Privacy policy

1. Introduction and Contact Details of the Controller

1.1

We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data means any data with which you can be personally identified.

1.2

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Dmitrij Filenko

Dmitrij Filenko Black Forest AI Design

Georg-Wagner-Str. 32

72202 Nagold

Germany

Tel: +49 1520 6641332

E-mail: support@bottombob.com

The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2. Data Collection When Visiting Our Website

2.1

When using our website for purely informational purposes, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time at the moment of access
  • Amount of data sent in bytes
  • Source/reference from which you reached the page
  • Browser used
  • Operating system used
  • IP address used (in anonymized form)

The processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The IP address is anonymized before storage (e.g., by masking the last digits), so that a personal assignment is no longer possible. The data will be deleted automatically after 7 days, unless longer storage is required to investigate unlawful use. The data will not be passed on or used in any other way.

2.2

For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

3. Cookies

3.1

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your end device. We distinguish between technically necessary cookies (e.g., for the shopping cart and login) and non-necessary cookies (e.g., for analysis or marketing).

  • Technically necessary cookies: These cookies are required for the basic functions of the website (e.g., session cookies). They are automatically deleted after closing the browser. The legal basis is Art. 6 (1) lit. b GDPR (performance of a contract) or Art. 6 (1) lit. f GDPR (legitimate interest in providing the website).
  • Non-necessary cookies: We only use these cookies (e.g., analysis cookies from third-party providers) with your express consent pursuant to Art. 6 (1) lit. a GDPR. Some of them remain on your device for longer (persistent cookies), for example, to save user settings.

3.2

We use a cookie consent tool to obtain your consent for non-necessary cookies. When you first visit our website, you can decide which cookie categories you allow (e.g., "Essential", "Statistics", "Marketing"). You can revoke or adjust your consent at any time via the "Cookie Settings" link at the bottom of the page.

3.3

Examples of cookies used:

  • printify_session: Purpose: Session management for Printify integration, Storage duration: End of session.
  • _ga (Google Analytics, if used): Purpose: Analysis of user behavior, Storage duration: 2 years (only with consent).

You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies generally. If you do not accept cookies, the functionality of our website may be restricted.

4. Contacting Us

When you contact us (e.g., via contact form or e-mail), we process personal data exclusively for the purpose of handling your request and only to the extent necessary for this purpose. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest) or, in the case of initiating a contract, Art. 6 (1) lit. b GDPR. Your data will be deleted 3 months after final processing, provided that no statutory retention obligations conflict with this.

5. Data Processing When Opening a Customer Account

Pursuant to Art. 6 (1) lit. b GDPR, we collect and process personal data (e.g., name, e-mail, address) that you provide when opening a customer account. The mandatory data required can be seen from the input mask on our website. Deletion of your account is possible at any time by sending a message to support@bottombob.com. After deletion, your data will be removed, provided that no contracts are open or statutory retention periods exist.

6. Use of Customer Data for Direct Advertising

If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information is your e-mail address; further data (e.g., name) is voluntary. We use the double opt-in procedure: you will only receive the newsletter after confirming a verification link. The legal basis is your consent pursuant to Art. 6 (1) lit. a GDPR. We store the IP address, date, and time of registration for traceability. You can cancel the newsletter at any time via the unsubscribe link or by sending a message to support@bottombob.com. Your e-mail address will then be deleted immediately, unless further consent has been given.

7. Data Processing for Order Fulfillment and Shop Hosting

7.1 Shopify

For the hosting, provision, and technical operation of our online shop, we use the shop system of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, Ireland ("Shopify"). All data collected in connection with the use of our website and the ordering process is processed on Shopify's servers. This includes IP addresses, order data, address data, and payment data. Data transfer to third countries outside the EU (such as the USA) is secured by Standard Contractual Clauses of the European Commission. The legal basis for processing is Art. 6 (1) lit. b GDPR (necessity for the performance of a contract). Further information can be found in Shopify's privacy policy: https://www.shopify.com/legal/privacy.

7.2 Transfer to Transport and Credit Companies

For the purpose of contract fulfillment, we pass on your data (name, address) to the commissioned transport company and, if applicable, to the credit institution in accordance with Art. 6 (1) lit. b GDPR, insofar as this is necessary for the delivery of the goods or payment processing.

7.3 Printify

For order fulfillment and production of our print-on-demand products, we use the service Printify, Inc., 108 West 13th Street, Wilmington, DE 19801, USA. Name, address, and order details are passed on to Printify in accordance with Art. 6 (1) lit. b GDPR exclusively for the processing and shipping of your order. The transfer of data to the USA is based on Standard Contractual Clauses (SCC) of the European Commission. In addition, Printify implements technical and organizational measures to protect your data from unauthorized access. Further information can be found in Printify's privacy policy: https://printify.com/privacy-policy/.

7.4 Use of Payment Service Providers

  • PayPal: In the case of payment via PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg), we pass on your payment data (name, address, payment details) in accordance with Art. 6 (1) lit. b GDPR for payment processing. For credit checks (e.g., "Pay Later"), this is done in accordance with Art. 6 (1) lit. f GDPR. You can object to the processing, but PayPal may still be authorized to process the payment. Details: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

8. Tools, Analysis, and App Integrations

8.1 Cookie Consent Tool

This website uses a cookie consent tool to obtain your consent for cookies and cookie-based applications that require consent. You can set your preferences during your first visit and adjust them at any time via "Cookie Settings". The legal basis is Art. 6 (1) lit. c GDPR (legal obligation under German law / TDDDG).

8.2 Hotjar (Web Analysis and User Behavior)

We use Hotjar on this website (Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St. Julian's STJ 3141, Malta). This tool helps us understand how users move around our site (e.g., which links are clicked, how far they scroll). Technical information of the end device (anonymized IP address, screen size, browser type, country, preferred language) is collected and processed pseudonymously. Direct identification of individual visitors is excluded.

  • Legal basis: Processing is carried out exclusively on the basis of your express consent pursuant to Art. 6 (1) lit. a GDPR. You can revoke this consent at any time via our cookie settings.
  • Hotjar Privacy Policy: https://www.hotjar.com/legal/policies/privacy/

8.3 Judge.me (Product Reviews)

For collecting, verifying, and displaying customer reviews, we use the app Judge.me (Judge.me Ltd., 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom). Following an order, Judge.me processes your e-mail address, name, IP address, and details of the purchased products to send you a review invitation and ensure authenticity ("verified purchase"). An adequacy decision by the EU Commission is in place for the United Kingdom.

  • Legal basis: The invitation is sent on the basis of our legitimate interest in authentic customer feedback pursuant to Art. 6 (1) lit. f GDPR. The active publication of a review is based on your consent (Art. 6 (1) lit. a GDPR).
  • Judge.me Privacy Policy: https://judge.me/privacy

8.4 FlowMail (Automation of Transactional Emails / Cancellation Policy)

We use the plugin "FlowMail" for the automated generation and delivery of legally required transactional messages after a purchase, in particular for providing the cancellation policy and the statutory cancellation form. In this process, name, e-mail address, and order details are processed to execute the delivery in a legally secure manner.

  • Legal basis: The processing serves to fulfill our statutory information obligations in distance selling as well as the execution of the contract. The legal basis is Art. 6 (1) lit. b GDPR and Art. 6 (1) lit. c GDPR.

8.5 Goalify (Shop Optimization)

We integrate the Goalify app to provide interactive widgets, progress displays (e.g., for free shipping above a certain order value), or notifications in the shopping cart. In doing so, temporary session data, IP addresses, and shopping cart contents are processed to display the functions visually in the browser.

  • Legal basis: The processing is based on our legitimate interest in an optimized, user-friendly design of our online shop pursuant to Art. 6 (1) lit. f GDPR.

9. Rights of the Data Subject

Applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

  • Right to information pursuant to Art. 15 GDPR: You have the right to request information about your personal data processed by us.
  • Right to rectification pursuant to Art. 16 GDPR: You have the right to demand the immediate correction of incorrect or completion of your data stored by us.
  • Right to erasure pursuant to Art. 17 GDPR: You have the right to request the deletion of your personal data stored by us, provided that no statutory retention periods conflict with this.
  • Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your data as long as the accuracy of your data is being checked or if the data is no longer required for the original purpose, but you object to deletion.
  • Right to information pursuant to Art. 19 GDPR: If you have asserted the right to rectification, erasure, or restriction of processing, we are obliged to notify all recipients to whom the data has been disclosed of this rectification/erasure.
  • Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your data that you have provided to us in a structured, commonly used, and machine-readable format.
  • Right to revoke consent granted pursuant to Art. 7 (3) GDPR: You have the right to revoke consent once given to the processing of data at any time with effect for the future.
  • Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with a supervisory authority (e.g., the State Commissioner for Data Protection in Baden-Württemberg).

RIGHT TO OBJECT PURSUANT TO ART. 21 GDPR

IF, WITHIN THE SCOPE OF A BALANCE OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR LEGITIMATE INTEREST (ART. 6 (1) LIT. F GDPR), YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN PROVE COMPELLING REASONS FOR PROCESSING WORTHY OF PROTECTION WHICH OUTWEIGH YOUR INTERESTS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.