Privacy Policy
The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is: Project Camper GmbH
Your rights as a data subject
Using the contact details provided at the end of this page, you can exercise the following rights at any time:
- information about your data stored by us and its processing,
- rectification of inaccurate personal data,
- erasure of your data stored by us,
- restriction of data processing, insofar as we are not yet permitted to erase your data due to legal obligations,
- objection to the processing of your data by us and
- data portability, insofar as you have consented to the data processing or have concluded a contract with us.
If you have given us your consent, you can withdraw it at any time with effect for the future.
You can lodge a complaint with the supervisory authority responsible for you at any time. Your competent supervisory authority depends on the federal state (Bundesland) of your residence, your work or the suspected infringement. A list of the supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Purposes of data processing by the controller and third parties
We process your personal data only for the purposes stated in this privacy policy. Your personal data will not be transferred to third parties for purposes other than those stated. We only pass on your personal data to third parties if:
- you have given your express consent to this,
- the processing is necessary for the performance of a contract with you,
- the processing is necessary for compliance with a legal obligation,
the processing is necessary to safeguard legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in your data not being passed on.
Collection of general information when visiting our website
When you access our website, general information is automatically collected by means of a cookie. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider and similar. This is exclusively information that does not allow any conclusions to be drawn about your person.
This information is technically necessary to correctly deliver the web content you request and is inevitably generated when using the internet. It is processed in particular for the following purposes:
- ensuring a problem-free connection to the website,
- ensuring smooth use of our website,
- evaluating system security and stability and
- for other administrative purposes.
The processing of your personal data is based on our legitimate interest arising from the aforementioned purposes of data collection. We do not use your data to draw conclusions about your person. Recipients of the data are only the controller and, where applicable, processors.
We may evaluate anonymous information of this kind statistically in order to optimise our website and the technology behind it.
Contact and handling of your enquiries
If you contact us by e-mail or via the contact form, we process the data you provide (name, e-mail address, subject, message and, where applicable, your order number) in order to answer your enquiry. A valid e-mail address is required so that we can reply; providing further data is optional. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or an order, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).
Messages you send us by e-mail or via the contact form are received via Amazon Simple Email Service (Amazon SES) of Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg, on servers in the European Union (Frankfurt am Main, Germany), and stored in our internal enquiry management system. The e-mails we send you are also delivered via Amazon SES. Amazon Web Services processes the data on our behalf on the basis of a data processing agreement (Art. 28 GDPR). A transfer to Amazon.com Inc. in the USA cannot be ruled out; Amazon.com Inc. is certified under the EU-US Data Privacy Framework.
To handle enquiries written in Dutch or English promptly, the message content is automatically translated, summarised and categorised, and suggested replies are generated; order data relevant to your enquiry may be taken into account. For this we use the Azure OpenAI Service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, acting as our processor (Art. 28 GDPR) on the basis of the Microsoft Products and Services Data Protection Addendum (DPA). The data is processed exclusively in data centres located in the European Union. Microsoft does not use the submitted data to train AI models; it may store it temporarily, also within the European Union, to detect abuse. Suggested replies are always reviewed by a member of our team before they are sent; no automated decision within the meaning of Art. 22 GDPR is made.
Retention period: enquiries that are not related to an order are deleted 12 months after the last activity once the enquiry has been closed. Correspondence relating to an order is kept for six years as commercial correspondence (Section 257 of the German Commercial Code, HGB). Messages identified as spam or placed in quarantine are deleted after 30 days. These periods also apply to the translations, summaries and suggested replies stored with the enquiry.
Protection of the contact form (Google reCAPTCHA)
To protect our contact form against abuse and automated submissions (spam), we use the Google reCAPTCHA service (version 3) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). reCAPTCHA is not loaded when you open the page, but only when you start filling in the form (first click or first entry in a field). reCAPTCHA then analyses usage behaviour on the page (e.g. IP address, browser and device information, mouse movements, time spent) to distinguish humans from automated programs and transmits this data to Google. Google may set the _GRECAPTCHA cookie and, if you are logged in to a Google account, read the cookies of that account.
The legal basis is our legitimate interest in protecting our forms against abuse (Art. 6(1)(f) GDPR). A transfer to Google LLC in the USA cannot be ruled out; Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists. If you do not wish to use reCAPTCHA, you can also e-mail us directly. Further information can be found in Google’s privacy policy.
Use of Google Analytics 4
If you have consented to the “Analytics” category via our cookie banner, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics helps us understand how our website is used so that we can improve our range and usability. In particular, the following are processed: pages viewed and time spent, where the visit came from (e.g. referring website), information about your device and browser, your approximate location (derived from the IP address; according to Google, Google Analytics 4 does not store IP addresses) and orders in our shop (order number, order value, items ordered). For this purpose, cookies containing a randomly generated ID are stored on your device (see “Cookies used”).
The legal basis is your consent (Art. 6(1)(a) GDPR and the applicable cookie legislation). Without your consent, Google Analytics is not loaded and no data is transmitted to Google. We use Google’s Consent Mode: advertising-related features (storage for advertising purposes, personalised advertising) are only active if you have additionally consented to the “Marketing” category.
Google processes the data on our behalf on the basis of a data processing agreement. A transfer to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists. The event data stored in Google Analytics is deleted automatically after the retention period set there.
Your consent is voluntary and can be withdrawn at any time with effect for the future: open the Cookie settings (also in the footer of every page) and deactivate the “Analytics” category. The Google Analytics cookies are then deleted. You can also delete or block cookies in your browser settings or install the browser add-on to deactivate Google Analytics. Further information can be found in Google’s privacy policy.
Cookies used
| Cookie Name | Cookie Description |
|---|---|
| FORM_KEY | Stores a randomly generated hash to protect against external interference |
| PHPSESSID | Session ID |
| STORE | The selected store view or store language. |
| MAGE-CACHE-SESSID | Facilitates caching of content in the browser. |
| MAGE-CACHE-STORAGE | Facilitates caching of content in the browser. |
| MAGE-CACHE-STORAGE-SECTION-INVALIDATION | Facilitates caching of content in the browser. |
| MAGE-CACHE-TIMEOUT | Facilitates caching of content in the browser. |
| SECTION-DATA-IDS | Facilitates caching of content in the browser. |
| PRIVATE_CONTENT_VERSION | Facilitates caching of content in the browser. |
| X-MAGENTO-VARY | Facilitates caching of content in the browser. |
| MAGE-TRANSLATION-FILE-VERSION | Facilitates caching of content in the browser. |
| _GA | Google Analytics 4: distinguishes visitors by means of a random ID. Only after consent to “Analytics”, lifetime up to 2 years. |
| _GA_<ID> | Google Analytics 4: stores the session state. Only after consent to “Analytics”, lifetime up to 2 years. |
Changes to our privacy provisions
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
Questions about data protection
If you have any questions about data protection, please send us an e-mail or contact the person responsible for data protection in our organisation directly:
Jan Richter
jan@project-camper.de
This privacy policy was created using the privacy policy generator of activeMind AG.