Privacy Policy

The controller responsible for the processing of personal data on this website is:

3DFlagShop GmbH
Kalscheurer Weg 43
50969 Cologne
Germany

Managing Director: Hüseyin Canbay
Phone: +49 152 59 59 5000
Email: info@3dflagshop.com

Protecting your personal data is important to us.

We process personal data only to the extent necessary to operate our website, process orders, provide our digital products, communicate with our customers, or comply with legal obligations.

Personal data is processed in particular in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.

When you visit our website, the hosting provider may process technical data in so-called server log files. This may include:

• IP address
• Date and time of access
• Pages or files accessed
• Browser type and browser version
• Operating system used
• Referrer URL
• Amount of data transferred
• HTTP status code

This data is processed in particular to ensure the secure and reliable operation of the website and to detect and prevent technical problems and attacks.

Where processing is based on our legitimate interests, the legal basis is Art. 6(1)(f) GDPR.

Where required, a data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

We use WooCommerce to operate our online store.

When you place an order, the following personal data may be processed in particular:

• Name
• Billing information
• Email address
• Telephone number, where provided
• Order information
• Purchased products and selected license
• Payment information or payment status
• IP address
• Technical order and transaction data

This data is processed for the purpose of fulfilling the purchase contract, processing payments, providing the purchased digital content, and complying with statutory retention and documentation requirements.

The legal basis is primarily Art. 6(1)(b) GDPR. Where statutory retention obligations apply, processing is also carried out on the basis of Art. 6(1)(c) GDPR.

A customer account is generally not required to place an order with 3DFlagShop. Customers may also place orders using guest checkout.

If customer accounts are offered and a customer voluntarily creates an account, the data required for this purpose will be processed to manage the customer account.

Depending on the payment method selected by the customer, external payment service providers may be used to process payments.

Payment options available in our online store may include:

• PayPal
• Stripe
• Klarna
• Apple Pay
• Google Pay
• Visa
• Mastercard
• American Express

As part of the payment process, data required to complete the respective transaction may be transferred to the selected payment service provider.

The specific data processed depends on the payment method selected and the respective payment service provider.

Processing is carried out in particular for the performance of the contract pursuant to Art. 6(1)(b) GDPR and, where applicable, to comply with legal obligations.

If you contact us by email, telephone, or through our contact form, we process the information you provide in order to handle your enquiry and any subsequent questions.

This may include:

• Name
• Email address
• Telephone number, where provided
• Content of your message
• Information relating to your project or enquiry

Where your enquiry relates to a contract or pre-contractual measures, processing is carried out on the basis of Art. 6(1)(b) GDPR.

In other cases, processing may be based on our legitimate interest in efficiently handling enquiries pursuant to Art. 6(1)(f) GDPR.

[THE SPECIFIC CONTACT FORM SOLUTION AND ANY ADDITIONAL TECHNICAL SERVICES MUST BE ADDED BY THE DEVELOPER OR LEGAL ADVISER.]

Following a successful purchase, the purchased digital content is made available through a personal download link.

For the technical provision and security of downloads, the following data may be processed in particular:

• Order number
• Purchased product
• Download authorization
• Time of download
• IP address or technical access data

This data is processed for the performance of the purchase contract and the secure provision of the purchased digital content pursuant to Art. 6(1)(b) GDPR.

Our website may use cookies and similar technologies.

Technically necessary cookies may be used to provide essential online store functionality, including:

• Shopping cart functions
• Checkout
• Payment processing
• Security functions
• Storage of technically necessary settings

Where cookies or similar technologies require consent, they will only be used after the user has provided the appropriate consent.

Consent that has been granted may generally be withdrawn at any time with effect for the future through the available consent settings.

Consent/Cookie Management System Used:
[TO BE ADDED BY THE DEVELOPER OR LEGAL ADVISER]

Depending on the final technical configuration of the website, external services or technical components may be used.

These may include in particular:

• Google Fonts
• Google reCAPTCHA
• Cloudflare
• Content Delivery Networks (CDNs)
• Security and anti-spam services
• Additional WordPress or WooCommerce plugins

Before this Privacy Policy is published, it must be verified which of these services are actually used on the website, what personal data they process, and whether any data is transferred to third countries.

[THIS SECTION MUST BE COMPLETED FOLLOWING A TECHNICAL REVIEW OF THE WEBSITE.]

Under the website configuration currently planned, we do not use Google Analytics.

We also currently do not use Google Tag Manager.

If these or comparable analytics or tracking services are used in the future, this Privacy Policy will be updated accordingly and, where required, appropriate consent will be obtained before such services are activated.

We currently do not offer a newsletter and therefore do not process personal data for newsletter marketing purposes.

If a newsletter is introduced in the future, this Privacy Policy will be updated accordingly.

We currently do not embed videos from YouTube or Vimeo on our website.

If such services are integrated in the future, this Privacy Policy will be updated accordingly.

We currently do not integrate Google Maps into our website.

If a corresponding map service is introduced in the future, this Privacy Policy will be updated accordingly.

Personal data is retained only for as long as necessary for the respective processing purposes or for as long as statutory retention obligations apply.

Once the purpose of processing no longer applies and any statutory retention obligations have expired, the relevant personal data will be deleted or, where required, its processing will be restricted.

Where necessary, personal data may be transferred to service providers that assist us in operating our online store and fulfilling our contractual obligations.

These may include:

• Hosting providers
• Payment service providers
• IT and technical service providers
• Tax and accounting service providers
• Security service providers
• Other service providers where necessary for contract performance or the secure operation of the website

Personal data will only be disclosed where an appropriate legal basis exists.

When certain external service providers are used, personal data may be processed outside the European Union (EU) or European Economic Area (EEA).

Where such transfers take place, the applicable legal requirements governing international transfers of personal data will be observed.

[THIS SECTION MUST BE REVIEWED AND COMPLETED ONCE ALL EXTERNAL SERVICES AND PLUGINS HAVE BEEN FINALIZED.]

Subject to the applicable legal requirements, data subjects have, in particular, the right to:

• Access their personal data
• Rectification of inaccurate personal data
• Erasure of personal data
• Restriction of processing
• Data portability
• Object to certain processing activities
• Withdraw previously granted consent with effect for the future

You also have the right to lodge a complaint with the competent data protection supervisory authority.

We implement appropriate technical and organizational measures to protect personal data against loss, manipulation, unauthorized access, or unauthorized disclosure.

Data transmitted through our website is generally protected using an encrypted HTTPS connection.

We reserve the right to update this Privacy Policy if legal requirements, technical features, services used, or data processing activities on our website change.

The version currently published on our website shall apply.