The controller responsible for data processing is:

foxsil.com

Europastraße 81
24976 Handewitt
Germany

hello@foxsil.com

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

  1. Purposes of data processing

We collect and process your data to provide our website and to offer you the opportunity to enter into contracts.

  1. What data is collected, processed, or used?

2.1 Accessing our website

When you access our website, our servers automatically collect a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data), and documents the access.

This access data is processed solely for the purpose of ensuring the smooth operation of the website. The temporary storage of this data is necessary for the website visit to function and enable delivery of the website. Further storage in log files is carried out to ensure the website's functionality and the security of our IT systems. This constitutes our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR. All access data is deleted no later than thirty days after the end of your visit to the website.

2.2 Data processing for contact purposes

We collect personal data when you voluntarily provide it to us when contacting us (e.g., via contact form or email). Required fields in the contact form are marked as such, as we need this data to process your inquiry. All other information is voluntary. The specific data collected is evident from the respective input forms. This data is processed based on Article 6(1)(b) GDPR if your inquiry relates to the performance of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in the efficient handling of inquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), if such consent has been requested. The data you enter in the contact form will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

2.3 Data processing for contract fulfillment / opening a customer account

We collect and process personal data when you provide it to us in connection with the performance of a contract or when opening a customer account. The legal basis for this is Article 6(1)(b) GDPR. The specific data collected can be found in the respective input forms. You can delete your customer account at any time by sending us a message. We store and use the data you provide for contract processing between you and us. After complete contract fulfillment or deletion of your customer account, your data will be blocked in accordance with tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use your data as permitted by law, about which we inform you in this privacy policy.

2.4 E-Mail-Newsletter

When you subscribe to our newsletter, we use the data you have separately provided to send you our email newsletter regularly, based on your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR. We use the so-called double opt-in procedure for newsletter registration. This means that after you register, we will send an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be blocked and automatically deleted after three days.

You can unsubscribe from the newsletter at any time, either by sending us a message or by using the unsubscribe link provided in the newsletter. After unsubscribing, we will delete your email address from the mailing list unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes permitted by law, which we will inform you about in this privacy policy.

  1. Data transfer to shipping service providers

For the purpose of fulfilling the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we will pass on your data (name and address for delivery, email address and telephone number for shipment tracking) to the shipping company commissioned with the delivery (DHL Deutsche Post AG, DPD, UPS), insofar as this is necessary for the delivery of ordered goods.

  1. Data transfer to payment service providers

4.1 Payment

We have integrated components from Klarna into our website. Klarna is an online payment service provider that enables purchases on account, instant bank transfer, and direct debit. Klarna also offers additional services, such as buyer protection and identity and credit checks. The operating company of Klarna is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden. If you select one of the payment methods mentioned above, your data will be automatically transmitted to Klarna.

Your data will be transferred to Klarna on the basis of Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract).

The personal data transmitted to Klarna typically includes first name, last name, address, date of birth, gender, email address, IP address, telephone number, mobile phone number, and other data necessary for processing an invoice or installment purchase. Personal data related to the specific order is also necessary for processing the purchase agreement. In particular, this may involve the mutual exchange of payment information such as bank details, card number, expiry date and CVC code, quantity of items, item number, data on goods and services, prices and taxes, information on previous purchasing behavior, or other information about the financial situation of the data subject. The purpose of transmitting this data is, in particular, identity verification, payment administration, and fraud prevention. We transmit personal data to Klarna specifically when there is a legitimate interest in doing so. The personal data exchanged between Klarna and us is transmitted by Klarna to credit reference agencies. This transmission is for the purpose of identity and creditworthiness checks. Klarna also shares personal data with affiliated companies (Klarna Group) and service providers or subcontractors, insofar as this is necessary to fulfill contractual obligations or the data is to be processed on its behalf.

If you choose the payment method "purchase on account" or "installment purchase," Klarna collects and uses data and information about the data subject's previous payment behavior, as well as probability values ​​for their future behavior (so-called scoring), to decide whether to establish, execute, or terminate a contractual relationship. The scoring is calculated using scientifically recognized mathematical and statistical methods. The legal basis for this is Article 6(1)(b) GDPR (conclusion and performance of the credit agreement).

Klarna's applicable data protection regulations can be found athttps://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdfcan be retrieved.

Further information and Klarna's terms of use for Germany can be found here:https://cdn.klarna.com/1.0/shared/content/legal/terms/K502554/de_de/user

4.2 PayPal, PayPal Express

We have integrated components from PayPal into our website. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which are virtual private or business accounts.

PayPal's European operating company is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If the data subject selects "PayPal" as the payment method during the ordering process in our online shop, their data will be automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transfer of personal data necessary for payment processing. The personal data transmitted to PayPal typically includes first name, last name, address, email address, IP address, telephone number, mobile phone number, and other data necessary for payment processing. Personal data related to the specific order is also necessary for processing the purchase agreement. PayPal reserves the right to conduct a credit check for the "Pay Later" payment method via PayPal. PayPal uses the result of the credit check, specifically the statistical probability of payment default, to decide whether to offer the respective payment method. The credit check may include probability values ​​(so-called score values). If score values ​​are included in the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data is among the information used to calculate the score values.

Your data will be transferred to PayPal on the basis of Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract).

The data is transmitted for payment processing and fraud prevention. We will transmit personal data to PayPal for this purpose, particularly when there is a legitimate interest in doing so. The personal data exchanged between PayPal and us may be transmitted by PayPal to credit reference agencies. This transmission is for the purpose of identity and creditworthiness verification.

PayPal may share personal data with affiliated companies and service providers or subcontractors to the extent necessary to fulfill contractual obligations or to process the data on its behalf.

The data subject has the right to withdraw their consent to the processing of their personal data by PayPal at any time. Such withdrawal does not affect personal data that must be processed, used, or transmitted for the (contractual) processing of payments.

Furthermore, you have the option of using "PayPal Express" during the ordering process on our website. "PayPal Express" is a service provided by PayPal (Europe) S.à.r.l & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. When using "PayPal Express," personal data is transferred from PayPal to us for contract and payment processing. Orders placed using PayPal Express checkout allow for a shorter ordering process. A customer account with us is generally not required; the address you have stored in your PayPal account will be used. Please note that the ordered goods will be shipped to the address stored in your PayPal account unless the address is changed. We are obligated to ship the goods to this address. We therefore recommend that you always update your stored address to prevent delivery to an outdated address and thus the potential disclosure of personal data to third parties. The legal basis for data processing is Art. 6 para. 1 lit. b GDPR.

PayPal's current privacy policy can be found athttps://www.paypal.com/de/webapps/mpp/ua/privacy-fullcan be retrieved

  1. Deletion

Personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies or you request its deletion. Data will also be deleted if a storage period prescribed by the aforementioned regulation expires, unless further storage of the data is necessary for the conclusion or performance of a contract or you have given your consent.

  1. Data security

We protect our website and other systems through technical and organizational measures against loss, destruction, access, alteration, or distribution of your data by unauthorized persons. Data transmission is encrypted using SSL (128-bit to 256-bit), depending on the browser used. Despite regular checks and continuous improvement of our security measures, complete protection against all threats is not possible.

  1. Cookies

To make using our websites and remembering visitor preferences more user-friendly, we use cookies. For example, this allows us to save your language selection. Cookies are text files that are stored on your hard drive to identify your browser when you revisit the website. You can prevent cookies from being stored on your hard drive by adjusting your browser settings. You can also delete cookies that have already been set at any time. Each browser manages cookie settings differently. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find this information for the respective browsers at the following links:
Internet Explorer™
Safari™
Chrome™
Firefox™
Opera™
If you do not accept cookies, this may impair your use of our website.

  1. Statistics and Analysis (Marketing)

These services and cookies allow us to analyze the use of our website in order to evaluate and improve our services. They can also be used to provide a better customer experience on our website. Furthermore, this category lists services and cookies related to marketing activities. The legal basis for their use is Article 6(1)(a) GDPR, provided you have given your consent to the use of the cookies and services. If consent is not given, the services will not be used. You can withdraw your consent at any time with effect for the future. To do so, simply send an email to the contact details provided above, delete cookies on your device, or make the appropriate selection via the "Privacy Settings" linked at the bottom of this website. Data processing carried out before the withdrawal of consent remains lawful.

  1. Right to erasure

Obligation to delete

You can request that the controller erase your personal data without undue delay, and the controller is obliged to erase such data without undue delay where one of the following grounds applies:

  • The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
  • You withdraw your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a) or Art. 9 para. 2 lit. a) GDPR, and there is no other legal basis for the processing.
  • You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
  • Your personal data has been processed unlawfully.
  • The erasure of your personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
  • Your personal data was collected in relation to information society services offered, in accordance with Article 8(1) of the GDPR.
  1. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) of the GDPR, including profiling based on those provisions. The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

  1. Update of this privacy policy

Our website is constantly being developed. Therefore, we update this privacy policy from time to time. We recommend that you check this privacy policy regularly. You can see whether there have been any changes by checking the date shown below.