Liability note: The following model privacy policy has been compiled by a lawyer (http://rechtsanwalt-schwenke.de). It meets the legal requirements of a typical online shop, addressed to consumers. However, you should use the model only after careful revision and adaptation to your specific business model. In certain constellations clauses can be illegal. If in doubt, take legal advice.

Adaptation note: Please note the information in the square brackets and edit them, if necessary, with your own information.

Privacy Policy

This privacy policy explains the nature, scope and purpose of the collections and use of personal information of visitors and users (hereinafter referred to collectively as “user”) by [Insert: DemoShop e.K., Owner: John Sample Sample Street 1, 12345 Samplecity] (hereinafter “provider”) as responsible entity by data protection law.

For questions about the privacy you can reach us weekdays from [9 am] to [6 pm] by calling [12345678] or by email at [name @ domain.com].

Collecting of Access Data
The provider collects data about each access to the online shop (so-called log files). Access data include the name of the website, file, date and time of access, amount of data transferred, notification about successful access, browser type and version, operating system of the user, referrer URL (the previously visited web page), IP address and the requesting provider.
The provider uses the log data without user identification or other profiling according to statutory regulations only for statistical analysis for the purpose of operation, security and the optimization of the online offer. However, the provider reserves the right to check the log data later if there is reasonable suspicion of unlawful use based on specific indications.

Collecting and Use of Personal Data

Personal data is only collected and used by the provider, if permitted by law or the user’s consent to the collection of personal data. In general, it is apparent what data is stored by the supplier for the use of the service, such as name, email address and messages during the ordering process. Specific personal data provided for the purpose of ordering goods (such as name, email address, mailing address, banking information) are used by the supplier to fulfill and complete the contract. This set of data is kept confidential, transmitted encrypted and not disclosed to third parties who are not involved in order, delivery and payment procedures. When contacting the seller (via contact form or email) user information will be stored for the purpose of processing the request and in the event of further questions regarding the request.
The provider has taken organizational, contractual and technical precautions to ensure compliance with the data protection laws and accidental or intentional manipulation, loss, destruction or access by unauthorized persons is prevented.

Forwarding data to third parties

User date will only be forwarded to third parties if this is legitimate or the user has consented to the transfer. This is the case for example if the forwarding of the data is necessary to fulfill contractual obligations and the mailing address is forwarded to the shipping company after the order. Or if the data are requested by law enforcement authorities.
Personal user information are not sold or forwarded to third parties for the purpose of advertising or creation of user accounts.

Cookies

The provider uses cookies within the scope of its online offer. Cookies are small files that device specific information to be stored on the user’s access device. Temporary cookies are deleted after closing your browser, permanent cookies maintain for a predetermined period of time and can provide the stored information available when accessing the website again. Cookies are used to simplify the use of the website. For example a cookie stores the status of the shopping cart.
Users can influence the use of cookies. Most browsers feature an option for limiting or completely preventing the installation of cookies. The provider tries to design his online offer in a way which make cookies unnecessary. However, it should be noted that the use and in particular the comfort of use may be limited without cookies.

[Please note: Please delete this paragraph if you do not offer a newsletter.
Please note that a newsletter requires an explicit and not previously marked consent by the user. Furthermore, the consent text of the newsletter must include a link to this privacy policy, for example: [ ] Yes, I want to subscribe to your newsletter <a href=”http://www.xxxx.de/datenschutz”>(Information about the content and right of withdrawal)</a>
Further information here: http://rechtsanwalt-schwenke.de/birgt-ihr-e-mail-newsletter-ein-abmahnrisiko-schlechte-beispiele-und-gute-beispiele/ ]

Sending Information via Newsletter

Emails including marketing information about the seller as well as his services will only be send with the clear consent of the user. Users may cancel the delivery of the newsletter at any time. You can cancel your subscription of the newsletter for example by clicking the unsubscribe link which is included in every email. Before receiving the newsletter, the owner of the email address will receive a confirmation mail in which he has to confirm the subscription of the newsletter. Not confirmed registrations will be deleted automatically within four weeks. Mails regarding the contractual relationship with the user are not marketing mails. That includes the delivery of technical information, information about payment processing, queries regarding the contract or other mails similar to those. Users can also request to unsubscribe afterwards by sending an email to the contact information mentioned above. In the scope of the subscription the provider stores the time of registration and confirmation as well as the IP address of the user. The provider is legally bound to protocol the registration to be able to proof the proper registration.

[PLEASE NOTE: Delete this paragraph if you do not use Google Analytics.
Please note: IP anonymization has to be activated. You also have to conclude a contract for processing customer data with Google. Please read this information: http://rechtsanwalt-schwenke.de/google-analytics-rechtssicher-nutzen-anleitung-fuer-webmaster/]

Google Analytics

This offer uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, small text files that are stored on the computers of users and enable their website use to be analyzed. As a rule, the information generated by the cookie about the users’ website use is transferred to and stored on a Google server in the USA.
If IP anonymization is activated on this website, however, the users’ IP address is shortened beforehand by Google within member states of the European Union or other contracting states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to and shortened by a Google server in the USA. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information for the purpose of evaluating the users’ website use, compiling website activity reports and providing further services relating to website and Internet use to the website operator.
The IP address transferred from the users’ browser via Google Analytics will not be associated with any other data held by Google. Users can prevent the installation of cookies by selecting the appropriate setting in their browser software; however, this offer informs the user that they should be aware that in this case they might not be able to use all functions of this website to their full extent. Users can also prevent Google from collecting and processing data generated by the cookie about their website use (including their IP address) by downloading and installing a browser plugin.

[Please note: Please delete the following paragraph if you do not use Piwik]

Piwik-Statistiken

The provider uses Piwik, an open-source software for analyzing user access. Piwik uses “cookies”, which are stored on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be stored on the server of the service provider in Germany. The IP address will be anonymized directly after the processing and before its storage.
Users may refuse the use of cookies by selecting the appropriate settings on your browser.
[INSERT IFRAME WITH OPT-OUT COOKIE ]

[Please note: Please delete the following paragraph if you do not use etracker]

Reach measurement with etracker

Our website uses the technology of etracker GmbH (www.etracker.com) to collect and store data for the purpose of marketing and optimization. The data obtained through this service allows the user profiles to be created under a pseudonym. Cookies may be used for this purpose.

The data collected by the etracker technologies are not used to determine the personal identity of website visitors and are not compiled together with personal data related to the person referred to by the pseudonym, unless expressly agreed to by the person concerned.
The collection and storage of data may be revoked at any time with respect to future services.
http://www.etracker.com/privacy?et= [Insert etracker Secure Code]

[Please note: Please delete the following paragraph if you do not use the Facebook-Social-Plugins]

Use of the Facebook-Social-Plugins

Our website uses social plugins (“plugins”) provided by the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can identify Facebook plugins by the Facebook logo (white “F” on blue square or the “Like” button (thumbs-up)) or are marked with “Facebook Social Plugin”. For a list of Facebook plugins and their appearance, click here: http://developers.facebook.com/docs/plugins/.
When you visit our website, a direct connection between your browser and the Facebook server is established by means of the plugin. The content of the plugin is directly transmitted to the user’s browser and integrated in the website by the browser. The provider has no influence on the extent of data that Facebook collects via the plugin and informs the users according to his knowledge: The plugin enables Facebook to receive the information that you have visited our site from your IP address. If you click on the Facebook “Like” button or submit a comment while you are logged into your Facebook account, you can link the content of our site to your Facebook profile. This allows Facebook to associate your visit to our site with your user account. If a user has no Facebook account, it may still be possible for Facebook to collect and save your IP address. According to Facebook in Germany only an anonymized IP address is stored.
For more information about the scope and purpose of collecting and processing data through the plugin, as well as rights and setting options to protect your privacy please see Facebook’s data protection statement at http://dede.facebook.com/policy.php.
If you have a Facebook account and do not want Facebook to allocate your visit to our pages to your Facebook account, please log out of your Facebook account and delete respective Facebook cookies. It is also possible to block Facebook-Social-Plugins with an add-on for your browser for example with “Facebook Blocker”.

[Please note: Please delete the following paragraph if you do not use the Google +1 button]

+1 button by Google+

Our website uses buttons of the social network Google +1 which is provided by Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”).

When you visit our website, a direct connection between your browser and the Google server is established. The content of the +1 button is directly transmitted to the user’s browser and integrated in the website by the browser. The provider has no influence on the extent of data that Google collects via the button. According to Google not personal information is collected without clicking the button. Only if you are logged in to your Google+ account this information, including your IP address, are collected and processed.
For more information about the scope and purpose of collecting and processing data through Google, as well as rights and setting options to protect your privacy please see Google’s data protection statement regarding the “+1” button at http://www.google.com/intl/de/+/policy/+1button.html and the FAQ: http://bit.ly/r3Qmer.
If a user has a Google+ account and does not want Google to collect data and allocate his or her visit to our pages to your Google account, please log out of your Google+ account and delete all Google cookies.

[Please note: Please delete the following paragraph if you do not use the Twitter button]

Using the Twitter button

Functions of the Twitter service are integrated on our sites. These functions are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

When a user visits our website which includes such a button, a direct connection between your browser and the Twitter server is established. The content of the Twitter button is directly transmitted to the user’s browser and integrated in the website by the browser. The provider has no influence on the extent of data that Twitter collects and informs the users according to his knowledge: According to that only the IP address of the user, the URL of the respective website is transferred when using the button, but not for other purposes than the display of the button. Further information can be found in the privacy statement of Twitter: http://twitter.com/privacy.

[Please note: Please delete the following paragraph if you do not use the Printerest button]

Use of the Printerest button

Our website uses the button (“Pin it”) provided by Printerest http://pinterest.com. With this button
users can share the article of the seller on their “Printerest-Board”.
When a user visits our website which includes a “Pin It”- button, a direct connection between your browser and the Printerest server is established. The content of the Printerest button is directly transmitted to the user’s browser and integrated in the website by the browser. The provider has no influence on the extent of data that Twitter collects and informs the users according to his knowledge: According to that only the IP address of the user as well as the URL of the respective website is transferred, but only for other purpose of displaying the “Pin It”-button and to share the content. Further information can be found in the privacy statement of Printerest: http://pinterest.com/about/privacy/.

Cancellation, changes, corrections and updates

The User has the right to request to receive free information about the personal data stored about him. Contact information can be found in the site notice of the seller. In addition, the user has the right to correct inaccurate data, to block and delete his personal data to the extent not contrary to the legal hold.
Changes of this Privacy Policy
We reserve the right to modify this policy to edit them according to new legal situations or for changes regarding the service as well as the processing of data.