Privacy policy

Unless otherwise specified below, providing your personal data is neither legally nor contractually required nor necessary for concluding a contract. You are not obliged to provide your data. Failure to provide it has no consequences. This applies only insofar as no other details are given in the individual processing procedures below.
"Personal data" refers to all information relating to an identified or identifiable natural person.

Server Log Files

You can visit our website without providing personal information.
Each time you access our website, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in log data (so-called server log files). These stored data include, for example, the name of the accessed page, date and time of access, the IP address, the amount of data transferred, and the requesting provider. Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our predominant legitimate interest in ensuring the trouble-free operation of our website and improving our services.

Your data may also be transferred to Canada. For data transfers to Canada, an adequacy decision of the European Commission exists.

Contact

Data Controller

If necessary, you can contact us. The data controller for processing is:
Randa Weiser UG
Uhlandstraße 20-25
10623 Berlin, Germany
Tel.: +49 151 12722358
Email: randa@thegang.me

Proactive Contact via Email

If you proactively contact us via email, we collect your personal data (name, email address, message content) only to the extent provided by you. Data processing serves the purpose of handling and responding to your contact request.

If your contact aims at performing pre-contractual measures (e.g., inquiries about purchases, generating offers) or relates to an existing contract with us, this processing is based on Art. 6 (1) (b) GDPR.
For other inquiries, processing is based on Art. 6 (1) (f) GDPR due to our overriding legitimate interest in responding to your inquiry. In this case, you have the right to object to this processing of your personal data based on reasons arising from your specific situation.

Your email address will only be used to process your request. Your data will subsequently be deleted, subject to statutory retention periods, unless you have consented to further processing and use.

Orders

Collection, Processing, and Sharing of Personal Data in Orders

When placing an order, we collect and process your personal data only to the extent necessary for fulfilling and processing your order and handling inquiries. Providing the data is required for contract conclusion. Failure to provide it will result in no contract being formed. Processing is carried out based on Art. 6 (1) (b) GDPR.

Your data will be shared, for example, with the shipping companies and dropshipping providers you choose, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly comply with statutory requirements. The scope of data transmission is limited to a minimum.

Your data may also be transferred to Canada. For such data transfers, an adequacy decision by the European Commission exists.

Inventory Management System

Use of an External Inventory Management System

We use an inventory management system as part of order processing. For this purpose, the personal data collected during your order is transferred to:
Logistik Center Rheinland OHG
Industriegebiet Nord 1, Industriestr. 7, 53359 Rheinbach

Payment Services and Credit Check

Use of Klarna Payment Options

We use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna"). When selecting and using Klarna's payment options, the data necessary for payment processing will be transmitted to Klarna to fulfill the contract using your chosen payment method. This processing is based on Art. 6 (1) (b) GDPR.

Cookies enabling the recognition of your browser may also be stored. This data processing is based on Art. 6 (1) (f) GDPR, due to our legitimate interest in offering customer-friendly payment options. You have the right to object to this processing of your personal data for reasons arising from your particular situation.

For certain payment methods (e.g., "Pay Later" invoice, "Pay Now" direct debit, "Financing" installment purchase), Klarna may conduct a credit check using mathematical-statistical procedures. For this, Klarna may share personal data (e.g., name, address, email, IP address) with credit agencies to assess creditworthiness. For details, visit Klarna’s Terms for Credit Agencies and Privacy Policy.

Rights of Affected Persons and Storage Duration

Storage Duration

After the complete execution of a contract, your data will be stored for the duration of the warranty period and then retained according to statutory storage periods (e.g., tax and commercial law). Once these periods expire, the data will be deleted unless you have consented to further use.

Your Rights

Under Articles 15 to 20 GDPR, you have the following rights:

  • Right to access
  • Right to rectification
  • Right to erasure
  • Right to restrict processing
  • Right to data portability

Additionally, under Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) (f) GDPR or for direct marketing purposes.

Complaint to the Supervisory Authority

If you believe the processing of your data violates legal provisions, you have the right to file a complaint with the supervisory authority under Art. 77 GDPR:

Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219
Visitor Entrance: Puttkamerstr. 16–18 (5th Floor)
10969 Berlin
Tel.: +49 30 138890
Fax: +49 30 2155050
Email: mailbox@datenschutz-berlin.de

Right to Object

For processing based on Art. 6 (1) (f) GDPR, you may object at any time for reasons related to your specific situation. Following an objection, processing will cease unless compelling legitimate grounds for processing can be demonstrated.