Controller Responsible for Data Processing

​

42 four paws two hands

Karoline Pätsch

c/o IP-Management #8076

Ludwig-Erhard-Str. 18

20459 Hamburg

Germany

Email: info@fourpawstwohands.com

 

We appreciate your interest in our website. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

​

1. Access data and hosting

You can visit our website without providing any personal information. Whenever a website is accessed, the web server automatically stores a so-called server log file containing, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting internet service provider (access data), thereby documenting the access.

This access data is evaluated exclusively for the purpose of ensuring the smooth operation of the website and improving our services. This serves our legitimate interests, which prevail following a balancing of interests, in ensuring the proper presentation of our services pursuant to Art. 6(1)(f) GDPR. All access data is processed for as long as necessary for the purposes described above.

Hosting

The services for hosting and displaying the website are partly provided by our service providers acting as processors on our behalf. Unless otherwise explained in this Privacy Policy, all access data and all data collected through the forms provided on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection: Israel, the United Kingdom and the United States.

The adequacy decision for the United States serves as the basis for transfers to third countries where the respective service provider is certified. Such certification is in place.

Our service providers are based in and/or use servers in the following countries: Brazil, Mexico, India and Ukraine.

The European Commission has not adopted an adequacy decision for these countries. Our cooperation with these service providers is based on the following safeguards: the European Union's Standard Contractual Clauses.

2. Processing of data for contact and customer communication

2.1 Contacting us

When you contact us, we collect personal data that you voluntarily provide, for example via a contact form, live chat tool or email, in order to process your enquiries pursuant to Art. 6(1)(b) GDPR. Mandatory fields are marked as such because we require this information to process your enquiry. The data collected is shown in the respective input forms.

Once your enquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR or we reserve the right to use your data further where legally permitted and as explained in this Privacy Policy.

Once your customer enquiry has been fully handled, processing of your data will be restricted. Your data will be deleted after expiry of the statutory retention periods under tax and commercial law pursuant to Art. 6(1)(c) GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR or we reserve the right to use your data further where legally permitted and as explained in this Privacy Policy.

2.2 Contacting us via WhatsApp

You can contact us via WhatsApp Business. WhatsApp is a service provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland.

In this context, we process your telephone number, profile name and the contents of your messages in order to handle your enquiry and fulfil the contract (Art. 6(1)(b) GDPR). Message content is protected by end-to-end encryption. WhatsApp itself processes connection data and may transfer it to third countries, such as the United States.

Once your enquiry has been completed, we delete the chat unless statutory retention obligations apply. You can also contact us by email or via the contact form.

2.3 Data processing for contract fulfilment

If you place an order with us, we process the data necessary for this purpose (e.g. your name, address, email address, telephone number, measurements and payment details) to fulfil the contract (Art. 6(1)(b) GDPR).

Once the contract has been fully fulfilled, processing of your data will be restricted and your data will be deleted after expiry of the statutory retention periods under tax and commercial law (Art. 6(1)(c) GDPR).

2.4 Shipping

For delivery purposes, we pass on your name and delivery address to DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany), insofar as this is necessary for delivery (Art. 6(1)(b) GDPR).

2.5 Payment processing

You can pay by bank transfer in advance or via PayPal.

For bank transfers, we process the data provided to us by your bank. When paying via PayPal, the data required for payment is transferred to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

PayPal's Privacy Policy applies (Art. 6(1)(b) GDPR).

3. Cookies and other technologies

3.1 General information

To make visiting our website more attractive and to enable the use of certain functions, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your device.

Some of the cookies we use are deleted at the end of your browser session, i.e. when you close your browser (so-called session cookies). Other cookies remain on your device and enable your browser to be recognised on your next visit (persistent cookies).

Privacy protection on end devices

When using our online services, we employ strictly necessary technologies to provide the telemedia service you have expressly requested. Storing information on your device or accessing information already stored on your device does not require consent in these circumstances.

For functions that are not strictly necessary, storing information on your device or accessing information already stored on your device requires your consent. Please note that if you do not give your consent, certain parts of the website may not be fully functional. Any consent you have given remains in place until you change or reset the relevant settings on your device.

Subsequent data processing through cookies and other technologies

We use technologies that are strictly necessary for certain functions of our website, such as website preference settings. These technologies collect and process your IP address, the time of your visit, device and browser information, and information about your use of our website, such as your preferences.

This serves our legitimate interests, which prevail following a balancing of interests, in optimising the presentation of our services pursuant to Art. 6(1)(f) GDPR.

We also use technologies to fulfil our legal obligations, for example to document consent to the processing of personal data, as well as for web analytics and online marketing. Further information, including the relevant legal basis for data processing, can be found in the following sections of this Privacy Policy.

We may also use technologies that are not individually listed in this Privacy Policy. Further information about these technologies, including their respective legal basis for data processing, is available on the Usercentrics platform.

Cookie settings

You can find the cookie settings for your browser at the following links: Microsoft Edge™, Safari™, Chrome™, Firefox™ and Opera™.

If you have consented to the use of technologies pursuant to Art. 6(1)(a) GDPR, you may withdraw your consent at any time by sending a message to us using the contact details provided in this Privacy Policy.

3.2 Use of the Usercentrics Consent Management Platform

We use the Usercentrics Consent Management Platform (“Usercentrics”) on our website to inform you about the cookies and other technologies we use and, where legally required, to obtain, manage and document your consent to the processing of your personal data through these technologies.

This is necessary pursuant to Art. 6(1)(c) GDPR in order to fulfil our legal obligation under Art. 7(1) GDPR to demonstrate that consent has been given.

Usercentrics is a service provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, which processes your data on our behalf.

When you visit our website, Usercentrics' web server stores a so-called server log file containing your anonymised IP address, the date and time of your visit, device and browser information, and information about your consent behaviour.

Your data is deleted after three years unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR or we reserve the right to use your data further where legally permitted and as explained in this Privacy Policy.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection: the United States.

The adequacy decision for the United States serves as the basis for transfers to third countries where the respective service provider is certified. Such certification is in place.

4. Use of cookies and other technologies for web analytics and advertising purposes

We use the following cookies and other technologies provided by third parties on our website. Unless otherwise stated for an individual technology, their use is based on your consent pursuant to Art. 6(1)(a) GDPR.

The data collected in this context is deleted once the purpose has been fulfilled and we have ceased using the respective technology. You may withdraw your consent at any time with effect for the future. Further information about withdrawing consent can be found in the section “Cookies and other technologies”.

Further information, including the basis of our cooperation with the individual providers, is provided in the sections relating to the respective technologies. If you have any questions about these providers or the basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.

Use of Wix Analytics for web analytics

For website analytics purposes, data is automatically collected and stored by Wix Ltd., 40 Namal St., Tel Aviv 6350671, Israel (“Wix”). This data includes your IP address, the time of your visit, device and browser information, location information and information about your use of our website.

Pseudonymous usage profiles are created from this data. Cookies may be used for this purpose. These pseudonymous usage profiles are not combined with personal data identifying the individual behind the pseudonym without separate, explicit consent.

Wix acts as a processor on our behalf.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection: Israel, the United Kingdom and the United States.

The adequacy decision for the United States serves as the basis for transfers to third countries where the respective service provider is certified. Such certification is in place.

Our service providers are based in and/or use servers in the following countries: Brazil, Mexico, India and Ukraine.

The European Commission has not adopted an adequacy decision for these countries. Our cooperation with these service providers is based on the European Union's Standard Contractual Clauses.

5. Social media

Our online presence on Instagram (by Meta) and Pinterest

Where you have given your consent to the respective social media operator pursuant to Art. 6(1)(a) GDPR, your data is automatically collected and stored when you visit our online presences on the social media platforms mentioned above for market research and advertising purposes. Pseudonymous usage profiles are created from this data.

These profiles may be used, for example, to display advertisements within and outside the platforms that are presumed to match your interests. Cookies are generally used for this purpose.

Detailed information about how the respective social media operator processes and uses your data, as well as contact details and information about your rights and privacy settings, can be found in the providers' privacy notices linked below. If you need assistance with this, you may contact us.

Instagram (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”).

The information automatically collected by Meta Platforms Ireland about your use of our Instagram online presence is generally transferred to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Data processing in connection with visits to an Instagram (by Meta) fan page is based on an arrangement between joint controllers pursuant to Art. 26 GDPR. Further information, including information about Insights data, can be found here.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection: the United States, Canada, Japan, South Korea, New Zealand, the United Kingdom and Argentina.

The adequacy decision for the United States serves as the basis for transfers to third countries where the respective service provider is certified. Such certification is in place.

Our service providers are based in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil and Mexico.

The European Commission has not adopted an adequacy decision for these countries. Our cooperation with these service providers is based on the European Commission's Standard Contractual Clauses.

Pinterest is a service provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”).

The information automatically collected by Pinterest about your use of our online presence on Pinterest is generally transferred to and stored on a server operated by Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA.

Our service providers are based in and/or use servers in countries outside the EU and the EEA for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection.

Our service providers are based in and/or use servers in countries outside the EU and the EEA for which the European Commission has not adopted an adequacy decision. Our cooperation with them is based on the European Commission's Standard Contractual Clauses.

6. Contact details and your rights

6.1 Your rights

As a data subject, you have the following rights:

• Pursuant to Art. 15 GDPR, the right to request access to the personal data we process about you, within the scope specified therein.

• Pursuant to Art. 16 GDPR, the right to request the immediate rectification of inaccurate personal data or the completion of incomplete personal data stored by us.

• Pursuant to Art. 17 GDPR, the right to request the erasure of personal data stored by us, unless further processing is necessary:

  • to exercise the right to freedom of expression and information;

  • to comply with a legal obligation;

  • for reasons of public interest; or

  • to establish, exercise or defend legal claims.

• Pursuant to Art. 18 GDPR, the right to request restriction of processing where:

  • you contest the accuracy of the data;

  • the processing is unlawful but you oppose erasure;

  • we no longer need the data, but you need it to establish, exercise or defend legal claims; or

  • you have objected to processing pursuant to Art. 21 GDPR.

• Pursuant to Art. 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller.

• Pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority at your usual place of residence, your place of work or the place where our company is established.

Right to object

Where we process personal data as explained above on the basis of our legitimate interests, which prevail following a balancing of interests, you may object to this processing with effect for the future.

If your data is processed for direct marketing purposes, you may exercise this right at any time as described above. If your data is processed for other purposes, you may object only on grounds relating to your particular situation.

Following the exercise of your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

This does not apply where the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for that purpose.

6.2 Contact details

If you have any questions about the collection, processing or use of your personal data, or if you wish to request access to, rectification, restriction or erasure of your data, withdraw consent you have given, or object to a particular use of your data, please contact us directly using the contact details provided in our legal notice (Impressum).

​

10/2026