Privacy policy
Privacy Policy
Responsible for Data Processing:
Spectral Trading – Daniel Nork
Bischofsweg 7
01097 Dresden, Germany
Email: support@spectraltrading.eu
We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information on how we handle your data.
1. Access Data and Hosting
You can visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which includes, for example, the name of the requested file, your IP address, date and time of access, amount of data transferred, and the requesting provider (access data) and documents the request. These access data are evaluated solely for the purpose of ensuring the smooth operation of the site and improving our offerings. This serves the protection of our legitimate interests in the correct presentation of our services according to Art. 6(1) lit. f GDPR. All access data will be deleted no later than seven days after your visit.
Hosting
We host the contents of our website with the following provider:
Shopify
Provider: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").
Shopify is a tool for creating and hosting websites. When you visit our website, Shopify collects your IP address as well as information about your device and browser. Shopify also analyzes visitor numbers, visitor sources, and customer behavior, and creates user statistics. If you make a purchase on our website, Shopify also collects your name, email address, shipping and billing addresses, payment information, and other data related to the purchase (e.g., phone number, order amounts, etc.). Shopify stores cookies in your browser for these analyses.
For details, please see Shopify’s privacy policy: https://www.shopify.de/legal/datenschutz.
The use of Shopify is based on Art. 6(1) lit. f GDPR. We have a legitimate interest in a reliable representation of our website. If you have provided consent, processing is based solely on Art. 6(1) lit. a GDPR and §25(1) TTDSG, as far as consent involves storing cookies or accessing information on your device (e.g., device fingerprinting). Consent can be revoked at any time.
2. Data Processing for Contract Execution and Contact
2.1 Data Processing for Contract Execution
For the purpose of contract execution (including inquiries and handling of potential warranty claims and legal update obligations) under Art. 6(1) lit. b GDPR, we collect personal data that you voluntarily provide during your order. Required fields are marked as such, as they are necessary for contract execution; without them, we cannot process the order. The data collected can be seen in the respective input forms.
Further information on processing your data, including sharing with service providers for order, payment, and shipping processing, can be found in the following sections. After full contract execution, your data will be restricted for further processing and deleted after the expiration of statutory retention periods according to Art. 6(1) lit. c GDPR, unless you have explicitly consented to further use under Art. 6(1) lit. a GDPR or we reserve the right to further lawful use as described here.
Inventory Management System
We use third-party inventory management systems for order and contract processing. Our service providers act as processors under GDPR. For questions regarding our service providers, please contact us as described in this privacy policy.
2.2 Customer Account
If you consent according to Art. 6(1) lit. a GDPR by creating a customer account, we use your data to create the account and store it for future orders. You can delete your account at any time via the contact options or a designated function in your account. After deletion, your data will be removed unless you have explicitly consented to further use or we reserve legally permitted further use.
2.3 Contact
For customer communication, we collect personal data to handle your inquiries according to Art. 6(1) lit. b GDPR, if you voluntarily provide it via contact form, live chat, or email. Required fields are necessary to respond. After processing, your data is deleted unless further use is consented to or legally permitted.
Shopify Inbox
Our website uses the live chat system (chatbot) of Shopify International Limited. Data transmitted through the chat is processed either under Art. 6(1) lit. b GDPR for contract execution or Art. 6(1) lit. f GDPR based on our legitimate interest in effective customer support. Data is deleted once the matter is resolved, unless legal retention requirements exist. Cookies may also be used to create pseudonymous usage profiles for statistical analysis.
3. Data Processing for Shipping
For contract fulfillment under Art. 6(1) lit. b GDPR, we pass your data to the shipping service provider necessary for delivery.
Data Sharing for Delivery Notification
If you explicitly consent during or after your order, we share your email and phone number with the shipping provider for delivery notifications according to Art. 6(1) lit. a GDPR. Consent can be revoked at any time.
Shipping Provider:
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn, Germany
4. Data Processing for Payment
We work with technical service providers, banks, and payment processors to handle payments.
4.1 Transaction Processing
Depending on the payment method, we share data necessary for processing payments with processors, banks, or the payment provider. This is based on Art. 6(1) lit. b GDPR. Payment providers may also collect necessary data directly via their websites or embedded technical solutions.
4.2 Fraud Prevention and Optimization
Additional data may be shared with processors to prevent fraud and optimize payment processes (billing, disputed payments, accounting). This is based on our legitimate interest under Art. 6(1) lit. f GDPR.
4.3–4.5 Credit and Identity Checks
When using Klarna, PayOne, Ratepay, or PayPal invoice/payment services, your consent is required under Art. 6(1) lit. a GDPR for credit and identity checks. Details of these checks, including revocation options, are provided by each provider.
5. Cookies and Other Technologies
General Information
We use essential cookies for basic website functions (e.g., cart, login, language).
Consent-Based Technologies via Complianz
We use Complianz for managing cookie consent. Cookies and tools like Google Analytics or Meta Pixel are loaded only after consent. You can adjust or revoke consent anytime via the cookie banner.
Google Analytics
If consented, we use Google Analytics (Google Ireland Limited) to analyze website use. IP addresses are anonymized within the EU. Data processing is based on your consent (Art. 6(1) lit. a GDPR, §25 TTDSG).
Meta Pixel (Facebook Pixel)
If consented, Meta Pixel (Meta Platforms Ireland Limited) tracks user behavior after clicking Facebook/Instagram ads. Data is processed based on your consent.
6. Social Media
6.1 Social Buttons
Social buttons are embedded as HTML links. Clicking opens the social network site in a new window.
6.2 Our Online Presence (Instagram, YouTube)
If consented, visits to our social media profiles may automatically generate pseudonymous usage profiles for marketing purposes. Our social media service providers are located in countries with or without adequacy decisions. For those without, we rely on EU standard contractual clauses.
7. Contact and Your Rights
7.1 Your Rights
You have rights under GDPR, including access, correction, deletion, restriction, data portability, objection, and complaint to supervisory authorities.
Objection Right
You may object to data processing based on legitimate interests. After objection, data processing ceases unless compelling legitimate grounds exist.
7.2 Contact
For questions, corrections, restrictions, deletions, or objections, contact us via our imprint.
8. Review Platforms
We use Trustpilot A/S for customer reviews. Consent is required to send review invitations via email. Details are in Trustpilot’s privacy policy: https://de.legal.trustpilot.com/end-user-privacy-terms
9. Email Newsletter
Newsletter registration is based on your consent (Art. 6(1) lit. a GDPR) via double opt-in. You can unsubscribe anytime; data is deleted unless legally required to be retained.