Privacy Policy

1) Information on the collection of personal data and contact details of the controller

1.1 Below we inform you about how we handle your personal data when you use our website. Personal data is any data by which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Afro American Hair and Cosmetic, Pferseerstr. 10, 86150 Augsburg, Germany, Tel.: 015124005050, e-mail: info@afram.shop. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string “https://” and the padlock symbol in your browser bar.

2) Data collection when visiting our website

If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

• The website you visited
• Date and time at the moment of access
• Amount of data sent in bytes
• Source/referrer from which you reached the page
• Browser used
• Operating system used
• IP address used (where applicable: in anonymised form)

Processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.

3) Cookies

Our website uses cookies to improve user-friendliness. Cookies are small text files that are stored on your device and contain information such as IP address, browser and operating system. They make navigation easier and ensure that our web pages can be displayed correctly. Cookies cannot be used to run programs or transmit viruses. You can disable cookies in your browser settings, but this may impair the functionality of our website.

4) Adjusting cookie settings

You can adjust the use of cookies at any time via your browser settings. Please note that some functions of our website may no longer be available if you disable cookies.

5) Comment function

As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the commenter name you have chosen is also stored and published on this website. In addition, your IP address is stored for security reasons in order to enable attribution to the author in the event of unlawful comments. Your e-mail address is stored so that you can be contacted should a third party object to your published content as unlawful.

6) Use of customer data for direct marketing

6.1 Subscribing to our e-mail newsletter

If you subscribe to our e-mail newsletter, we will send you information about our offers on a regular basis. The only mandatory detail for sending the newsletter is your e-mail address. Providing further data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter, which ensures that you only receive newsletters if you have expressly confirmed your consent to receive the newsletter by clicking a confirmation link sent to the e-mail address you provided.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 (1) lit. a GDPR. We store the IP address entered by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later point in time. The data we collect when you sign up for the newsletter is used exclusively for the intended purpose. You can unsubscribe from the newsletter at any time via the link contained in the newsletter or by sending a corresponding message to the controller named at the outset. Once you have unsubscribed, your e-mail address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to the further use of your data or we reserve the right to use the data beyond this in a manner permitted by law and about which we inform you in this declaration.

7) Newsletter

In order to receive our newsletter, we require a valid e-mail address and use the “double opt-in” procedure. You can withdraw your consent to the storage of your data at any time, for example via the unsubscribe link in the newsletter.

8) Contact form

8.1 If you contact us (e.g. via a contact form or by e-mail), personal data is processed exclusively for the purpose of handling and responding to your enquiry and only to the extent necessary for this. The legal basis for processing this data is our legitimate interest in responding to your enquiry pursuant to Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that no statutory retention obligations prevent this.

8.2 WhatsApp Business

We offer visitors to our website the option of contacting us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the so-called “Business version” of WhatsApp for this purpose.

If you contact us via WhatsApp on the occasion of a specific transaction (e.g. an order), we store and use the mobile number you use on WhatsApp and – if provided – your first and last name in accordance with Art. 6 (1) lit. b GDPR in order to process and respond to your enquiry. On the same legal basis, we may ask you to provide further data (order number, customer number, address or e-mail address) via WhatsApp so that we can assign your enquiry to a specific transaction.

If you use our WhatsApp contact for general enquiries (e.g. about our range of services, availability or our website), we store and use the mobile phone number you use on WhatsApp and – if provided – your first and last name in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in providing the requested information efficiently and in good time.

Your data is only used to answer your enquiry via WhatsApp. Your data will not be passed on to third parties.

Please note that for this purpose WhatsApp Business is granted access to the address book of the mobile device we use and that the telephone numbers stored in the address book are automatically transmitted to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device in whose address book only the WhatsApp contact details of those users are stored who have also contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, in accordance with Art. 6 (1) lit. a GDPR, to the transmission of their WhatsApp telephone number from the address books of their chat contacts when first using the app on their device by accepting the WhatsApp terms of use. The transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded in this context.

For the purpose and scope of data collection and the further processing and use of the data by WhatsApp, as well as your related rights and settings options for protecting your privacy, please refer to WhatsApp’s privacy notices: https://www.whatsapp.com/legal/?eea=1#privacy-policy

9) Data processing when opening a customer account

In accordance with Art. 6 (1) lit. b GDPR, personal data continues to be collected and processed to the extent required if you provide it to us when opening a customer account. You can find the data required to open an account in the input mask of the relevant form on our website. Your customer account can be deleted at any time by sending a message to the address of the controller given above. After your customer account has been deleted, your data will be deleted, provided that all contracts concluded through it have been fully performed, no statutory retention periods prevent this and we no longer have a legitimate interest in continued storage.

9.1 Product availability notification by e-mail

For items that are temporarily unavailable, you can register to receive e-mail notifications about product availability. We will send you a one-off e-mail notification about the availability of the item you have selected. Only your e-mail address is required to receive this notification. Providing further data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure for sending e-mails, which ensures that you only receive a notification if you have expressly confirmed your consent by clicking a verification link sent to the e-mail address provided.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 (1) lit. a GDPR. We store the IP address entered by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later point in time. The data we collect when you register for our e-mail notification service for the availability of goods is used exclusively for the intended purpose. You can unsubscribe from availability notifications at any time by sending a corresponding message to the controller named at the outset. Once you have unsubscribed, your e-mail address will be deleted without delay from the mailing list set up by us for this purpose, unless you have expressly consented to the further use of your data or we reserve the right to use the data beyond this in a manner permitted by law and about which we inform you in this declaration.

10) Data processing for order fulfilment

10.1 Insofar as this is necessary for the performance of the contract for delivery and payment purposes, the personal data we collect is passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) lit. b GDPR.

Insofar as we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact details you provided when placing the order (name, address, e-mail address) in order to inform you personally about pending updates by suitable means of communication (e.g. by post or e-mail) within the legally prescribed period, as part of our statutory information obligations pursuant to Art. 6 (1) lit. c GDPR. Your contact details will be used exclusively to notify you of updates owed by us and will be processed by us for this purpose only to the extent necessary for the respective information.

To process your order, we also work with the following service providers, who support us in whole or in part in the performance of the contracts concluded. Certain personal data is transmitted to these service providers in accordance with the following information.

10.2 Transmission of personal data to shipping service providers

– DHL
If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Strasschensweg 10, 53113 Bonn), we pass on your e-mail address to DHL in accordance with Art. 6 (1) lit. a GDPR before delivery of the goods for the purpose of arranging a delivery date or for delivery notification, provided you have given your express consent to this during the ordering process. Otherwise, we pass on only the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Art. 6 (1) lit. b GDPR. The data is only passed on where this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with DHL or a delivery notification is not possible. Consent can be withdrawn at any time with effect for the future from the controller named above or from the transport service provider DHL.

– DHL Express
If the goods are delivered by the transport service provider DHL Express (DHL Express Germany GmbH, Heinrich-Bruening-Str. 5, 53113 Bonn), we pass on your e-mail address in accordance with Art. 6 (1) lit. a GDPR before delivery of the goods for the purpose of arranging a delivery date or for delivery notification, provided you have given your express consent to this during the ordering process. Otherwise, we pass on only the name of the recipient and the delivery address to DHL Express for the purpose of delivery in accordance with Art. 6 (1) lit. b GDPR. The data is only passed on where this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with DHL Express or a delivery notification is not possible. Consent can be withdrawn at any time with effect for the future from the controller named above or from the transport service provider DHL Express.

10.3 Use of payment service providers (payment services)

– Stripe
If you select a payment method offered by the payment service provider Stripe, payment is processed via the payment service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we transmit the data you provided during the ordering process together with the information about your order (name, address, account number, sort code, credit card number where applicable, invoice amount, currency and transaction number) in accordance with Art. 6 (1) lit. b GDPR. Further information on data protection at Stripe can be found at https://stripe.com/de/privacy.

Stripe reserves the right to carry out a credit check on the basis of mathematical-statistical procedures in order to safeguard its legitimate interest in establishing the user’s solvency. Stripe may transmit the personal data required for a credit check and received in the course of payment processing to selected credit agencies, which Stripe will disclose to users on request. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of score values includes, among other things, address data. Stripe uses the result of the credit check with regard to the statistical probability of a payment default in order to decide on the eligibility to use the selected payment method.

You can object to this processing of your data at any time by sending a message to Stripe or the credit agencies commissioned.

However, Stripe may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

10.4 Electronic cancellation option for continuing obligations with consumers

Consumers who have concluded contracts on this website for continuing obligations for which a charge is made (such as subscription contracts) have the option of cancelling these via an electronic button, subject to the applicable notice periods. Clicking the button leads to a confirmation page on which the consumer can provide further details of the cancellation, identify themselves unambiguously and then declare the cancellation electronically. The collection of personal data and its transmission to us takes place in accordance with Art. 6 (1) lit. b GDPR and only to the extent necessary for the proper processing of the cancellation. The personal data provided is also used, on the basis of Art. 6 (1) lit. b GDPR, to confirm receipt of the cancellation and the time of cancellation electronically in text form. A further legal basis for processing is Art. 6 (1) lit. c GDPR. We are legally obliged to offer an electronic cancellation option for consumer contracts concluded in electronic commerce for continuing obligations subject to a charge.

11) Online marketing

Facebook Pixel for the creation of custom audiences (with cookie consent tool)

Within our online offering, the so-called “Facebook pixel” of the social network Facebook is used, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). If a user clicks on an advertisement placed by us that is displayed on Facebook, an addition to the URL of our linked page is added by the Facebook pixel. If our website permits the transfer of data to Facebook via pixels, this URL parameter is written into the user’s browser via a cookie that our linked website sets itself. This cookie is then read by the Facebook pixel and enables the data to be forwarded to Facebook. With the help of the Facebook pixel, Facebook is able to identify visitors to our online offering as a target group for the display of advertisements (so-called “Facebook Ads”). Accordingly, we use the Facebook pixel to display the Facebook advertisements we place only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called “custom audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook advertisements correspond to the potential interest of users and are not a nuisance. In this way, we can also evaluate the effectiveness of Facebook advertisements for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook advertisement (so-called “conversion”).

The data collected is anonymous for us, i.e. it does not allow any conclusions to be drawn about the identity of the user. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data use policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to place advertisements on and outside Facebook.

The data processing associated with the use of the Facebook pixel takes place only with your express consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.

12) Web analytics services

Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics uses so-called “cookies”, text files that are stored on your device and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transmitted to a Google server and stored there; it may also be transmitted to the servers of Google LLC in the USA.

This website uses Google (Universal) Analytics exclusively with the extension “_anonymizeIp()”, which ensures the anonymisation of the IP address by shortening it and excludes a direct personal reference. The extension means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with further services associated with website use and internet use. The IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other Google data.

Google Analytics also uses a special function, the so-called “demographic characteristics”, to create statistics with statements about the age, gender and interests of website visitors on the basis of an evaluation of interest-based advertising and with the inclusion of third-party information. This enables the definition and differentiation of user groups of the website for the purpose of target-group-optimised marketing measures. However, the data records collected via the “demographic characteristics” cannot be assigned to a specific person.

Details of the processing triggered by Google Analytics and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

All processing described above, in particular the setting of Google Analytics cookies for reading information about the end device used, is only carried out if you have given us your express consent to this in accordance with Art. 6 (1) lit. a GDPR. Without this consent, Google Analytics will not be used during your visit to our website.

You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the “cookie consent tool” provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our website visitors and not to pass it on to third parties.

For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA. Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy

13) Retargeting / remarketing / referral advertising

Google Ads Remarketing

Our website uses the functions of Google Ads Remarketing in order to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising on the basis of a pseudonymous cookie ID and the pages you have visited. Further data processing only takes place if you have consented to Google linking your internet and app browsing history with your Google account and using information from your Google account to personalise advertisements you see on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data in order to create target groups. In the course of using Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC in the USA.

Details of the processing triggered by Google Ads Remarketing and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the Google browser plug-in available at the following link:
https://support.google.com/ads/answer/7395996

Further information and the privacy policy on advertising and Google can be found here:
https://www.google.com/policies/technologies/ads/

All processing described above, in particular the setting of cookies for reading information on the end device used, is only carried out if you have given us your express consent to this in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.

14) Site functionalities

14.1 Facebook plugins with 2-click solution

Our website uses so-called social plugins (“plugins”) of the social network Facebook, which is operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).

To increase the protection of your data when you visit our website, the plugins are initially deactivated and integrated into the page via a so-called “2-click” solution. You can recognise deactivated plugins by the fact that they are greyed out. This integration ensures that no connection to the Facebook servers is established when you call up a page on our website that contains such plugins. Your browser only establishes a direct connection to the Facebook servers if you activate the plugins and thereby give your consent to the transmission of data in accordance with Art. 6 (1) lit. a GDPR. The content of the respective plugin is then transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Facebook. We have no influence on the scope of the data that Facebook collects with the help of the plugins. To the best of our knowledge, Facebook receives information about which of our websites you are currently visiting and have previously visited. By integrating the plugins, Facebook also receives the information that your browser has called up the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in. The information collected (including your IP address) is transmitted by your browser directly to a server of Meta Platforms Inc. in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your contacts there.

You can withdraw your consent at any time by deactivating the activated plugin by clicking on it again. However, the withdrawal has no effect on the data that has already been transmitted to Facebook.

For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your related rights and settings options for protecting your privacy, please refer to Facebook’s privacy notices: https://www.facebook.com/policy.php

14.2 Google Customer Reviews (formerly Google Certified Merchant Program)

We work with Google as part of the “Google Customer Reviews” programme. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This programme gives us the opportunity to obtain customer reviews from users of our website. After you have made a purchase on our website, you will be asked whether you would like to take part in an e-mail survey by Google. If you give your consent in accordance with Art. 6 (1) lit. a GDPR, we will transmit your e-mail address to Google. You will receive an e-mail from Google Customer Reviews asking you to rate the shopping experience on our website. The rating you give is then aggregated with our other ratings and displayed in our Google Customer Reviews logo as well as in our Merchant Center dashboard. Your rating is also used for Google Seller Ratings. In the course of using Google Customer Reviews, personal data may also be transmitted to the servers of Google LLC in the USA.

You can withdraw your consent at any time by sending a message to the controller or to Google.

Further information on data protection at Google in connection with the Google Customer Reviews programme can be found at the following link: https://support.google.com/merchants/answer/7188525

Further information on data protection for Google Seller Ratings can be found at this link: https://support.google.com/google-ads/answer/2375474

15) Rights of the data subject

15.1 Applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-a-vis the controller responsible for the processing of your personal data, whereby reference is made to the legal basis cited for the respective conditions of exercise:

• Right of access pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to notification pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent pursuant to Art. 7 (3) GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

15.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS DUE TO OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

16) Duration of storage of personal data

The duration of the storage of personal data depends on the respective legal basis, the purpose of processing and – where relevant – additionally on the respective statutory retention period (e.g. commercial and tax law retention periods).

Where personal data is processed on the basis of express consent pursuant to Art. 6 (1) lit. a GDPR, this data is stored until the data subject withdraws their consent.

If there are statutory retention periods for data processed in the context of legal or similar obligations on the basis of Art. 6 (1) lit. b GDPR, this data is routinely deleted after expiry of the retention periods, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in continued storage.

Where personal data is processed on the basis of Art. 6 (1) lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for the purpose of direct marketing on the basis of Art. 6 (1) lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

17) Deletion or blocking of data

We store personal data only for as long as is necessary to achieve the stated purposes or as required by law. The data is blocked or deleted as soon as the purpose no longer applies or the periods have expired.

18) Script libraries (Google Web Fonts)

We use Google Web Fonts for the consistent presentation of our website. This establishes a connection to Google’s servers. Further information can be found in Google’s privacy policy.

19) Google Maps

Our website uses the Google Maps API to display geographical information. Google collects data about the use of the map functions. Further information can be found in Google’s privacy policy.

20) Embedded YouTube videos

We embed YouTube videos, which transmit data to YouTube when they are accessed. Further information can be found in YouTube’s privacy policy.

21) Social plugins

Our website uses social media buttons with the “Shariff” solution in order to protect your data. Data is only sent to the respective provider after you have clicked on the graphic.

22) Google AdWords

Our website uses Google conversion tracking to measure the success of advertisements. You can deactivate tracking by making the corresponding settings in your browser.

23) Use of Microsoft Clarity

We use Microsoft Clarity to better understand how users interact with our website and to improve the user experience. Clarity provides us with anonymised data via tools such as heatmaps, session recordings and usage analytics.

Microsoft may collect information such as mouse movements, clicks, scrolling behaviour and general interaction data, including anonymised IP addresses as well as device and browser details. This data is processed in accordance with the requirements of the GDPR and does not contain any personal information such as names, e-mail addresses or payment details.

For further information about how Microsoft processes your data, please see the Microsoft privacy statement.

24) Your rights

You have the right to information, rectification, blocking and deletion of your stored personal data. To exercise these rights, please contact our data protection officer.

25) Changes to our privacy policy

We reserve the right to amend this privacy policy from time to time in order to adapt it to current legal requirements or changes to our services.

26) Questions about data protection

If you have any questions about data protection, please contact us by e-mail: info@afram.shop

This English version is provided for convenience only. In the event of any discrepancy, the German version of this privacy policy shall prevail.