Privacy policy

Privacy Policy

The controller responsible for data processing is:
NEOSOCIETYMUNICH Retail & Food GmbH
Herzogstr. 77
80796 Munich, Germany

E-mail: hallo@neosocietymunich.de

Thank you for your interest in our online shop. Protecting your privacy is very important to us. Below we inform you in detail about how we handle your data.

1. Access data and hosting

You can visit our website without providing any personal information. Each time a page is accessed, the web server automatically stores a so-called server log file containing, for example, the name of the requested file, your IP address, the date and time of retrieval, the volume of data transferred and the requesting provider (access data), and documenting the retrieval. This access data is evaluated exclusively for the purpose of ensuring the trouble-free operation of the site and improving our services. This serves to protect our legitimate interests, which prevail in a balancing of interests, in the correct presentation of our services pursuant to Art. 6 (1) sentence 1 lit. f GDPR. All access data is deleted no later than seven days after the end of your visit to the site.

1.1 Hosting: Shopify

Our online shop is operated on the platform of Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, Ireland. Shopify processes the data arising in connection with your visit to the shop and the processing of your order on our behalf. Data may also be transferred to Shopify Inc. (Canada) and to servers in the USA. An adequacy decision by the European Commission exists for Canada. No adequacy decision exists for the USA; the transfer is based on the European Commission's standard contractual clauses.

If you use the Shop Pay payment method, the data required for this is also processed by Shopify.

2. Data processing for contract fulfilment and contact

2.1 Data processing for contract fulfilment

We collect personal data if you voluntarily provide it to us when placing your order or when contacting us (e.g. via contact form or e-mail). Mandatory fields are marked as such, as in these cases we absolutely require the data to process the contract or to handle your enquiry, and you cannot complete the order or send the enquiry without providing it. Which data is collected can be seen from the respective input forms.

We use the data you provide to process the contract and handle your enquiries (including enquiries about and processing of any warranty and performance claims as well as any statutory update obligations) pursuant to Art. 6 (1) sentence 1 lit. b GDPR. Further information on the processing of your data, in particular on its transfer to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this privacy policy. After the contract has been fully processed, your data will be restricted for further processing and deleted after the expiry of any tax and commercial law retention periods pursuant to Art. 6 (1) sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use data beyond this where permitted by law and where we inform you about this in this policy.

2.2 Contact

As part of customer communication, we collect personal data pursuant to Art. 6 (1) sentence 1 lit. b GDPR in order to process your enquiries if you voluntarily provide this data to us when contacting us (e.g. via contact form or e-mail). Mandatory fields are marked as such, as in these cases we absolutely require the data to process your enquiry. Which data is collected can be seen from the respective input forms. After your enquiry has been fully processed, your data will be deleted, unless you have expressly consented to further use of your data pursuant to Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use data beyond this where permitted by law and where we inform you about this in this policy.

3. Data processing for the purpose of shipping

In order to fulfil the contract pursuant to Art. 6 (1) sentence 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary to deliver the goods ordered.

4. Data processing for payment handling

When handling payments in our online shop, we cooperate with the following partners: technical service providers, credit institutions and payment service providers.

4.1 Data processing for transaction handling

Depending on the payment method selected, we pass on the data required to process the payment transaction to our technical service providers, who act for us as processors, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary to process the payment. This serves the fulfilment of the contract pursuant to Art. 6 (1) sentence 1 lit. b GDPR. In some cases, payment service providers collect the data required to process the payment themselves, e.g. on their own website or via a technical integration in the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

If you have questions about our payment processing partners and the basis of our cooperation with them, please use the contact option described in this privacy policy.

4.2 Data processing for the purpose of fraud prevention and optimisation of our payment processes

Where applicable, we provide our service providers with further data which they use, together with the data required to process the payment, as our processors for the purpose of fraud prevention and the optimisation of our payment processes (e.g. invoicing, processing of contested payments, accounting support). Pursuant to Art. 6 (1) sentence 1 lit. f GDPR, this serves to protect our legitimate interests, which prevail in a balancing of interests, in protecting ourselves against fraud and in efficient payment management.

5. Cookies and web analytics

5.1 Use of cookies

We use cookies and comparable technologies on our website. Technically necessary cookies, which are required for the operation of the shop and the ordering process, are used on the basis of § 25 (2) no. 2 TDDDG and our legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f GDPR. All other cookies are only used with your express consent pursuant to § 25 (1) TDDDG and Art. 6 (1) sentence 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future via the cookie banner.

5.2 Consentmo (management of your consent)

We use Consentmo, a service provided by isense Labs Ltd., to manage your consent. Consentmo displays the cookie banner, stores your selection and documents it as proof of consent. In doing so, a pseudonymised visitor identifier, your browser type and approximate location data (country, region, city) are processed. Processing takes place on servers within the European Union (Frankfurt am Main). The legal basis is our legitimate interest in obtaining and documenting consent in a legally compliant manner pursuant to Art. 6 (1) sentence 1 lit. f GDPR.

The content delivery infrastructure used to deliver the consent scripts is operated by BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia.

5.3 Google Analytics 4

Provided you have consented to this, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and collects information about your use of our website, including your truncated IP address, the pages you visit and your interactions. This information is generally transferred to and stored on Google servers in the USA. No adequacy decision by the European Commission exists for the USA; the transfer is based on the European Commission's standard contractual clauses.

The legal basis is your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR. You can withdraw your consent at any time via the cookie banner. Without your consent, no analytics cookies are set and no analytics data is transmitted to Google.

6. Social media

We maintain online presences on Instagram (Meta) and LinkedIn.

Insofar as you have given your consent to the respective social media operator pursuant to Art. 6 (1) sentence 1 lit. a GDPR, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presences on the social media listed above, and usage profiles will be created from this data using pseudonyms. These may be used, for example, to display advertisements within and outside the platforms that presumably correspond to your interests. Cookies are generally used for this purpose. For detailed information on the processing and use of the data by the respective social media operator, as well as a contact option and your related rights and options for protecting your privacy, please refer to the privacy notices of the providers. If you nevertheless require assistance in this regard, you can contact us.

Instagram (Meta) is a service provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is generally transferred to and stored on a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA. No adequacy decision by the European Commission exists for the USA. Our cooperation is based on the European Commission's standard contractual clauses. Data processing in connection with a visit to an Instagram presence takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR.

LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). The information automatically collected by LinkedIn about your use of our online presence on LinkedIn is generally transferred to and stored on a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. No adequacy decision by the European Commission exists for the USA. Our cooperation is based on the European Commission's standard contractual clauses.

7. Contact options and your rights

7.1 Your rights

As a data subject, you have the following rights:

  • pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
  • pursuant to Art. 16 GDPR, the right to demand the immediate rectification of inaccurate personal data or the completion of your personal data stored by us;
  • pursuant to Art. 17 GDPR, the right to demand the erasure of your personal data stored by us, unless further processing is required
    • to exercise the right to freedom of expression and information;
    • to comply with a legal obligation;
    • for reasons of public interest; or
    • to establish, exercise or defend legal claims;
  • pursuant to Art. 18 GDPR, the right to demand the restriction of the processing of your personal data, insofar as
    • you contest the accuracy of the data;
    • the processing is unlawful but you object to its erasure;
    • we no longer need the data but you require it to establish, exercise or defend legal claims; or
    • you have objected to the processing pursuant to Art. 21 GDPR;
  • pursuant to Art. 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;
  • pursuant to Art. 7 (3) GDPR, the right to withdraw consent once given at any time with effect for the future;
  • pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your habitual residence or place of work, or that of our registered office.

Right to object

Insofar as we process personal data as explained above in order to protect our legitimate interests, which prevail in a balancing of interests, you may object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. Insofar as the processing is carried out for other purposes, you have a right to object only on grounds relating to your particular situation.

After you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves to establish, exercise or defend legal claims. This does not apply if the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.

7.2 Contact options

If you have questions about the collection, processing or use of your personal data, or wish to request information, rectification, restriction or erasure of data, or to withdraw consent given or object to a particular use of data, please contact us directly using the contact details in our legal notice.