Last Updated: 10.09.2024
At ToyMotions (the “Website”), we are committed to protecting your privacy and ensuring that your personal data is handled in accordance with the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, store, and protect your personal information and your rights concerning your data.
1. Data Controller
The data controller responsible for the processing of your personal data is:
- ToyMotions
- Address: Alex Glawion, Allee am Röthelheimpark 8a, 91052 Erlangen, Germany
- Email: hi@toymotions.com
- Data Protection Officer (if applicable): Alex Glawion
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
2.1 Personal Information
- Name
- Email address
- Phone number
- Physical address
- Date of birth (if required)
2.2 Technical Data
- IP address
- Browser type and version
- Time zone settings
- Operating system and platform
- Information about your visit, including the URL clickstream, pages viewed, page response times, download errors, and other information relating to your interaction with the Website.
2.3 Usage Data
- Information on how you use our Website, products, and services.
2.4 Marketing and Communication Data
- Your preferences in receiving marketing communications from us and your communication preferences.
3. How We Collect Your Data
We collect personal data from you in the following ways:
- Direct interactions: You may provide personal information by filling out forms, subscribing to newsletters, creating an account, or communicating with us via email or phone.
- Automated technologies or interactions: We may automatically collect technical data when you interact with our Website, using cookies, server logs, or other technologies.
- Third-party sources: We may receive personal data from third parties such as analytics providers (e.g., Google Analytics), advertising networks, or public databases.
4. Purpose of Processing Your Data
We will only use your personal data when the law allows us to. Most commonly, we will use your data for the following purposes:
4.1 To Fulfill a Contract
- Processing your orders and delivering products or services.
- Communicating with you about your account or transactions.
4.2 Legitimate Interests
- Improving our Website, services, and marketing efforts.
- Conducting data analysis and market research to better understand our customers.
- Ensuring network and information security.
4.3 Legal Compliance
- Complying with legal obligations, such as tax and reporting requirements.
- Responding to law enforcement or regulatory authorities’ requests.
4.4 With Your Consent
- Sending marketing communications when you have explicitly consented to receive them.
- Providing personalized content or offers based on your preferences.
5. Legal Basis for Processing Personal Data
Under GDPR, we rely on the following legal bases for processing your personal data:
- Consent: When you have provided your explicit consent for specific purposes (e.g., email marketing).
- Contractual necessity: When processing is required to fulfill a contract with you (e.g., delivering goods or services).
- Legitimate interests: When processing is necessary for our legitimate business interests, provided that these do not override your rights.
- Legal obligation: When processing is necessary to comply with legal obligations.
6. Your GDPR Rights
Under GDPR, you have the following rights concerning your personal data:
6.1 Right of Access
You have the right to request access to your personal data and receive a copy of the data we hold about you.
6.2 Right to Rectification
You have the right to request that we correct any inaccurate or incomplete personal data.
6.3 Right to Erasure (Right to Be Forgotten)
You have the right to request that we delete your personal data when it is no longer necessary for the purposes for which it was collected or processed.
6.4 Right to Restrict Processing
You have the right to request that we restrict the processing of your data in certain circumstances, such as when you contest the accuracy of the data.
6.5 Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transfer that data to another data controller.
6.6 Right to Object
You have the right to object to the processing of your personal data when the processing is based on legitimate interests or for direct marketing purposes.
6.7 Right to Withdraw Consent
If you have provided consent for the processing of your data, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at hi@toymotions.com. We will respond to your request within one month, as required by GDPR.
7. How We Protect Your Data
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of sensitive data
- Regular security assessments
- Access control measures to limit access to personal data
- Use of secure servers and SSL encryption for online transactions
Despite our best efforts, no method of transmission over the internet is 100% secure, and we cannot guarantee the absolute security of your data.
8. Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting obligations.
When determining the appropriate retention period, we consider the nature, sensitivity, and potential risk of harm from unauthorized use or disclosure of your personal data, as well as any applicable legal requirements.
9. Sharing Your Data
We do not sell your personal data to third parties. However, we may share your data with:
- Service providers who provide IT, hosting, and system administration services.
- Professional advisers such as lawyers, bankers, auditors, and insurers, where necessary.
- Regulatory authorities when required by law or to protect our rights.
- Third-party analytics providers to improve user experience and marketing efforts.
Any third parties we work with must agree to keep your data secure and process it in accordance with applicable data protection laws.
10. International Data Transfers
If your data is transferred outside of the European Economic Area (EEA), we will ensure that appropriate safeguards are in place to protect your personal data, such as:
- Ensuring the recipient country is recognized as providing an adequate level of data protection.
- Using Standard Contractual Clauses approved by the European Commission.
- Where applicable, relying on the EU-U.S. Data Privacy Framework (for transfers to the United States).
11. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience on our Website. Cookies are small data files stored on your device to collect information about your interactions with our Website.
You can manage your cookie preferences through your browser settings or by using cookie consent tools provided on our Website. For more details, please refer to our Cookie Policy.
12. Children’s Privacy
Our Website is not intended for use by children under the age of 16, and we do not knowingly collect personal data from children. If we discover that a child under 16 has provided us with personal data, we will delete that information immediately.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or the way we handle your personal data, please contact us at:
- Email: hi@toymotions.com
- Address: Alex Glawion, Allee am Röthelheimpark 8a, 91052 Erlangen, Germany
ToyMotions
All rights reserved.