Privacy policy

Privacy Policy

This English version is provided for convenience. The German version is legally binding.

1. General information
Protecting your personal data is particularly important to us.
We treat your personal data confidentially and in accordance with the statutory data protection regulations, in particular the General Data Protection Regulation (GDPR), and this privacy policy.

This privacy policy explains the nature, scope and purpose of the processing of personal data on the website www.septenz.com.


2. Controller

CPTZ
c/o Smarvo 129
Südstraße 31
47475 Kamp-Lintfort

Email: sepicomport@gmail.com
Phone: +49 152 57240035


3. Collection and storage of personal data

a) When visiting the website
When you access our website, the hosting provider automatically collects and temporarily stores the following data:

  • IP address

  • Date and time of the request

  • Browser type and browser version

  • Operating system

  • Referrer URL

Purpose: ensuring a smooth connection, system security and stability.
Legal basis: Art. 6 (1) (f) GDPR.

b) When contacting us or placing an order
Data processed:

  • First and last name

  • Email address

  • Phone number, if applicable

  • Billing and payment data

  • Content of the inquiry or order

Purpose: performance of the contract and customer care.
Legal basis: Art. 6 (1) (b) GDPR.


4. Payment service providers

To process payments, we use external payment service providers, in particular:
Shopify Payments, PayPal, Klarna, Apple Pay, Google Pay.

Legal basis: Art. 6 (1) (b) GDPR.


5. Cookies & consent management

Our website uses cookies and similar technologies.
Cookies that are not technically necessary (e.g. for marketing and tracking) are only used on the basis of your consent via our cookie consent tool.

Legal basis: Art. 6 (1) (a) GDPR.


6. TikTok Pixel

Provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, Ireland

Purpose: conversion tracking, reach measurement and optimization of our advertising campaigns on TikTok.

The following data in particular may be processed:
IP address, device information, pages visited, timestamps, interactions (e.g. clicks, purchases).

Legal basis: Art. 6 (1) (a) GDPR (consent via the cookie banner).

A transfer of data to third countries (in particular the USA) cannot be ruled out.
Such transfers take place on the basis of the EU-US Data Privacy Framework (TADPF) and additionally on the basis of the EU Standard Contractual Clauses pursuant to Art. 46 GDPR.

More information: https://www.tiktok.com/legal/privacy-policy


7. Trustpilot widget

Our website embeds widgets from the review platform Trustpilot.

Provider:
Trustpilot A/S
Pilestræde 58
1112 Copenhagen
Denmark

When you access pages with embedded Trustpilot widgets, technical data (e.g. IP address, browser information, page accessed, time of access) may be transmitted to Trustpilot.

Purpose: displaying customer reviews and strengthening trust in our services.

Legal basis:
Art. 6 (1) (f) GDPR (legitimate interest in transparent customer communication).
Where cookies or similar technologies are used, processing is based on your consent pursuant to Art. 6 (1) (a) GDPR.

More information:
https://de.legal.trustpilot.com/for-reviewers/end-user-privacy-terms


8. Newsletter (Shopify Email)

Our newsletter is sent via "Shopify Email", a service of:

Shopify Inc.
151 O’Connor Street
Ottawa, Ontario K2P 2L8
Canada

Data processed:
Email address, name if applicable, time of sign-up, IP address, interactions with emails.

Sign-up uses the double opt-in procedure.
Legal basis: Art. 6 (1) (a) GDPR (consent).

You can unsubscribe from the newsletter at any time via the unsubscribe link in the email or by writing to sepicomport@gmail.com.


9. Hosting & content delivery (Cloudflare)

Our website is hosted on the Shopify Inc. platform, Canada.
To increase security and loading speed, we additionally use the service:

Cloudflare, Inc.
101 Townsend St
San Francisco, CA 94107
USA

Data processed: IP address, technical access data.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure and efficient operation).

Data transfers to third countries take place on the basis of the EU-US Data Privacy Framework (TADPF) and the EU Standard Contractual Clauses.


10. Data processing on our behalf

We have concluded data processing agreements pursuant to Art. 28 GDPR with all service providers that process personal data on our behalf (e.g. hosting, payment processing, newsletter sending, marketing and tracking services).


11. Data transfers to third countries

Where personal data is transferred to countries outside the European Union or the European Economic Area (in particular to the USA), this takes place on the basis of:

  • the EU-US Data Privacy Framework (TADPF), where the respective provider is certified,

  • and additionally the EU Standard Contractual Clauses pursuant to Art. 46 GDPR.

Despite these measures, it cannot be ruled out that authorities in third countries may gain access to the data.


12. Storage period

Personal data is only stored for as long as is necessary for the respective purposes or as required by statutory retention obligations. It is then deleted.


13. Rights of the data subject

You have the right to:

  • Access to your stored data

  • Rectification of inaccurate data

  • Erasure of your data

  • Restriction of processing

  • Objection to processing

  • Data portability

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement.

The supervisory authority responsible for us is:

The Hamburg Commissioner for Data Protection and Freedom of Information
https://datenschutz-hamburg.de


14. Data security

During your visit to the website, we use the widespread SSL procedure (Secure Socket Layer) and appropriate technical and organizational security measures to protect your data against manipulation, loss or unauthorized access.


15. Validity and changes

This privacy policy is currently valid and is dated [insert date].
We reserve the right to amend it as necessary to adapt it to changes in the law or to changes in our services. The current version published on www.septenz.com applies.