Privacy Policy

1. Introduction

The protection of your personal data is of the highest priority. This Privacy Policy explains the nature, scope and purpose of the processing of personal data (hereinafter referred to as "data") in connection with our online offering. This includes the associated website, features and content, as well as external online presences such as social media profiles (hereinafter collectively referred to as the "online offering"). Your personal data will be treated confidentially and in strict accordance with the statutory data protection regulations and the provisions of this Privacy Policy.

General information

This Privacy Policy gives you a comprehensive overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to personally identify you. Detailed information on data protection can be found in this full Privacy Policy.

Data controller

Data processing on this website is carried out by the website operator. The contact details of the controller can be found in the "Controller" section of this Privacy Policy.

Collection of your data

Personal data is collected on the one hand by you actively providing it, e.g. by filling out a contact form. Other data is collected automatically or with your consent when you visit the website by the controller's IT systems. This is mainly technical data (e.g. internet browser, operating system or time of the page request). This data is collected automatically as soon as you enter the website.

Use of your data

Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyse your user behaviour in order to optimise the offering and adapt it to your needs.

Transfer of data to external parties

In the course of the controller's business activities, it may be necessary to transfer personal data to external parties. Such transfers only take place under specific conditions: where disclosure is necessary for the performance of a contract, where there is a legal obligation, e.g. towards tax authorities, where a legitimate interest exists pursuant to Art. 6 (1) lit. f GDPR, or where another legal basis permits the transfer. Where external service providers are engaged to process data, personal data is only shared on the basis of a valid data processing agreement pursuant to Art. 28 GDPR. Where data is processed jointly with other parties, a joint-controllership agreement pursuant to Art. 26 GDPR is concluded.

Withdrawal of consent to data processing

Certain data processing operations can only be carried out with your express consent. This consent can be withdrawn at any time. The lawfulness of the data processing carried out up to the point of withdrawal remains unaffected by the withdrawal.

Right to object to specific data processing and direct marketing (Art. 21 GDPR)

If the processing of your personal data is based on Art. 6 (1) lit. e or f GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation. This also applies to profiling based on these provisions. The specific legal basis for the processing can be found in this Privacy Policy. In the event of an objection, the controller will no longer process your personal data unless compelling legitimate grounds for the processing can be demonstrated that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (objection pursuant to Art. 21 (1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing. This also applies to profiling insofar as it is related to direct marketing. Following your objection, the controller will no longer use your personal data for these advertising purposes (objection pursuant to Art. 21 (2) GDPR).

Rights under the General Data Protection Regulation

You have the right to lodge a complaint with a competent supervisory authority in the event of breaches of the GDPR. This right may be exercised in particular in the Member State of your habitual residence, place of work or the place of the alleged breach. Other administrative or judicial remedies remain unaffected.

Personal data that is processed automatically on the basis of consent or for the performance of a contract may be requested in a structured, commonly used and machine-readable format. Upon request, this data may also be transmitted directly to another controller, insofar as this is technically feasible.

Every data subject has the right to obtain, free of charge, information about their stored personal data, its origin, recipients and the purpose of the data processing. In addition, there is a right to rectification or erasure of this data, provided this is permitted by law. For further questions or concerns relating to personal data, the controller can be contacted at any time.

You have the right to request the restriction of the processing of your personal data if the accuracy of the data is disputed and a review is pending. In the case of unlawful processing, restriction of processing may be requested instead of erasure. Restriction may also be requested if the data is no longer required but is needed to assert, exercise or defend legal claims. In the case of an objection to processing pursuant to Art. 21 (1) GDPR, restriction may also be requested until it is determined whose interests prevail.

Where the processing of personal data has been restricted, such data may — apart from being stored — only be processed with the consent of the data subject or for the assertion, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the EU or a Member State.

2. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Elias Stephan
Bergstraße 14, 63785 Obernburg am Main, Germany
Website: www.aceclips.shop
Email: info@aceclips.shop
Phone: +49 17646740023

3. Processors

We work with various processors who process data on our behalf. These service providers are contractually obliged to treat the data confidentially and to use it exclusively within the scope of the respective service. There are also cases in which the responsibility for the data processing is shared jointly with other parties. In such cases, the responsibilities are transparently regulated and documented in order to ensure compliance with data protection requirements.

4. Definitions

To ensure the transparency of this Privacy Policy and make it understandable for everyone, this policy primarily uses terms that are also defined in the General Data Protection Regulation (GDPR). The full legal definitions can be found in Art. 4 GDPR. The most important terms in connection with this Privacy Policy are explained below:

Personal data: This includes any information relating to an identified or identifiable natural person (hereinafter "data subject"). A person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or one or more specific characteristics that are expression of the physical, physiological, genetic, mental, economic, cultural or social identity of that person.

Processing: This term covers any operation or set of operations which is performed on personal data, whether or not by automated means. This may include the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of data.

Controller: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Processor: A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Consent: Any freely given, specific, informed and unambiguous indication of the data subject's wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.

Website: The website refers to the entire online offering provided by the controller under a specific URL. This includes all content, information, functions and services published by the controller and made accessible to the user via that URL. The website serves as a digital platform for providing information, services and interaction between the controller and users.

End device: An end device is an electronic device capable of accessing the internet and loading web pages. This includes, among others, computers, laptops, tablets and smartphones.

5. Hosting

This website is hosted on the servers of an external service provider in order to guarantee you a reliable and secure use of this online offering.

Data processing by the hosting provider is carried out pursuant to Art. 6 (1) lit. f GDPR, as the controller has a legitimate interest in providing a stable and secure website. Where it is necessary to obtain user consent (for example, for the use of certain cookies or tracking technologies), the data processing is based on the user's consent pursuant to Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG. You may withdraw your consent at any time with effect for the future.

The hosting provider is:

Elias Stephan, Bergstraße 14, 63785 Obernburg am Main, Germany

Details of the data processing and data protection can be found in the privacy policy of the hosting provider, available at: https://aceclips.shop/legal/privacy.

6. Legal bases for data processing

The processing of your personal data is carried out on the basis of the General Data Protection Regulation (GDPR) as well as other relevant statutory provisions. Depending on the purpose of the data processing, different legal bases apply.

Insofar as you have consented to the processing of your personal data, such processing takes place on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR. This applies in particular to the processing of special categories of personal data pursuant to Art. 9 (2) lit. a GDPR and to the transfer of personal data to third countries pursuant to Art. 49 (1) lit. a GDPR. Your consent can be withdrawn at any time.

The processing of your data may be necessary for the performance of a contract or the implementation of pre-contractual measures and is then based on Art. 6 (1) lit. b GDPR. Processing may also be required to comply with legal obligations, in which case it takes place pursuant to Art. 6 (1) lit. c GDPR.

In certain cases, processing takes place to safeguard the legitimate interests of the controller or a third party, provided that your interests or fundamental rights and freedoms do not override them. This processing is based on Art. 6 (1) lit. f GDPR.

For certain processing operations, national regulations such as § 25 TTDSG may also apply, e.g. for the storage of cookies or access to information on your end device. The respective applicable legal bases are explained in detail in the specific sections of this Privacy Policy.

7. Data transfers to insecure third countries and non-DPF-certified US companies

If tools of companies based in data protection-insecure third countries are used on this website, or if US tools are used whose providers are not certified under the EU-US Data Privacy Framework (DPF), your personal data may be transferred to and processed in these countries. Please note that in data protection-insecure third countries, no level of data protection equivalent to that of the EU can be guaranteed. For the USA as an insecure third country, in principle no level of data protection comparable to that of the EU is guaranteed. A data transfer to the USA is therefore only permissible if the recipient either holds a certification under the "EU-US Data Privacy Framework" (DPF) or has suitable additional safeguards. Detailed information on possible transfers to third countries, including the data recipients, can be found in this Privacy Policy.

8. Storage duration

Unless a more specific storage duration is mentioned within this Privacy Policy, personal data remains with the controller until the purpose of the data processing ceases to apply. If a legitimate request for erasure is made or consent to the data processing is withdrawn, the data in question will be deleted, unless other legally permissible reasons for storing the personal data exist (e.g. tax or commercial retention periods). In such cases, deletion takes place after these reasons cease to apply.

The controller only stores personal data for as long as is necessary to fulfil the respective purposes for which the data was collected. This includes, in particular, the fulfilment of contractual obligations, compliance with statutory retention periods and the safeguarding of legitimate interests of the controller, such as IT security and protection against misuse. Where the processing of personal data is based on consent, storage takes place until such consent is withdrawn by the data subject. Such withdrawal is possible at any time with effect for the future. Thereafter, the data will be deleted without delay unless there are statutory retention obligations or other overriding legal grounds requiring further storage.

In summary, personal data is deleted once the purpose has been fulfilled or the legal basis for storage no longer applies, unless there are ongoing legal obligations or legitimate interests justifying further storage.

9. Security measures and data minimisation

Comprehensive technical and organisational measures are taken to effectively protect your personal data against accidental or unlawful destruction, loss, alteration or unauthorised disclosure or access. Care is taken to ensure that only the data strictly necessary for the respective purpose is collected and processed. This strategy of data minimisation helps to significantly reduce the risk of misuse and unauthorised access. Security measures are continuously adapted to the state of the art in order to permanently guarantee the protection of your data at a high level.

10. SSL/TLS encryption

To protect the security of your data during transmission, encryption methods (e.g. SSL or TLS) corresponding to the current state of the art are used via HTTPS. SSL (Secure Socket Layer) or TLS (Transport Layer Security) are protocols for encrypting data transmissions on the internet. This ensures that the data exchanged between your browser and the server is protected against unauthorised access. You can recognise an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the lock symbol in your browser bar.

11. Encrypted payments via the website

If, after concluding a paid contract, there is an obligation to transmit payment data (e.g. account number for direct debit) to the controller, this data transfer takes place in encrypted form. This encryption technology provides a high level of protection for payment data and prevents access by third parties. The encrypted transmission path can be recognised by the fact that the browser's address bar changes from "http://" to "https://" and the lock symbol is displayed in the browser bar. The use of SSL or TLS ensures that payment data is treated securely and confidentially.

12. Storage of user information in log files

Each time the website is accessed, general information is automatically collected which your browser transmits to the server. This information is stored in so-called log files and typically includes:

a) IP address of the requesting device
b) Date and time of access
c) Name and URL of the file accessed
d) Website from which access takes place (referrer URL)
e) Browser used and user agent string
f) Operating system
g) Name of your access provider
h) HTTP status code

This data is stored for security reasons, to ensure a smooth connection to the website, for the convenient use of the website, for the evaluation of system security and stability and for further administrative purposes.

The legal basis for the data processing is Art. 6 (1) lit. f GDPR. The legitimate interest results from the purposes for data collection listed above. Under no circumstances is the data collected used for the purpose of drawing conclusions about you personally. The stored data will be anonymised or deleted unless there are statutory retention obligations.

13. Cookies

This website uses cookies. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone or similar) when you visit the site. Cookies do not cause any damage to your end device and do not contain viruses, Trojans or other malware.

Information is stored in the cookie that arises in connection with the specific end device used. However, this does not mean that the controller obtains immediate knowledge of your identity.

The use of cookies serves, on the one hand, to make the use of the offering more pleasant for you. For example, the controller uses so-called session cookies to recognise that you have already visited individual pages of the website. These are automatically deleted when you leave the site.

In addition, the controller also uses temporary cookies to optimise user-friendliness, which are stored on your end device for a specific defined period. If you visit the site again to use the services, it is automatically recognised that you have already been there and which entries and settings you have made, so that you do not have to enter them again.

On the other hand, the controller uses cookies to statistically record the use of the website and to evaluate it for the purpose of optimising the offering for you. These cookies enable the controller to automatically recognise, on a repeat visit to the site, that you have already been there. These cookies are automatically deleted after a defined period.

The data processed by cookies are required for the purposes mentioned in order to safeguard the legitimate interests of the controller and of third parties pursuant to Art. 6 (1) sentence 1 lit. f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a notice always appears before a new cookie is created. Complete deactivation of cookies may mean that you cannot use all functions of the website.

14. Cookie Consent Banner

This website uses a cookie consent banner to manage your consent to the use of cookies. The provider of this service is:

Elias Stephan, Bergstraße 14, 63785 Obernburg am Main, Germany

Further information on the data processing can be found at: https://aceclips.shop/legal/privacy.

Functionality and purpose

The cookie consent banner sets a technically necessary cookie in order to store your cookie consents. This cookie does not process any personal data. It merely stores your selected settings that you have made when entering the website, including:

a) Consent to or refusal of certain cookies
b) Time of consent
c) Duration of storage of the settings
d) Legal basis of the data processing

Data processing by the cookie consent banner is carried out pursuant to Art. 6 (1) lit. f GDPR. The legitimate interest of the controller is to ensure lawful consent to the use of cookies. If consent has been requested, the processing is based on Art. 6 (1) lit. a GDPR.

Storage duration and deletion

The stored data will remain saved until you delete the cookies in your browser yourself or withdraw your consent. You can change your settings at any time in the cookie settings of this website.

15. Use of the contact form

For questions of any kind, you have the possibility to contact the controller via a form provided on this website. In order to know who the enquiry is from and to be able to answer it, the following data must be provided: name, email, subject, message.

The data processing for the purpose of contacting the controller is carried out pursuant to Art. 6 (1) sentence 1 lit. a GDPR on the basis of the consent voluntarily given.

The personal data collected for the use of the contact form will be deleted on a regular basis after the enquiry has been dealt with.

16. Enquiries by email or telephone

You have the possibility to submit enquiries by email or telephone to the controller. The personal data transmitted in this context (e.g. name, email address, telephone number and the enquiry itself) are processed and stored by the controller exclusively for the purpose of dealing with the enquiry and any follow-up questions.

The legal basis for this data processing is Art. 6 (1) lit. b GDPR, as the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures. If the processing does not relate to a contract, it is carried out pursuant to Art. 6 (1) lit. f GDPR, as the controller has a legitimate interest in processing and answering the enquiries.

17. Prohibition of unsolicited advertising emails

The use of the contact details published in the imprint to send unsolicited advertising and information materials is hereby prohibited. Any unauthorised use of the contact details for advertising purposes constitutes a violation of the rights of the operator of this website and will not be tolerated. The operator of this website expressly reserves the right to take legal action in the event of violations, in particular in the case of unsolicited advertising material such as spam emails.

18. Registration on the website

There is the possibility to register on the website. The data entered for this purpose will only be used by the controller for the purpose of using the respective offering or service for which the registration takes place. The mandatory information requested during registration must be provided in full. Otherwise the registration will be rejected.

For important changes, e.g. to the scope of the offering, or for technically necessary changes, the controller uses the email address provided during registration to inform users in this way.

The processing of the data entered during registration is based on the user's consent (Art. 6 (1) lit. a GDPR). Consent given can be withdrawn at any time. An informal message by email to the controller is sufficient. The lawfulness of the data processing already carried out remains unaffected by the withdrawal.

Sending to existing customers without consent

Newsletters may be sent to existing customers even without their express consent under certain conditions. This is permitted pursuant to Art. 6 (1) lit. f GDPR if the following conditions are met:

a) Existing customer status: the customer provided their email address in connection with the sale of a product or service.
b) Direct advertising for own similar products or services: the newsletter contains only advertising for the controller's own similar products or services.
c) Notice of the right to object: the customer was clearly informed both when the email address was collected and in every newsletter that they can object to the use of their email address at any time, without incurring any costs other than the transmission costs at the basic rates.
d) No objection by the customer: the customer has not objected to the use of their email address.

This type of newsletter mailing is based on the legitimate interest of the controller in informing existing customers about similar products or services and maintaining the business relationship. The data processing is carried out pursuant to Art. 6 (1) lit. f GDPR. Of course, customers can object to the use of their email address for this purpose at any time. An informal message by email to the controller or use of the "unsubscribe" link in the respective newsletter is sufficient.

19. Form tools

Here you will find information on the use of form tools on this website, including details on the processing of personal data and your rights in connection with the use of these forms.

The use of these tools is based on the legitimate interest pursuant to Art. 6 (1) lit. f GDPR in ensuring efficient data collection and management. Where necessary, the data processing is based on your consent pursuant to Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG. Consents can be withdrawn at any time with effect for the future.

20. Processing of customer and contract data

Personal customer and contract data are collected, processed and used for the establishment, content organisation and modification of contractual relationships. This may include name, address, email address and telephone number. This information is necessary in order to provide services and to communicate. Depending on the payment method chosen, payment information such as credit card data, bank details or information on other payment services is also collected and used exclusively for the payment process.

In addition, usage and order data is processed, including information about orders, services used, prices and delivery details. Personal data on the use of this website (usage data) is only collected, processed and used to the extent necessary to enable the user to use the service or to bill for it.

The processing of personal data takes place on various legal bases. Pursuant to Art. 6 (1) lit. b GDPR, the data processing takes place for the performance of a contract or for the implementation of pre-contractual measures, e.g. for the handling of orders and the provision of services. In addition, processing takes place pursuant to Art. 6 (1) lit. c GDPR for compliance with legal obligations, including statutory retention obligations. Furthermore, processing takes place pursuant to Art. 6 (1) lit. f GDPR to safeguard legitimate interests, such as the improvement of services and the safeguarding of IT security.

The customer data collected will be deleted after completion of the order or termination of the business relationship and expiry of any statutory retention periods. Statutory retention obligations remain unaffected.

21. Shipping and delivery of goods

Insofar as goods are shipped to customers, the controller collects and processes additional personal data that is necessary for the handling of the shipment. This includes in particular the name, delivery address and, if applicable, special delivery instructions. This data will only be used for carrying out the shipping process and for delivering the ordered goods.

The processing of this data is carried out on the basis of Art. 6 (1) lit. b GDPR, as it is necessary for the performance of the contract, namely the delivery of the ordered goods.

As part of the shipping process, your data will be passed on to commissioned shipping service providers to the extent necessary for delivery. These service providers are contractually obliged to treat your data confidentially and to use it only within the scope of the provision of the service.

Following completion of the shipment and fulfilment of the contractual relationship, your shipping data will be stored in accordance with the statutory retention periods and subsequently deleted, provided that no further legal obligations to retain data exist.

22. Third-party payment services

Third-party payment services are used on this website to provide you with a secure and convenient payment option. When you make a purchase via the website, your payment data (e.g. name, payment amount, account details, credit card number) is processed directly by the respective payment service provider for the purpose of processing the payment. The contractual and data protection provisions of the respective provider apply.

The processing of your data is carried out on the basis of Art. 6 (1) lit. b GDPR for the performance of the contract and in the interest of a smooth, convenient and secure payment process pursuant to Art. 6 (1) lit. f GDPR. Insofar as your consent is required for certain actions, the data processing is carried out on the basis of Art. 6 (1) lit. a GDPR. Consents can be withdrawn at any time with effect for the future.

Apple Pay

You have the option to pay for your purchases via Apple Pay. Apple Pay is a payment service provided by Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, T23 YK84, Ireland. When you use Apple Pay, you will be redirected to Apple's website for payment processing. Your payment information will be collected and processed directly by Apple.

Additional information on the processing of your personal data by Apple Pay can be found in the Apple Pay Privacy Policy at: https://www.apple.com/legal/privacy/en-ww/.

Klarna

You have the option to pay for your purchases via Klarna. Klarna is a payment service provided by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. When you use Klarna, your payment information will be collected and processed directly by Klarna.

Additional information on the processing of your personal data by Klarna can be found in the Klarna Privacy Policy at: https://www.klarna.com/international/privacy-policy/.

PayPal

You have the option to pay for your purchases via PayPal. PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. When you use PayPal, your payment information will be collected and processed directly by PayPal.

PayPal is certified under the EU-US Data Privacy Framework (DPF), which ensures an adequate level of protection for the transfer of personal data from the EU to the USA. Every company certified under the DPF commits to complying with these strict data protection standards. Further information on the EU-US DPF can be found at: www.dataprivacyframework.gov.

Additional information on the processing of your personal data by PayPal can be found in the PayPal Privacy Policy at: https://www.paypal.com/en/webapps/mpp/ua/privacy-full.

Stripe

You have the option to pay for your purchases via Stripe. Stripe is a payment service provided by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. When you use Stripe, your payment information will be collected and processed directly by Stripe.

Additional information on the processing of your personal data by Stripe can be found in the Stripe Privacy Policy at: https://stripe.com/privacy.