1) Introduction and Contact Details of the Controller

1.1

We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how we handle your personal data when you use our website. Personal data means any information that can be used to personally identify you.

1.2

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Hype X Hills GmbH
Griesmühlstraße 2
85049 Ingolstadt
Germany
Tel.: +49 841 885155555
E-mail: support@karimpanzetta.com

The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1

When you use our website for informational purposes only, meaning that you do not register or otherwise provide us with information, we only collect data that your browser transmits to the website server (so-called “server log files”).

When you access our website, we collect the following data, which is technically necessary in order to display the website to you:

• The website visited
• Date and time of access
• Amount of data transmitted in bytes
• Source/referrer from which you accessed the website
• Browser used
• Operating system used
• IP address used, where applicable in anonymized form

The processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

The data will not be disclosed or otherwise used. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.

2.2

For security reasons and to protect the transmission of personal data and other confidential content, such as orders or inquiries to the controller, this website uses SSL or TLS encryption.

You can recognize an encrypted connection by the “https://” address and the lock symbol in your browser bar.

3) Hosting & Content Delivery Network

3.1 Amazon Web Services

For hosting our website and displaying its content, we use the services of:

AWS EMEA SARL
38 avenue John F. Kennedy
L-1855 Luxembourg

Data may also be transferred to:

Amazon Web Services, Inc.
410 Terry Avenue North
Seattle, WA 98109
USA

All data collected on our website is processed on the provider’s servers.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider participates in the EU-U.S. Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

3.2 Cloudflare

For hosting our website and displaying its content, we use the services of:

Cloudflare Inc.
101 Townsend St.
San Francisco, CA 94107
USA

All data collected on our website is processed on the provider’s servers.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider participates in the EU-U.S. Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

3.3 Shopify

For hosting our website and displaying its content, we use the services of:

Shopify International Limited
Victoria Buildings
2nd Floor
1-2 Haddington Road
Dublin 4, D04 XN32
Ireland

Data may also be transferred to:

Shopify Inc.
150 Elgin St
Ottawa, ON K2P 1L4
Canada

All data collected on our website is processed on the provider’s servers.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

3.4 Cloudflare

We use a content delivery network provided by:

Cloudflare Inc.
101 Townsend St.
San Francisco, CA 94107
USA

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers.

The processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider participates in the EU-U.S. Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.