Privacy policy

Privacy Policy

Responsible for data processing is:

Tilted Friday / Owner: Tabitha Smith Memelerstr. 4 31535 Neustadt a. Rbge. Tel.: +49 176 21324856 Email: info@tiltedfriday.com

Thank you for your interest in our online store. The protection of your privacy is very important to us. Below we inform you in detail about the handling of your data.

1. Access data and hosting

You can visit our websites without providing any personal information. Each time you call up a website, the web server only automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our services. This serves to protect our legitimate interests in the context of a balancing of interests in accordance with Art. 6 para. 1 p. 1 lit. f GDPR. All access data will be deleted no later than seven days after the end of your visit to the site.

2. Data processing for contract management and for contacting

2.1 Data processing for contract handling

For the purpose of contract processing (incl. inquiries about and processing of any existing warranty and performance claims and any legal update obligations) in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we collect personal data if you provide us with this information voluntarily as part of your order. Mandatory fields are marked as such, because in these cases we need the data for the execution of the contract and without their specification we cannot send the order. Which data is collected can be seen from the respective input forms. Further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this privacy policy. After complete processing of the contract, your data will be restricted for further processing and deleted after the expiry of the retention periods under tax law in accordance with Art. 6 (1) sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this privacy policy.

2.2 Customer account

Insofar as you have given your consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account as well as for storing your data for further future orders on our website. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or by using a function provided for this purpose in the customer account. After deletion of your customer account, your data will be deleted, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 p. 1 lit. a GDPR or we reserve the right to use your data for other purposes which are permitted by law and about which we inform you in this declaration.

2.3 Contacting

In the context of customer communication, we collect personal data for the processing of your inquiries in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, if you provide us with this data when contacting us (e.g. via contact form or e-mail). Mandatory fields are marked as such, since in these cases we need the data to process your contact. After complete processing of your request, your data will be deleted, unless you expressly consent to further use of your data pursuant to Art. 6 para. 1 p. 1 lit. a GDPR or we reserve the right to use your data for other purposes which are permitted by law and which we inform you about in this declaration.

3. Data processing for dispatch processing

For the fulfilment of the contract in accordance with Art. 6 para. 1 p. 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

Data transfer to shipping service provider for the purpose of shipping notification

If you have given us your express consent to do so during or after your order, we will pass on your e-mail address to the selected delivery service provider on the basis of this consent in accordance with Art. 6 (1) p. 1 lit. a GDPR, so that they may contact you before delivery for the purpose of delivery notification or coordination. You can withdraw your consent at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data for any other purpose that is permitted by law.

DHL Paket GmbH Sträßchensweg 10 53113 Bonn Germany

4. Data processing for payment processing

For the processing of payments in our online store, we work together with the following partners: technical service providers, credit institutions, payment service providers.

4.1 Data processing for transaction processing

Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers, who act for us within the framework of order processing, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary for the processing of the payment. This serves the fulfilment of the contract according to Art. 6 para. 1 p. 1 lit. b GDPR. In some cases, the payment service providers collect the data required for processing the payment themselves, e.g. on their own website or via a technical integration in the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

4.2 Data processing for the purpose of fraud prevention and the optimisation of our payment processes

Where applicable, we provide our service providers with additional data, which they use together with the data necessary for processing the payment as our processors for the purposes of fraud prevention and optimisation of our payment processes. This serves pursuant to Art. 6 para. 1 S. 1 lit. f GDPR our legitimate interests in our protection against fraud and in efficient payment management.

5. Processing of data in connection with the online withdrawal function

We provide an online withdrawal function on our website to enable you to exercise your statutory right of withdrawal for online contracts in accordance with the applicable EU consumer rights legislation.

Data collected: When you use the online withdrawal function, we collect the following personal data: your name, order number or order details, email address, and if applicable, your postal address, as well as the date and time of the withdrawal submission.

Purpose of processing: This data is processed solely for the purpose of recording and handling your withdrawal request, verifying the withdrawal period, processing the return and reimbursement, and sending you the required acknowledgement of receipt on a durable medium (e.g. by email).

Legal basis: The processing is necessary for the performance of the contract and for compliance with a legal obligation pursuant to Art. 6 para. 1 lit. b and lit. c GDPR.

Retention period: Your withdrawal data will be stored for the duration of the statutory retention obligations (generally 10 years under German commercial and tax law), after which it will be deleted.

Principle of data minimisation: We only collect the data that is strictly necessary to process your withdrawal. No additional data beyond what is required for the withdrawal process will be requested.

6. Advertising by e-mail

If you register for our newsletter, we will use the data required for this purpose or separately provided by you to regularly send you our e-mail newsletter based on your consent pursuant to Art. 6 (1) p. 1 lit. a GDPR. Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address from the list of recipients, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) p. 1 lit. a GDPR.

7. Social Media

7.1 Social plugins from Facebook (by Meta), Instagram (by Meta), Pinterest

Social buttons from social networks are used on our website. These are only integrated into the page as HTML links, so that when you call up our website, no connection is yet established with the servers of the respective provider. If you click on one of the buttons, the website of the respective social network opens in a new window of your browser.

7.2 Our online presence on Facebook (by Meta), Instagram (by Meta), Pinterest

Insofar as you have given your consent to the respective social media operator in accordance with Art. 6 para. 1 p. 1 lit. a GDPR, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presences on the social media platforms mentioned above.

Facebook (by Meta) and Instagram (by Meta) are offerings of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland. Data processing in the context of a visit to a Facebook or Instagram fan page is based on an agreement between jointly responsible parties pursuant to Art. 26 GDPR. For the USA, our cooperation is based on standard data protection clauses of the European Commission.

Pinterest is a service of Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. Information collected by Pinterest may be transferred to Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA. Our cooperation is based on standard data protection clauses of the European Commission.

8. Contact options and your rights

8.1 Your rights

As a data subject, you have the following rights:

Pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us;
Pursuant to Art. 16 GDPR, the right to demand the correction of inaccurate or incomplete personal data stored by us;
Pursuant to Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary;
Pursuant to Art. 18 GDPR, the right to request the restriction of the processing of your personal data;
Pursuant to Art. 20 GDPR, the right to receive your personal data in a structured, commonly used and machine-readable format;
Pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority.

Right of objection

Insofar as we process personal data in order to protect our legitimate interests, which prevail in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time. After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

8.2 Contact options

If you have any questions regarding the collection, processing or use of your personal data, for information, correction, restriction or deletion of data, as well as revocation of consent given or objection to a particular use of data, please contact us directly using the contact details in our imprint.