Privacy & Cookies at Labelty

Unless stated otherwise below, providing personal data is neither legally nor contractually required and not necessary to conclude a contract. You are not obliged to share data; withholding data has no consequences unless explicitly stated in the individual processing activities. Personal data means any information relating to an identified or identifiable natural person.

You may visit our site without telling us who you are. With every page view, however, usage data (e.g. visited page, date/time, IP address, transferred data volume, provider) is transmitted to us and stored in server log files by our hosting provider. Legal basis: Art. 6 (1) lit. f GDPR – our legitimate interest in secure, stable operations and service optimization. Transfers to third countries only occur if an EU adequacy decision exists.

Controller: Hummel GmbH & Co. KG, Hutwiesenstraße 20, 71106 Magstadt, Germany, phone +49 7159 402-0, hummel@hummel-print.com. Data protection officers: Patricia Rühle, Sandra Martin.

2.1 Controller/data protection officer – see details above.

2.2 Initiating contact by e-mail – We process your name, e-mail address and message exclusively to answer your request. If the contact aims to conclude or fulfil a contract, we rely on Art. 6 (1) lit. b GDPR; otherwise on Art. 6 (1) lit. f GDPR (legitimate interest in communication). You may object to processing based on Art. 6 (1) lit. f GDPR at any time for reasons relating to your particular situation.

2.3 Contact form – The same applies to requests via our form. We use the data solely for communication and delete it after completion unless statutory retention periods require longer storage.

When placing orders we process your personal data only to the extent required to fulfil the contract and handle follow-up questions (Art. 6 (1) lit. b GDPR). Without the data the contract cannot be concluded. Data is shared exclusively with involved shipping companies, payment providers, drop-shipping partners, fulfilment and IT service providers – each limited to what is necessary and lawfully permitted. Transfers to third countries take place only with adequacy decision or appropriate safeguards.

For order management we use an external ERP system acting as processor. Your order data is transferred to Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany. Legal basis: Art. 6 (1) lit. b GDPR because processing is required to perform the contract.

We offer PayPal Check-Out (PayPal Europe S.à.r.l. et Cie, S.C.A., Luxembourg) and additional PayPal payment options (credit card, direct debit, "Pay later", Ratepay, giropay, SOFORT etc.). Processing for payment handling relies on Art. 6 (1) lit. b GDPR. PayPal may obtain credit reports from agencies (Art. 6 (1) lit. f GDPR). You can object for reasons relating to your particular situation. PayPal may set cookies to secure payments (legitimate interest). See the PayPal privacy notice for details.

We use technically necessary cookies to provide core functionality (e.g. cart, login, consent storage). Legal basis: Sec. 25 (2) No. 2 TTDSG in conjunction with Art. 6 (1) lit. f GDPR (legitimate interest in a functional website). You can manage/delete cookies in your browser (instructions for Chrome, Edge, Firefox, Safari are linked in the privacy notice).

Optional cookies/technologies are only used with your consent (Art. 6 (1) lit. a GDPR in conjunction with Sec. 25 (1) TTDSG), for example Google Analytics 4, Google Tag Manager (to load additional tools), Google Maps, YouTube, Google Fonts and protection tools like Google reCAPTCHA. Make your choice in the cookie banner; you may withdraw consent at any time with effect for the future.

We use Google Analytics 4 (Google Ireland Limited) to measure reach and optimize our site. Processed data includes truncated IP address, timestamps, click paths, device/browser data, approximate location, purchase activity, etc. Google may combine the information with other Google data. Transfers to the USA rely on the Trans-Atlantic Data Privacy Framework (TADPF). Legal basis: your consent (Art. 6 (1) lit. a GDPR). You can withdraw consent any time via cookie settings.

Google Tag Manager manages JavaScript/HTML tags. The service itself does not set cookies but can trigger other tools (Google Ireland Limited).

Google invisible reCAPTCHA protects forms against bots. Usage data, IP address and potentially further information are sent to Google. Legal basis: your consent (Art. 6 (1) lit. a GDPR, Sec. 25 (1) TTDSG).

Google Maps, YouTube (enhanced privacy mode) and Google Fonts provide maps, videos and typography. Data may be transferred to the USA (TADPF). These services load only after you have consented. See Google/YouTube privacy notices for more details.

Retention: After fulfilling the contract we store data for statutory warranty, tax and commercial retention periods and delete it afterwards unless a longer storage is based on consent.

Your rights: Art. 15–20 GDPR (access, rectification, erasure, restriction, portability) plus Art. 21 GDPR (objection) and Art. 77 GDPR (complaint to the supervisory authority). The competent authority for us is: Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Königstraße 10a, 70173 Stuttgart, poststelle@lfdi.bwl.de.

Right to object: If we process data based on Art. 6 (1) lit. f GDPR, you may object at any time for reasons arising from your particular situation. For direct marketing, no justification is required.