Privacy policy
1) Introduction and Contact Information of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how your personal data is handled when using our website. Personal data includes all data by which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Florian Günther, Schlessierstraße 1, 84032 Altdorf, Germany, Tel.: 015128303008, Email: support@femboyzone.cloud.
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
2) Data Collection When Visiting Our Website
2.1 If you use our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect the data your browser sends to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website:
-The website visited
-Date and time of access
-Amount of data sent in bytes
-Source/reference from which you accessed the page
-Browser used
-Operating system used
-IP address used (if applicable, in anonymized form)
Processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. Data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are specific indications of illegal use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" and the lock symbol in your browser's address bar.
3) Hosting & Content Delivery Network
Shopify
We use the system of the following provider for hosting our website and displaying content:
Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")
Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.
All data collected on our website is processed on the servers of the provider. We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.
An adequate level of data protection is guaranteed for data transfers to Canada by a European Commission adequacy decision.
4) Cookies
To make your visit to our website more attractive and to enable the use of certain functions, we use cookies—small text files stored on your device. Some cookies are deleted after you close the browser (so-called “session cookies”), while others remain on your device and allow us to remember your preferences (“persistent cookies”). You can check the duration of storage in your browser’s cookie settings.
If personal data is also processed through individual cookies, this processing takes place either:
- under Art. 6(1)(b) GDPR for contract performance,
- under Art. 6(1)(a) GDPR based on your consent, or
- under Art. 6(1)(f) GDPR to safeguard our legitimate interests in the optimal functionality of the website and user-friendly visit design.
You can set your browser to inform you about cookie settings and to allow or refuse them on a case-by-case basis. Please note that disabling cookies may restrict the functionality of our website.
5) Contacting Us
5.1 WhatsApp Business
We offer visitors the opportunity to contact us via WhatsApp (WhatsApp Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland). We use the business version of WhatsApp.
If you contact us for a specific business purpose (e.g., an order), we will store and use your WhatsApp number and, if provided, your first and last name under Art. 6(1)(b) GDPR. We may ask you for further information (e.g., order number, email) to assign your request.
For general inquiries, your contact data is processed under Art. 6(1)(f) GDPR based on our legitimate interest in efficiently responding to your inquiry.
Your data will only be used for responding via WhatsApp. No data will be passed to third parties.
Note: WhatsApp Business accesses the address book of our device, which may transfer stored contacts to Meta Platforms Inc. in the USA. We only store WhatsApp contact data of users who contacted us.
Each user has consented to this transfer upon accepting WhatsApp’s terms (Art. 6(1)(a) GDPR). Users who do not use WhatsApp or haven't contacted us via WhatsApp are excluded from this data transfer.
More about WhatsApp’s data practices:
https://www.whatsapp.com/legal/?eea=1#privacy-policy
Data may be transferred to Meta’s servers in the USA. Meta is part of the EU-U.S. Data Privacy Framework, ensuring compliance with EU data protection standards.
5.2 Contact Form / Email
When contacting us (e.g., via form or email), personal data is collected. The form indicates what data is collected. This data is used solely to respond to your request and for related technical administration.
Legal basis:
- Art. 6(1)(f) GDPR (legitimate interest in responding), or
- Art. 6(1)(b) GDPR if contact aims at a contract.
Your data will be deleted once your request has been fully processed unless legal retention periods prevent deletion.
6) Use of Customer Data for Direct Advertising
Shopify Email
Our newsletters are sent via Shopify International Limited, Dublin, Ireland.
Data may also be transferred to Shopify Inc., Ottawa, Canada.
Based on our legitimate interest in user-friendly newsletter marketing (Art. 6(1)(f) GDPR), we forward your email to Shopify for the purpose of sending the newsletter.
If you consent (Art. 6(1)(a) GDPR), Shopify also tracks the newsletter’s performance (e.g., open and click rates) using web beacons. Device data (e.g., IP address, browser, system) may be collected and evaluated but not merged with other data.
You can withdraw your tracking consent at any time.
We have a data processing agreement with Shopify to protect your data.
Data transfers to Canada are covered by the EU adequacy decision.
7) Web Analytics
Google Tag Manager
We use Google Tag Manager (Google Ireland Ltd., Dublin, Ireland) to integrate and manage tracking tools.
Tag Manager itself does not analyze data or store information on user devices but may transmit your IP address to Google. Data may be transferred to Google LLC in the USA.
Processing takes place only with your consent (Art. 6(1)(a) GDPR). You may withdraw consent via the cookie consent tool.
We have a data processing agreement with Google.
Google is part of the EU-U.S. Data Privacy Framework.
8) Site Functionalities
Google Maps
This site uses Google Maps API (Google Ireland Ltd.) to visually present our location and make navigation easier.
When using this function, your IP address and other data may be transferred to Google servers (including in the USA). Logged-in users may have data linked to their Google account.
Processing is based on Art. 6(1)(f) GDPR (legitimate interest in user-friendliness and marketing). If you do not agree, you may disable JavaScript in your browser to block Maps (this disables the map view).
If required by law, we ask for your consent (Art. 6(1)(a) GDPR) before activating Google Maps. You may revoke consent at any time.
Google is part of the EU-U.S. Data Privacy Framework.
9) Tools and Miscellaneous
9.1 Cookie Consent Tool
We use a cookie consent tool to collect user consents. It appears as an interactive interface when you visit our site.
Only cookies requiring consent will be loaded after your approval. Technically necessary cookies are used to store your preferences.
If personal data (e.g., IP) is processed, it is done under Art. 6(1)(f) GDPR (legitimate interest in compliant consent management).
Additional legal basis: Art. 6(1)(c) GDPR (legal obligation).
We have a data processing agreement in place.
More details are available in the cookie consent tool on our website.
9.2 Lexoffice
We use Lexoffice (Haufe-Lexware GmbH & Co. KG, Freiburg, Germany) for accounting.
It processes incoming/outgoing invoices and bank data to automate bookkeeping.
If personal data is involved, it is processed under Art. 6(1)(f) GDPR (legitimate interest in efficient business operations).
10) Data Subject Rights
You have the following rights under GDPR:
-Right of access (Art. 15)
-Right to rectification (Art. 16)
-Right to erasure (Art. 17)
-Right to restriction of processing (Art. 18)
-Right to notification (Art. 19)
-Right to data portability (Art. 20)
-Right to withdraw consent (Art. 7(3))
-Right to lodge a complaint (Art. 77)
10.2 Right to Object
If we process your data based on legitimate interests, you may object at any time for reasons arising from your situation (Art. 21(1) GDPR).
We will stop processing unless we have compelling legitimate grounds.
If your data is used for direct advertising, you may object at any time (Art. 21(2) GDPR). We will stop using your data for this purpose.
11) Duration of Storage of Personal Data
The duration of storage depends on the legal basis, purpose, and statutory retention periods.
-If based on consent (Art. 6(1)(a)), data is stored until withdrawal.
-If based on contract (Art. 6(1)(b)), data is stored until the purpose is fulfilled or retention periods expire.
-If based on legitimate interest (Art. 6(1)(f)), data is stored until you object unless we prove overriding reasons.
-If for direct advertising (Art. 6(1)(f)), data is stored until you object.
Unless otherwise stated, data is deleted when it is no longer needed for its original purpose.
