Thank you for your interest in Chipcy. In the following, we will inform you in detail about the processing of personal data when using this Website. Personal data means all data that can be personally related to you.
1/ Collection of personal data when you visit Chipcy
1.1 Log files
When you visit Chipcy for informational purposes but don’t register with us, create an account, order something, or otherwise deliberately transfer information to us, we collect information from your browser to help us serve our websites to you.
What we collect:
- IP address,
- date and time of the request,
- time zone difference to Greenwich Mean Time (GMT),
- name of the requested file,
- access status/HTTP status code,
- volume of data transferred,
- the page from which you came to visit us,
- your operating system and its interface,
- your browser type and the language and version of the browser software.
The data is technically necessary for us to display our website to you. It is also evaluated to make the website user-friendly and to ensure stability and security.
We also use “cookies” on our sites. Cookies (also called web cookies, Internet cookies, browser cookies, or simply cookies) are small blocks of data created by a web server while a user is browsing a website and placed on the user’s computer or other device by the user’s web browser. Cookies are placed on the device used to access a website, and more than one cookie may be placed on a user’s device during a session.
Cookies serve useful and sometimes essential functions on the web. They enable web servers to store stateful information (such as items added in the shopping cart in an online store) on the user’s device or to track the user’s browsing activity (including clicking particular buttons, logging in, or recording which pages were visited in the past).This helps us to make our website more user-friendly and effective overall. The legal bases for this are your consent and our legitimate interests.
We use session cookies, persistent cookies, and third-party cookies.
Session cookie (also known as an in-memory cookie, transient cookie or non-persistent cookie) exists only in temporary memory while the user navigates a website. Session cookies expire or are deleted when the user closes the web browser. Session cookies are identified by the browser by the absence of an expiration date assigned to them. For example, this lets you store certain information you have entered (such as log-in information, language settings) in such a way that you do not have to repeat it constantly.
A persistent cookie expires at a specific date or after a specific length of time. For the persistent cookie’s lifespan set by its creator, its information will be transmitted to the server every time the user visits the website that it belongs to, or every time the user views a resource belonging to that website from another website (such as an advertisement).
When you visit our website, our partner companies also store third-party cookies on your device. The cookies contain information about how our website is used, e.g. which pages and products were visited. The data is collected in a pseudonymized form by assigning an identification number, which is not combined with any other personal data you may have provided to us.
2. Ordering from Chipcy / User Account
2.1 If you want to order something in our online store, it is necessary for the conclusion of the contract that you give us the personal data we need to process the order. The mandatory data required to process the contract is marked as such; all other data you provide is voluntary. You can either enter your data only once for the order or use your email address to set up a password-protected user account with us, in which your data can be stored for later purchases until you revoke your consent. You can deactivate or delete the data and the user account at any time via the account.
To prevent unauthorized access to your personal data by third parties, the order process is encrypted using TLS technology.
We also pass on your order and address data to various common carriers, depending on your delivery choices, shipping rates, and your chosen delivery destination.
The legal bases for the processing of personal data as part of order processing are to perform under a contract and our legitimate interests. Due to commercial and tax regulations, we are obliged to store your order, address and payment data for a period of ten years.
The legal basis for the processing is our legitimate interests.
2.3 After you place an order, we will process your order and address data to send you a personalized email asking you to rate our products. By obtaining ratings, our aim is to improve our services and adapt them to our customers’ wishes. We use the Mailchimp software of The Rocket Science Group, LLC 675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308 USA, For the purpose of sending the feedback email (and in the event that a moderation or conciliation procedure is conducted via Mailchimp following negative feedback), we pass on your email address, name, order number, product types and a unique ID to Mailchimp for identification purposes and in order to generate a feedback link.
The legal basis for the processing is our legitimate interests. If you no longer want your data to be used for this purpose, you can object to this at any time. Just click on the unsubscribe link included with each email or send a message using the contact details
2.5 We also use the review services of TrustPilot, Trustpilot A/S, Pilestraede 58, 1112 Copenhagen, Denmark („Trustpilot“) to receive feedback about us as a seller. This allows us to improve our services and adapt them to our customers’ wishes. The legal basis is our legitimate interests.
In connection with an order, we process your order and address information in order to send you a personalized email asking you to review us. For the purpose of sending you this review request, we share the following information with TrustPilot: email address, name, and a reference number to identify your review and generate the review invitation link.
A user profile with TrustPilot is required in order to leave a review. By clicking the review invitation link, your name and email address are automatically used to pre-populate a profile for you; TrustPilot then sends you a welcome email with this profile information.
If you would not like to receive review requests from TrustPilot, you can object to this anytime. Simply click on the unsubscribe link in the request email.
3. Communication with Chipcy
3.1 Establishing contact
If you contact us via a contact form,letter, email, social media or telephone, we process the data provided by you for the purpose of processing your inquiry and for advertising purposes. We use the software of Freshworks, 2950 S. Delaware Street, Suite 20, San Mateo CA 94403, to coordinate and process emails, which means that Freshworks gains access to the data. We use the management software of Hootsuite Media, Inc, 5 East 8th Avenue, Vancouver, BC, Canada to coordinate and process enquiries via our social media channels Twitter, Facebook and Instagram. The legal basis for the processing is our legitimate interests. If the aim of establishing contact is to conclude a contract, then an additional legal basis is to perform under a contract.
3.2 Live Chat
The legal bases for the processing are your consent and our legitimate interests.
4. Processing of data for web analytics
4.1 Google Analytics
The IP address transmitted by your browser in the context of Google Analytics will not be combined with other data held by Google.
You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this you may not be able to use the full functionality of our website. You can also prevent the data generated by the cookie and relating to your use of the website (including your IP address) from being recorded and processed by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout/. This website uses Google Analytics with the “_anonymizeIp()” extension. Consequently, IP addresses are further processed in shortened form, so that any personal association with the data subject can be ruled out. As far as the data collected about you relates to you personally, that association is therefore ruled out immediately and the personal data thus erased without delay.
We use Google Analytics to analyze and regularly improve the use of our website. The statistics this yields allow us to improve our website and make it more interesting for you as a user. The legal bases for our use of Google Analytics are your consent and our legitimate interests.
You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this you may not be able to use the full functionality of our website. This will place an opt-out cookie which prevents recording when you visit our website in future. Please note that if you delete all cookies on your device, this opt-out cookie will also be deleted; in this case, if you still wish to object then you must place the cookie again using the above button. The opt-out cookie is set per top-level domain, per browser and per device, and only prevents the recording of data for this website. How to prevent collection on other websites is explained on the respective site and here: https://www.hotjar.com/privacy/do-not-track/.
5. Advertising activities by Chipcy
If you register separately for our newsletter via our website and give us your consent, we will use your email address to send you regular emails about product offers, discounts and contests. To this end, we pass the data on to the software company Mailchimp The Rocket Science Group, LLC 675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308 USA, which handles the technical side of the mailing on our behalf.
When you register for our newsletter, we use the so-called double opt-in procedure. This means that after you register we will send you an email to the email address you provided, in which we ask you to confirm that you would like to receive the newsletter. If you do not confirm your registration, your information will be automatically deleted after one month. On the other hand, if you confirm the newsletter subscription, we will save your email address for the purpose of sending you the newsletter until you unsubscribe from the newsletter.
You can revoke your consent to the sending of the newsletter at any time (without this affecting the lawfulness of the processing up to the point of revocation). You can declare your revocation by clicking on the link provided in every newsletter email, by emailing [email protected].
When sending the newsletter, we use Mailchimp to statistically evaluate your user behavior in order to measure how successful the newsletter is and to optimize its design. To enable this evaluation, the emails contain what are called web beacons or tracking pixels. These are single-pixel image files that establish a connection to our website and thus permit a log file analysis. The web beacons are linked with the data mentioned in Section 1.1 a and an individual ID. The links contained in the newsletter also contain this ID. For example, we can see if and when an email has been opened and which links have been clicked on. The data is stored on the Mailchimp servers for 13 months and collected pseudonymously, meaning the IDs are not linked to other personal data at this point, thus ruling out any possibility of direct personal reference. You can object to the recording of your usage behavior at any time by clicking on the unsubscribe link provided in each email or by informing us using the contact details. Recording is not possible if you have disabled the display of images in your email settings. In this case, the newsletter will not be displayed to you in full and you may not be able to use all functions. If you choose to display the images manually, recording will take place as described above.
The legal bases for the processing are your consent and our legitimate interests.
5.2 Product recommendations
As a Chipcy customer, i.e., if you order something in our store (see Section 2.1), we process the email address you provide in order to send you regular email recommendations for products that might be of interest to you based on your previous orders from us. We also use your name to allow us to personalize these emails. The data is passed on to the software company Mailchimp (see Section 5.1), which handles the technical side of the mailing on our behalf. The legal basis for the processing is our legitimate interests.
You receive these product recommendations because you did not object to the use of your email address for this purpose by removing the corresponding check mark during the order process. If you subsequently no longer wish to receive product recommendations or any advertising messages, you can object at any time without incurring any costs other than the transmission costs at the basic rates. Just click on the unsubscribe link included with each email, send a message using the contact details or – if you have a user account with us – adjust your newsletter settings accordingly (“Account settings” – “Newsletter subscriptions”).
When sending the product recommendations, we use Mailchimp to statistically evaluate your user behavior in order to measure their success and to optimize their design. The legal bases for the processing are your consent and our legitimate interests. To enable this evaluation, the emails contain what are called web beacons or tracking pixels. These are single-pixel image files that establish a connection to our website and thus permit a log file analysis. The web beacons are linked with the data mentioned in Section 1.1 and an individual ID. The links contained in the email also contain this ID. For example, we can see if and when an email has been opened and which links have been clicked on. The data is stored on the Mailchimp servers for 13 months and collected pseudonymously, meaning the IDs are not linked to other personal data at this point, thus ruling out any possibility of direct personal reference. You can object to the recording of your usage behavior at any time by clicking on the unsubscribe link provided in each email, informing us via the contact form, or – if you have a user account with us – changing the newsletter settings in your user account (“Account settings” – “Newsletter subscriptions”). Recording is not possible if you have disabled the display of images in your email settings. In this case, the newsletter will not be displayed to you in full and you may not be able to use all functions. If you choose to display the images manually, recording will take place as described above.
6. Usage-based online advertising
6.1 Use of Google Ads conversion tracking and Google Ads remarketing
We use Google Ads, a service of Google LLC (“Google”), to use ads to draw attention to our offers on external websites. In relation to the data of advertising campaigns, we can identify how successful the individual advertising activities are. In this way we want to show you advertising that is of interest to you, make our website more attractive to you and achieve a fair calculation of advertising costs.
These ads are deployed by Google via ‘ad servers’. For this purpose, we use ad server cookies, which enable the tracking of certain parameters for measuring success, such as the display of ads or clicks by users. If you arrive at our website via a Google ad, Google Ads will store a cookie on your device. These cookies usually expire after 30 days and are not intended to identify you personally. Analysis values usually stored for this cookie are the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (marker showing that the user no longer wishes to be targeted).
These cookies allow Google to recognize your internet browser. If a user visits certain pages of a Google Ads customer’s website (in this case ours) and the cookie stored on their device has not yet expired, Google and the customer can recognize that the user has clicked on the ad and has been redirected to this site. Each Google Ads customer is assigned a different cookie. Cookies cannot therefore be tracked via the websites of Google Ads customers. We do not collect and process any personal data in the aforementioned advertising activities. Google merely provides us with statistical evaluations. On the basis of these evaluations we can identify which of the advertising activities used are particularly effective. We do not receive any further data from the use of ads; in particular we cannot identify users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and further processing of the data collected by Google through the use of this tool and therefore inform you according to what we know: By integrating Google Ads Conversion, Google receives the information that you have retrieved the corresponding part of our website, or that you have clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that Google will obtain and store your IP address.
- Google Ads remarketing
Besides Google Ads Conversion, we also use Google’s remarketing feature. This is a process we use in an attempt to contact you again. After visiting our website, this feature makes it possible to show you our ads when you continue to use the internet. This is done by means of cookies stored in your browser, which Google uses to record and evaluate your usage behavior when visiting various websites. This is how Google can determine that you have previously visited our website. According to its own information, Google does not combine the data collected in the context of remarketing with your personal data, which may be processed by Google. Specifically, according to Google, pseudonymization is used during remarketing.
There are various ways in which you can prevent your participation in this tracking procedure:
By setting your browser software accordingly; in particular, disabling cookies from third party providers means that you will not receive any ads from third-party providers; By permanent deactivation in your browser Firefox, Internet Explorer or Google Chrome via the link: https://support.google.com/ads/answer/7395996?hl=en. Please note that by doing this you may not be able to properly use the full functionality of our website. The legal bases for the processing of your data are your consent and our legitimate interests.
Third-party provider information: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For further information about privacy at Google, please refer to: https://policies.google.com/privacy and https://services.google.com/sitestats/en.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at: http://www.networkadvertising.org.
6.2 Use of Facebook Custom Audiences, Facebook Website Custom Audiences and Facebook Conversion Tracking
- Facebook Custom Audiences
Our website also uses the Website Custom Audiences remarketing function of Facebook, Inc. (“Facebook”). This allows users of the website to see interest-based ads (“Facebook Ads”) when visiting the social network Facebook or other websites that also use the process. Our intention here is to show you ads that are of interest to you.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. We have no influence on the extent and further processing of the data collected by Facebook through the use of this tool and therefore inform you according to what we know: By integrating Facebook Custom Audiences, Facebook receives the information that you have retrieved the corresponding part of our website, or that you have clicked on one of our ads. If you are registered with a Facebook service, Facebook can associate the visit with your account. Even if you are not registered with Facebook or have not logged in, it is possible that Facebook will obtain and store your IP address and other identifying information.
- Facebook Website Custom Audiences
- Facebook Conversion Tracking
We also use the Facebook Pixel on our website to measure the reach of ads. This allows us to track users’ actions after they have seen or clicked on a Facebook Ad. The Facebook Pixel records and reports to Facebook information about the user’s browser session, a hashed version of the Facebook ID, and the URL being viewed. The way it works is comparable to Facebook Website Custom Audiences via the Facebook Pixel, which is already described above. Using the hashed Facebook ID, we can measure the reach and effectiveness of an ad to find out whether you are actually interested in our advertising. This enables us to measure the effectiveness of Facebook Ads for statistical and market research purposes. For us, the data used is not personally identifiable.
The legal bases for the processing of data when using the functions specified above are your consent and our legitimate interests.
6.3 Pinterest Conversion Tracking
Our website uses the Pinterest Tag, which is a conversion tracking technology provided by Pinterest Inc (“Pinterest”).
This allows us to follow the actions you take on our website after you have clicked on one of our advertisements on the social network Pinterest, including e.g. which pages and products you consult, and whether you purchase something from our website and at what value. We use a cookie stored in your browser to record and evaluate your usage behavior. Pinterest transmits no personal information about individual website visitors to us, only an aggregated and anonymous analysis of conversions that originate from Pinterest. Based on this information, it is impossible for us to determine your identity.
We use this information to measure the reach and effectiveness of our ads on Pinterest.
There are various ways for you to disable this tracking. You can adjust your browser settings to prevent the storage of cookies, although this may result in restricting the functionality of our website for you. This will place an opt-out cookie that will prevent the recording of activities on future visits of our website. The opt-out cookie is set via top-level domain, browser and device, and only prevents the recording of data for this website. The legal basis for the processing is your consent. You can revoke your consent to the processing according to the process described above at any time (without this affecting the lawfulness of the processing up to the point of revocation).
If you log in to your Pinterest account after visiting our website, or if you are logged in to a Pinterest account when you visit our website, it is then possible that Pinterest will associate the data described above with your Pinterest account and use it for Pinterest’s own advertising purposes.
6.4 Use of Bing Ads Conversion Tracking and remarketing
- Bing Ads Conversion Tracking
- Bing Ads remarketing
Our online offering also uses the “Bing Ads remarketing” feature. After visiting our website, this feature allows us to show you our ads when you continue to use the internet. Our intention here is to show you ads that are of interest to you. This is done by means of a cookie stored in your browser (see above for more information), which is used to record and evaluate your usage behavior. No personal information is transmitted to us about individual website visitors, and we can only specifically deploy ads to website custom audiences if the custom audience has reached a critical size. This makes it impossible for us to determine the individual identities of visitors.
There are various ways in which you can disable this tracking. You can adjust your browser settings to prevent the storage of cookies, although this may result in a restriction of the functionality of our website for you. Please note that if you delete all cookies on your device, this opt-out cookie will also be deleted; in this case, if you still wish to object then you must place the cookie again using the above button. The opt-out cookie is set per top-level domain, per browser and per device and only prevents the recording of data for this website. It is also possible to disable interest-based ads at https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads.
The legal bases for the processing are your consent and our legitimate interests.
7. What are my rights?
If you have given your consent to the processing of your data, you can revoke this consent with future effect at any time. This does not affect the lawfulness of processing carried out on the basis of the consent before you revoke your consent.
If we base the processing of your personal data on our legitimate interests, you are entitled to object to the processing. This is the case if the processing is not necessary in particular for the performance of a contract with you, which was described by us in each case with the description of the individual functions. When exercising such a right of objection, we ask that you explain the reasons why we should not process your personal data as carried out by us. In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue processing.
However, you can of course object to the processing of your personal data for advertising or web analytics purposes at any time without giving reasons.
As described in the relevant sections, we sometimes use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked.
The personal data processed by us is generally erased or blocked as soon as the purpose of storage ceases to apply. Data may be stored for a longer period if this has been provided for by laws or other rules to which we as the controller are subject. The data will also be blocked or erased once a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
Further processing operations may be required for contests and other promotional campaigns. In such cases we will inform you in the context of the respective promotional campaign.
8. With whom we share your information
We do not share your personal information with others except as indicated below or when we inform you and give you an opportunity to opt out of having your personal information shared. We may share personal information with:
- Authorized service providers. We may share your personal information with our authorized service providers that perform certain services on our behalf. These services may include fulfilling orders, processing credit card payments, delivering packages, providing customer service and marketing assistance, performing business and sales analysis, supporting our websites’ functionality, and supporting contests, sweepstakes, surveys and other features offered through our websites. These service providers may have access to personal information needed to perform their functions but are not permitted to share or use such information for any other purposes.
- Business partners. When you make purchases or engage in promotions offered through any of our websites or our services, we may share personal information with the businesses with which we partner to offer you those products, services, promotions, contests and/or sweepstakes. When you elect to engage in a particular merchant’s offer or program, you authorize us to provide your email address and other information to that merchant.
- Legal demand. In response to a subpoena or similar investigative demand, a court order, or request for cooperation from a law enforcement or other government agency; to establish or exercise our legal rights; to defend against legal claims; or as otherwise required by law. In such cases, we may raise or waive any legal objection or right available to us.
- Suspected fraud. When we believe disclosure is appropriate in connection with efforts to investigate, prevent, or take other action regarding illegal activity, suspected fraud or other wrongdoing; to protect and defend the rights, property or safety of our company, our users, our employees, or others; to comply with applicable law or cooperate with law enforcement; or to enforce our websites’ terms and conditions or other agreements or policies.
- Corporate transaction. In connection with a substantial corporate transaction, such as the sale of our business, a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.
We may share aggregated and non-personal information we collect under any of the above circumstances. We may also share it with third parties to develop and deliver targeted advertising on our websites and on websites of third parties. We may combine non-personal information we collect with additional non-personal information collected from other sources. We also may share aggregated information with third parties, including advisors, advertisers and investors, for the purpose of conducting general business analysis. For example, we may tell our advertisers the number of visitors to our websites and the most popular features or services accessed. This information does not contain any personal information and may be used to develop website content and services that we hope you and other users will find of interest and to target content and advertising.
9. Is My Information Secure?
We use reasonable measures to secure our website and any private information you submit to us against loss, tampering, unauthorized access, and other malicious acts. For example, we use SSL connections when possible to protect your data while it is in transit (for example login data and customer orders). However, no data transmission over the Internet is completely secure, so we cannot completely guarantee the security of any data. You use our services at your own risk, and are responsible for taking reasonable measures to secure your password, information, and account.
10. Do-Not-Track (“DNT”) Requests
Due to lack of technical standards across browsers, we do not respond to DNT signals.