Privacy Policy of Fluco-online.de

Privacy Policy

1. Data Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

FLUCO Ulrich Fleischmann e.K.
Nordgaustraße 4
93437 Furth im Wald
Germany

Phone: +49 (0)9973 803568
E-Mail: onlineshop@fluco.de

Represented by: Ulrich Fleischmann

Commercial Register: Regensburg
Registration Number: HRA 3809

VAT Identification Number: DE208246810

2. Data Protection Officer

Our Data Protection Officer is:

Ludwig Fleischmann
E-Mail: buchhaltung@fluco.de

3. General Information on Data Processing

We process personal data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other relevant legal provisions.

Personal data means any information relating to an identified or identifiable natural person.

4. Hosting and Shop System

Our online store is operated using Shopify.

Provider:

Shopify International Ltd.
Victoria Buildings
1–2 Haddington Road
Dublin 4
Ireland

As part of providing the online store, Shopify processes personal data on our behalf. Data may also be transferred to Shopify entities in Canada and other countries.

Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR.

5. Server Log Files

When visiting our website, the following information is automatically collected:

• IP address

• Date and time of access

• Browser type and version

• Operating system

• Referrer URL

• Accessed pages

• Host name of the accessing device

The processing is carried out to ensure the secure and stable operation of the website.

Legal basis: Art. 6(1)(f) GDPR.

6. Customer Account

You may create a customer account on our website.

The following data may be processed:

• Name

• Address

• E-mail address

• Telephone number

• Order history

Processing is carried out to manage your customer account and simplify future purchases.

Legal basis: Art. 6(1)(b) GDPR.

7. Orders and Contract Processing

To process your orders, we may collect and process:

• First and last name

• Billing and shipping address

• E-mail address

• Telephone number

• Payment information

• Order details

Legal basis: Art. 6(1)(b) GDPR.

8. Contact Requests

If you contact us via contact form or e-mail, we process the information you provide in order to handle your request.

Legal basis:

• Art. 6(1)(b) GDPR

• Art. 6(1)(f) GDPR

9. Payment Processing

Shopify Payments

We use Shopify Payments to process payments.

PayPal

If you choose PayPal as your payment method, the data required for payment processing will be transmitted to PayPal.

Credit Card, Apple Pay, Google Pay and Shop Pay

Payments made using these methods are processed through Shopify’s payment infrastructure.

Legal basis: Art. 6(1)(b) GDPR.

10. Shipping Service Providers

To deliver your orders, we transfer the necessary data to:

• DHL Paket GmbH

• DHL Express Germany GmbH

The following data may be transferred:

• Name

• Delivery address

• E-mail address

• Telephone number

where required for shipment and delivery.

Legal basis: Art. 6(1)(b) GDPR.

11. Newsletter

We use Klaviyo for newsletter distribution.

Provider:

Klaviyo Inc.
125 Summer Street
Boston, MA 02110
USA

When subscribing to our newsletter, we process:

• E-mail address

• Consent records

• Interaction data

Newsletters are sent exclusively on the basis of your consent.

Legal basis: Art. 6(1)(a) GDPR.

You may withdraw your consent at any time.

12. Consent Management

We use Consentmo to manage cookie consent preferences.

Consent data is processed and documented.

Legal basis:

• Art. 6(1)(c) GDPR

• Applicable cookie and electronic communications laws

13. Google Analytics 4

Subject to your consent, we use Google Analytics 4.

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics helps us analyze how visitors use our website.

Legal basis: Art. 6(1)(a) GDPR.

14. Google Ads Conversion Tracking

We use Google Ads Conversion Tracking to measure the effectiveness of our advertising campaigns.

Legal basis: Art. 6(1)(a) GDPR.

15. Meta Pixel

We use the Meta Pixel provided by Meta Platforms Ireland Ltd.

This allows us to display targeted advertisements to visitors of our website.

Legal basis: Art. 6(1)(a) GDPR.

16. Server-Side Tracking via Stape

We use Stape to implement server-side tracking for Google Analytics, Google Ads and Meta Pixel.

Technical usage data may be processed and transmitted via dedicated servers to provide analytics and marketing functionality.

Processing is carried out only on the basis of your consent.

Legal basis: Art. 6(1)(a) GDPR.

17. Google & YouTube Integration

We use Shopify’s Google & YouTube integration to manage product listings and marketing activities across Google services.

18. Facebook & Instagram Integration

We use Shopify’s Facebook & Instagram integration to manage product listings and marketing activities across Meta platforms.

19. Product Reviews via Judge.me

We use Judge.me to collect and display product reviews.

Following a purchase, you may receive an e-mail requesting a product review.

The following data may be processed:

• Name

• E-mail address

• Order information

• Review content

Legal basis:

• Art. 6(1)(a) GDPR

• Art. 6(1)(f) GDPR

20. Trusted Shops

We use Trusted Shops to provide customer reviews, trust badges and buyer protection services.

Legal basis:

• Art. 6(1)(a) GDPR

• Art. 6(1)(f) GDPR

21. Storemapper

We use Storemapper to display dealer and location information.

When using map functions, technical information such as IP addresses and browser data may be processed.

22. Electronic Withdrawal Function

To comply with legal requirements regarding online withdrawal rights, we use the “EU Withdrawal Button” application.

When using this function, we may process:

• Name

• E-mail address

• Order number

• Date and time of withdrawal

• Content of the withdrawal declaration

The processing is carried out solely for handling and documenting withdrawal requests.

Legal basis:

• Art. 6(1)(b) GDPR

• Art. 6(1)(c) GDPR

23. Cookies

Our website uses cookies and similar technologies.

Strictly necessary cookies are used to ensure the technical functionality of the website.

Analytics and marketing cookies are only used with your explicit consent.

24. International Data Transfers

Some of our service providers are located outside the European Union or European Economic Area.

Where personal data is transferred to third countries, such transfers are based on:

• Adequacy Decisions of the European Commission

• The EU-U.S. Data Privacy Framework

• Standard Contractual Clauses approved by the European Commission

25. Data Retention

We retain personal data only for as long as necessary to fulfil the respective purposes or to comply with statutory retention obligations.

26. Your Rights

You have the following rights:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to object (Art. 21 GDPR)

• Right to withdraw consent at any time

27. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent supervisory authority if you believe that the processing of your personal data violates applicable data protection laws.

28. Right to Object

Where we process personal data on the basis of legitimate interests, you have the right to object to such processing at any time for reasons arising from your particular situation.

29. Updates to this Privacy Policy

We reserve the right to amend this Privacy Policy to reflect legal, technical or operational changes.

The current version published on our website shall apply.