privacy

2.2.1 Information on Processing

Cookies/services used
Information on the cookies/services we use can be found under " Cookie settings " .

2.2.2 Recipients of the personal data

recipient category	Affected Data	Legal Basis for Transfer	possibly legitimate interest
hosting service provider	access data	Order processing (Article 28 GDPR)
IT security service provider	access data	Order processing (Article 28 GDPR)
agencies	access data	Order processing (Article 28 GDPR)

2.3 Newsletters

We describe here what happens to your personal data in connection with a subscription to our newsletter:

2.3.1 Information on Processing

data category	Intended use	legal basis	possibly legitimate interest	storage duration
e-mail address	Verification of the registration (double opt-in procedure), newsletter delivery	Consent (Art. 6 Para. 1a GDPR)	-	Duration of the newsletter subscription (in the event of cancellation or unconfirmed recipients, data will be deleted after 1 month)
Login/Logout Data	Traceability of completed newsletter registration/confirmation/unsubscription	Protection of legitimate interests (Art. 6 Para. 1f GDPR)	Proof of newsletter subscription/confirmation/cancellation	Duration of newsletter subscription (unsubscribe dates, unlimited for accountability purposes)
Access data (only IP address), contact details (only email address)	Interest-based design of the newsletter, evaluations of newsletter openings, clicks within the newsletter, unsubscribe rate, bounce rate	Article 6 paragraph 1 letter a) GDPR		Duration of the newsletter subscription (in the event of cancellation or unconfirmed recipients, data will be deleted after 1 month) Data will be anonymized for evaluation purposes.

Unsubscribing from the newsletter is possible at any time and can be done via a link provided for this purpose in the newsletter.

2.4 Contacting Us

You can find out how we process your personal data when you contact us here:

2.4.1 Information on Processing

data category	Intended use	legal basis	possibly legitimate interest	storage duration
personal master data	Handling customer inquiries and user complaints	Contract (Art. 6 Para. 1b GDPR), protection of legitimate interests (Art. 6 Para. 1f GDPR)	Customer loyalty, improvement of our service	processing of the request
contact details	Handling customer inquiries and user complaints	Contract (Art. 6 Para. 1b GDPR), protection of legitimate interests (Art. 6 Para. 1f GDPR)	Customer loyalty, improvement of our service	processing of the request
Content of inquiries/complaints	Handling customer inquiries and user complaints	Contract (Art. 6 Para. 1b GDPR), protection of legitimate interests (Art. 6 Para. 1f GDPR)	Customer loyalty, improvement of our service	processing of the request

2.4.2 Recipients of Personal Data

recipient category	Affected Data	Legal Basis for Transfer	possibly legitimate interest

2.5 Tea Orders

The following information describes how your personal data is processed when you order tea through our shop.

2.5.1 Information on Processing

data category	Intended use	legal basis	possibly legitimate interest	storage duration
personal master data	Tea order and return if necessary	Contract (Art. 6 Para. 1b GDPR)	-	Processing of the order or 10 years for invoices
contact details	Tea order and return if necessary	Contract (Art. 6 Para. 1b GDPR)	-	Processing of the order or 10 years for invoices
address data	Tea order and return if necessary	Contract (Art. 6 Para. 1b GDPR)	-	Processing of the order or 10 years for invoices
order data	Tea order and return if necessary	Contract (Art. 6 Para. 1b GDPR)	-	Processing of the order or 10 years for invoices
payment details	Tea order and return if necessary	Contract (Art. 6 Para. 1b GDPR)	-	Processing of the order or 10 years for invoices

2.5.2 Recipients of the personal data

recipient category	Affected Data	Legal Basis for Transfer	possibly legitimate interest
payment service provider	All mentioned under 2.5.1	Contract (Art. 6 Para. 1b GDPR)

2.6 Customer Account

The following information describes how your personal data is processed when you register for a customer account

2.6.1 Information on Processing

data category	Intended use	legal basis	possibly legitimate interest	storage duration
Account data	Secure access to the customer account	Consent (Art. 6 Para. 1a GDPR)	-	Until revocation or deregistration of the customer account
personal master data	Management of a customer account	Consent (Art. 6 Para. 1a GDPR)	-	Until revocation or deregistration of the customer account
contact details	Management of a customer account	Consent (Art. 6 Para. 1a GDPR)	-	Until revocation or deregistration of the customer account
address data	Management of billing and delivery addresses	Consent (Art. 6 Para. 1a GDPR)	-	Until revocation or deregistration of the customer account
order data	Order history, order status	Consent (Art. 6 Para. 1a GDPR)	-	Until revocation or deregistration of the customer account
payment details	Management of payment options	Consent (Art. 6 Para. 1a GDPR)	-	Until revocation or deregistration of the customer account
Login/Logout Data	Traceability of account registration/confirmation/deregistration	Protection of legitimate interests (Art. 6 Para. 1f GDPR)	Proof of account registration/confirmation/deregistration	Until revocation or deregistration of the customer account (deregistration dates, unlimited to fulfill accountability obligations)

2.7 Facebook Fan Page

Under the URL https://www.facebook.com/YasashiTee we operate a fan page on the social network "Facebook", which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland ("Facebook" ) is operated. You can find Facebook's privacy policy at: https://www.facebook.com/about/privacy

Calling up and every interaction on our Facebook fan page leads to the processing of personal data, regardless of whether you have a Facebook account or not. If you are logged in to your Facebook account while accessing our Facebook fan page, Facebook and/or its affiliated companies may merge the information about the Facebook fan page call with your account information and may use this to create profiles. If you do not want such a profile to be created, please log out of your Facebook account before accessing our Facebook fan page.

Facebook provides us with statistical data on the use of our Facebook fan page via the "Facebook Insights" function. This data includes data such as gender, age range, location, page views, interactions and paid activity information, reach, accounts reached, impressions and impressions per day. Important to know: We cannot draw conclusions about individual visitors to our Facebook presence from this data. We use the data generated by "Facebook Insights" on the basis of Article 6 Paragraph 1 f) GDPR, whereby our legitimate interests consist in making our Facebook fan page more attractive and providing it with content that is tailored to our interests.

Since we are jointly responsible with Facebook for the processing of your data on our Facebook presence, we have entered into an agreement with Facebook, the content of which you can view here: https://www.facebook.com/legal/terms/page_controller_addendum.

As the data subject, you are entitled to the rights set out in Section 3 of this data protection declaration. You can assert this against us at your choice (see section 1.2 above), or directly against Facebook at https://www.facebook.com/help/contact/540977946302970. If you assert your rights against us, we will forward your requests to Facebook according to our agreement.

2.8 Instagram Presence

Under the URL https://www.instagram.com/yasashi_tee/ we operate a presence on the "Instagram.com" platform operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (" Facebook”) is operated. The Instagram privacy policy can be found here: https://help.instagram.com/519522125107875/

Calling up and every interaction on our Instagram presence leads to the processing of personal data, regardless of whether you have an Instagram or Facebook account or not. If you are logged in to your Facebook account while accessing our Instagram presence, Facebook as the operator of Instagram and/or its affiliated companies may combine the information about accessing our Instagram presence with your account information and may use this for education of profiles. If you do not want such a profile to be created, please log out before accessing our Instagram presence.

Facebook provides us with statistical data on the use of our Instagram presence via the "Instagram Insights" function. This data includes data such as gender, age range, location, page views, interactions and paid activity information, reach, accounts reached, impressions and impressions per day. Important to know: We cannot draw conclusions about individual visitors to our Instagram presence from this data. We use the data generated by "Instragram Insights" on the basis of Article 6 Paragraph 1 f) GDPR, whereby our legitimate interests consist in making our Instagram presence more attractive and providing it with content that suits our interests.

Since we are jointly responsible with Facebook for the processing of your data on our Instagram presence, we have entered into an agreement with Facebook, the content of which you can view here: https://www.facebook.com/legal/terms/page_controller_addendum.

As the data subject, you are entitled to the rights set out in Section 3 of this data protection declaration. You can assert this against us at your choice (see section 1.2 above), or directly against Facebook at https://help.instagram.com/contact/186020218683230. If you assert your rights against us, we will forward your requests to Facebook according to our agreement.

2.9 Pinterest Presence

We operate a presence on the social network of Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA under the URL https://www.pinterest.de/Yasashi_tee/_shop/. Every call and every interaction leads to data processing, regardless of whether you have a Pinterest account or not. In the case of a logged-in account, Pinterest Inc. merges the information about the fan page call-up with your account information and may use this to create profiles. If you do not want such a profile to be created, log out before accessing our fan page.
If you connect a Facebook, Google, or other third-party account to Pinterest, Pinterest uses information from those accounts (such as your friends or contacts) to improve your Pinterest experience. This is dependent on the privacy policies and privacy settings of those accounts.
Using the means provided by Pinterest, we process statistical data from our fan page such as the total number of page viewers, page reach, page interactions, pin interactions, video views, pin reach, comments, the proportion of female and male visitors to our Pinterest profile, origin based on country, language, the device class used to access Pinterest and clicks on links. This is done on the basis of our legitimate interest (Article 6 Paragraph 1 f GDPR) to make posts on the site more attractive or to find the right time for publication.
As the data subject, you are entitled to the rights set out in Section 3 of this data protection declaration.
You can assert these rights both against Pinterest Inc. and against us, whereby we will forward your inquiries there.

The extent to which Pinterest processes and/or shares your data with third parties beyond the manner explained in the data protection information is beyond our control and cannot be checked by us.

Information on data protection at Pinterest Inc. can be found here: https://policy.pinterest.com/de/privacy-policy#section-how-and-when-we-share-information

A list of the technical information that Pinterest Inc. collects during use can be found here: https://policy.pinterest.com/de/technical-information-we-collect-when-you-use-our-service

Further information on the use of cookies by Pinterest Inc. and the processing of information read from them can be found here: https://policy.pinterest.com/de/cookies

3. Data subject rights

3.1 Right to Object

You have the right, for reasons arising from your particular situation, to object at any time with future effect to the processing of personal data relating to you, which is carried out in accordance with Article 6 (1) (e) or (f) GDPR ; this also applies to profiling based on these provisions.

You can exercise your right to object free of charge.

3.2 Right to information

You have the right to find out whether personal data relating to you is being processed by us, which personal data this may be, and further information in accordance with Art. 15 GDPR.

3.3 Right to Rectification

You have the right to demand that we immediately correct any incorrect personal data concerning you (Art. 16 GDPR). Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.

3.4 Right to Erasure (“Right to be Forgotten”)

You have the right to demand that personal data relating to you be deleted immediately if one of the reasons stated in Art. 17 Para. 1 GDPR applies and the processing is not for one of the purposes regulated in Art. 17 Para. 3 GDPR is required.

3.5 Right to Restriction of Processing

You are entitled to demand a restriction in the processing of your personal data if one of the conditions regulated in Art. 18 Para. 1 Letter a) to d) GDPR is met.

3.6 Right to data portability

You have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transmit this data to another responsible person without hindrance from us or to have a direct transmission done by us, provided this is technically possible. This should always apply if the basis of data processing is consent or a contract and the data is processed automatically. This does not apply to data that is only available in paper form.

3.7 Right of Withdrawal upon Consent

If the processing is based on your consent, you have the right to withdraw your consent at any time. This does not affect the legality of the processing carried out on the basis of the consent until the revocation.

3.8 Right to Complain

You have a right of appeal to a supervisory authority.