Thank you for your interest in our website www.outfoxers.com. In the following, we will inform you in detail about the processing of personal data when using this website. Personal data means all data that can be personally related to you, e.g. name, address, telephone number, email address or user behavior.
Data subjects are granted:
- The right of access, which means data subjects have the right to know how their data is being used. Businesses need to provide this information upon request.
- The right to data transfer, which means data subjects have the right to transfer data from one company to another.
- The right to be forgotten, which means that if a data subject wants all of their personal data erased, businesses must comply.
- Disclose and report data breaches within 72 hours.
- Appoint a data protection officer if they handle a substantial amount of data
- Take reasonable steps to keep data secure.
- If a business needs to collect data, they must collect the minimum amount they need for their service to function.
- Obtain explicit consent from data subjects before collecting personal data.
1. Who is responsible for data processing?
The service provider and partly responsible for processing personal data (“controller”) is Outfoxers. We can be reached at firstname.lastname@example.org
If you have any questions about the collection, processing, or usage of data; if you have requests for information, correction, disabling or deletion of data; or if you want to revoke a previously given consent; or if you want to object to the usage of your information for advertising purposes please contact us.
2. To what extent is personal data processed?
2.1 Collection of personal data when you visit our website
a) Log files
If you visit our site for informational purposes but don’t register with us, create an account, order something, or otherwise deliberately transfer information to us, we collect information from your browser to help us serve our websites to you. In particular, we collect
IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), name of the requested file, access status/HTTP status code, volume of data transferred, the page from which you came to visit us, your operating system and its interface, your browser type and the language and version of the browser software, a report of successful retrieval.
This data is technically necessary for us to display our website to you. It is also evaluated to make the website user-friendly and to ensure stability and security. For this purpose, we partly use the external web hosting service provider Siteground.
b) Cookies and similar technologies
Like all websites, we also use “cookies” on our site. Cookies are small text files that are assigned to your browser and stored on your device. Through them, certain information flows to the place that sets the cookie, such as settings or data for exchange with the system. This helps us to make our website more user-friendly and effective overall. The legal bases for this are your consent by using our website and our legitimate interests. Cookies cannot execute programs or transmit viruses to your device.
We use the standard session cookies, persistent cookies, and third-party cookies:
Session cookies store what’s called a session ID, which can be used to assign different requests of your browser to a common session. This allows your device to be recognized when you return to our website. For example, this lets you store certain information you have entered (such as log-in information, language settings) in such a way that you do not have to repeat it constantly. Session cookies are automatically deleted when you log out or close your browser.
Persistent cookies remain on your device for the time being, so that we can recognize your browser on your next visit and we can, for example, assign your preferred information and settings. Long-term cookies are automatically deleted after a specified period, which may vary depending on the cookie.
When you visit our website, our partner companies also store third-party cookies on your device. The cookies contain information about how our website is used, e.g. which pages and products were visited. The data is collected in a pseudonymized form by assigning an identification number, which is not combined with any other personal data you may have provided to us.
2.2 Ordering from Outfoxers / User Account
a) If you want to order something in our online shop, it is necessary for the conclusion of the contract that you give us the personal data we need to process the order. The mandatory data required to process the contract is marked as such; all other data you provide is voluntary. You can either enter your data only once for the order or use your email address to set up a password-protected user account with us, in which your data can be stored for later purchases until you revoke your consent. You can deactivate or delete the data and the user account at any time via the account.
To prevent unauthorized access to your personal data by third parties, the order process is encrypted.
When we process the data provided by you to process your order, this includes, for example, individual customer service. In the course of order processing, we pass on personal data to one of the production facilities of Printful, part of the Draugiem group of companies. They pass on personal data to a shipping company (i.e. UPS) to send fullfilled items to the end user. Please contact:
Attn: Data Protection Officer
Address: 11025 Westlake Dr
Charlotte, NC 28273
For residents of the European Economic Area:
AS “Printful Latvia”
Attn: Data Protection Officer
Address: Ojara Vaciesa iela, 6B,
Outfoxers also can pass on personal data to a shipping company commissioned by us (i.e. UPS) and PayPal or Stripe, the leading world wide creditcard company-facilitator.
In the case of trackable parcels, we also pass on your order and address data to various service providers, depending on your delivery choices, shipping rates, and your chosen delivery destination.
The legal bases for the processing of personal data as part of order processing are to perform under a contract and our legitimate interests. Due to commercial and tax regulations, we are obliged to store your order, address and payment data for a period of ten years.
b) During the order process our providors may conduct a fraud prevention check, which involves using your IP address to carry out a geolocalization and compare your data with previous experience. This may mean that an order cannot be placed with the selected payment method. Our aim in this regard is to prevent any abuse of your chosen payment method by third parties and to protect ourselves from payment defaults. The legal basis for the processing is our legitimate interests.
Since this involves automated decision-making, you have the right to challenge the decision (in this case the refusal of a certain payment method) and have the decision reviewed by a person. In such cases we ask that you contact us using the contact details mentioned in Section 1. Please note that the payment method may have been rejected due to a typing error and you should, therefore, check what you have entered again during the order process if necessary.
The legal basis for the processing is our legitimate interests. If you no longer want your data to be used for this purpose, you can object to this at any time. Just click on the unsubscribe link included with each email or send a message using the contact details provided under Section 1.
2.3 Processing of data for web analytics
a) Google Analytics
The IP address transmitted by your browser in the context of Google Analytics will not be combined with other data held by Google.
You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this you may not be able to use the full functionality of our website. You can also prevent the data generated by the cookie and relating to your use of the website (including your IP address) from being recorded and processed by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout/. Specifically in the case of mobile devices, you can prevent Google Analytics from recording data by clicking here: Disable Google Analytics. This will place an opt-out cookie which prevents recording when you visit our website in future. Please note that if you delete all cookies on your device, this opt-out cookie will also be deleted; in this case, if you still wish to object then you must place the cookie again using the above button. The opt-out cookie is set per top-level domain, per browser and per device and only prevents the recording of data for this website.
This website uses Google Analytics with the “_anonymizeIp()” extension. Consequently, IP addresses are further processed in shortened form, so that any personal association with the data subject can be ruled out. As far as the data collected about you relates to you personally, that association is therefore ruled out immediately and the personal data thus erased without delay.
We use Google Analytics to analyze and regularly improve the use of our website. The statistics this yields allow us to improve our website and make it more interesting for you as a user. The legal bases for our use of Google Analytics are your consent and our legitimate interests.
2.4 Advertising activities by Outfoxers
When you register for our newsletter, we use the so-called double opt-in procedure. This means that after you register we will send you an email to the email address you provided, in which we ask you to confirm that you would like to receive the newsletter. If you do not confirm your registration, your information will be automatically deleted after one month. On the other hand, if you confirm the newsletter subscription, we will save your email address for the purpose of sending you the newsletter until you unsubscribe from the newsletter.
You can revoke your consent to the sending of the newsletter at any time (without this affecting the lawfulness of the processing up to the point of revocation). You can declare your revocation by clicking on the link provided in every newsletter email, by emailing email@example.com.
When sending the newsletter, we use Google Analytics to statistically evaluate user behavior in order to measure how successful the newsletter is and to optimize its design.
The legal bases for the processing are your consent and our legitimate interests.
2.5 Usage-based online advertising
Our website uses various conversion tracking and retargeting technologies made available by other service providers. We use these technologies to make our website interesting for you. The information also helps us to address users who have already shown an interest in our products with individually tailored advertising on the websites of our partner companies. We assume that the display of personalized, interest-based advertising is generally more interesting for the internet user than advertising that has no such personal relevance. At the same time, we want to avoid inappropriate and intrusive advertising.
General information about third-party advertising-based technologies and how to disable them can be found on the following websites, among others:
Your Online Choices http://www.youronlinechoices.com/
Network Advertising Initiative: http://optout.networkadvertising.org/?c=1#!/
a) Use of Google AdWords conversion tracking and Google AdWords remarketing
We sometimes use Google AdWords, a service of Google LLC (“Google”), to use ads (so-called Google AdWords) to draw attention to our offers on external websites. In relation to the data of advertising campaigns, we can identify how successful the individual advertising activities are. In this way we want to show you advertising that is of interest to you, make our website more attractive to you and achieve a fair calculation of advertising costs.
These ads are deployed by Google via ‘ad servers’. For this purpose, we use ad server cookies, which enable the tracking of certain parameters for measuring success, such as the display of ads or clicks by users. If you arrive at our website via a Google ad, Google AdWords will store a cookie on your device. These cookies usually expire after 30 days and are not intended to identify you personally. Analysis values usually stored for this cookie are the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (marker showing that the user no longer wishes to be targeted).
These cookies allow Google to recognize your internet browser. If a user visits certain pages of an AdWords customer’s website (in this case ours) and the cookie stored on their device has not yet expired, Google and the customer can recognize that the user has clicked on the ad and has been redirected to this site. Each AdWords customer is assigned a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. We do not collect and process any personal data in the aforementioned advertising activities. Google merely provides us with statistical evaluations. On the basis of these evaluations we can identify which of the advertising activities used are particularly effective. We do not receive any further data from the use of ads; in particular we cannot identify users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and further processing of the data collected by Google through the use of this tool and therefore inform you according to what we know: By integrating AdWords Conversion, Google receives the information that you have retrieved the corresponding part of our website, or that you have clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that Google will obtain and store your IP address.
– Google AdWords remarketing
Besides AdWords Conversion, we sometimes also use Google’s remarketing feature. This is a process we use in an attempt to contact you again. After visiting our website, this feature makes it possible to show you our ads when you continue to use the internet. This is done by means of cookies stored in your browser, which Google uses to record and evaluate your usage behavior when visiting various websites. This is how Google can determine that you have previously visited our website. According to its own information, Google does not combine the data collected in the context of remarketing with your personal data, which may be processed by Google. Specifically, according to Google, pseudonymization is used during remarketing.
There are various ways in which you can prevent your participation in this tracking procedure:
By setting your browser software accordingly; in particular, disabling cookies from third party providers means that you will not receive any ads from third-party providers;
By permanent deactivation in your browser Firefox, Internet Explorer or Google Chrome via the link: https://support.google.com/ads/answer/7395996?hl=en. Please note that by doing this you may not be able to properly use the full functionality of our website.
By clicking on the following button: Disable Google AdWords. This will place an opt-out cookie which prevents recording when you visit our website in future. Please note that if you delete all cookies on your device, this opt-out cookie will also be deleted; in this case, if you still wish to object then you must place the cookie again using the above button. The opt-out cookie is set per top-level domain, per browser and per device and only prevents the recording of data for this website.
By disabling interest-based ads from providers who are part of the “YourAdChoices” self-regulation initiative via the link http://optout.aboutads.info/?c=2#!/; please note that this setting will be erased if you erase your cookies.
The legal bases for the processing of your data are your consent and our legitimate interests.
Third-party provider information: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For further information about privacy at Google, please refer to: https://policies.google.com/privacy and https://services.google.com/sitestats/en.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at: http://www.networkadvertising.org.
b) Use of Facebook Custom Audiences, Facebook Website Custom Audiences and Facebook Conversion Tracking
Facebook Custom Audiences
Our website also uses the Website Custom Audiences remarketing function of Facebook, Inc. (“Facebook”). This allows users of the website to see interest-based ads (“Facebook Ads”) when visiting the social network Facebook or other websites that also use the process. Our intention here is to show you ads that are of interest to you.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. We have no influence on the extent and further processing of the data collected by Facebook through the use of this tool and therefore inform you according to what we know: By integrating Facebook Custom Audiences, Facebook receives the information that you have retrieved the corresponding part of our website, or that you have clicked on one of our ads. If you are registered with a Facebook service, Facebook can associate the visit with your account. Even if you are not registered with Facebook or have not logged in, it is possible that Facebook will obtain and store your IP address and other identifying information.
– Facebook Website Custom Audiences
– Facebook Conversion Tracking
We also use the Facebook Pixel on our website to measure the reach of ads. This allows us to track users’ actions after they have seen or clicked on a Facebook Ad. The Facebook Pixel records and reports to Facebook information about the user’s browser session, a hashed version of the Facebook ID, and the URL being viewed. The way it works is comparable to Facebook Website Custom Audiences via the Facebook Pixel, which is already described above. Using the hashed Facebook ID, we can measure the reach and effectiveness of an ad to find out whether you are actually interested in our advertising. This enables us to measure the effectiveness of Facebook Ads for statistical and market research purposes. For us, the data used is not personally identifiable.
You can prevent Facebook from recording your data on this website by clicking here: Disable Facebook Custom Audiences, Facebook Website Custom Audiences and Facebook Conversion Tracking. This will place an opt-out cookie which prevents recording when you visit our website in future. Please note that if you delete all cookies on your device, this opt-out cookie will also be deleted; in this case, if you still wish to object then you must place the cookie again using the above button. The opt-out cookie is set per top-level domain, per browser and per device and only prevents the recording of data for this website. How to prevent the recording of your data on other websites is explained on the respective sites, and if you are a user who has logged in to Facebook, here: https://www.facebook.com/settings/?tab=ads#_.
The legal bases for the processing of data when using the functions specified above are your consent and our legitimate interests.
3. What are my rights?
If you have given your consent to the processing of your data, you can revoke this consent with future effect at any time. This does not affect the lawfulness of processing carried out on the basis of the consent before you revoke your consent.
If we base the processing of your personal data on our legitimate interests, you are entitled to object to the processing. This is the case if the processing is not necessary in particular for the performance of a contract with you, which was described by us in each case with the description of the individual functions. When exercising such a right of objection, we ask that you explain the reasons why we should not process your personal data as carried out by us. In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue processing.
However, you can of course object to the processing of your personal data for advertising or web analytics purposes at any time without giving reasons.
As described in the relevant sections, we sometimes use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked.
The personal data processed by us is generally erased or blocked as soon as the purpose of storage ceases to apply. Data may be stored for a longer period if this has been provided for by laws or other rules to which we as the controller are subject. The data will also be blocked or erased once a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
Further processing operations may be required for contests and other promotional campaigns. In such cases we will inform you in the context of the respective promotional campaign.
4. We Will Share Your Information with Third Parties in Specific Circumstances
a) Legal Compliance and Safety
There are a few times when we must share your information either to protect our rights or to obey the law. We will share your personal information when we believe in good faith that:
a subpoena or warrant is duly issued, or we receive any other legitimate government agency request to produce information;
we need to share the information in order to enforce or protect our own rights, for example, to respond to and resolve third-party claims or complaints, or with respect to contracts with our users and third parties;
we need to address a security or technical issue within our website;
sharing the information is necessary to prevent harm to others or others’ property, especially in an emergency situation;
b) Corporate Change in Control Events
If we sell all or part of our business, or make a sale or transfer of assets, or are otherwise involved in a similar event, we may transfer your information as part of that transaction.
5. Is My Information Secure?
We use reasonable measures to secure our website and any private information you submit to us against loss, tampering, unauthorized access, and other malicious acts. For example, we use SSL connections when possible to protect your data while it is in transit (for example login data and customer orders). However, no data transmission over the Internet is completely secure, so we cannot completely guarantee the security of any data. You use our services at your own risk, and are responsible for taking reasonable measures to secure your password, information, and account.
6. Do-Not-Track (“DNT”) Requests
Due to lack of technical standards across browsers, we do not respond to DNT signals.
7. California Eraser Button Law
To the extent it is technically feasible and provided for and allowed by applicable law, you may email firstname.lastname@example.org anytime to ask for access to information held about you in order to have it corrected, disabled, or deleted, when possible.
California Eraser Button Law (Business and Professions Code §§ 22581): Note that removal or deletion of your information does not ensure complete or comprehensive removal of the content or information posted on our website and service, or on the internet generally.
8. Children’s Online Privacy Protection
Our website is not intended or directed at individuals under the age of 13. We do not knowingly collect or keep any information of children under the age of 13. If we discover it, we will delete it as soon as possible.
9. Effective Date and Changes