Thank you for your interest in our website. In the following, we will inform you in detail about the processing of personal data when using this website. Personal data means all data that can be personally related to you, e.g. name, address, telephone number, email address or user behavior.

1. Who is responsible for data processing?

TeamShirts is a business division of Spreadshirt, Inc. The service provider and party responsible for processing personal data (‘controller’) is Spreadshirt, Inc., TeamShirts, 1572 Roseytown Road, Greensburg, PA 15601, United States (hereinafter referred to as “TeamShirts“). You can reach us using the following contact details:

Email: info@spreadshirt.com
Fax: 1-877-202-0251
Postal Mail: 1572 Roseytown Road, Greensburg, PA 15601

2. To what extent is personal data processed?

2.1 Collection of personal data when you visit our website

a) Log files

When using the TeamShirts website for information purposes only, so when you do not log in to use the website, register or otherwise provide information, we collect the data that your browser transmits to our server. This includes in particular:

The data is technically necessary for us to display our website to you. It is also evaluated to make the website user-friendly and to ensure stability and security. For this purpose, we partly use the external web hosting service providers Akamai Technologies, Inc. and Amazon Web Services, Inc. In the event that data is transferred from the EU to the USA, both service providers have subjected themselves to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).

b) Cookies and similar technologies

We also use cookies on our website. Cookies are small text files that are assigned to your browser and stored on your device. Through them, certain information flows to the place that sets the cookie, such as settings or data for exchange with the system. This helps us to make our website more user-friendly and effective overall. The legal bases for this are your consent and our legitimate interests. Cookies cannot execute programs or transmit viruses to your device.

Our website uses the following types of cookies:

Session cookies store what’s called a session ID, which can be used to assign different requests of your browser to a common session. This allows your device to be recognized when you return to our website. For example, this lets you store certain information you have entered (such as log-in information, language settings) in such a way that you do not have to repeat it constantly. Session cookies are automatically deleted when you log out or close your browser.

Long-term cookies remain on your device for the time being, so that we can recognize your browser on your next visit and we can, for example, assign your preferred information and settings. Long-term cookies are automatically deleted after a specified period, which may vary depending on the cookie.

When you visit our website, our partner companies also store third-party cookies on your device. The cookies contain information about how our website is used, e.g. which pages and products were visited. The data is collected in a pseudonymized form by assigning an identification number, which is not combined with any other personal data you may have provided to us.

You can delete cookies in your browser settings at any time or prevent them from being stored, although the latter may result in a restriction of the functionality of our website for you. In the relevant sections of this Privacy Policy, we explain which technologies that are comparable to cookies are used on our website and how you can object to the use of cookies and other technologies with the individual third-party providers.

2.2 Orders at TeamShirts / User Account

a) If you want to order something in our online shop, it is necessary for the conclusion of the contract that you give us the personal data we need to process the order. The mandatory data required to process the contract is marked as such; all other data you provide is voluntary. You can either enter your data only once for the order or use your email address to set up a password-protected user account with us, in which your data can be stored for later purchases. You can deactivate or delete the data and the user account at any time via the account.

To prevent unauthorized access to your personal data by third parties, the order process is encrypted using TLS technology.

When we process the data provided by you to process your order, this includes, for example, individual customer service. In the course of order processing, we pass on personal data to one of our production companies within the group, to a shipping company commissioned by us and (with the exception of PayPal) to our bank, ADYEN B.V., Simon Carmiggeltstraat 6-50, 1011 DJ Amsterdam, Netherlands (“Adyen”). The payment data is encrypted and transmitted directly to Adyen.

Payment via PayPal is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”). For information about data protection at PayPal, please refer to PayPal’s privacy policy: https://www.paypal.com/webapps/mpp/ua/privacy-prev?locale.x=en.

In the case of trackable parcels, we also pass on your order and address data to parcelLab GmbH, Landwehrstraße 39, 80336 Munich, Germany, to make it possible to track your parcel and to inform you about delivery deviations or delays, for example.

The legal bases for the processing of personal data as part of order processing are to perform under a contract and our legitimate interests. Due to commercial and tax regulations, we are obliged to store your order, address and payment data for a period of ten years.

b) During the order process we also conduct a fraud prevention check via our bank Adyen, which involves using your IP address to carry out a geolocalization and compare your data with previous experience. This may mean that an order cannot be placed with the selected payment method. Our aim in this regard is to prevent any abuse of your chosen payment method by third parties and to protect ourselves from payment defaults. The legal basis for the processing is our legitimate interests.

Since this involves automated decision-making, you have the right to challenge the decision (in this case the refusal of a certain payment method) and have the decision reviewed by a person. In such cases we ask that you contact us using the contact details mentioned in Section 1. Please note that the payment method may have been rejected due to a typing error and you should, therefore, check what you have entered again during the order process if necessary.

c) During the ordering process we use Google Maps Autocomplete, a service of Google LLC (“Google”). This allows an address you start typing to be completed automatically, avoiding delivery errors. Google sometimes conducts a geolocalization using your IP address and receives the information that you have retrieved the corresponding subpage of our website. In addition, the data referred to in Section 2.1 is transmitted. This is regardless of whether you have a Google account and are logged in. Once you are logged in to your Google Account, the information will be directly associated with your account. If you do not want this assignment to occur, you must log out before entering your address. Google stores your data as user profiles and uses it (even in the case of users who are not logged in) for the purposes of advertising, market research and/or the needs-oriented design of its own website. Google also processes your personal data in the USA and has subjected itself to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework). You can object to Google creating such user profiles. For more information about the purpose and scope of data processing by Google and about protecting your privacy, please refer to Google’s Privacy Policy: https://policies.google.com/privacy?hl=en. The binding terms of use for Google Maps/Google Earth can be found here: https://www.google.com/intl/en_US/help/terms_maps.html. Third-party provider information: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The legal basis for the processing is our legitimate interests.

d) After you place an order, we will process your order and address data to send you a personalized email asking you to rate our products. By obtaining ratings, our aim is to improve our services and adapt them to our customers’ wishes. We use the feedback software of Trustpilot A/S Pilestraede 58, 5th floor, 1112 Copenhagen, Denmark. (“Trustpilot“). For this purpose, we relay data to Trustpilot in order to send the feedback email containing the email address, name, order ID, order date, product types and a unique ID as a means of identification.

The legal basis for the processing is our legitimate interests. If you no longer want your data to be used for this purpose, you can object to this at any time. Just click on the unsubscribe link included with each email or send a message using the contact details provided under Section 1.

2.3 Communication with TeamShirts

a) Making contact

If you contact us via a contact form, letter, fax, email, social media or telephone, we process the data provided by you for the purpose of processing your enquiry and – only in the legally permissible cases when communicating with entrepreneurs – for advertising purposes. We use the software of Sematell GmbH, Neugrabenweg 1, 66123 Saarbrücken, Germany, to coordinate and process emails, which means that Sematell GmbH gains access to the data. The legal basis for the processing is our legitimate interests. If the aim of establishing contact is to conclude a contract, then an additional legal basis is to perform under a contract.

b) Blog

In our blog, where we publish various articles on topics related to our activities, you can post public comments. Your comment will be published along with your chosen username. We recommend using a pseudonym instead of your real name. It is necessary to provide a username and email address, while all other information is voluntary. The necessary information is processed to run the blog. We need your email address to contact you if a third party should complain that your comment is unlawful. We reserve the right to delete comments if third parties complain that they are unlawful. The legal basis for the processing is our legitimate interests.

2.4 Processing of data for web analytics

a) Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Ltd. (“Google”). Google uses cookies (see Section 2.1 b), which enable an analysis of your use of our website. The information generated by the cookie about usage is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymization on our website, your IP address will first be shortened by Google within the Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website and internet use.

The IP address transmitted by your browser in the context of Google Analytics will not be combined with other data held by Google.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this you may not be able to use the full functionality of our website. You can also prevent the data generated by the cookie and relating to your use of the website (including your IP address) from being recorded and processed by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout/?hl=en. Specifically in the case of mobile devices, you can prevent Google Analytics from recording data by clicking here: disable Google Analytics. This will place an opt-out cookie which prevents recording when you visit our website in future. Please note that if you delete all cookies on your device, this opt-out cookie will also be deleted; in this case, if you still wish to object then you must place the cookie again using the above button. The opt-out cookie is set per top-level domain, per browser and per device and only prevents the recording of data for this website.

This website uses Google Analytics with the “_anonymizeIp()” extension. Consequently, IP addresses are further processed in shortened form, so that any personal association with the data subject can be ruled out. As far as the data collected about you relates to you personally, that association is therefore ruled out immediately and the personal data thus erased without delay.

We use Google Analytics to analyze and regularly improve the use of our website. The statistics this yields allow us to improve our website and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google LLC has subjected itself to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework). The legal bases for our use of Google Analytics are your consent and our legitimate interests.

Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: + 353 (1) 436 1001. See also the terms of use (https://www.google.de/analytics/terms/gb.html) and privacy overview (https://support.google.com/analytics/answer/6004245?hl=en) for Google Analytics as well as Google’s privacy policy: https://policies.google.com/privacy?hl=en.

b) Adobe Analytics

To allow us to analyze and regularly improve the use of our website, our website also uses the Adobe Analytics web analytics service. The statistics this yields allow us to improve our website and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Adobe has subjected itself to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework). The legal bases for our use of Adobe Analytics are your consent and our legitimate interests.

The analysis involves storing cookies (see Section 2.1 b) on your device. The information collected in this way is stored on servers, including in the USA. We would like to point out that if you prevent the storage of cookies, you may not be able to use this website in its entirety. You can adjust your browser settings to prevent the storage of cookies. You can also prevent Adobe Analytics from recording your data on this website by clicking here: disable Adobe Analytics. This will place an opt-out cookie which prevents recording when you visit our website in future. Please note that if you delete all cookies on your device, this opt-out cookie will also be deleted; in this case, if you still wish to object then you must place the cookie again using the above button. The opt-out cookie is set per top-level domain, per browser and per device and only prevents the recording of data for this website. How to prevent the recording of your data on other websites is explained on the respective sites and at https://www.adobe.com/privacy/opt-out.html.

Our website uses Adobe Analytics with the settings “Before Geo-Lookup: Replace visitor’s last IP octet with 0” and “Obfuscate IP-Removed”, which removes the last octet from your IP address and replaces it with a generic IP address, i.e. one that can no longer be assigned. Any personal connection can therefore be ruled out.

Third-party provider information: Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland; privacy@adobe.com; Adobe’s privacy policy: https://www.adobe.com/privacy/policy.html.

c) Hotjar

Our website also uses the web analytics service Hotjar from Hotjar Ltd. This service allows us to track movements on our website (so-called heat maps). These make it possible to see how much time you spend on which pages, how far you scroll, the movement of your mouse and how often you click on certain links and buttons. Your keystroke data, i.e. your entries in input fields, are not recorded. Hotjar uses cookies (see point 2.1 b) to collect this information about your behavior, as well as the following information about your device: IP address of the device (only collected and stored in an abbreviated, anonymized form), screen size, device type (unique device identifiers), browser used, geographic location (country only) and language preferred when viewing the online offer. Hotjar Ltd. stores the information on servers in Ireland for 365 days, after which the data is deleted. Neither Hotjar Ltd. nor we will merge or associate the information with any other data about you, and it will not be used to identify individual users. The data collected by Hotjar Ltd. is only used for our internal evaluation of the user behavior when interacting with our online offer. It is used to improve aspects of user-friendliness of our website. To the extent that you have given us your consent, the legal basis for processing is your consent, and otherwise the legal basis is our legitimate interests.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this you may not be able to use the full functionality of our website. You can also prevent Hotjar from recording your data on this website by clicking here: disable Hotjar. This will place an opt-out cookie which prevents recording when you visit our website in future. Please note that if you delete all cookies on your device, this opt-out cookie will also be deleted; in this case, if you still wish to object then you must place the cookie again using the above button. The opt-out cookie is set per top-level domain, per browser and per device, and only prevents the recording of data for this website. How to prevent collection on other websites is explained on the respective site and here: https://www.hotjar.com/privacy/do-not-track/.

Third Party Information: Hotjar Ltd, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ, Malta. For more information about Hotjar Ltd.'s privacy practices, please see their privacy policy: https://www.hotjar.com/legal/policies/privacy.

d) Raygun

Our online offering also uses the application monitoring service of Raygun Limited (“Raygun“). The service recognizes and documents, using cookies, errors and performance problems that may occur during your use of our website. In this case, the data mentioned under 2.1 a will be transmitted to Raygun and evaluated there. Processing takes place on servers in an AWS data center in the USA. Amazon Web Services, Inc. (AWS) has subjected itself to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework). For New Zealand (the headquarters of Raygun), the EU Commission has established the adequacy of the level of data protection there (https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en). We use the service to detect and correct errors and to improve our online offering. The legal bases for this are your consent and our legitimate interests.

You can adjust your browser settings to prevent cookies from being saved. Please note that by doing this you may not be able to use the full functionality of our website. You can also prevent RayGun from recording your data on this website by clicking here: disable Raygun. This will place an opt-out cookie which prevents recording when you visit our website in future. Please note that if you delete all cookies on your device, this opt-out cookie will also be deleted; in this case, if you still wish to object then you must place the cookie again using the above button. The opt-out cookie is set per top-level domain, per browser and per device and only prevents the recording of data for this website.

Third-party provider information: Raygun Limited, L7, 59 Courtenay Place, Te Aro, Wellington, 6011 New Zealand. Further information on data protection at Raygun can be found in the data protection declaration of Raygun: https://raygun.com/privacy.

2.5 Advertising activities by TeamShirts

If you register separately for our newsletter via our website and give us your consent, we will use your email address to send you regular emails about product offers, discounts and contests.

We transfer the e-mail address to the software company ActiveCampaign, Inc. (“ActiveCampaign“), which handles the technical dispatch on our behalf. Data can also be transferred from the EU to the USA. ActiveCampaign has subjected itself to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).

When you register for our newsletter, we use the so-called double opt-in procedure. This means that after you register we will send you an email to the email address you provided, in which we ask you to confirm that you would like to receive the newsletter. If you do not confirm your registration, your information will be automatically deleted after one month. On the other hand, if you confirm the newsletter subscription, we will save your email address for the purpose of sending you the newsletter until you unsubscribe from the newsletter.

You can revoke your consent to the sending of the newsletter at any time (without this affecting the lawfulness of the processing up to the point of revocation). You can declare your revocation by clicking on the link provided in every newsletter email or by sending a message to the contact details provided in Section 1.

The legal basis for the processing is your consent.

2.6 Usage-based online advertising

Our website uses various conversion tracking and retargeting technologies made available by other service providers. We use these technologies to make our website interesting for you. The information also helps us to address users who have already shown an interest in our products with individually tailored advertising on the websites of our partner companies. We assume that the display of personalized, interest-based advertising is generally more interesting for the internet user than advertising that has no such personal relevance. At the same time, we want to avoid inappropriate and intrusive advertising.

General information about third-party advertising-based technologies and how to disable them can be found on the following websites, among others:

a) Use of Google AdWords conversion tracking and Google AdWords remarketing

- Google AdWords conversion tracking

We use Google AdWords, a service of Google LLC (“Google”), to draw attention to our offers on external websites with ads (so-called Google AdWords) In relation to the data of advertising campaigns, we can identify how successful the individual advertising activities are. In this way we want to show you advertising that is of interest to you, make our website more attractive to you and achieve a fair calculation of advertising costs.

These ads are deployed by Google via so-called ‘ad servers’. For this purpose, we use ad server cookies, which enable the tracking of certain parameters for measuring success, such as the display of ads or clicks by users. If you arrive at our website via a Google ad, Google AdWords will store a cookie on your device. These cookies usually expire after 30 days and are not intended to identify you personally. Analysis values usually stored for this cookie are the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (marker showing that the user no longer wishes to be targeted).

These cookies allow Google to recognize your internet browser. If a user visits certain pages of an AdWords customer’s website (in this case ours) and the cookie stored on their device has not yet expired, Google and the customer can recognize that the user has clicked on the ad and has been redirected to this site. Each AdWords customer is assigned a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. We do not collect and process any personal data in the aforementioned advertising activities. Google merely provides us with statistical evaluations. On the basis of these evaluations we can identify which of the advertising activities used are particularly effective. We do not receive any further data from the use of ads; in particular we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and further processing of the data collected by Google through the use of this tool and therefore inform you according to what we know: By integrating AdWords Conversion, Google receives the information that you have retrieved the corresponding part of our website, or that you have clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that Google will obtain and store your IP address.

- Google AdWords remarketing

Besides AdWords Conversion, we also use the Google AdWords remarketing feature. This is a process we use in an attempt to contact you again. After visiting our website, this feature makes it possible to show you our ads when you continue to use the internet. This is done by means of cookies stored in your browser, which Google uses to record and evaluate your usage behavior when visiting various websites. This is how Google can determine that you have previously visited our website. According to its own information, Google does not combine the data collected in the context of remarketing with your personal data, which may be processed by Google. Specifically, according to Google, pseudonymization is used during remarketing.

There are various ways in which you can prevent your participation in this tracking procedure:

The legal bases for the processing of your data are your consent and our legitimate interests.

Third-party provider information: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For further information about privacy at Google, please refer to: https://policies.google.com/privacy?hl=en and https://services.google.com/sitestats/en.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at: http://www.networkadvertising.org. Google has subjected itself to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).

b) Use of Meta Custom Audiences, Website Custom Audiences and Conversion Tracking

- Meta Custom Audiences

Our website also uses the Website Custom Audiences remarketing function of Meta Platforms, Inc. (“Meta”). This allows users of the website to see interest-based ads (“Meta Ads”) when visiting the social network Facebook or other websites (e.g., Instagram) that also use the process. Our intention here is to show you ads that are of interest to you.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. We have no influence on the extent and further processing of the data collected by Meta through the use of this tool and therefore inform you according to what we know: By integrating Custom Audiences, Meta receives the information that you have retrieved the corresponding part of our website, or that you have clicked on one of our ads. If you are registered with a Facebook service, Meta can associate the visit with your account. Even if you are not registered with Facebook or have not logged in, it is possible that Meta will obtain and store your IP address and other identifying information.

- Website Custom Audiences

Our website also uses the Meta product “Custom Audiences from your website”. For this purpose, we have integrated remarketing tags (so-called Meta Pixel or web beacon) into our website. The Meta Pixel is a small piece of JavaScript code that provides a range of functionalities for sending application-specific events and user-defined data to Meta. We use the Meta Pixel to track how visitors use our site. The Meta Pixel records and reports to Meta information about the user’s browser session, a hashed version of the Facebook ID, and the URL being viewed. Every Facebook user therefore has a device-independent Facebook ID, which enables us to recognize users across multiple devices on the social network Facebook so that we can use Meta Ads to reach our visitors again for advertising purposes. After 180 days, the user information is deleted until the user returns to our website. No personal information is transmitted to us about individual website visitors, and we can only specifically deploy ads to website custom audiences if the custom audience has reached a critical size. This makes it impossible for us to determine the individual identities of visitors.

- Conversion Tracking

We also use the Meta Pixel on our website to measure the reach of ads.\n This allows us to track users’ actions after they have seen or clicked on a Meta Ad. The Meta Pixel records and reports to Meta information about the user’s browser session, a hashed version of the Facebook ID, and the URL being viewed. The way it works is comparable to Website Custom Audiences via the Meta Pixel, which is already described above. Using the hashed Facebook ID, we can measure the reach and effectiveness of an ad to find out whether you are actually interested in our advertising. This enables us to measure the effectiveness of Meta Ads for statistical and market research purposes. For us, the data used is not personally identifiable.

You can prevent Meta from recording your data on this website by clicking here: disable Meta Custom Audiences, Website Custom Audiences and Conversion Tracking. This will place an opt-out cookie which prevents recording when you visit our website in future. The opt-out cookie is set per top-level domain, per browser and per device and only prevents the recording of data for this website. How to prevent the recording of your data on other websites is explained on the respective sites, and if you are a user who has logged in to Facebook, here: https://www.facebook.com/settings/?tab=ads#_.

The legal bases for the processing of data when using the functions specified above are your consent and our legitimate interests. You may revoke your consent anytime as described above (without this affecting the lawfulness of processing up to the point of revocation).

Third-party provider information: Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. For more information about data processing by Meta, please refer to Facebook’s privacy policy: https://www.facebook.com/about/privacy.

c) Use of Bing Ads Conversion Tracking and remarketing

- Bing Ads Conversion Tracking

Our website also uses the “Bing Ads Conversion Tracking” feature from Microsoft Corporation (“Microsoft“) to measure the reach of ads. This is to determine how successful our individual advertising activities are on Bing and Yahoo. Our intention here is to develop and display advertising that is of interest to you and make our website more attractive. For this purpose, Microsoft’s UET tag (Universal Event Tracking tag) is integrated into our website. This JavaScript code enables Microsoft to use cookies to collect pseudonymous data about your visit and the use of our website (e.g. about the browser session and the website displayed) and to provide us with aggregated, non-personal statistics on this basis (e.g. how many visitors have reached a particular target page). This allows us to trace the actions that have taken place after an ad has been viewed or clicked on Bing or Yahoo.

- Bing Ads remarketing

Our online offering also uses the “Bing Ads remarketing” feature. After visiting our website, this feature allows us to show you our ads when you continue to use the internet. Our intention here is to show you ads that are of interest to you. This is done by means of a cookie stored in your browser (see above for more information), which is used to record and evaluate your usage behavior. No personal information is transmitted to us about individual website visitors, and we can only specifically deploy ads to website custom audiences if the custom audience has reached a critical size. This makes it impossible for us to determine the individual identities of visitors.

There are various ways in which you can disable this tracking. You can adjust your browser settings to prevent the storage of cookies, although this may result in a restriction of the functionality of our website for you. You also can prevent Microsoft from recording your data on this website by clicking here: disable Bing Ads Conversion Tracking and remarketing. This will place an opt-out cookie which prevents recording when you visit our website in future. Please note that if you delete all cookies on your device, this opt-out cookie will also be deleted; in this case, if you still wish to object then you must place the cookie again using the above button. The opt-out cookie is set per top-level domain, per browser and per device and only prevents the recording of data for this website. In addition, you can disable interest-based ads from providers who are part of the “YourAdChoices” self-regulation initiative (http://optout.aboutads.info/?c=2#!/) or e.g. part of the Network Advertising Initiative (http://optout.networkadvertising.org/?c=1#!/), please note that this setting will be erased if you erase your cookies. It is also possible to disable interest-based ads at https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads.

The legal bases for the processing are your consent and our legitimate interests.

Third-party provider information: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft’s privacy policy: https://privacy.microsoft.com/en-us/privacystatement. Microsoft has subjected itself to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).

d) Use of Webgains tracking

In addition, we use a plug-in of the international affiliate network Webgains, which is provided by ad pepper media GmbH (“Webgains”). This enables us to measure the success of our ads on partner sites brokered for us by Webgains. In this way we want to show you advertising that is of interest to you, make our website more attractive to you and achieve a fair calculation of advertising costs. For this purpose, a tracking code is integrated into our site. This code enables Webgains to collect pseudonymous data about your visit and the use of our online offer via cookies and make aggregated, non-personal statistics available to us on this basis, in particular about how many visitors of a certain partner site have ordered something from us after clicking on our advertisement.

There are various ways in which you can disable this tracking. You can adjust your browser settings to prevent the storage of cookies, although this may result in a restriction of the functionality of our website for you. You also can prevent Webgains from recording your data on this website by clicking here: disable Webgains Tracking. This will place an opt-out cookie which prevents recording when you visit our website in future. Please note that if you delete all cookies on your device, this opt-out cookie will also be deleted; in this case, if you still wish to object then you must place the cookie again using the above button. The opt-out cookie is set per top-level domain, per browser and per device and only prevents the recording of data for this website. In addition, you can disable interest-based ads from providers who are part of the “YourAdChoices” self-regulation initiative (http://optout.aboutads.info/?c=2#!/) or e.g. part of the Network Advertising Initiative (http://optout.networkadvertising.org/?c=1#!/); please note that this setting will be erased if you erase your cookies.

The legal bases for the processing are your consent and our legitimate interests.

Information from the third-party provider: ad pepper media GmbH, FrankenStraße 150C, FrankenCampus, 90461 Nuremberg, Germany. Webgains privacy policy: http://www.webgains.com/public/en/privacy/.

e) Use of LinkedIn conversion tracking and retargeting

• LinkedIn conversion tracking

Our website uses the feature “LinkedIn conversion tracking” from LinkedIn Corporation (“LinkedIn”) to measure the reach of ads. This is to determine how successful individual advertising activities are on LinkedIn. Our intention here is to develop and display advertising that is of interest to you and make our website more attractive. For this purpose, the LinkedIn Insight Tag is integrated into our website. This JavaScript code enables LinkedIn to use cookies to collect pseudonymous data about your visit and the use of our website (e.g. about the browser session and the website displayed) and to provide us with aggregated, non-personal statistics on this basis. This allows us to trace the actions that have taken place after a LinkedIn ad has been viewed or clicked on.

• LinkedIn website retargeting

Our website also uses the “LinkedIn website retargeting” feature. After visiting our website, this feature makes it possible to show you our ads when you continue to use the internet. Our intention here is to show you ads that are of interest to you. This is done by means of a cookie stored in your browser (see above for more information), which is used to record and evaluate your usage behavior. No personal information is transmitted to us about individual website visitors, and we can only specifically deploy ads to website custom audiences if the custom audience has reached a critical size. This makes it impossible for us to determine the individual identities of visitors.

There are various ways in which you can disable this tracking. You can adjust your browser settings to prevent the storage of cookies, although this may result in a restriction of the functionality of our website for you. You also can prevent LinkedIn from recording your data on this website by clicking here: Disable LinkedIn conversion tracking and website retargeting. This will place an opt-out cookie which prevents recording when you visit our website in future. Please note that if you delete all cookies on your device, this opt-out cookie will also be deleted; in this case, if you still wish to object then you must place the cookie again using the above button. The opt-out cookie is set per top-level domain, per browser and per device and only prevents the recording of data for this website. In addition, you can disable interest-based ads from providers who are part of the “YourAdChoices” self-regulation initiative (http://optout.aboutads.info/?c=2#!/) or e.g. part of the Network Advertising Initiative (http://optout.networkadvertising.org/?c=1#!/); please note that this setting will be erased if you erase your cookies.

The legal bases for the processing are your consent and our legitimate interests.

Third-party provider information: LinkedIn Corporation 2029 Stierlin Court, Mountain View, CA 94043 USA. LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

2.7 Participation in surveys

If you participate in a survey offered by TeamShirts, we use the information you provide for the purpose of market research and further development of our offers. Within the scope of the survey, we will inform you separately about the data to be provided by you and the scope of use by us.

We may also use our service provider Momentive Europe UC ("SurveyMonkey") for the technical implementation of the surveys. In this process, data may also be transferred to the USA (see point 3).

The legal basis for the processing of your personal data is Germany’s DS-GVO, art. 6 para. 1 p. 1 lit. a. You may withdraw your consent at any time (without affecting the lawfulness of the processing carried out until the withdrawal). You can declare your revocation by sending an e-mail to info@spreadshirt.com or by sending a message to the contact data mentioned in point 1.

Third-party provider information: Momentive Europe UC, 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Irland. Privacy policy of SurveyMonkey:https://www.surveymonkey.com/mp/legal/privacy/

3. What are my rights?

If you have given your consent to the processing of your data, you can revoke this consent with future effect at any time. This does not affect the lawfulness of processing carried out on the basis of the consent before you revoke your consent.

If we base the processing of your personal data on our legitimate interests, you are entitled to object to the processing. This is the case if the processing is not necessary in particular for the performance of a contract with you, which was described by us in each case with the description of the individual functions. When exercising such a right of objection, we ask that you explain the reasons why we should not process your personal data as carried out by us. In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue processing.

However, you can of course object to the processing of your personal data for advertising or web analytics purposes at any time without giving reasons.

As described in the relevant sections, we sometimes use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked.

The personal data processed by us is generally erased or blocked as soon as the purpose of storage ceases to apply. Data may be stored for a longer period if this has been provided for by the European or national legislator in EU regulations, laws or other rules to which we as the controller are subject. The data will also be blocked or erased once a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

Further processing operations may be required for contests and other promotional campaigns. In such cases we will inform you in the context of the respective promotional campaign.

4. We Will Share Your Information with Third Parties in Specific Circumstances

a) Legal Compliance and Safety

There are a few times when we must share your information either to protect our rights or to obey the law. We will share your personal information when we believe in good faith that:

b) Corporate Change in Control Events

If we sell all or part of our business, or make a sale or transfer of assets, or are otherwise involved in a similar event, we may transfer your information as part of that transaction.

5. Do-Not-Track (“DNT”) Requests

Due to lack of technical standards across browsers, we do not respond to DNT signals.

6. Privacy Statement for California Residents

a) The California Consumer Privacy Act

This privacy statement supplements the information contained above and applies solely to “consumers” (as defined in the California Consumer Privacy Act (“CCPA”)). All terms defined in the CCPA have the same meaning when used in this section. For example, “consumer” means a California resident, and “personal information” means “information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device” but does not include “publicly available,” “de-identified,” or “aggregated” information. In this section, “you” refers only to California residents.

b) Consumer Rights

Consumers have the following rights under the CCPA:

c) Our Personal Information Collection, Use, and Disclosure

In the last twelve months, we have collected and disclosed personal information as follows.

We collect and disclose personal information for the following business purposes.

We collect and disclose personal information for the following commercial purposes.

d) Other Information Sale Disclosures

Do Not Sell My Personal Information. Click the link to the left to learn how to opt out of the “sale” of your personal information as defined in the CCPA.

We have no actual knowledge that the personal information we sell belongs to minors under 16 years of age.

e) How to Submit Verified Requests

To submit a request for information or deletion, please e-mailinfo@spreadshirt.com or call1-833-395-0374.

Your request will be processed only if we can verify that you are the person whose personal information is the subject of the request. If we cannot verify your identity, we will ask you to provide corrected verification information, or we will deny the request to the extent necessary.

If you request a deletion of your personal information, you will be required to confirm this deletion separately via e-mail.

All requests must be verified, meaning that we must determine that the consumer making the request is the same consumer whose personal information is the subject of the request. Verification methods will vary depending on the request, the sensitivity of the personal information that is the subject of the request, and our ability to associate the provided verification information with information in our records.

If you request disclosure of categories of personal information collected, used, and disclosed, then we will need to verify your identity by reference to at least two independent pieces of evidence describing different pieces of personal information that match the personal information in our records that is the subject of the request.

If you request disclosure of specific pieces of personal information, then we will need to verify your identity by reference to at least three independent pieces of evidence describing different pieces of personal information that match the personal information in our records that is the subject of the request.

If you request deletion of all or some personal information, then we will need to verify your identity by reference to at least two or three independent pieces of evidence describing different pieces of personal information that match the personal information in our records that is the subject of the request. The specific number and type of pieces of evidence will vary depending on the sensitivity of the personal information to be deleted.

If you do not have an account with us or have not made a purchase with us, it is possible that we will not be able to verify your request no matter what evidence you provide because we do not have enough information in our records to ensure that the information in our records is yours. This is because some of the personal information we gather is not identifiable with a specific individual (for example, a cookie which only stores which products you have previously viewed on our website so that these are shown to you at your next visit).

f) Authorized Agents

If an authorized agent will make a request on your behalf under this section, your agent must provide a copy of the writing, signed by you, which authorizes the agent to act on your behalf, along with the same level of verification on the part of both the authorized agent and yourself which would be required of an individual acting on his or her own behalf.

g) Contacting us With Questions or Concerns About our Privacy Policies and Practices

If you have any questions or comments about the collection, processing, or usage of personal information; if you have requests for information, correction, disabling or deletion of data, please use the settings provided in your account’s user area, or else contact us at one of the following addresses:

Email: info@spreadshirt.com
Fax: 1-877-202-0251
Phone: 1-833-395-0374
Postal Mail: 1572 Roseytown Road, Greensburg, PA 15601

h) Privacy Policy Last Updated

This privacy policy was last updated October 5, 2020.

i) Online Eraser Law (CA Business and Professions Code §§ 22581)

To the extent it is technically feasible and provided for and allowed by applicable law, California residents under the age of 18 may emailinfo@spreadshirt.com anytime to ask for access to information held about you in order to have it corrected, disabled, or deleted, when possible.

Note that removal or deletion of your information does not ensure complete or comprehensive removal of the content or information posted on our website and service, or on the internet generally.

j) “Shine the Light” Law (California Civil Code Section § 1798.83)

California residents who use our website may request certain information about our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please email us at info@spreadshirt.com

7. Children’s Online Privacy Protection

Our website is not intended or directed at individuals under the age of 13. We do not knowingly collect or keep any information of children under the age of 13. If we discover it, we will delete it as soon as possible.

8. Effective Date and Changes

This policy is effective as of October 5, 2020. Any material changes to this Privacy Policy will be announced to you on the website and/or via email.

Thank you for reading this privacy policy in its entirety!