Information according to § 5 TMG

BBD Buy Best Europe GmbH
Eiffestraße 74
20537 Hamburg

Represented by the management:

Ms. Tian Yao

Commercial Register: HRB 131811

Register court: Hamburg District Court

VAT identification number according to Section 27a UStG: DE294634901

Email: info@victoria-hyde.com

Phone: +49 (0)4025 499080

Website: www.victoria-hyde.com

Max Mustermann

Musterstraße 1

12345 Berlin

Germany

Liability for content

As a service provider, we are legally responsible for our own content on these websites, in accordance with Section 7 (1) of the German Telemedia Act (TMG). However, according to Sections 8 to 10 of the German Telemedia Act (TMG), we are not obligated to monitor submitted or stored third-party information or to search for evidence that indicates illegal activity. Legal obligations to remove information or to block the use of information remain unchallenged.

Liability for links

Our website contains links to external third-party websites over whose content we have no influence. Therefore, we cannot accept any liability for this external content. The respective provider or operator of the linked pages is always responsible for the content of the linked pages.

The content and works on these pages created by the site operators are subject to German copyright law. Contributions from third parties are marked as such. Reproduction, processing, distribution, and any form of exploitation outside the limits of copyright law require the written consent of the respective author or creator.

Data protection information according to Art. 13 GDPR

Name and address of the person responsible

The responsible body within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

BBD Buy Best Europe GmbH
Eiffestraße 74
20537 Hamburg

Email: info@victoria-hyde.com
Phone: 04025 499080

General information on data processing

Legal basis for the processing of personal data

In accordance with Art. 13 GDPR, we inform you of the legal basis for our data processing. If the legal basis is not specifically stated in the privacy policy, the following applies:
The legal basis for obtaining consent is Art. 6 (1) (a) in conjunction with Art. 7 GDPR. The legal basis for processing to fulfill our services and implement contractual measures as well as to answer inquiries is Art. 6 (1) (b) GDPR. The legal basis for processing to fulfill our legal obligations is Art. 6 (1) (c) GDPR. If the processing of your data is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for processing. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.

Data deletion and storage period

We adhere to the principles of data minimization pursuant to Art. 5 (1) (c) GDPR and storage limitation pursuant to Art. 5 (1) (e) GDPR. We store your personal data only for as long as necessary to achieve the purposes stated here or as required by the retention periods stipulated by law. Once the respective purpose no longer applies or after these retention periods have expired, the corresponding data will be deleted as quickly as possible.

External links

This website may contain links to third-party websites or to other websites under our control. If you follow a link to one of these websites outside our control, please note that these websites have their own privacy policies. We assume no responsibility or liability for these third-party websites and their privacy policies. Therefore, please check whether you agree to the privacy policies of these websites before using them.

You can recognize external links either by their color contrasting with the rest of the text or by their underlined appearance. Your cursor will show you external links when you hover over such a link. Only when you click on an external link will your personal data be transferred to the link's destination. The operator of the other website receives, in particular, your IP address, the time you clicked the link, the page on which you clicked the link, and other information that you can find in the privacy policy of the respective provider.

Please also note that individual links may lead to data transfer outside the European Economic Area. This could give foreign authorities access to your data. You may not have any legal recourse against this data access. If you do not want your personal data to be transferred to the link destination or even be exposed to unwanted access by foreign authorities, please do not click on any links.

Rights of the data subject

As a data subject within the meaning of the GDPR, you have the opportunity to assert various rights. The data subject rights arising from the GDPR are the right to information (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to lodge a complaint with a supervisory authority, and the right to data portability (Article 20).

Right of withdrawal:

Some data processing can only take place with your express consent. You have the right to revoke your consent at any time. However, this does not affect the legality of the data processing until the revocation.

Right of objection:

If the processing is based on Art. 6 (1) (e) or (f) GDPR, you as the data subject may object to the processing of personal data concerning you at any time for reasons arising from your particular situation. This right also applies to profiling based on these provisions within the meaning of Art. 4 (4) GDPR. Unless we can demonstrate a legitimate interest in the processing that outweighs your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims, we will refrain from processing your data after you have objected.

If the processing of personal data is for direct marketing purposes, you also have the right to object at any time. The same applies to profiling related to direct marketing. Here, too, we will no longer process personal data once you object.

Right to lodge a complaint with a supervisory authority:

If you consider that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

Right to data portability:

If your data is processed automatically based on your consent or to fulfill a contract, you have the right to receive this data in a structured, common, and machine-readable format. You also have the right to request that the data be transferred and made available to another controller, provided this is technically feasible.

Right to information, correction and deletion:

You have the right to receive information about your personal data processed, including the purpose of the data processing, the categories, the recipients, and the storage period. If you have any questions about this or other topics related to personal data, you can of course contact us using the contact details provided in the legal notice.

Right to restriction of processing:

You can request the restriction of processing of your personal data at any time. To do so, you must meet one of the following conditions:

• You dispute the accuracy of the personal data. You have the right to request restriction of processing while the accuracy is being verified.
• If processing is unlawful, you can request restriction of use of the data as an alternative to deletion.
• If we no longer need your personal data for the purposes of processing, but you require the data to assert, exercise or defend legal claims, you can request restriction of processing as an alternative to deletion.
• If you object to processing pursuant to Art. 21 (1) GDPR, your interests will be weighed against ours. Until this balancing is carried out, you have the right to request restriction of processing.

Restriction of processing means that personal data, with the exception of storage, may only be processed with your consent or for the establishment, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

Provision of the website (web host)

Our website is hosted by:

Shopify International Ltd.
2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32
Ireland

The server location is Canada.

When you visit our website, we automatically collect and store information in so-called server log files. Your browser automatically transmits this information to our server or to the server of our hosting company.

These are:

• IP address of the website visitor's device
• Device used
• Hostname of the accessing computer
• Visitor's operating system
• Browser type and version
• Name of the retrieved file
• Time of server request
• Amount of data
• Information whether the data retrieval was successful

This data will not be merged with other data sources.

Instead of running this website on our own server, we can also have it run on the server of an external service provider (hosting company), which we have named above. The personal data collected by this website will then be stored on the hosting company's servers. In addition to the data mentioned above, the web host also stores, for example, contact requests, contact details, names, website access data, meta and communication data, contract data, and other data generated via a website.

The legal basis for processing this data is Art. 6 (1) (f) GDPR. Our legitimate interest is the technically error-free presentation and optimization of this website. If the website is accessed to enter into contract negotiations with us or to conclude a contract, this serves as an additional legal basis (Art. 6 (1) (b) GDPR). In the event that we have commissioned a hosting company, a contract for order processing exists with this service provider.

Use of Local Storage Items, Session Storage Items and Cookies

Our website uses local storage items, session storage items, and/or cookies. Local storage is a mechanism that enables data to be stored within the browser on your device. This data usually contains user preferences, such as a website's "day" or "night mode," and is retained until you manually delete the data. Session storage is very similar to local storage, except that the storage period only lasts for the current session, i.e., until the current tab is closed. After that, the session storage items are deleted from your device. Cookies are information that a web server (a server that provides web content) stores on your device to identify that device. They are either temporarily deleted for the duration of a session (session cookies) and after you have finished visiting a website, or permanently stored on your device (permanent cookies) until you delete them yourself or your web browser automatically deletes them.

These objects can also be stored on your device by third-party companies when you visit our site (third-party requests). This enables us as the operator and you as a visitor to this website to use certain services provided by third parties installed on this website. Examples include processing payment services or displaying videos.

These mechanisms have a wide range of possible applications. They can improve the functionality of a website, control shopping cart functions, increase the security and convenience of website use, and perform analyses of visitor flows and behavior. These are classified under data protection law depending on the individual functions. If they are necessary for the operation of the website and intended to provide certain functions (shopping cart function) or serve to optimize the website (e.g. cookies for measuring visitor behavior), then their use is based on Art. 6 (1) (f) GDPR. As website operators, we have a legitimate interest in storing local storage items, session storage items, and cookies to ensure the technically error-free and optimized provision of our services. In all other cases, local storage items, session storage items, and cookies are only stored with your express consent (Art. 6 (1) (a) GDPR).

If local storage items, session storage, or cookies are used by third-party companies or for analysis purposes, we will inform you separately in this privacy policy. Your required consent will be requested and can be revoked at any time.

Use of external services

Our website uses external services. External services are third-party services that are used on our website. This can be done for various reasons, for example, to embed videos or to ensure website security. When using these services, personal data is also passed on to the respective providers of these external services. If we have no legitimate interest in using these services, we will obtain your consent as a visitor to our website before using them, which can be revoked at any time (Art. 6 (1) (a) GDPR).

Analytics

We process personal data of website visitors to analyze user behavior. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This allows us to increase the user-friendliness of our website. Using the analysis tools we use, we can, for example, create user profiles for the delivery of targeted or interest-based advertising messages, recognize our website visitors the next time they visit our website, measure their click/scroll behavior and downloads, create heatmaps, recognize page views, measure visit duration or bounce rates, and track the origin of website visitors (city, country, which page the visitor came from). The analysis tools help us improve our market research and marketing activities.

Processing only occurs if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6 (1) (a) GDPR). Without your consent, data processing will not take place in the manner described above. If you revoke your consent (e.g., via the consent banner or other options provided on this website), we will terminate this data processing. The legality of the processing carried out up to the time of revocation remains unaffected.

Bugsnag

We use the Bugsnag service on our website. The service is provided by SmartBear Software Inc., 110 Sutter Street, San Francisco, CA 94104, USA.

Using the service may result in data being transferred to a third country (the USA). The provider is certified according to the EU-US Data Privacy Framework and therefore offers an appropriate level of data protection.

Further information can be found in the provider's privacy policy at the following URL: https://smartbear.com/privacy/ .

Shopify Analytics

We use the Shopify Analytics service on our website. The service is provided by Shopify International Ltd., 2nd Floor 1–2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland.

Using the service may result in data being transferred to a third country (Canada). The European Commission has confirmed an adequate level of data protection for this country by means of an adequacy decision.

Further information can be found in the provider's privacy policy at the following URL: https://www.shopify.com/legal/privacy?shpxid=1c1444d0-C70E-43BB-AD1E-BB3774A7C8C0 .

Consent Management

To comply with data protection requirements, we use a consent management tool on our website. With this tool, we obtain the necessary consent for setting cookies or using external services. The consents are stored.

The processing is necessary to fulfill a legal obligation to which the controller (website operator) is subject. The legal basis for the processing is therefore Art. 6 (1) (c) GDPR.

CCM19 Cookie Consent Manager

We use the CCM19 Cookie Consent Manager service on our website. The service is provided by Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany.

Further information can be found in the provider's data protection information at the following URL: https://www.ccm19.de/datenschutzerklaerung.html .

Content Delivery Network (CDN)

We use a content delivery network (CDN) to optimize the performance and availability of our website. For this purpose, the service provider that provides this network processes your IP address and the information about when you visited our website. Further information on data processing by this service provider can be found in their privacy policy.

We base this processing on a legitimate interest (Art. 6 (1) (f) GDPR).

Our legitimate interest in using a content delivery network is to be able to display our website as quickly, securely and reliably as possible.

Google User Content

We use the Google User Content service on our website. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (the USA). The provider is certified according to the EU-US Data Privacy Framework and therefore offers an appropriate level of data protection.

Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy .

Graphics optimization tool

We use tools to help us optimize image content on our website. This allows us to make our website more visually appealing and clear.

The legal basis for this processing is our legitimate interest in a visually appealing and well-converting website (Art. 6 (1) (f) GDPR).

Ecomsend

We use the Ecomsend service on our website. The service provider is Shopify International Ltd., 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland.

Using the service may result in data being transferred to a third country (Canada). The European Commission has confirmed an adequate level of data protection for this country by means of an adequacy decision.

Further information can be found in the provider's privacy policy at the following URL: https://www.shopify.com/legal/privacy?shpxid=1c1444d0-C70E-43BB-AD1E-BB3774A7C8C0 .

Video/music service

Our website includes integrated audio and video content. These are retrieved from the server of our provider, the so-called audio or video platform. To play an audio or video, your device establishes a connection with the audio or video platform and transmits personal data to it. This includes, in particular, the IP address, any location data, and information about the user's browser and device.

Processing only occurs if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6 (1) (a) GDPR). Without your consent, data processing will not take place in the manner described above. If you revoke your consent (e.g., via the consent banner or other options provided on this website), we will terminate this data processing. The legality of the processing carried out up to the time of revocation remains unaffected.

YouTube

We use the YouTube service on our website. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (the USA). The provider is certified according to the EU-US Data Privacy Framework and therefore offers an appropriate level of data protection.

Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy .

Web fonts

This website uses so-called web fonts for the consistent display of fonts. These are provided by an external provider and loaded by the browser when the website is accessed. The provider of the web font receives information that our website was accessed from your IP address, as your browser establishes a direct connection to the provider of the web font.

The legal basis for this processing is our legitimate interest in a visually appealing website (Art. 6 (1) (f) GDPR).

Google Fonts

We use the Google Fonts service on our website. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (the USA). The provider is certified according to the EU-US Data Privacy Framework and therefore offers an appropriate level of data protection.

Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy .

Webshop

We offer our products and/or services through our online shop. As part of the sale of products and/or services, we collect, process, and use your personal data (e.g., your name, contact details, access times, device information, or your IP address) to process the purchase and payment process.

We base this processing on a legitimate interest (Art. 6 (1) (f) GDPR).

Our legitimate interest lies in the error-free presentation and optimization of our web shop.

Shopify

We use the Shopify service on our website. The service provider is Shopify International Ltd., 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland.

Using the service may result in data being transferred to a third country (Canada). The European Commission has confirmed an adequate level of data protection for this country by means of an adequacy decision.

Further information can be found in the provider's privacy policy at the following URL: https://www.shopify.com/legal/privacy?shpxid=1c1444d0-C70E-43BB-AD1E-BB3774A7C8C0 .

Contact form

Our website offers the option to contact us via a contact form. To contact us via this form, we require your contact details.

The legal basis for this is processing for the purpose of fulfilling a contract or taking pre-contractual measures in accordance with Art. 6 (1) (b) GDPR. Furthermore, there may be a legitimate interest in maintaining business relationships or answering your inquiry for other reasons.

The legal basis for the processing of your data would be Art. 6 (1) (f) GDPR.

The data will be deleted once we have finally answered your inquiry and there are no other retention obligations that prevent this.

Contact by phone or email

In accordance with legal requirements, we have provided a telephone number and email address on our website. The data transmitted via these channels is automatically stored by us in order to process corresponding inquiries or to contact the person making the inquiry. We will not share this data with third parties without your consent.

If you contact us by telephone or via our email address for pre-contractual or contractual purposes, the processing of personal data is based on the legal basis of Art. 6 (1) (b) GDPR. For all other contacts from you, the processing of personal data by us is based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

Registration on the website

Visitors have the option to register on our website. This requires the provision of personal data. Registration enables us to offer services or content that require specific personal information. This personal data is processed and stored exclusively for the use of the corresponding service or offer. The purpose of processing is the fulfillment of pre-contractual services, contract fulfillment, or customer care.

This data is generally stored for the period of time you are registered on our website. Longer storage may occur if required by law.

The processing described above in this subsection is based on the legal basis of consent (Article 6 (1) (a) GDPR). The data subject has consented to the processing of their personal data with their voluntary, explicit, and prior consent. We proceed in the same way if data subjects withdraw their consent.

If registration on the website is necessary to process contract-related content, we rely on the legal basis for the performance of a contract in accordance with Art. 6 (1) (b) GDPR.