1. Who we are

We are very delighted that you have shown interest in our website. At penquinsuit.com, the website of the clothing brand PenQuin Suit, accessible at https://penquinsuit.com, one of our main priorities is the privacy of our visitors. The following information provides a simple overview of what happens to your personal data when you visit penquinsuit.com (In the following named “website”). Personal data is all the data with which you can be personally identified. This Privacy Policy document contains types of information that is collected and recorded by our website and how we use it.

1.1 Terms

Our data protection regulations contain technical terms that are used in the GDPR. For your better understanding, we would like to explain these terms in simple terms in advance:

1.1.1 Personal data

Personal data means any information relating to an identified or identifiable natural person (Art. 4 No 1 GDPR). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

1.1.2 Processing

Processing means (as of Art. 4 No 2 GDPR) any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1.2 Responsible

Responsible for the data processing:

  • PenQuin Holdings Pty Ltd.
  • E-mail: info(at)penquinsuit.com

2. What personal data we collect and why we collect it

2.1 Online Shop: Closing of Contract and Payment

2.1.1 Description

In order to process your order, we work together with the service provider(s) listed below, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

To operate our online store, we use Shopify, a service provided by Shopify Inc, 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada. Shopify provides an e-commerce platform through which we offer our goods for sale. The data provided as part of the ordering process is stored on a Shopify server in the USA. Further information can be found in Shopify's privacy policy at https://www.shopify.com/legal/privacy.

The companies entrusted with processing are:

(Hosting)

  • Shopify Inc (151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada)

(Payment*)

  • Apple Pay: Apple Distribution International (Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
  • Google Pay: Google Payment Corp (1600 Amphitheatre Parkway Mountain View, CA 94043 United States)
  • PayPal Hong Kong Ltd. (Room 1506-07, 15/F, Central Plaza, 18 Harbour Road, Wan Chai Hong Kong)

*Payment transactions via the common means of payment (Visa/MasterCard/American Express, direct debit) are made exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

2.1.2 Purpose

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the framework of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will inform you explicitly about this below.

We transfer personal data to third parties only if this is necessary in the context of the contract, for example, to the companies entrusted with the delivery of the goods or the credit institution entrusted with the payment processing. A further transfer of data does not take place or only if you have expressly consented to the transfer. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

2.1.3 Legal Basis

The basis for data processing is Art. 6 No 1 (b) GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. Otherwise, an order via our online store as well as its processing is not possible.

2.2 Cookies

Most of the websites use so-called ‘cookies’. Cookies are small files which are stored on your device. They are designed to hold a modest amount of data specific to a particular client and website, and can be accessed either by the web server or the your device. Cookies do not damage your computer and do not contain viruses. Cookies serve to make online offers more user-friendly, more effective and safer.

2.2.1 Purpose

Our website does not use cookies. However, we use third party content to display content on our website. These companies may be placing and reading cookies on your web browser, or using web beacons to collect information. Remember that cookies do not allow anyone to access your private information on your computer. They only record information about your visits to a website. Cookies can be used for personalization of ads but can be also used for non-personalized advertising.

2.2.2 Browser Cookie Settings

It is important to know that if you disable cookies you may not be able to use certain features offered by our website. You can disable cookies through your browser. Most browsers have instructions on how to disable cookies in their “Help” sections. The instructions for all browsers vary. But the steps are generally similar for most. Here are some places you can look to disable or enable cookies. (Please note that due to regular updates of the browsers the settings may change.):

  • Internet Explorer: Look in the Tools menu, select Internet Options, and then click the Security tab. Click Internet, and then click Custom Level. Scroll down to Cookies, click disable (or enable) for both cookie options, and then click OK.

  • Mozilla Firefox: Open Preferences, choose Privacy & Security, and then Cookies and Site Data. Choose Manage data from the submenu to open the Cookie Manager window. Select one or more cookies and click either Remove Cookie or Remove All Cookies.

  • Google Chrome: Choose Preferences from the menu and click Privacy and Security. Select Site Settings from the submenu and the Cookies and site data to open the Cookie Manager window. To see all cookies stored on your device choose See all cookies and side data.

  • Safari: Choose Preferences from the Safari menu and click Security. Select Never, Always, or Only from sites you navigate to, to set your preferences at the level you desire. To see the cookies stored on your computer, click Show Cookies. From here you have the option to remove one or two cookies or all cookies.

2.3 Server Log Files

The website collects a number of general data and information each time a data subject or automated system accesses the website. These general data and information are stored in the log files of the server. The following data can be recorded:

  • Your IP address
  • The browser software you use, as well as its version and language The operating system you use
  • The website from which you have accessed our website (so-called referrer)
  • The sub-pages you have called up on our website
  • The date and time of your visit to our website
  • Your Internet Service Provider
  • Amount of data transmitted
  • Country and city from which you visited our website
  • Your length of stay on our website

2.3.1 Purpose

The temporary storage of your IP address by the system is necessary in order to deliver our website to your end device (e.g PC or Smartphone). For this purpose, your IP address must remain stored for the duration of the session. However, your IP address is not recorded in our log files. Processing is carried out to enable the website to be accessed and to ensure its stability and security.

2.3.2 Storage duration

We process and store your personal data only for the period of time necessary to achieve the purpose of storage or where provided for by the European legislator or other legislator in laws or regulations to which we are subject. If the purpose of storage ceases to apply or if a storage period prescribed by the European Directives and Regulations Giver or any other competent legislator expires, your personal data will be blocked or deleted as a matter of routine and in accordance with the statutory provisions.

2.4 Contact forms

If you contact us directly (e.g. via our contact form), we receive additional information about you such as your name, email address, the contents of the message and/or attachments you may send us, and any other information you may choose to provide. Such personal data transmitted on a voluntary basis from you us are stored for the purpose of processing or contacting you. There is no transfer of this personal data to third parties.

2.5 Embedded content from other websites

2.5.1 General

Parts on this site may include embedded content (e.g. videos from YouTube). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

2.5.2 Social Network Icons

Our website does not use so-called ‘social media plugins’. The logos of the social networks YouTube, LinkedIn and Instagram displayed on our website are merely linked to the corresponding profiles of our company. If you click on one of the logos, you will be redirected to the external website of the respective social network.

2.6 YouTube

2.6.1 Description

On this website, we have integrated components of YouTube. YouTube is an Internet video portal that enables video publishers to set video clips and other users free of charge, which also provides free viewing, review and commenting on them. YouTube allows you to publish all kinds of videos, so you can access both full movies and TV broadcasts, as well as music videos, trailers, and videos made by users via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

2.6.2 Purpose

With each call-up to one of the individual pages of this Internet site, which is operated by us and on which a YouTube component (YouTube video) was integrated, your Internet browser is automatically prompted to download a display of the corresponding YouTube component. Further information about YouTube may be obtained under: – https://www.youtube.com/about/ – During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by you. If you are logged in on YouTube, YouTube recognizes with each call-up to a sub-page that contains a YouTube video, which specific sub-page of our Internet site was visited by you. This information is collected by YouTube and Google and assigned to the respective YouTube account of you.

YouTube and Google will receive information through the YouTube component that you has visited our website, if you, as a visitor at the time of the call to our website are logged in on YouTube; this occurs regardless of whether you click on a YouTube video or not. If such a transmission of this information to YouTube and Google is not desirable for you, the delivery may be prevented if the data subject logs off from their own YouTube account before a call-up to our website is made.

2.6.3 Legal Basis

The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR).

2.6.4 YouTube’s data protection provisions

YouTube’s data protection provisions, available at: – https://policies.google.com/privacy – provide information about the collection, processing and use of personal data by YouTube and Google.

2.6.5 Recipient and transfer to third countries

By integrating YouTube, personal data may be transmitted to YouTube LLC or Google. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield. Further information on the EU-US Privacy Shield can be found at – https://www.privacyshield.gov/EU-US-Framework.

2.7 DoubleClick by Google

2.7.1 Description

Doubleclick by Google is a service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Doubleclick by Google uses cookies to present you with advertisements relevant to you. In doing so, a pseudonymous identification number (ID) is assigned to your browser in order to check which ads were shown in your browser and which ads were viewed. The cookies do not contain any personal information.

2.7.2 Purpose

DoubleClick’s use of the DoubleClick cookie only enables Google and its partner websites to serve ads based on previous visits to our or other websites on the Internet.

2.7.3 Legal basis

The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR).

2.7.4 Storage period and right of objection

You can prevent the storage of cookies by adjusting your browser software settings accordingly. However, you may not be able to use all functions of our website to their full extent. You can also prevent the collection of the data generated by the cookies and related to your use of the web pages to Google and the processing of this data by Google by downloading and installing the browser plugin available under – https://adssettings.google.com/.

2.8 Google reCAPTCHA

2.8.1 Description

Google reCAPTCHA is a free service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”) that helps to protect our website from spam and abuse by keeping automated software out of our website. It does this by collecting personal information about users to determine whether they’re humans and not spam bots. reCAPTCHA checks to see if your computer or mobile device has a Google cookie placed on it. A reCAPTCHA specific cookie gets placed on your browser and a complete snapshot of your browsers window is captured. The data collected during the analysis will automaticly be forwarded to Google. For more information about reCAPTCHA and Google’s privacy policy, you can use the following links: (Google privacy policy) https://www.google.com/intl/de/policies/privacy/ and (reCAPTCHA v3 intro) https://www.google.com/recaptcha/intro/v3.html. In case you want to try out reCAPTCHA you can use this Google demo link: (reCAPTCHA demo) https://www.google.com/recaptcha/api2/demo.

2.8.2 Purpose

We use Google reCAPTCHA on our websites to protect our contact form from spam and abuse by keeping automated software out of our website.

2.8.3 Legal Basis

The data processing is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its site from abusive automated crawling and spam.

2.9 Google Analytics

2.9.1 Description

Google Analytics is a free web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). Web analysis is the gathering, collection and analysis of data about the behavior of visitors to websites. Among other things, a web analysis service collects data on which website a data subject has come to a website from (so-called referrers), which subpages of the website were accessed or how often and for which period of time a subpage was viewed. A web analysis is mainly used to optimize a website and for the cost-benefit analysis of Internet advertising. Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Google might transfer the personal information collected via this technical procedure to third parties.  The data collected during the analysis will automaticly be forwarded to Google. For more information about Google Analytics and Google’s privacy policy, you can use the following links: (Google privacy policy) https://www.google.com/intl/de/policies/privacy/ and (Google Analytics Information) https://marketingplatform.google.com/about/.

2.9.2 Purpose

We use Google Analytics on our websites to monitor and analyze website traffic and optimize the user experience.

2.9.3 Legal Basis

The processing is necessary to protect the overriding legitimate interests of the controller.

2.10 Newsletter

2.10.1 Description

You have the option on our website to subscribe to a free newsletter. You can revoke your consent to receive the newsletter at any time. The data will be deleted as soon as you unsubscribe from the newsletter.

2.10.2 Purpose

The data provided during registration (name and email address) are processed exclusively for sending the newsletter.

2.10.3 Legal Basis

The legal basis for this data processing is Art. 6 No 1 (a) GDPR.

3. How we protect your data

In order to protect your personal data from unauthorised access, we have provided our website with an SSL or TLS certificate. SSL stands for “Secure Sockets Layer” and TLS for “Transport Layer Security” and encrypts the communication of data between a website and the user’s end device. You can recognize the active SSL or TLS encryption by a small lock logo, which is displayed on the far left in the address line of the browser.

4. Rights of the data subjects (You)

With regard to the data processing by us described above, you are entitled to the following data subject rights:

The individual has the ability to request access, restriction, portability, erasure, rectification and file a complaint by contacting info@penquinsuit.com.

If the individual would like to file a complaint, the Company asks that the employee sends an email to info@penquinsuit.com.com. Please note that you can file a complaint with the Authority.

The individual has the following rights:

  • Right to access the personal data PenQuin Suit holds at any time.

  • Right to ask PenQuin Suit to correct his or her personal data that is incorrect and to complete incomplete information PenQuin Suit holds about he or she.

  • Right to be forgotten and to object and ask PenQuin Suit to delete personal data if PenQuin Suit has no legal or regulatory obligation to keep this data.

  • Right to restrict personal data.

  • Right to ask PenQuin Suit to provide the employee with a copy of his/her personal data that PenQuin Suit holds.

  • Right to file a complaint with PenQuin Suit or with the Supervisory Authority.

PenQuin Suit shall communicate rectification or erasure of your personal data with third parties unless it proves impossible or involve disproportionate effort. PenQuin Suit shall inform the individual of the third parties should this matter occur.

When the individual exercises a request please elaborate on the personal data PenQuin Suit may process about you by giving PenQuin Suit more background of the personal data. For restriction specify the request to a specific department, process, team, incident or service. Try to include timeframes, names, dates, type of processing and documents to enable PenQuin Suit to process the request as soon as possible. PenQuin Suit will respond to the request within one month of receipt.

Cookies, profiling and withdraw consent

PenQuin Suit may send personalized offers based on account and/or website behavior. PenQuin Suit only send out personalized offers if its consented to receive these offers.

PenQuin Suit uses cookies on its website such as functional, analytical and tracking cookies. PenQuin Suit uses these cookies to make the shopping experience more personal. PenQuin Suit shall only place a tracking cookie if explicit consent is given on the website. PenQuin Suit and third parties are then able to monitor its behavior and can modify advertisements based on interests.

Parties have the right to withdraw consent at any time to unsubscribe from personalized offers via marketing emails. To withdraw consent for tracking and other cookies can be done in the cookie banner. Under ‘preferences’ the cookie settings can be adjusted.

5. Contact

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us through email at info(at)penquinsuit.com.

 

Rev. 1.3 | Status: February 2022