with your consent. The messages contain promotions, tips and information about our products and services.

We process the following personal data for this purpose:

• Name
• Contact details (e-mail address and telephone number)

Your personal data is stored until you unsubscribe from the commercial messages. You can unsubscribe from these messages at any time. There is an unsubscribe link in every newsletter, but you can also change the settings in your account.

Third-party shop credit
You can share the e-mail addresses of your friends on our website. In exchange, both you and your friends will receive shop credit from us. We process the data on a legitimate interest basis, i.e. a commercial interest. In doing so, we have weighed the privacy interests of your friends. The e-mail addresses of your friends are only used once to offer the shop credit. We then delete the data.

We process the following personal data for this purpose:

• Name
• E-mail addresses

We store their e-mail addresses for as long as is necessary to send the shop credit by e-mail.

Reviews
You have the option to review our services. We use third parties to host these reviews, such as Kiyoh, Trustpilot, Facebook and Google. The reviews can be read on the websites of these parties. The parties themselves are responsible for data processing. If you want to know what they do with your personal data, please read the Privacy Policy on their website.

We process your personal data on a legitimate interest basis. We have a commercial interest in improving our services. Our commercial interest takes precedence over your privacy interest, given that you control what information you leave behind in the customer review.

We process the following personal data for this purpose:

• Name as stated in the customer review
• Place of residence
• Message content

We store your personal data for a maximum of 2 years after the review was posted.

When can we share your personal data with third parties?
Leandro Junqueira will only share your information with third parties to the extent permitted by current legislation. We may disclose your personal data to third parties when:

• we have contracted them to process certain data;
• it is necessary to fulfil the contract with you;
• you consent to it;
• we have a legitimate interest in doing so;
• we are legally obligated to do so (e.g. if the police demand it in case of a suspicion of a crime).

Third parties processing personal data on our behalf or yours:

• Mail-order companies
• Distribution centre
• Payment service providers
• Cookie service providers
• IT suppliers and service providers
• Marketing companies
• Review companies

Leandro Junqueira may disclose your personal data to parties located outside the European Economic Area (EEA) to provide those services. Leandro Junqueira will only do so if there is an appropriate level of protection for the processing of personal data.

Securing your personal data
Leandro Junqueira takes appropriate technical and organisational measures for the processing of personal data to prevent loss or any form of unlawful processing (e.g. unauthorised access, tampering, modification or disclosure of personal data).

Social media buttons
We use social media buttons on our website that redirect you to the relevant social media platforms. This gives you the option to follow us and share content. You will also see advertisements on your social media page. The buttons operate through bits of code provided by the social media networks. If you want to know what the social media platforms do with your personal data, please read the relevant privacy statement:

• Facebook (Privacy Statement)
• Instagram (Privacy Statement)

These social media companies are located in the United States. Facebook and Instagram adhere to the Privacy Shield principles and are affiliated with the U.S. Department of Commerce Privacy Shield programme. We are aware that the Privacy Shield was declared invalid on 16 July 2020 by the Court of Justice of the European Union. The practical consequences of this have yet to become clear. We are currently investigating the implications and the options for us as an organisation. Once there is more clarity about this, we will adjust our working method and Privacy Statement accordingly.

What are your privacy rights?
If you have any questions or would like to know what personal data we have about you, you can always contact us using the contact details below.

You have the following rights:

• Right of access: you have the right to access the personal data we process about you.
• Right to rectification: you have the right to correct or supplement the personal data we process about you, e.g. if they are incorrect or incomplete.
• Right to object: you have the right to object to the processing of your personal data and to direct marketing.
• Right to erasure: you may request us to erase your personal data.
• Right to withdraw your consent: if you have consented to us processing personal data, you can withdraw your consent at any time.
• Right to data portability: if it is technologically possible, you have the right to have the personal data we process about you transferred to a third party.
• Right to restrict processing: in some cases, you can request that we restrict the processing of your personal data (temporarily or otherwise).

We may ask you for identification to fulfil your request. We require this information to ensure that the requested personal data belongs to the right person.

We will generally comply with your request within one month. However, this period may be extended by two months depending on the specific privacy rights or the complexity of the request. If we extend this period, we will inform you in good time.

If you wish to exercise any of your rights, you can do so by sending an e-mail to hatmaker@leandrojunqueira.com

Changes to this Privacy Statement
When there is a change in our services, we will also need to change our Privacy Statement. Please consult this Privacy Statement regularly for the most up-to-date information.

Contact details
For questions about our Privacy Statement or your rights, you can always contact us using the information below: