Responsible Party in terms of the General Data Protection Regulation (GDPR) and other data protection laws:
Sustainable Mothership UG
Fregestrasse 76
12159 Berlin
Germany
info@sustainablemothership.com
General Information on Data Processing
On this page, we inform you about the processing of your personal data on the website.
How we collect and use your personal data depends on how you interact with us or which services you use. We collect, use, or share your personal data only if we have a legitimate purpose and a legal basis for doing so.
What do we mean by legal basis?
Consent (Art. 6 Para. 1 S. 1 lit. a GDPR) - You have given us your consent to process your personal data for a specific purpose that we have explained to you. You have the right to withdraw your consent at any time. To do this, please contact the Data Protection Officer at the contact details given below.
Contract (Art. 6 Para. 1 S. 1 lit. b GDPR) - We need to use your data to fulfill a contract you have with us, or it is necessary to use your data because we have asked you or you have taken certain steps before entering into this contract.
Legal Obligation (Art. 6 Para. 1 S. 1 lit. c GDPR) - We need to use your data to comply with the law.
Vital Interests (Art. 6 Para. 1 S. 1 lit. d GDPR) - Processing your data is necessary to protect your vital interests or those of another person. For example, to protect you from serious bodily harm.
Public Task (Art. 6 Para. 1 S. 1 lit. e GDPR) - Processing your data is necessary for the performance of a task carried out in the public interest, or because it is covered by a legally defined task, e.g., for a legal function.
Legitimate Interests (Art. 6 Para. 1 S. 1 lit. f GDPR) - Processing your data is necessary to support a legitimate interest that we or a third party have, only if your own interests do not override.
Please note that we may not be able to provide you with our webshop if your data is processed in the context of fulfilling a contract or a legal obligation and you do not provide the requested data.
Your Rights
If personal data is processed by you, you are the affected person in the sense of the GDPR and you have the following rights against the responsible party:
The right to information (Art. 15 GDPR) You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right to information about this data and to the following information:
Processing purposes Categories of personal data Recipients or categories of recipients Planned storage duration or the criteria for determining this duration the existence of the rights to correction, deletion, limitation of processing, or objection Right to complain to the competent supervisory authority If applicable, the origin of the data (if collected from a third party) If applicable, the existence of automated decision-making including profiling with meaningful information about the involved logic, the scope, and the expected effects If applicable, transfer of personal data to a third country or international organization Right to Correction (Art. 16 GDPR) Should your personal data be incorrect or incomplete, you have the right to request immediate correction or completion of the personal data.
Right to Restriction of Processing (Art. 18 GDPR) If one of the following conditions is met, you have the right to request a restriction on the processing of your personal data:
You dispute the accuracy of your personal data for a period that allows us to verify the accuracy of the personal data. In the case of unlawful processing, you refuse the deletion of personal data and instead request the restriction of the use of the personal data. We no longer need your personal data for processing purposes, but you need them to assert, exercise, or defend legal claims, or after you have objected to the processing, for the duration of the review of whether our legitimate reasons outweigh yours. Right to Deletion ("Right to be Forgotten") (Art. 17 GDPR) If one of the following reasons applies, you have the right to request the immediate deletion of your personal data:
Your data is no longer necessary for the purposes for which it was originally collected. You revoke your consent and there is no other legal basis for processing. You object to the processing and there are no overriding legitimate reasons for the processing, or you object according to Art. 21 Para. 2 GDPR. Your personal data has been processed unlawfully. The deletion is necessary to fulfill a legal obligation under Union law or the law of the member state to which we are subject. The personal data was collected concerning offered services of the information society according to Art. 8 Para. 1 GDPR. Please note that the above reasons do not apply as long as the processing is necessary:
For the exercise of the right to freedom of expression and information; To fulfill a legal obligation or to perform a task that is in the public interest and that we are subject to. For reasons of public interest in the area of public health. For archival purposes in the public interest, scientific or historical research purposes or for statistical purposes. to assert, exercise, or defend legal claims. Right to Data Portability (Art. 20 GDPR) You have the right to receive your personal data, which you have provided to us, in a structured, common, and machine-readable format or to request the transfer to another responsible party.
Right to Object to Certain Data Processing (Art. 21 GDPR) You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is based on Art. 6 Para. 1 S. 1 lit. e or f GDPR; this also applies to profiling based on these provisions.
If the personal data concerning you is processed to operate direct advertising, you have the right to object at any time to the processing of personal data concerning you for such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
Right to Complain to a Supervisory Authority Regardless of any other administrative or judicial remedy, you have the right to complain to a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR.
The supervisory authority with which the complaint was lodged will inform the complainant about the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
A list of the locally competent supervisory authorities in Germany can be accessed on the website of the Federal Commissioner for Data Protection under the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
Shared Use of Data and International Transfer
As explained in this privacy policy, we use various service providers to help us provide our services and protect your data. When we use these service providers, it is necessary that we transfer your personal data to them.
If your personal data is transferred outside the EU, we ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an "adequate" level of data protection according to the European Commission, or by applying another protective measure, such as an enhanced contractual agreement, i.e., the standard contractual clauses (SCCs) adopted by the European Commission.
For example, if we use US service providers, we rely on the SCCs or the EU-US Data Protection Framework, depending on the provider.
Provision of the Website and Creation of Log Files
Description and Scope of Data Processing Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected:
Information about the browser type and version used The user's operating system The user's Internet service provider Date and time of access Websites from which the user's system accesses our website Websites accessed by the user's system through our website This data is stored in the log files of our system.
The storage of this data together with other personal data of the user does not take place.
Purpose of Data Processing The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
The storage in log files is carried out to ensure the functionality of the website. In addition, the data helps us optimize the website and ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
Legal Basis for Data Processing The legal basis for the temporary storage of data and log files is Art. 6 Para. 1 S. 1 lit. f GDPR.
Duration of Storage The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of collecting data to provide the website, this is the case when the respective session is ended.
In the case of storing the data in log files, this is the case after no later than seven days. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
Possibility of Objection The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. The user can object to this. Whether the objection is successful is to be determined within the framework of a balancing of interests.
Use of Cookies
Description and Scope of Data Processing, Purpose, Legal Basis When you visit our website, we use technical aids for various functions, in particular cookies, which can be stored on your terminal device. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
You have the choice when you call up our website and at any time later whether you generally allow the setting of cookies or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager.
We use technically necessary cookies that are required for the technical structure of the website. Without these cookies, our website cannot be displayed (completely correctly) or the support functions are not possible. We also use cookies that are not technically necessary. Text files that are not solely for the functionality of the website are considered technically unnecessary cookies.
Information about used cookies:
The list of used cookies can be requested with info@sustainablemothership.com. However it comprises Facebook, Google, Shopify (and their relevant analytics services),