1. General information
1.1 What is personal data
Personal data is information that discloses or may disclose the user's identity. We adhere to the principle of data avoidance. As far as possible, we refrain from collecting personal data.
1.2 Handling of personal data
Personal data is used exclusively for establishing the contract, content design, execution or processing of the contractual relationship (Art. 6 (1 b) GDPR).
In addition, personal data will only be processed if we have obtained your consent to do so (Art. 6 (1 a) GDPR) or if the processing of the data is necessary for our legitimate interests and if the assessment shows that there are no overriding interests, fundamental rights or freedoms on your part to the contrary (Art. 6 (1 f) GDPR).
We may use data processors to process your personal data, with whom we have concluded a data processing agreement where necessary, but we will not pass on your personal data to third parties beyond this.
The data will only be passed on to the shipping company commissioned with the delivery for the fulfillment of the contract insofar as this is necessary to deliver ordered goods. In order to process payments, the required payment data will be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider.
Your personal data will be processed in the EU and countries classified by the EU as safe or appropriate. If personal data is processed in the USA, care is taken to ensure that the services we use are certified under the "Data Privacy Framework".
1.3 Usage data
General technical information is collected when you visit the website. This includes the IP address used, time, duration of the visit, browser type and, if applicable, the originating page. For technical reasons, this usage data is registered in a log file and can be used and stored for the purpose of statistical analysis of this website. This usage data is not linked to your other personal data.
1.4 Registration data
Registration is required to make full use of the functions of our website. The registration data is collected through your corresponding entries and used for the expressly stated purpose in accordance with your consent (Art. 6 (1 a) GDPR).
1.5 Duration of storage
We only store your personal data after the end of the purpose for which the data was collected for as long as this is required by law (in particular, tax law).
2. Your rights
2.1 Information
You can request information from us as to whether we process your personal data, and if this is the case, you have the right to access this personal data and the further information specified in Art. 15 GDPR.
2.2 Right to rectification
You have the right to rectify inaccurate personal data concerning you and may request the completion of incomplete personal data in accordance with Art. 16 GDPR.
2.3 Right to erasure
You have the right to obtain from us the erasure of personal data concerning you without undue delay. We are obliged to erase it immediately, in particular, if one of the following reasons applies:
Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
You withdraw your consent on which the processing of your data was based, and there is no other legal basis for the processing.
Your data has been processed unlawfully.
The right to erasure does not apply if your personal data is required to assert, exercise or defend our legal claims.
2.4 Right to restriction of processing
You have the right to demand that we restrict the processing of your personal data if
you dispute the accuracy of the data, and we, therefore, check the accuracy,
the processing is unlawful, and you oppose the erasure and request the restriction of use instead
we no longer need the data, but you need it to assert, exercise or defend legal claims,
you have objected to the processing of your data, and it has not yet been determined whether our legitimate reasons outweigh your reasons.
2.5 Right to data portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent or a contract and the processing is carried out by automated means.
2.6 Right of revocation
If the processing of your personal data is based on consent, you have the right to revoke this consent at any time.
2.7 General information and right to lodge a complaint
Exercising your above rights is generally free of charge for you. You have the right to complain directly to the supervisory authority responsible for us, the state data protection officer.
3. Data security
3.1 Data security
All data on our website is protected by technical and organizational measures against loss, destruction, access, modification and dissemination.
3.2 Sessions and cookies
To operate the website, we dont use cookies or server-side sessions in which data can be stored.
4. Google Web Fonts
We use so-called web fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") to display a uniform font on our website. These are automatically stored in your browser cache when you access one of our pages in order to enable the desired display. If your browser does not support the web fonts used, a standard font from your computer may be used. This does not affect any user interests that outweigh this technical necessity (Art. 6 (1 f) GDPR). You can view Google's privacy policy here:
https://www.google.com/policies/privacy/ .
Further information on Google Web Fonts can be found at
https://developers.google.com/fonts/faq .
8. Contacting us
You are welcome to use the following contact options to contact us regarding data protection. Controller within the meaning of the GDPR:
Tugende Bike Cafe Ltd
TIN 120257701
Contact: info@tugende.rw
