Privacy policy

1) Introduction and Contact Details of the Controller

1.1 Thank you for visiting our website and for your interest in our services. Below, we explain how we handle your personal data when you use our website. Personal data means any information that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Trapdelivery GbR, Schloßkirchplatz 2, 03046 Cottbus, Germany, Tel.: /, Email: support@trap-delivery.com. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data Collection When You Visit Our Website

When you use our website for information purposes only, meaning that you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the website server (known as “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website:

The website you visited
Date and time of access
Amount of data transmitted in bytes
Source/referral from which you accessed the page
Browser used
Operating system used
IP address used (where applicable, in anonymized form)

Processing is carried out pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used for any other purpose. However, we reserve the right to review server log files retrospectively if there are specific indications of unlawful use.

3) Hosting & Content Delivery Network

Shopify

We use the system provided by the following provider to host our website and display its content: Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.
All data collected on our website is processed on the provider’s servers. We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4) Cookies

To make visiting our website appealing and enable the use of certain features, we use cookies, which are small text files stored on your device. Some cookies are automatically deleted when you close your browser (“session cookies”), while others remain on your device for longer and allow website settings to be saved (“persistent cookies”). In the latter case, you can find information about their storage duration in your browser’s cookie settings.

Where individual cookies we use also process personal data, processing is carried out pursuant to Article 6(1)(b) GDPR for the performance of a contract, pursuant to Article 6(1)(a) GDPR where consent has been given, or pursuant to Article 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible website functionality and a user-friendly and effective browsing experience.

You can configure your browser to notify you when cookies are set and decide individually whether to accept them, or to reject cookies in certain cases or altogether.

Please note that rejecting cookies may limit the functionality of our website.

5) Contacting Us

When you contact us, for example via our contact form or by email, personal data is processed exclusively for the purpose of handling and responding to your request and only to the extent necessary for that purpose.

The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Article 6(1)(f) GDPR. If your inquiry relates to a contract, Article 6(1)(b) GDPR provides an additional legal basis for processing. Your data will be deleted once the circumstances indicate that the matter has been fully resolved, provided that no statutory retention obligations prevent deletion.

6) Data Processing When Opening a Customer Account

Pursuant to Article 6(1)(b) GDPR, personal data is also collected and processed to the extent necessary when you provide it to us while opening a customer account. The data required to open an account is indicated in the relevant form on our website.

You may have your customer account deleted at any time by sending a message to the controller at the address stated above. Once your customer account has been deleted, your data will be deleted, provided that all contracts concluded through the account have been fully performed, no statutory retention periods prevent deletion, and we have no continuing legitimate interest in retaining the data.

7) Use of Customer Data for Direct Marketing

7.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. Your email address is the only information required to receive the newsletter. Providing additional information is voluntary and enables us to address you personally. We use the double opt-in procedure for newsletter subscriptions. This ensures that you only receive newsletters after you have expressly confirmed your consent by clicking a verification link sent to the email address you provided.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Article 6(1)(a) GDPR. We store the IP address assigned by your internet service provider (ISP), as well as the date and time of registration, so that any potential misuse of your email address can be investigated at a later date. Data collected when you subscribe to the newsletter is used strictly for its intended purpose.

You may unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the controller named at the beginning of this policy. After you unsubscribe, your email address will be promptly removed from our newsletter mailing list unless you have expressly consented to further use of your data or we reserve the right to use your email address for further marketing purposes that are permitted by law and explained in this policy.

After you unsubscribe from the newsletter, your email address may be stored on a suppression list and compared against recipient lists for future newsletters to technically prevent further newsletters requiring consent from being sent to you. This processing is based on our legitimate interest in preventing unwanted marketing communications pursuant to Article 6(1)(f) GDPR.

7.2 Seguno

Our email newsletters are sent through the following provider: Software, Inc., 104 City Hall Plz Ste 200, Durham, NC 27701, USA.

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we disclose the data you provide when subscribing to the newsletter to this provider pursuant to Article 6(1)(f) GDPR so that it can send newsletters on our behalf.

Subject to your express consent pursuant to Article 6(1)(a) GDPR, the provider also performs statistical evaluations of newsletter campaigns using web beacons or tracking pixels in the emails sent. These can measure opening rates and specific interactions with newsletter content. Device information, such as the time of access, IP address, browser type and operating system, is also collected and evaluated but is not combined with other datasets.

You may withdraw your consent to newsletter tracking at any time with effect for the future.

We have entered into a data processing agreement with the provider that protects our website visitors’ data and prohibits disclosure to third parties.

For data transfers to the USA, the provider relies on the European Commission’s standard contractual clauses, which are intended to ensure compliance with European data protection standards.

8) Data Processing for Order Fulfilment

8.1 Where necessary for the performance of the contract for delivery and payment purposes, the personal data we collect is disclosed to the shipping company and financial institution commissioned by us pursuant to Article 6(1)(b) GDPR.

If, under a corresponding contract, we are required to provide updates for goods with digital elements or for digital products, we process the contact details you provided when placing your order to inform you personally in accordance with our statutory information obligations pursuant to Article 6(1)(c) GDPR. Your contact details are used strictly for communications concerning updates we are required to provide and are processed only to the extent necessary for the relevant notification.

8.2 Use of Payment Service Providers

Klarna

One or more online payment methods provided by the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If you select a payment method offered by the provider under which you pay in advance, such as payment by credit card, the payment details you provide during the ordering process, including your name, address, bank and payment card information, currency and transaction number, as well as information about the contents of your order, will be disclosed to the provider pursuant to Article 6(1)(b) GDPR. In this case, your data is disclosed exclusively for the purpose of processing the payment with the provider and only to the extent necessary.

If you select a payment method under which the provider extends credit, such as payment by invoice, instalments or direct debit, you will also be asked during the ordering process to provide certain personal information: first and last name, street, house number, postcode, city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method.

To safeguard our legitimate interest in establishing our customers’ ability to pay, we forward this data to the provider for a credit check pursuant to Article 6(1)(f) GDPR. Using the personal information you provide and additional data, such as your shopping cart, invoice amount, order history and payment history, the provider assesses whether the payment method you selected can be offered in view of payment and/or default risks.

In addition to the provider’s internal criteria, identity and creditworthiness information from the following credit reference agencies may be used when assessing your application pursuant to Article 6(1)(f) GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values, known as credit scores. Where credit scores are included in the credit report, they are based on a scientifically recognized mathematical and statistical procedure. Address data is one of the factors used to calculate these scores, but it is not the only factor.

You may object to this processing of your data at any time by contacting us or the provider. However, the provider may remain entitled to process your personal data where this is necessary to process payments in accordance with the contract.

PayPal

One or more online payment methods provided by the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

If you select a payment method offered by the provider under which you pay in advance, the payment details you provide during the ordering process, including your name, address, bank and payment card information, currency and transaction number, as well as information about the contents of your order, will be disclosed to the provider pursuant to Article 6(1)(b) GDPR. In this case, your data is disclosed exclusively for the purpose of processing the payment with the provider and only to the extent necessary.

If you select a payment method under which we provide our goods or services before receiving payment, you will also be asked during the ordering process to provide certain personal information: first and last name, street, house number, postcode, city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method.

To safeguard our legitimate interest in establishing your ability to pay in such cases, we forward this data to the provider for a credit check pursuant to Article 6(1)(f) GDPR. Using the personal information you provide and additional data, such as your shopping cart, invoice amount, order history and payment history, the provider assesses whether the payment method you selected can be offered in view of payment and/or default risks.

You may object to this processing of your data at any time by contacting us or the provider. However, the provider may remain entitled to process your personal data where this is necessary to process payments in accordance with the contract.

PayPal Checkout

This website uses PayPal Checkout, an online payment system provided by PayPal that combines PayPal’s own payment methods with local payment methods offered by third-party providers.

When you pay via PayPal, credit card through PayPal, direct debit through PayPal or, where offered, “Pay Later” through PayPal, we disclose your payment details to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (“PayPal”) as part of payment processing. This disclosure takes place pursuant to Article 6(1)(b) GDPR and only to the extent necessary to process the payment.

PayPal reserves the right to obtain a credit report for payments by credit card through PayPal, direct debit through PayPal or, where offered, “Pay Later” through PayPal. For this purpose, your payment details may be disclosed to credit reference agencies pursuant to Article 6(1)(f) GDPR on the basis of PayPal’s legitimate interest in establishing your ability to pay. PayPal uses the results of the credit check concerning the statistical probability of payment default to decide whether to offer the relevant payment method. The credit report may contain probability values, known as credit scores. Where credit scores are included in the credit report, they are based on a scientifically recognized mathematical and statistical procedure. Address data is one of the factors used to calculate these scores, but it is not the only factor. You may object to this processing of your data at any time by contacting PayPal. However, PayPal may remain entitled to process your personal data where this is necessary to process payments in accordance with the contract.

If PayPal’s “Pay upon Invoice” payment method is available and selected, your payment details are initially transmitted to PayPal to prepare the payment. PayPal then forwards them to Ratepay GmbH, Franklinstraße 28–29, 10587 Berlin, Germany (“Ratepay”) to process the payment. The legal basis in each case is Article 6(1)(b) GDPR. In this case, Ratepay carries out an identity and credit check in its own name to establish your ability to pay, following the principle described above. It discloses your payment details to credit reference agencies pursuant to Article 6(1)(f) GDPR on the basis of its legitimate interest in establishing your ability to pay. A list of the credit reference agencies that Ratepay may use is available here:

https://www.ratepay.com/legal-payment-creditagencies/

If you use a payment method offered by a local third-party provider, your payment details are initially disclosed to PayPal pursuant to Article 6(1)(b) GDPR to prepare the payment. Depending on the available local payment method you select, PayPal then transmits your payment details to the relevant provider pursuant to Article 6(1)(b) GDPR to process the payment:

Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
iDeal (Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands)
bancontact (Bancontact Payconiq Company, Rue d’Arlon 82, 1040 Brussels, Belgium)
blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria)
MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further information on data protection, please refer to PayPal’s privacy policy:

https://www.paypal.com/de/legalhub/paypal/privacy-full

Shopify Payments

One or more online payment methods provided by the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland.

We use the cloud-based accounting software provided by the following provider for our bookkeeping: ETL Service GmbH, Mauerstraße 86–88, 10117 Berlin, Germany.

The provider processes incoming and outgoing invoices and, where applicable, our company’s bank transactions to automatically capture invoices, match them to transactions and prepare the financial accounts through a partially automated process.

Where personal data is also processed in this context, processing is based on our legitimate interest in efficiently organizing and documenting our business transactions pursuant to Article 6(1)(f) GDPR.

10) Rights of the Data Subject

10.1 Applicable data protection law grants you the following rights against the controller regarding the processing of your personal data. The conditions for exercising each right are set out in the legal provisions cited:

Right of access pursuant to Article 15 GDPR
Right to rectification pursuant to Article 16 GDPR
Right to erasure pursuant to Article 17 GDPR
Right to restriction of processing pursuant to Article 18 GDPR
Right to be informed pursuant to Article 19 GDPR
Right to data portability pursuant to Article 20 GDPR
Right to withdraw consent pursuant to Article 7(3) GDPR
Right to lodge a complaint pursuant to Article 77 GDPR

10.2 RIGHT TO OBJECT

WHERE WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

WHERE WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

11) Retention Period for Personal Data

The retention period for personal data is determined by the relevant legal basis, the purpose of processing and, where applicable, the relevant statutory retention period, such as retention periods under commercial and tax law.

Where personal data is processed on the basis of express consent pursuant to Article 6(1)(a) GDPR, the data concerned is retained until you withdraw your consent.

Where statutory retention periods apply to data processed on the basis of Article 6(1)(b) GDPR in connection with contractual or similar obligations, this data is routinely deleted after the retention periods expire, provided that it is no longer required for the performance or initiation of a contract and/or we have no continuing legitimate interest in retaining it.

Where personal data is processed on the basis of Article 6(1)(f) GDPR, this data is retained until you exercise your right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes on the basis of Article 6(1)(f) GDPR, this data is retained until you exercise your right to object pursuant to Article 21(2) GDPR.

Unless otherwise stated in the other information in this policy concerning specific processing situations, stored personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

HOME

VINTAGE BOXES

WOMEN'S SECTION

FAQ / About Us

Navigationsmenü

Mehr

"Fire-Hazard" Sweater Box

'TOO GOOD TO THROW' VINTAGE MYSTERY BOX

3-PIECE MYSTERY BOX (WOMEN)

3-TEILIGE VINTAGE-ÜBERRASCHUNGSBOX

5-PIECE MYSTERY BOX (WOMEN)

5-PIECE VINTAGE MYSTERY BOX