Privacy policy
This English version is provided for your convenience. Only the German version is legally binding.
1. Introduction
The protection of your personal data is our top priority. This privacy policy explains the type, scope and purpose of the processing of personal data in connection with this website, its functions and content.
Collection of your data: Personal data is collected when you actively provide it (e.g. via a contact form), or automatically or with your consent when you visit the website (e.g. technical data such as browser, operating system, time of access).
Use of your data: Some of the data is used to ensure the website is provided without errors; other data may be used to analyse user behaviour in order to improve our offering.
Transfer of data to external parties: Data is only transferred if this is necessary for the performance of a contract, if there is a legal obligation, if there is a legitimate interest pursuant to Art. 6 (1) (f) GDPR, or if another legal basis permits it. Where external service providers are used, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.
Withdrawal of consent: Consent given can be withdrawn at any time; the lawfulness of the processing carried out until then remains unaffected.
Right to object (Art. 21 GDPR): If processing is based on Art. 6 (1) (e) or (f) GDPR, you have the right to object at any time on grounds relating to your particular situation. If your data is used for direct marketing, you can object to this at any time without giving reasons.
Your rights under the GDPR: You have the right to access, rectification, erasure, restriction of processing and data portability, as well as the right to lodge a complaint with a supervisory authority. The competent authority is in particular the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany.
2. Controller
Luis Hardy Buurman
Zernseestr. 3, 13599 Berlin, Germany
Website: www.19plug.com
Email: 19plug.shop@gmail.com
Phone: +49 176 57731913
3. Processors
We work with various processors who are contractually obliged to treat your data confidentially and may only use it within the scope of the respective service.
4. Definitions
This policy uses terms from the GDPR (Art. 4): Personal data is any information relating to an identifiable person. Processing covers any operation performed on such data. The controller is whoever determines the purposes and means of processing. A processor processes data on behalf of the controller. Consent is a freely given, informed and unambiguous indication of wishes.
5. Hosting
This website is hosted by an external service provider. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in stable and secure provision); where consent is required, Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG.
Shopify International Limited
Victoria Buildings, 2nd floor, 1-2 Haddington Road
Dublin 4, D04 XN32, Ireland
Privacy policy: https://www.shopify.com/legal/privacy
A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.
6. Legal bases for data processing
Depending on the purpose, different legal bases apply: consent (Art. 6 (1) (a) GDPR), performance of a contract (b), legal obligation (c) or legitimate interest (f). For cookies, § 25 TDDDG also applies.
7. Transfer of data to unsafe third countries
If tools from providers based in third countries that are unsafe in terms of data protection (e.g. the USA) are used, data may be transferred there. This is only permitted if the recipient is certified under the EU-US Data Privacy Framework or appropriate safeguards are in place.
8. Storage period
Personal data is only stored for as long as is necessary for the respective purpose or as long as statutory retention periods (e.g. under tax or commercial law) apply. After consent has been withdrawn, data is deleted without delay unless other legal reasons prevent this.
9. Security measures and data minimisation
Technical and organisational measures are taken to protect your data against loss, alteration or unauthorised access. Only the data strictly necessary for the respective purpose is collected.
10. SSL/TLS encryption
This website uses SSL/TLS encryption via HTTPS. You can recognise an encrypted connection by the “https://” in the address bar and the lock symbol.
11. Encrypted payment transactions
Payment data, insofar as it has to be transmitted to the controller, is transmitted in encrypted form. The use of SSL/TLS ensures secure and confidential transmission.
12. Storage of user information in log files
Each time the website is accessed, technical data is automatically stored in log files: IP address, date/time, file accessed, referrer URL, browser/user agent, operating system, access provider, HTTP status code. The legal basis is Art. 6 (1) (f) GDPR. The data is not used to identify you and is anonymised or deleted once the purpose has been fulfilled.
13. Cookies
This website uses cookies: technically necessary cookies (e.g. for the shopping cart, checkout and your cookie settings) and – only with your consent – cookies for statistical analysis of website use. The legal basis for technically necessary cookies is § 25 (2) TDDDG in conjunction with Art. 6 (1) (f) GDPR; for all other cookies it is your consent pursuant to § 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR, which you can withdraw at any time via the cookie banner. You can configure your browser so that no cookies are stored; however, this may restrict functionality.
14. Cookie consent banner
Shopify International Limited
Victoria Buildings, 2nd floor, 1-2 Haddington Road
Dublin 4, D04 XN32, Ireland
https://www.shopify.com/legal/privacy
The banner sets a technically necessary cookie to store your cookie consent (time, selected settings, legal basis); it does not itself process any personal data. The legal basis is Art. 6 (1) (f) GDPR or (a), where consent was requested. The settings remain stored until you delete cookies yourself or withdraw your consent.
15. Use of the contact form
Mandatory field: email address. Name, phone number and message are optional. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). The data is regularly deleted once the enquiry has been dealt with.
16. Enquiries by email or phone
Data transmitted (name, email, phone number, enquiry) is processed exclusively to handle the enquiry. The legal basis is Art. 6 (1) (b) GDPR, alternatively (f).
17. Electronic withdrawal function (“Withdraw from contract”)
Via the “Withdraw from contract” button in the footer of every page, you can declare the withdrawal from your contract electronically (§ 356a BGB). In doing so, we process the data you provide (name, email address, order number, items concerned, any comments) and the time of receipt in order to process the withdrawal and send you an acknowledgement of receipt by email without delay. The legal basis is Art. 6 (1) (c) GDPR (legal obligation to provide the withdrawal function and acknowledgement of receipt) and Art. 6 (1) (b) GDPR (reversal of the contract). The data is stored for as long as necessary for the reversal and as evidence, at most until the statutory limitation and retention periods have expired.
For the technical provision of the form and the sending of the acknowledgement of receipt, we use the Shopify app “EU Widerrufs-Button & Formular” as a processor:
401layers UG (haftungsbeschränkt)
Dorothea-Erx.-Str. 1a
40721 Hilden, Germany
https://euwiderrufsbutton.de/
A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider.
18. Registration on the website
Data entered during registration is only used for the use of the respective service. Mandatory information must be provided in full. The legal basis is Art. 6 (1) (a) GDPR; consent can be withdrawn informally by email.
19. Newsletter
To receive the newsletter, a valid email address and confirmation via the double opt-in procedure are required. No further data is collected or passed on to third parties. The legal basis is Art. 6 (1) (a) GDPR. Consent can be withdrawn at any time via the unsubscribe link or informally. The data is stored until you unsubscribe.
Sent via:
Shopify International Limited
Victoria Buildings, 2nd floor, 1-2 Haddington Road
Dublin 4, D04 XN32, Ireland
https://www.shopify.com/legal/privacy
20. Use of analysis and tracking tools
Analysis tools are used to design and optimise the website in line with demand. The legal basis is Art. 6 (1) (f) GDPR; where cookies/device fingerprinting are involved, additionally Art. 6 (1) (a) in conjunction with § 25 (1) TDDDG.
21. CDN service
A content delivery network is used to optimise loading times; IP addresses are also processed in the process.
Shopify International Limited
Victoria Buildings, 2nd floor, 1-2 Haddington Road
Dublin 4, D04 XN32, Ireland
https://www.shopify.com/legal/privacy
22. Processing of customer and contract data
To establish and perform contractual relationships, name, address, email, phone number and, depending on the payment method, payment information are processed, as well as order and usage data. The legal bases are Art. 6 (1) (b), (c) and (f) GDPR. The data is deleted after completion of the order and expiry of the statutory retention periods.
23. Shipping and delivery of goods
For shipping, name, delivery address and, where applicable, delivery instructions are processed and passed on to the commissioned shipping service providers, who are contractually obliged to treat them confidentially. The legal basis is Art. 6 (1) (b) GDPR.
24. Third-party payment services
Depending on the payment method chosen, your payment data is processed directly by the respective provider. The legal basis is Art. 6 (1) (b), alternatively (f) GDPR.
Credit and debit cards (Shopify Payments) – Card payments are processed via Shopify Payments (Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland) in cooperation with Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. Privacy policy: https://www.shopify.com/legal/privacy
Apple Pay – Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, T23 YK84, Ireland. Privacy policy: https://www.apple.com/legal/privacy/en-ww/
Google Pay – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy policy: https://policies.google.com/privacy
Klarna – Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Privacy policy: https://www.klarna.com/international/privacy-policy/
PayPal – PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal is certified under the EU-US Data Privacy Framework. Privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
25. Google Fonts
This website uses Google Fonts provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the fonts are loaded, your IP address is transmitted to Google servers in the USA. Google is certified under the EU-US Data Privacy Framework.
Privacy policy: https://policies.google.com/privacy
26. Captcha service
To protect the online forms against bots, hCaptcha is used, a service of Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA. IP address and interactions with the captcha may be transmitted. Intuition Machines, Inc. is certified under the EU-US Data Privacy Framework.
Privacy policy: https://www.hcaptcha.com/privacy
27. Search tool
Shopify International Limited
Victoria Buildings, 2nd floor, 1-2 Haddington Road
Dublin 4, D04 XN32, Ireland
https://www.shopify.com/legal/privacy
28. Website management tool
Shopify International Limited
Victoria Buildings, 2nd floor, 1-2 Haddington Road
Dublin 4, D04 XN32, Ireland
https://www.shopify.com/legal/privacy
29. Links to social networks
On our website we link to our profiles on Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland) and TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, D02 T380, Ireland), also via a QR code. These are simple links or images; no data is transmitted to these networks when you visit our website. Only when you click a link or scan the QR code are you taken to the respective provider’s website, to which their privacy policy applies: Instagram, TikTok.
