Privacy Policy
Information about the processing of your personal data
Controller
Controller within the meaning of the General Data Protection Regulation (GDPR): Runferry — Yevhen Yushchenko Wasserschapfstraße 37, 89537 Giengen an der Brenz, Deutschland E-mail: admin@runferry.de Phone: +49 173 3973475
General Information and Legal Bases
We process personal data only to the extent necessary to operate this website, to process your orders and to fulfil statutory obligations. The legal bases are Art. 6 (1)(b) GDPR (performance of a contract), Art. 6 (1)(c) GDPR (legal obligation), Art. 6 (1)(f) GDPR (legitimate interest) and — where you have given consent — Art. 6 (1)(a) GDPR (consent). The following sections explain which data is processed in detail.
Payment Processing (Stripe and PayPal)
We use external payment service providers to process your payment. When you pay by card, Klarna, Przelewy24 (P24), BLIK or SEPA direct debit, your payment data is processed directly by Stripe Payments Europe, Ltd. (Ireland). When you pay via PayPal, your payment data is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg). We ourselves never receive complete card or account details, only a confirmation of the payment. The legal basis is Art. 6 (1)(b) GDPR (performance of a contract).
Customer Account and Order Data (Firebase, Google)
We use Firebase Authentication and Cloud Firestore provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for customer accounts and for storing order and profile data. The data processed includes in particular your e-mail address, login data as well as order and address data. The legal basis is Art. 6 (1)(b) GDPR (provision of the customer account and contract processing).
Web Analytics and Marketing (Google Analytics 4, Meta Pixel)
This website uses Google Analytics 4 (Google Ireland Limited) and the Meta Pixel (Meta Platforms Ireland Limited, formerly Facebook) — but only after you have given your consent via our cookie banner. Without your consent, no analytics or marketing cookies are set and no such data is transferred. The legal basis is Art. 6 (1)(a) GDPR (consent). You can withdraw your consent at any time with effect for the future via the cookie settings.
Transactional E-mails
To process your order, we send transactional e-mails (e.g. order and shipping confirmations) via an SMTP service. This involves processing your e-mail address and the order data required for the respective message. The legal basis is Art. 6 (1)(b) GDPR (performance of a contract).
Shipping Providers
To deliver your order, we pass on your name, your delivery address and — where required for delivery — your phone number and e-mail address to the shipping provider commissioned in each case: DHL, GLS, DPD, Fan Courier or Nova Poshta. The legal basis is Art. 6 (1)(b) GDPR (performance of a contract).
Address Autocomplete
During checkout we assist you with entering your address. For this purpose, the postal code or city name you enter is transmitted to the services Zippopotam.us and Photon (komoot.io) in order to display matching suggestions. No further personal data is transferred in the process. The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in accurate and convenient address entry).
Server Log Files
When you visit this website, our hosting infrastructure (Google Cloud Run, region europe-west1) automatically processes technical access data in server log files, in particular the IP address, date and time of access, page accessed, browser type and operating system. This data serves to ensure operation, analyze errors and defend against attacks and is not merged with other data sources. The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in secure and stable operation).
Storage Period
We store personal data only for as long as necessary for the purposes stated. Order and invoice data is retained for up to ten years due to commercial and tax law retention obligations (Section 147 AO, Section 257 HGB). We store your customer account data until you delete the account or request its deletion, unless statutory retention obligations prevent this.
Your Rights as a Data Subject
With regard to your personal data, you have the following rights: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing (Art. 21 GDPR). You can withdraw any consent given at any time with effect for the future. In addition, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). An e-mail to admin@runferry.de is sufficient to exercise your rights.
Cookies and Consent Management
This website uses cookies. We set technically necessary cookies (e.g. for the shopping cart and for storing your cookie selection) on the basis of Art. 6 (1)(f) GDPR. All other cookies — in particular for analytics and marketing — are only set after you have given your consent via the cookie banner (Art. 6 (1)(a) GDPR). You can change or withdraw your selection at any time via the cookie settings.
