1. Introduction and contact details of the person responsible

1.1 We are pleased that you are visiting our website and thank you for your interest in our online shop Shopvapor, which specializes in the sale of disposable e-cigarettes. Below we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified. We attach great importance to the protection of your privacy and process your data exclusively in accordance with the provisions of the General Data Protection Regulation (GDPR) and other data protection regulations.

1.2 The person responsible for data processing on this website within the meaning of the GDPR is Shopvapor GmbH, Musterstraße 123, 12345 Musterstadt, Germany, Tel.: +49 123 456789, e-mail: datenschutz@shopvapor.de. The person responsible for processing personal data is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data.

1.3 The person responsible has appointed a data protection officer, who can be reached as follows: “Data Protection Officer, Shopvapor GmbH, Musterstraße 123, 12345 Musterstadt, Tel.: +49 123 456789, e-mail: datenschutz@shopvapor.de“.

2. Collection of Personal Data

2.1 When using our website for informational purposes, i.e. if you do not register or otherwise transmit information to us, we only collect such data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data technically required for us to display the website:

  • Our visited website
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which they came to the page
  • Browser used
  • Operating system used
  • Used IP address (if necessary in anonymous form)

The processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or otherwise used. However, we reserve the right to check the server log files later if concrete indications of use of the law are illegal.

2.2 When using our online shop to order disposable e-cigarettes, we collect further personal data that you voluntarily provide us, such as:

  • Name, address, email address and phone number (for order processing and delivery)
  • Payment information (e.g. credit card or PayPal data)
  • Proof of age (since disposable e-cigarettes are forbidden to minors, we may check your age in accordance with legal requirements)

This data is processed in accordance with Art. 6 Para. 1 lit. b GDPR processed to fulfill the contract with you.

2.3 This website uses SSL or TLS encryption for security reasons and to protect the transfer of personal data and other confidential content (e.g. orders or inquiries to the person responsible). You can recognize an encrypted connection by the string “https://” and the lock icon in your browser line.

3. Purposes of Data Processing

We collect and process your personal data for the following purposes:

  • Provision of our services: processing orders, delivery of disposable e-cigarettes and payment processing.
  • Improve our website: Analyze user behavior to optimize user experience and personalize product recommendations.
  • Marketing: Sending newsletters or personalized offers if you give your consent in accordance with Art. 6 Para. 1 lit. a GDPR have granted.
  • Security: Detection and prevention of fraud, abuse, especially in the case of payment transactions.
  • Fulfillment of legal obligations: Compliance with regulations on the protection of minors and accounting.

4. Disclosure of Data

Your personal data will only be shared if this is necessary for the performance of the contract or you have consented to:

  • to shipping service providers (e.g. DHL or UPS) for the delivery of your order.
  • to payment service providers (e.g. PayPal, Stripe) for processing the payment.
  • to authorities, if required by law (e.g. tax authorities or suspected illegal activities).

We do not pass on data to third parties in countries outside the EU/EEA unless there is an adequacy decision of the EU Commission or suitable guarantees (e.g. standard contractual clauses) are implemented.

5. Cookies and Analysis Tools

We use cookies to make visiting our website attractive and to enable the use of certain functions. These are small text files that are stored on your device. Some cookies are deleted after closing the browser (session cookies), others remain longer (persistent cookies).

We also use analysis tools like Google Analytics to analyze user behavior and improve our website. The processing is based on Art. 6 Para. 1 lit. f GDPR or your consent. You can reject cookies in your browser settings.

6. Data Security

We take technical and organizational measures to protect your data from loss, destruction, access or change by unauthorized persons. These include firewall systems, encryption and regular security updates.

7. Your rights as a person affected

You have according to GDPR the following rights:

  • Information about your stored data (Art. 15 GDPR).
  • Correcting incorrect data (Art. 16 GDPR).
  • deletion of your data ("right to be forgotten", Art. 17 GDPR).
  • Restriction of processing (Art. 18 GDPR).
  • data portability (Art. 20 GDPR).
  • objection to processing (Art. 21 GDPR).
  • Revocation of consent (Art. 7 para. 3 GDPR).

To exercise your rights, contact us at datenschutz@shopvapor.de. You also have the right to complain to a supervisory authority (e.g. the state data protection authority).

8. Changes to this Privacy Policy

We reserve the right to adapt this data protection declaration in order to always adapt it to the current legal requirements. The current version can be found on our website.