Holding Hands with Horses

1. Introduction

At studio other types (hereinafter referred to as "we," "us," or "our"), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our website or purchase our products, in accordance with the General Data Protection Regulation (GDPR) and applicable local data protection laws.

By using our website, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data under this Privacy Policy is:

studio other types GbR

Kielerstr. 103, 22769 Hamburg

Email: hello@othertypes.com

3. What Data We Collect

We collect and process the following types of personal data:

- Personal Identification Information: Name, address, email address, phone number.

- Order Information: Details of your purchases, payment information, and delivery address.

- Account Information: Username, password, and order history (if you create an account).

- Usage Data: IP address, browser type and version, time zone, browser plug-in types, operating system, platform, and other technology on the devices you use to access this website.

- Communication Data: Any information you provide when you contact us, such as email correspondence or messages via contact forms.

4. How We Use Your Data

We use your personal data for the following purposes:

- To Process Orders: To fulfill your orders, including processing payments, shipping products, and managing returns.

- Account Management: To create and manage your customer account, if you choose to register.

- Communication: To respond to your inquiries, provide customer support, and send order updates or marketing communications (if you have consented).

- Improving Our Services: To analyze and improve our website, products, and services based on user behavior and preferences.

- Legal Obligations: To comply with our legal obligations, such as tax regulations and anti-fraud measures.

5. Legal Basis for Processing

We process your personal data based on one or more of the following legal bases:

- Contractual Necessity: When we need your data to fulfill our contract with you (e.g., processing your order).

- Consent: When you have given us explicit consent to process your data (e.g., for receiving marketing communications).

- Legal Obligations: When we are required to process your data to comply with legal obligations (e.g., tax laws).

- Legitimate Interests: Where we have a legitimate interest in using your data (e.g., improving our services) and your rights do not override these interests.

6. How We Share Your Data

We may share your personal data with the following third parties:

- Service Providers: We share your data with service providers who help us operate our business, such as payment processors (e.g., PayPal), shipping companies, and IT service providers. These providers are bound by confidentiality agreements and are not permitted to use your data for any other purposes.

- Legal Obligations: We may disclose your data if required by law, court order, or governmental authority.

- Business Transfers: In the event of a merger, sale, or transfer of assets, your data may be transferred to the acquiring entity.

We do not sell or trade your personal data with third parties for marketing purposes.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include secure payment gateways, encrypted communications (SSL), and access control mechanisms.

Despite these safeguards, no method of transmission over the Internet is 100% secure, and we cannot guarantee the absolute security of your data.

8. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR:

- Right to Access: You have the right to request a copy of the personal data we hold about you.

- Right to Rectification: You can request that we correct any inaccuracies in your personal data.

- Right to Erasure: You have the right to request the deletion of your personal data under certain circumstances (e.g., when it is no longer needed for the purposes for which it was collected).

- Right to Restrict Processing: You can request that we limit the processing of your data in certain cases (e.g., if you contest the accuracy of your data).

- Right to Data Portability: You have the right to receive your data in a structured, commonly used, and machine-readable format.

- Right to Object: You have the right to object to the processing of your data based on our legitimate interests, direct marketing, or profiling.

- Right to Withdraw Consent: If we are processing your data based on your consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at:

Email: hello@othertypes.com

You also have the right to file a complaint with a supervisory authority if you believe that our processing of your personal data violates the GDPR.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. This includes retaining data to comply with legal obligations (e.g., tax regulations), resolve disputes, and enforce agreements.

10. Use of customer data for direct advertising

10.1 Registration for our e-mail newsletter

If you register for our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending newsletters, which ensures that you only receive newsletters if you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the email address provided. By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. We store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data we collect when you register for the newsletter is used strictly for the intended purpose. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the controller named at the beginning. After cancellation, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

10.2 Newsletter dispatch via MailChimp

Our email newsletters are sent via the technical service provider The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system. Please note that your data is usually transferred to a MailChimp server in the USA and stored there.

MailChimp uses this information to send and statistically analyse the newsletter on our behalf. For the analysis, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files that are stored on our website. This allows us to determine whether a newsletter message has been opened and which links, if any, have been clicked on. Mailchimp uses the web beacons to automatically generate general, non-personal statistics on the response behaviour to newsletter campaigns. On the basis of our legitimate interest in the statistical evaluation of newsletter campaigns to optimise advertising communication and better focus on recipient interests, the web beacons also collect and use data of the respective newsletter recipient (email address, time of access, IP address, browser type and operating system) in accordance with Art. 6 para. 1 lit. f GDPR. This data allows individual conclusions to be drawn about the newsletter recipient and is processed by Mailchimp to automatically generate statistics that show whether a particular recipient has opened a newsletter message.

If you wish to deactivate the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

MailChimp may also use this data itself in accordance with Art. 6 para. 1 lit. f GDPR on the basis of its own legitimate interest in the needs-based design and optimisation of the service as well as for market research purposes, for example to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to write to them itself or to pass them on to third parties. To protect your data in the USA, we have concluded a data processing agreement with MailChimp on the basis of the standard contractual clauses of the European Commission to enable the transfer of your personal data to MailChimp. If you are interested, this data processing agreement can be viewed at the following Internet address: https://mailchimp.com/legal/data-processing-addendum/

You can view MailChimp's privacy policy here:

https://mailchimp.com/legal/privacy/

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in response to legal, technical, or business changes. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes. Please check this page regularly to stay informed of any updates.

12. Contact Information

If you have any questions or concerns about this Privacy Policy or the way we process your personal data, please contact us at: hello@othertypes.com