Privacy policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when you use our website. Personal data includes all data that can be used to personally identify you.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Happy Trading GmbH, Industriestraße 13 27367 Sottrum, Germany, Tel.: 017624115035, Fax: 042643983144, Email: info@happy-trading.eu. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website for informational purposes only, i.e., if you do not register or provide us with any information, we collect only the data that your browser transmits to the server of the website (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

- Our visited website
- Date and time of access
- The amount of data transmitted in bytes
- Source/reference from which you arrived on the site
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be transferred or otherwise used. However, we reserve the right to review the server log files retrospectively if there are specific indications of illegal use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (such as orders or inquiries to the controller). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser bar.

3) Hosting & Content Delivery Network

**Shopify**

For the hosting of our website and the display of its content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.
All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by a decision of adequacy by the European Commission.

4) Cookies
To make your visit to our website attractive and enable the use of certain functions, we use cookies, small text files stored on your device. Some of these cookies are deleted automatically after closing the browser (so-called "session cookies"), while others remain on your device longer, allowing site settings to be saved (so-called "persistent cookies"). In the latter case, you can find the storage duration in the cookie settings of your browser.

If personal data is processed by individual cookies, this processing is carried out in accordance with Article 6(1)(b) GDPR either for contract performance, or in the case of consent under Article 6(1)(a) GDPR, or in accordance with Article 6(1)(f) GDPR to safeguard our legitimate interest in the best possible functionality of the website and a user-friendly and effective visit to the site.

You can configure your browser to notify you about the setting of cookies and to decide individually on their acceptance or to exclude the acceptance of cookies in certain cases or generally.

Please note that if you do not accept cookies, the functionality of our website may be restricted.

5) Contact
When contacting us (e.g., via contact form or email), personal data is processed solely for the purpose of handling and responding to your inquiry and only to the extent necessary.

The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Article 6(1)(f) GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been fully resolved, provided that no statutory retention obligations apply.

6) Data Processing When Opening a Customer Account
In accordance with Article 6(1)(b) GDPR, personal data will continue to be collected and processed as necessary when you provide it to us when opening a customer account. You can see the required data for opening an account in the input form on our website.

You can delete your customer account at any time by notifying the responsible party at the contact details above. After deletion of your customer account, your data will be deleted, provided all contracts concluded through the account are fully processed, no legal retention periods prevent deletion, and there is no legitimate interest on our part in further retention.

7) Use of Customer Data for Direct Advertising

**Newsletter Subscription**

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Any additional data you provide is voluntary and is used to address you personally. We use the double opt-in procedure to ensure that you only receive newsletters after confirming your subscription via a verification link sent to your provided email address.

By activating the confirmation link, you consent to the use of your personal data in accordance with Article 6(1)(a) GDPR. We store your IP address, as entered by the Internet Service Provider (ISP), as well as the date and time of your registration, to track any possible misuse of your email address at a later date. The data collected when registering for the newsletter will be used exclusively for the purposes of the newsletter.

You can unsubscribe from the newsletter at any time by using the link provided in the newsletter or by sending a message to the controller mentioned above. After unsubscribing, your email address will be promptly deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or if we reserve the right to use the data in ways permitted by law, as described in this policy.

8) Data Processing for Order Fulfillment

8.1 To the extent necessary for contract fulfillment for delivery and payment purposes, we transfer the personal data collected to the contracted transport company and payment service provider in accordance with Article 6(1)(b) GDPR.

If we are obligated by contract to provide updates for goods with digital elements or for digital products, we will process your contact details (name, address, email address) provided during the order process in order to inform you personally, by suitable means of communication (e.g., by post or email), about upcoming updates within the legally required period in accordance with Article 6(1)(c) GDPR. Your contact details will be used strictly for the purpose of notifying you about owed updates and will be processed only as necessary for the information.

For processing your order, we work with the following service provider(s), who assist us fully or partially in fulfilling the contracts concluded. Personal data is transferred to these service providers as outlined below.

8.2 Use of Payment Providers

- Shopify Payments

This website offers one or more online payment options from the following provider: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

If you select a payment method from this provider, where you make an advance payment (e.g., credit card payment), your payment data (name, address, bank and credit card information, currency, and transaction number) as well as information about your order will be shared with the provider in accordance with Article 6(1)(b) GDPR. This data transfer occurs solely for the purpose of payment processing and only to the extent necessary for this purpose.

9) Web Analytics Services

9.1 **Google (Universal) Analytics**

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables the analysis of your use of our website.

When you visit the website, Google (Universal) Analytics typically sets cookies that store small text files on your device and collect certain information. This information includes your IP address, which is shortened by Google to prevent direct identification. The information is transferred to and processed on Google servers. Data transfers to Google LLC in the USA are also possible.

Google uses the information on our behalf to analyze your use of the website, compile reports on website activity for us, and provide additional services related to website use and internet use. The IP address transmitted by your browser and shortened by Google will not be merged with other Google data. The data collected through Google Analytics is stored for a maximum of two months and then deleted.

All the above-described processing, including the setting of cookies on your device, only occurs if you have given us your express consent in accordance with Article 6(1)(a) GDPR. Without your consent, Google (Universal) Analytics will not be used during your visit. You can revoke your consent at any time for future visits. To exercise your revocation right, please disable this service via the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further legal information about Google (Universal) Analytics can be found at [https://policies.google.com/privacy] and at [https://policies.google.com/technologies/partner-sites].

**Demographic Characteristics**
Google (Universal) Analytics uses the special "demographic characteristics" function, which allows the creation of statistics about the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third parties. It allows us to identify target groups for marketing activities. However, the data collected cannot be attributed to any specific individual and is deleted after two months.

**Google Signals**
As an extension of Google (Universal) Analytics, Google Signals can be used on this website to create cross-device reports. If you have personalized ads enabled and have linked your devices to your Google account, Google may analyze your usage across devices, subject to your consent to the use of Google Analytics in accordance with Article 6(1)(a) GDPR, and generate database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analysis, you can disable "personalized advertising" in your Google account settings by following the instructions on this page: [https://support.google.com/ads/answer/2662922]. Further information about Google Signals can be found at [https://support.google.com/analytics/answer/7532985].

**User IDs**
As an extension of Google (Universal) Analytics, the "User IDs" function can be used on this website. If you have consented to the use of Google (Universal) Analytics in accordance with Article 6(1)(a) GDPR and have created an account on this website and logged in on various devices with this account, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

9.2 **Google Analytics 4**

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables the analysis of your use of our website.

Google Analytics 4 typically sets cookies that store small text files on your device and collect certain information. This information includes your IP address, which is shortened by Google to prevent direct identification. The information is transferred to and processed on Google servers. Data transfers to Google LLC in the USA are also possible.

Google uses the information on our behalf to analyze your use of the website, compile reports on website activity for us, and provide additional services related to website use and internet use. The IP address transmitted by your browser and shortened by Google will not be merged with other Google data. The data collected through Google Analytics 4 is stored for a maximum of two months and then deleted.

All the above-described processing, including the setting of cookies on your device, only occurs if you have given us your express consent in accordance with Article 6(1)(a) GDPR. Without your consent, Google Analytics 4 will not be used during your visit. You can revoke your consent at any time for future visits. To exercise your revocation right, please disable this service via the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further legal information about Google Analytics 4 can be found at [https://policies.google.com/privacy] and at [https://policies.google.com/technologies/partner-sites].

**Demographic Characteristics**
Google Analytics 4 uses the special "demographic characteristics" function, which allows the creation of statistics about the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third parties. It allows us to identify target groups for marketing activities. However, the data collected cannot be attributed to any specific individual and is deleted after two months.

**Google Signals**
As an extension of Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have personalized ads enabled and have linked your devices to your Google account, Google may analyze your usage across devices, subject to your consent to the use of Google Analytics in accordance with Article 6(1)(a) GDPR, and generate database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analysis, you can disable "personalized advertising" in your Google account settings by following the instructions on this page: [https://support.google.com/ads/answer/2662922]. Further information about Google Signals can be found at [https://support.google.com/analytics/answer/7532985].

**User IDs**
As an extension of Google Analytics 4, the "User IDs" function can be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Article 6(1)(a) GDPR and have created an account on this website and logged in on various devices with this account, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

10) **Retargeting/Remarketing and Conversion Tracking**
**Meta Pixel with Extended Data Matching**

Within our online offering, we use the "Meta Pixel" service with extended data matching provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").

When a user clicks on an ad we have placed on Facebook or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel." After the redirection, this URL parameter is stored by a cookie set by our linked page. In addition, this cookie captures specific customer data, such as the email address we collect on our website during actions such as purchases, account sign-ups, or registrations (extended data matching). The cookie is then read and allows the transfer of the data, including specific customer data, to Meta.

We use "Meta Pixel" with extended data matching to make our ads (so-called "Ads") on Facebook and/or Instagram more effective and ensure that they match the interests of users or have certain characteristics (e.g., interests in certain topics or products identified based on the websites visited), which we transmit to Meta (so-called "Custom Audiences").

We also analyze the effectiveness of our ads by tracking whether users were redirected to our website after clicking on an ad (conversion). Compared to the standard version of "Meta Pixel," the extended data matching function helps us measure the effectiveness of our advertising campaigns better by capturing more attributable conversions.

All data transmitted to Meta is stored and processed by Meta so that it can be assigned to the respective user profile, and Meta can use the data for its own advertising purposes in accordance with Meta's data usage policy ([https://www.facebook.com/about/privacy](https://www.facebook.com/about/privacy)). Meta and its partners may use the data to display ads on and outside of Facebook.

All the above-described processing, particularly the setting of cookies for reading information on the device used, is carried out only if you have given us your express consent in accordance with Article 6(1)(a) GDPR. You can revoke your consent at any time for future visits by disabling this service via the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

The information generated by Meta is typically transferred to and stored on a server at Meta; this may also involve a transfer to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

11) **Rights of the Data Subject**

11.1 The applicable data protection law grants you the following rights as a data subject regarding the processing of your personal data, which can be exercised in accordance with the relevant legal provisions:

- Right to access information in accordance with Article 15 GDPR;
- Right to rectification in accordance with Article 16 GDPR;
- Right to erasure in accordance with Article 17 GDPR;
- Right to restrict processing in accordance with Article 18 GDPR;
- Right to be informed in accordance with Article 19 GDPR;
- Right to data portability in accordance with Article 20 GDPR;
- Right to withdraw consent in accordance with Article 7(3) GDPR;
- Right to lodge a complaint in accordance with Article 77 GDPR.

11.2 **RIGHT TO OBJECT**

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA AFFECTED. HOWEVER, FURTHER PROCESSING MAY BE PERMITTED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS

, OR IF THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING AT ANY TIME. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA AFFECTED FOR DIRECT MARKETING PURPOSES.

12) **Duration of Storage of Personal Data**

The duration of the storage of personal data is determined by the applicable legal basis, the processing purpose, and, if relevant, the applicable legal retention period (e.g., commercial and tax retention periods).

When processing personal data based on express consent in accordance with Article 6(1)(a) GDPR, the data will be stored until the data subject withdraws their consent.

If there are statutory retention periods for data that is processed based on legal or contractual obligations under Article 6(1)(b) GDPR, this data will be routinely deleted after the expiration of the retention periods, provided it is no longer necessary for contract fulfillment or contract initiation, and/or there is no legitimate interest on our part in further storage.

When processing personal data based on Article 6(1)(f) GDPR, the data will be stored until the data subject exercises their right to object under Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is for the establishment, exercise, or defense of legal claims.

When processing personal data for direct marketing purposes based on Article 6(1)(f) GDPR, the data will be stored until the data subject exercises their right to object under Article 21(2) GDPR.

Unless otherwise stated in this privacy policy, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.