Privacy policy

Privacy Policy

The person responsible for data processing is:

Anna Krämer
Krossener Str. 16
10245 Berlin
Germany
hello@kanijune.de

The protection of your privacy is very important to us. Below we provide you with detailed information about how we handle your data.

1. Access Data and Hosting

You can visit our websites without providing any personal information. Each time you access a website, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access. This access data is evaluated exclusively for the purpose of ensuring the smooth operation of the website and improving our offering. This serves to safeguard our legitimate interests, which prevail within the framework of a balancing of interests, in the correct presentation of our offering in accordance with Art. 6 (1) (f) GDPR. All access data will be deleted no later than seven days after your visit to the website.

2. Data processing for contract processing, contact, and when opening a customer account

We collect personal data when you voluntarily provide it to us as part of your order or when contacting us (e.g., via contact form or email). Mandatory fields are marked as such, as in these cases we absolutely need the data to process the contract or your contact, and without it you cannot send the order or contact. The data collected is evident from the respective input forms. We use the data you provide to process the contract and your inquiries in accordance with Art. 6 (1) (b) GDPR.


If you have given your consent in accordance with Art. 6 (1) (a) GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account. Further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this data protection declaration. After the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after the retention periods under tax and commercial law have expired in accordance with Art. 6 (1) (c) GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR or we reserve the right to use the data in any other way that is permitted by law and about which we will inform you in this declaration. Your customer account can be deleted at any time and can be done either by sending a message to the contact option described in this data protection declaration or via a function provided for this purpose in the customer account.

3. Data processing for the purpose of shipping processing

To fulfill the contract in accordance with Art. 6 (1) (b) GDPR, we will pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

4. Data processing for payment processing

We work with the following partners to process payments in our online shop: technical service providers, credit institutions, and payment service providers.

4.1 Data processing for transaction processing

Depending on the selected payment method, we will pass on the data necessary for processing the payment transaction to our technical service providers, who work for us as part of a contract processing agreement, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary to process the payment. This serves the purpose of fulfilling the contract in accordance with Art. 6 (1) (b) GDPR. In some cases, the payment service providers collect the data required for processing the payment themselves, e.g., on their own website or via a technical integration in the ordering process. The privacy policy of the respective payment service provider applies in this respect.
If you have any questions about our payment processing partners and the basis of our cooperation with them, please use the contact options described in this privacy policy.

4.2 Data processing for the purpose of fraud prevention and optimizing our payment processes

If necessary, we will provide our service providers with additional data, which they will use together with the data necessary for processing the payment as our processors for the purpose of fraud prevention and optimizing our payment processes (e.g., invoicing, processing of disputed payments, accounting support). Pursuant to Art. 6 (1) (f) GDPR, this serves to safeguard our legitimate interests in protecting ourselves against fraud and in efficient payment management, which prevail within the framework of a balancing of interests.

5. Advertising by Email

Email Newsletter with Registration

If you subscribe to our newsletter, we will use the data required for this purpose or separately provided by you to regularly send you our email newsletter based on your consent in accordance with Art. 6 (1) (a) GDPR.
You can unsubscribe from the newsletter at any time and can do so either by sending a message to the contact option described in this privacy policy or via a link provided for this purpose in the newsletter.

After unsubscribing, we will delete your email address from the recipient list unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we will inform you in this policy.

6. Cookies and other technologies

General information

To make visiting our website more attractive and enable the use of certain functions, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit (persistent cookies).
We use technologies that are absolutely necessary for the use of certain functions of our website (e.g., shopping cart function). These technologies collect and process your IP address, time of visit, device and browser information, and information about your use of our website (e.g., information about the contents of your shopping cart). In the context of a balancing of interests, this serves the overriding legitimate interest in an optimized presentation of our offering in accordance with Art. 6 (1) (f) GDPR.

We also use technologies to fulfill the legal obligations to which we are subject (e.g., to be able to prove consent to the processing of your personal data) as well as for web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.

You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of the technologies in accordance with Art. 6 (1) (a) GDPR, you can revoke your consent at any time by sending a message to the contact option described in the data protection declaration.

7. Use of cookies and other technologies for web analysis and advertising purposes

If you have given your consent in accordance with Art. 6 (1) (a) GDPR, we use the following cookies and other third-party technologies on our website. Once the purpose no longer applies and we no longer use the respective technology, the data collected in this context will be deleted. You can revoke your consent at any time with future effect. Further information on your options for revoking consent can be found in the "Cookies and other technologies" section. Further information, including the basis of our collaboration with the individual providers, can be found under the individual technologies. If you have any questions about the providers and the basis of our collaboration with them, please use the contact options described in this privacy policy.

7.1 Use of Google Services

We use the technologies described below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google technologies about your use of our website is generally transferred to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. There is no adequacy decision from the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. If your IP address is collected via Google technologies, it will be shortened by activating IP anonymization before being stored on Google's servers. Only in exceptional cases will the full IP address be transmitted to a Google server and shortened there. Unless otherwise stated for the individual technologies, data processing is based on an agreement concluded for the respective technology between joint controllers in accordance with Art. 26 GDPR. Further information about data processing by Google can be found in the Privacy Policy of Google.

Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website). This data is used to create user profiles using pseudonyms. Cookies may be used for this purpose. Your IP address will generally not be merged with other data held by Google. Data processing is based on a contract processing agreement with Google.

7.2 Use of Facebook Services

Facebook Analytics

Within the scope of Facebook Analytics, statistics about visitor activity on our website are created from the data collected with the Facebook Pixel about your use of our website. Data processing is carried out on the basis of a contract processing agreement with Facebook. Your analysis serves to optimally present and market our website.

Facebook Ads

We advertise this website on Facebook and other platforms using Facebook Ads. We determine the parameters of each advertising campaign. Facebook is responsible for the precise implementation, in particular the decision regarding the placement of ads for individual users. Unless otherwise stated for the individual technologies, data processing is based on an agreement between joint controllers in accordance with Art. 26 GDPR. Joint controllership is limited to the collection of data and its transmission to Facebook Ireland. This does not include subsequent data processing by Facebook Ireland.

 

8. Social Media

8.1 Social Plugins from Facebook and Instagram
Our website uses social buttons from social networks. These are integrated into the page as HTML links only, meaning no connection is established with the servers of the respective providers when you visit our website. If you click on one of the buttons, the website of the respective social network will open in a new window of your browser. There, you can, for example, use the Like or Share button.

8.2 Our Online Presence on Facebook and Instagram
If you have given your consent to the respective social media provider pursuant to Art. 6(1)(1)(a) GDPR, your data will be automatically collected and stored for market research and advertising purposes when you visit our online profiles on the social networks mentioned above. Usage profiles are created using pseudonyms, which can be used, for example, to display ads inside and outside the platforms that may match your interests. Cookies are typically used for this purpose. For detailed information on the processing and use of your data by the respective social media provider, as well as contact information and your rights and settings to protect your privacy, please refer to the privacy policies of the providers linked below. If you need further assistance, feel free to contact us.

Facebook is a service provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). The information automatically collected by Facebook Ireland regarding your use of our Facebook presence is usually transferred to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on the standard data protection clauses of the European Commission. The data processing when visiting a Facebook fan page is based on an agreement between joint controllers pursuant to Art. 26 GDPR. For more information (regarding Insights data), please see here. 

Instagram is also a service provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). The information automatically collected by Facebook Ireland regarding your use of our Instagram presence is usually transferred to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on the standard data protection clauses of the European Commission. The data processing when visiting an Instagram fan page is based on an agreement between joint controllers pursuant to Art. 26 GDPR. For more information (regarding Insights data), please see here.

9. Contact Options and Your Rights

As a data subject, you have the following rights:

  • Pursuant to Art. 15 GDPR, the right to obtain information about your personal data processed by us to the extent described therein;

  • Pursuant to Art. 16 GDPR, the right to request the immediate correction of inaccurate or incomplete personal data stored by us;Pursuant to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is necessary

    • to exercise the right of freedom of expression and information;

    • to fulfill a legal obligation;

    • for reasons of public interest; or

    • for the establishment, exercise or defense of legal claims;

     

  • Pursuant to Art. 18 GDPR, the right to request the restriction of processing of your personal data, if

    • the accuracy of the data is contested by you;

    • the processing is unlawful, but you oppose the erasure of the data;

    • we no longer need the data, but you require it for the establishment, exercise or defense of legal claims; or

    • you have objected to processing pursuant to Art. 21 GDPR;

  • Pursuant to Art. 20 GDPR, the right to receive your personal data provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller;

  • Pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. You may contact the supervisory authority of your usual place of residence, place of work, or our company headquarters.

If you have any questions about the collection, processing, or use of your personal data, or if you wish to request information, correction, restriction, or deletion of data, or withdraw any consent given or object to a particular use of data, please contact us directly using the contact details provided in our legal notice (Impressum).

Right to Object
Right of objection: If we process personal data as described above to protect our predominantly legitimate interests within the framework of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you only have the right to object if there are reasons arising from your particular situation. In this case, we will no longer process your personal data for this purpose.

User Name

User Email Address

At the time the message is submitted, the following data will also be stored:

  • The user's IP address

  • Date and time of registration

During the submission process, your consent is obtained for the processing of the data, and reference is made to this privacy policy.

Alternatively, contact can be made via the provided email address. In this case, the personal data transmitted via email will be stored.

There is no disclosure of the data to third parties in this context. The data will be used exclusively for processing the conversation.

12a. Legal Basis for Data Processing

The legal basis for processing the data is Art. 6(1)(a) GDPR if the user has given consent.

The legal basis for processing the data transmitted in the course of sending an email is Art. 6(1)(f) GDPR. If the email contact aims to conclude a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.

12b. Purpose of Data Processing

The processing of personal data from the input form serves solely to handle the contact request. In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data.

Any additional personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our IT systems.

12c. Duration of Storage

The data will be deleted as soon as it is no longer necessary for achieving the purpose of its collection. For the personal data from the contact form and those sent via email, this is the case when the respective conversation with the user has ended. The conversation is considered ended when it can be inferred from the circumstances that the relevant issue has been fully clarified.

Any additional personal data collected during the submission process will be deleted no later than seven days after collection.

12d. Right to Object and Removal Option

The user may revoke their consent to the processing of personal data at any time. If the user contacts us via email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

Please send an email to: hello@kanijune.de

All personal data stored in the course of contacting us will be deleted in this case.

13. Comment Function in the Blog on the Website

Kanijune offers users the opportunity to leave individual comments on specific blog posts on a blog located on the controller's website. A blog is a publicly accessible platform on a website where one or more individuals—called bloggers or web bloggers—can post articles or share opinions. These posts can in turn be commented on by third parties.

When a comment is left on the blog of this public website, in addition to the comment itself, information on the time the comment was submitted and the pseudonym or username used by the person is also stored and published. Additionally, the IP address is logged. This storage is done for security reasons and in case the person violates the rights of third parties or posts illegal content through their comment. There is no disclosure of this data to third parties unless required by law or for legal defense of the controller.

User Account

To place orders through this website, each customer must create a password-protected customer account. This account includes an overview of placed orders and active order processes. If the customer leaves the online shop, they will be automatically logged out.

The operator assumes no liability for password misuse unless it was caused by the operator.

14. Order Process

All data entered by customers during the order process will be stored. This includes:

  • First and last name

  • Address

  • Payment details

  • Email address

Data that is absolutely necessary for delivery or order processing will be passed on to third-party service providers. As soon as storage of your data is no longer required or legally mandated, it will be deleted.

15. PayPal

The data controller has integrated components of PayPal on this website. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which represent virtual private or business accounts. PayPal also offers the option of processing virtual payments via credit cards if a user does not maintain a PayPal account. A PayPal account is managed via an email address, which means there is no traditional account number. PayPal allows users to initiate online payments to third parties or receive payments. Furthermore, PayPal assumes trustee functions and offers buyer protection services.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If the data subject selects "PayPal" as a payment option during the ordering process in our online shop, data of the data subject is automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transmission of personal data required for payment processing.

The personal data transmitted to PayPal usually includes first name, last name, address, email address, IP address, telephone number, mobile phone number, or other data necessary for payment processing. Personal data related to the respective order is also necessary to process the purchase agreement.

The transmission of data is intended for payment processing and fraud prevention. The data controller will transmit personal data to PayPal in particular if there is a legitimate interest in the transmission. The personal data exchanged between PayPal and the data controller may be transmitted by PayPal to credit reference agencies. This transmission is intended for identity and creditworthiness checks.

PayPal may pass on the personal data to affiliated companies, service providers, or subcontractors, provided this is necessary to fulfill contractual obligations or if the data is to be processed on behalf.

The data subject has the option to revoke consent for the handling of personal data at any time with PayPal. A revocation does not affect personal data that must be processed, used, or transmitted for (contractual) payment processing.

PayPal’s applicable privacy policy can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

16. Use of Social Media Plugins

This website uses Facebook social plugins, which are operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). These integrations can be recognized by the Facebook logo or terms such as "Like", "Gefällt mir", or "Share" in Facebook’s colors (blue and white). Information about all Facebook plugins can be found at the following link:
https://developers.facebook.com/docs/plugins/

The plugin creates a direct connection between your browser and the Facebook servers. The website operator has no influence on the nature and extent of the data that the plugin transmits to Facebook Inc.’s servers. Further information can be found here:
https://www.facebook.com/help/186325668085084

The plugin informs Facebook Inc. that you have visited this website. It is possible that your IP address will be stored in this process. If you are logged into your Facebook account while visiting this website, the aforementioned information will be linked to your Facebook account.

If you use the plugin’s features—such as sharing or liking a post—this information will also be transmitted to Facebook Inc.

If you want to prevent Facebook Inc. from linking this data to your Facebook account, please log out of Facebook before visiting this website.

Additionally, this website uses the "+1" button from Google Plus, which is operated by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). When you visit a page that contains the "+1" button, a direct connection is established between your browser and Google's servers. The website operator has no influence on the nature and extent of the data that the plugin transmits to Google Inc.’s servers. If you click the "+1" button while logged into Google+, you share the content of the page on your public Google+ profile.

According to Google Inc., personal data is only collected when the button is clicked. Even for logged-in Google users, information such as the IP address is stored. If you want to prevent Google Inc. from storing and linking this data to your account, please log out of your Google account before visiting this website.

We collect device information using the following technologies:

  • "Cookies" are data files placed on your device or computer and often include an anonymous unique identifier. For more information about cookies and how to disable them, visit http://www.allaboutcookies.org.

  • "Log files" track actions occurring on the Website and collect data including your IP address, browser type, internet service provider, referring/exit pages, and date/time stamps.

  • "Web beacons", "tags", and "pixels" are electronic files used to record information about how you browse the Website.

When you make a purchase or attempt to make a purchase through the Website, we also collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. We refer to this information as "Order Information".

When we talk about "Personal Data" in this Privacy Policy, we are referring to both Device Information and Order Information.

HOW DO WE USE YOUR PERSONAL DATA?

We generally use the Order Information we collect to fulfill any orders placed through the Website (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). It is also used to optimize services such as Google Analytics 4, Google Tag Manager, and Google Merchant Center.

Specifically, we use Order Information to:

  • Communicate with you;

  • Screen our orders for potential risk or fraud; and

  • Provide you with information or advertising relating to our products or services, in line with the preferences you have shared with us. This includes creating shipping labels and, if you subscribe, newsletter registration.

We use the Device Information we collect to help us screen for potential risks and fraud (in particular, your IP address), and more generally to improve and optimize our Website. This includes marketing targeting (e.g., using analytics about how our customers browse and interact with the Website, and to assess the success of our marketing and advertising campaigns).

SHARING YOUR PERSONAL DATA

We share your Personal Data with third parties to help us use your Personal Data, as described above. For example, we use Shopify to power our online store—you can read more about how Shopify uses your Personal Data here: https://www.shopify.com/legal/privacy.
We also use Google Analytics to help us understand how our customers use the Website. You can read more about how Google uses your Personal Data here: https://policies.google.com/privacy?hl=en.
You can also opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Finally, we may also share your Personal Data to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.

BEHAVIOURAL ADVERTISING

As described above, we use your Personal Data to provide you with targeted advertisements or marketing communications we believe may be of interest to you.
For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (NAI) educational page at:
http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by using the following links:

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at:
http://optout.aboutads.info/

DO NOT TRACK

Please note that we do not alter our Website’s data collection and use practices when we see a Do Not Track signal from your browser.

YOUR RIGHTS

If you are a European resident, you have the right to access personal data we hold about you and to ask that your personal data be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident, we note that we are processing your data in order to fulfill contracts we might have with you (for example, if you make an order through the Website), or otherwise to pursue our legitimate business interests listed above.
Please also note that your data will be transferred outside of Europe, including to Canada and the United States.

DATA RETENTION

When you place an order through the Website, we will maintain your Order Information for our records unless and until you ask us to delete this information.

CHANGES

We may update this Privacy Policy occasionally to reflect changes in our practices or for other operational, legal, or regulatory reasons.

Data Protection Officer (if applicable)
If your company is based in the EU and exceeds certain thresholds (e.g., in terms of the number of employees or data processing), it may be required to appoint a Data Protection Officer.

Rights of Data Subjects

  • Right to Object: Data subjects have the right to object to the processing of their data, especially in relation to direct marketing.

  • Right to Data Portability: Users may request that their personal data be provided in a structured, commonly used, and machine-readable format.

  • Right to Restrict Processing: Users can also request that their data be processed only under specific conditions.

International Data Transfers
If your data is transferred outside the EU (e.g., to the US), ensure that appropriate safeguards are in place (e.g., EU Standard Contractual Clauses or Privacy Shield, if applicable).

Data Processing on Our Behalf
If we use third-party services (such as Shopify, Google), they may process personal data on our behalf as "processors," and contractual agreements will ensure that they handle your data in compliance with privacy laws.

Automated Decision-Making and Profiling
If automated decision-making or profiling (e.g., for advertising purposes) is used, we will explain this in the privacy policy.

Cookies
A cookie policy is required, especially in the EU, detailing the types of cookies, their purposes, and providing a mechanism for consent or rejection of cookies.

CONTACT

If you have any questions about our privacy practices, need further information, or wish to file a complaint, please contact us by email at hello@kanijune.de or by mail at the following address:

engtrade GmbH
Peddenoeder Straße 2
58256 Ennepetal
Germany

 

Questions or wishes? Let us know!