Privacy Policy
1. Data Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws as well as other data protection provisions is:
ALL ABOUT VIDEO GmbH
Bavariafilmplatz 7
D – 82031 Grünwald
Represented by: Christian Breuer
Phone: +49 (0) 89 72400728
E-Mail: info@all-about-video.com
2. General Information on Data Processing
2.1 Scope of processing personal data
We generally only process the personal data of our users when necessary to provide a functional website, as well as our content and services. The processing of personal data of our users regularly occurs only with the user's consent. An exception applies in cases where obtaining prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.
2.2 Legal basis for processing personal data
Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.
For the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations necessary to properly conduct pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party, and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.
2.3 Data deletion and storage duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws, or other provisions to which the controller is subject. The data will also be blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
Tax-relevant data (e.g., invoices, purchase receipts) are stored for 10 years in accordance with § 147 AO (German Fiscal Code).
3. Provision of the Website and Creation of Log Files
3.1 Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer. The following data are collected:
- Information about the browser type and version used
- The user's operating system
- The user's internet service provider
- The user's IP address
- Date and time of access
- Websites from which the user's system accessed our internet site
- Websites accessed by the user's system via our website
3.2 Legal basis
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in ensuring technical operations.
3.3 Storage duration
The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of collecting data for providing the website, this is the case when the respective session has ended. The log files are deleted after 30 days at the latest.
4. Shop Operation via Shopify
4.1 Type and purpose of processing
We operate our online shop via the Shopify platform of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter "Shopify").
Shopify is our technical service provider for processing the online sale of digital products (e-book, audiobook). As part of the order processing, Shopify processes the following data on our behalf:
- First and last name
- E-mail address
- Billing address
- Payment data (depending on the payment method chosen)
- Order data (ordered products, prices, time of order)
- IP address and technical device data
4.2 Data processing agreement
We have concluded a data processing agreement (DPA) with Shopify in accordance with Art. 28 GDPR. Shopify processes data exclusively according to our instructions and not for its own purposes.
Shopify may process data on servers in the USA. For such data transfers to third countries, the standard contractual clauses (SCCs) approved by the EU Commission according to Art. 46 para. 2 lit. c GDPR and the EU-US Data Privacy Framework apply. Further information can be found in Shopify's Privacy Policy: https://www.shopify.com/legal/privacy
4.3 Legal basis
The legal basis for processing the data is Art. 6 para. 1 lit. b GDPR (performance of a contract).
5. Payment Processing
5.1 Shopify Payments
If you select the Shopify Payments method, your payment data will be processed by Shopify Payments, provided by Stripe Payments Europe Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
Stripe processes your credit card or other payment information exclusively for payment processing. Further information on data processing by Stripe can be found at: https://stripe.com/de/privacy
5.2 PayPal (if offered)
If you choose the PayPal payment method, your data will be transmitted to PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal processes this data for payment processing. Further information can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
5.3 Legal basis
The legal basis for processing is Art. 6 para. 1 lit. b GDPR (performance of a contract).
6. Provision of Digital Content (Download)
After successful receipt of payment, Shopify will provide you with the download link for the purchased digital product (e-book in PDF format / audiobook in MP3 or comparable format). In this process, your e-mail address and order data are processed to enable access to the digital content.
Legal basis: Art. 6 para. 1 lit. b GDPR (performance of a contract).
7. E-mail Communication and Transactional E-mails
7.1 Transactional E-mails
After placing your order, you will automatically receive the following e-mails via Shopify:
- Order confirmation
- Payment confirmation
- Download link / access data for the digital product
- Invoice (if applicable)
These e-mails are necessary for contract fulfillment. Legal basis: Art. 6 para. 1 lit. b GDPR.
7.2 Contacting us by e-mail
When you contact us by e-mail, the data you transmit (your e-mail address, name, and, if applicable, other details) will be stored by us for the purpose of processing your inquiry. We do not pass this data on without your consent.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in processing inquiries) or Art. 6 para. 1 lit. b GDPR, provided the contact is aimed at concluding a contract.
8. Cookies
8.1 Description and Scope
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. We distinguish between:
- Technically necessary cookies: These cookies are absolutely necessary for the operation of the shop (e.g., shopping cart session, login status) and are set without consent.
- Shopify's own cookies: Shopify sets various cookies of its own for the technical operation of the shop. A complete list can be found at: https://www.shopify.com/legal/cookies
- Analysis and marketing cookies (only with consent): If you have given your consent via the cookie banner, analysis or marketing tools may be used (see section 9).
8.2 Legal basis
Technically necessary cookies: Art. 6 para. 1 lit. f GDPR. All other cookies: Art. 6 para. 1 lit. a GDPR (consent).
8.3 Opt-out options
You can prevent the setting of cookies by our website at any time by configuring the settings of your internet browser, thereby permanently objecting to the setting of cookies. You can also delete cookies that have already been set at any time via your browser. Please note that if you disable all cookies, the functionality of our online shop may be restricted.
9. Analytics Tools and Tracking
9.1 Shopify Analytics
Shopify provides us with anonymized analytics data regarding the operation of our store (e.g., visitor numbers, conversion rates). This data cannot be traced back to individual persons.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in optimizing store operations).
9.2 Google Analytics (only if used)
If we use Google Analytics, we will clearly state this separately and obtain appropriate consent via our cookie banner. Without active consent, Google Analytics will not be activated.
10. Tax and Accounting Data
To comply with statutory retention obligations (§ 147 AO, § 257 HGB), we store invoicing and payment data for 10 years. This processing is based on Art. 6 para. 1 lit. c GDPR (legal obligation).
11. Your Rights as a Data Subject
You have the following rights regarding your personal data processed by us:
- Right of access — You have the right under Art. 15 GDPR to request information about your personal data processed by us.
- Right to rectification — You have the right under Art. 16 GDPR to demand the immediate correction of inaccurate or completion of your personal data stored by us.
- Right to erasure — You have the right under Art. 17 GDPR to demand the erasure of your personal data stored by us, unless processing is necessary to fulfill a legal obligation or to assert, exercise, or defend legal claims.
- Right to restriction of processing — You have the right under Art. 18 GDPR to demand the restriction of processing of your personal data.
- Right to data portability — You have the right under Art. 20 GDPR to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format, or to demand its transfer to another controller.
- Right to object — You have the right under Art. 21 GDPR to object to the processing of your personal data, provided it is based on Art. 6 para. 1 lit. f GDPR.
- Right to withdraw consent — If processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR, you have the right to withdraw your consent at any time for the future. The lawfulness of the processing carried out based on the consent until the withdrawal remains unaffected.
To exercise your rights, please contact: info@all-about-video.com
12. Right to Complain to a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
The competent supervisory authority for Bavaria is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
https://www.lda.bayern.de
13. Data Security
We use the widespread SSL (Secure Socket Layer) method during website visits, combined with the highest level of encryption supported by your browser. Typically, this is 256-bit encryption. The Shopify shop is inherently SSL/TLS encrypted (identifiable by "https://" in your browser's address bar).
14. Currentness and Modification of this Privacy Policy
This Privacy Policy is currently valid and was last updated: March 2025
Due to the development of our website and offers or due to changed legal or regulatory guidelines, it may be necessary to change this Privacy Policy. You can access the current Privacy Policy on this page at any time.