Privacy Policy

Controller

The controller responsible for data processing is:

Thomas Uhl
Am Ginsterberg 33
66440 Blieskastel
Germany
Email: contact@gamswild-eyewear.com
Phone: +49 6842 7085138

1. Access Data and Hosting

We are pleased about your interest in our online shop. Protecting your privacy is very important to us. Below we provide detailed
information about how we handle your data.

You can visit our website without providing any personal information. Each time you access a website, the web server automatically
stores a so-called server log file, which may include the name of the requested file, your IP address, date and time of access,
the amount of data transferred, and the requesting provider (access data), and documents the access.

This access data is evaluated exclusively for the purpose of ensuring the smooth operation of the site and improving our offering.
This serves to safeguard our overriding legitimate interests in a correct presentation of our offering pursuant to Art. 6(1)(f) GDPR.
All access data is deleted no later than seven days after the end of your visit.

Hosting

The services for hosting and displaying the website are provided in part by our service providers as part of processing on our behalf.
Unless otherwise explained in this privacy policy, all access data and all data collected in forms provided on this website are processed
on their servers.

If you have questions about our service providers and the basis of our cooperation with them, please use the contact options described
in this privacy policy.

Our service providers are located in and/or use servers in the following countries for which the European Commission has determined an
adequate level of data protection by decision: United Kingdom, USA.

The adequacy decision for the USA serves as a basis for transfers to third countries insofar as the respective service provider is certified.
Until our service providers are certified, data transfers continue to rely on the following basis: Standard Contractual Clauses of the European Commission.

2. Data Processing for Contract Fulfillment and Contact

2.1 Data Processing for Contract Fulfillment

For the purpose of contract fulfillment (including inquiries and handling of any warranty and performance disruption claims as well as statutory
update obligations) pursuant to Art. 6(1)(b) GDPR, we collect personal data if you voluntarily provide it to us as part of your order.
Mandatory fields are marked as such because we require this data to fulfill the contract and cannot ship the order without it.
Which data is collected is apparent from the respective input forms.

Further information on the processing of your data, especially on sharing it with our service providers for order, payment, and shipping processing,
can be found in the following sections of this privacy policy.

After the contract has been fully processed, your data will be restricted for further processing and deleted after expiry of tax and commercial
retention periods pursuant to Art. 6(1)(c) GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR
or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.

2.2 Customer Account

If you have given your consent pursuant to Art. 6(1)(a) GDPR by deciding to open a customer account, we use your data for the purpose of setting up
the customer account and storing your data for future orders on our website.

You can delete your customer account at any time either by sending a message to the contact option described in this privacy policy or by using the
function provided in the customer account. After deletion, your data will be deleted unless you have expressly consented to further use of your data
pursuant to Art. 6(1)(a) GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.

2.3 Contact

In the context of customer communication, we collect personal data to process your inquiries pursuant to Art. 6(1)(b) GDPR if you voluntarily provide
it to us when contacting us (e.g., via contact form, live chat tool, telephone, or email). Mandatory fields are marked as such because we require this
data to process your request. Which data is collected is apparent from the respective input forms.

After your inquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data pursuant to
Art. 6(1)(a) GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.

3. Data Processing for Shipping

For contract fulfillment pursuant to Art. 6(1)(b) GDPR, we pass on your data to the shipping service provider commissioned with delivery, insofar as
this is necessary for the delivery of ordered goods.

Disclosure to Shipping Service Providers for Delivery Notification

If you have given us your express consent during or after your order pursuant to Art. 6(1)(a) GDPR, we will pass on your email address and telephone
number to the selected shipping service provider so that they can contact you before delivery for the purpose of delivery notification and/or coordination.

You can revoke your consent at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service
provider using the contact address listed below. After revocation, we will delete the data provided for this purpose unless you have expressly consented
to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.

DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany

4. Data Processing for Payment Handling

For payment processing in our online shop, we work with the following partners: technical service providers, financial institutions, and payment service providers.

4.1 Data Processing for Transaction Handling

Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers,
the commissioned financial institutions, or the selected payment service provider, insofar as this is necessary for payment processing.
This serves contract fulfillment pursuant to Art. 6(1)(b) GDPR.

In some cases, payment service providers collect the data required for payment processing themselves, e.g., on their own websites or via technical
integration in the ordering process. The privacy policy of the respective payment service provider applies in this respect.

Depending on the selected payment method, data may be transferred to third countries outside the EU/EEA. Where the European Commission has issued an
adequacy decision, this serves as the basis for the transfer. Where no adequacy decision exists, transfers are based on Standard Contractual Clauses
of the European Commission.

4.2 Fraud Prevention and Optimization of Our Payment Processes

Where applicable, we provide the above-mentioned service providers with additional data that they use together with the data necessary for payment
processing for fraud prevention and optimization of our payment processes (e.g., invoicing, handling disputed payments, accounting support).
This serves to safeguard our overriding legitimate interests pursuant to Art. 6(1)(f) GDPR in protecting against fraud and in efficient payment management.

5. Advertising by Email

5.1 Email Newsletter Without Registration and Your Right to Object

If we receive your email address in connection with the sale of goods or services and you have not objected, we reserve the right to send you regular
offers by email for similar products from our range on the basis of Section 7(3) UWG. This serves to safeguard our overriding legitimate interests
in advertising to our customers pursuant to Art. 6(1)(f) GDPR.

You can object to this use of your email address at any time by sending a message to the contact option described in this privacy policy or via a link
provided in the advertising email, without incurring any costs other than the transmission costs according to basic tariffs.

After unsubscribing, we delete your email address from the recipient list unless you have expressly consented to further use of your data or we reserve
the right to use data beyond this, which is permitted by law and about which we inform you in this policy.

5.2 Newsletter Dispatch

The newsletter may also be sent by our service providers as part of processing on our behalf. If you have questions about our service providers and
the basis of our cooperation with them, please use the contact option described in this privacy policy.

Our service providers are located in and/or use servers in the following countries for which the European Commission has determined an adequate level
of data protection: USA, Canada.

For India, there is no adequacy decision by the European Commission. Our cooperation is based on the Standard Contractual Clauses of the European Commission.

6. Cookies and Other Technologies

6.1 General Information

To make visiting our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages.
Cookies are small text files that are automatically stored on your device. Some cookies are deleted after the browser session ends (session cookies).
Other cookies remain on your device and enable us to recognize your browser on your next visit (persistent cookies). You can find the storage duration
in your browser’s cookie settings overview.

Device Privacy

When using our online services, we use technologies that are strictly necessary to provide the telemedia service you expressly request. The storage of
information on your device or access to information already stored on your device does not require consent in this respect.

For functions that are not strictly necessary, storing information on your device or accessing information already stored on your device requires your consent.
Please note that if you do not give consent, parts of the website may not be fully usable. Any consents you have given remain valid until you adjust or reset
the relevant settings on your device.

Subsequent Data Processing by Cookies and Other Technologies

We use technologies that are strictly necessary for the use of certain website functions (e.g., shopping cart). Through these technologies, IP address,
time of visit, device and browser information, and information about your use of our website (e.g., information about cart contents) are collected and processed.
This serves to safeguard our overriding legitimate interests in an optimized presentation of our offering pursuant to Art. 6(1)(f) GDPR.

We also use technologies to fulfill legal obligations (e.g., to be able to prove consents) and for web analytics and online marketing. Further information,
including the legal basis, can be found in the following sections of this privacy policy.

Cookie Settings

You can find cookie settings for your browser at the following links: Microsoft Edge / Safari / Chrome / Firefox / Opera.

If you have consented to the use of technologies pursuant to Art. 6(1)(a) GDPR, you can revoke your consent at any time by sending a message to the contact
option described in this privacy policy. Alternatively, you can click the data protection button on the website. If cookies are not accepted, the functionality
of our website may be limited.

6.2 Cookiebot Consent Management Platform

We use Cookiebot on our website to inform you about the cookies and other technologies we use and to obtain, manage, and document your consent where required.
This is necessary pursuant to Art. 6(1)(c) GDPR to fulfill our legal obligation pursuant to Art. 7(1) GDPR to be able to prove your consent.

Cookiebot is a service of Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, which processes your data on our behalf.

After you submit your cookie declaration on our website, Cookiebot’s web server stores your anonymized IP address, the date and time of your declaration,
browser information, the URL from which the declaration was sent, information about your consent behavior, and an anonymous random key. In addition, a cookie
is used that contains information about your consent behavior and the key. Your data is deleted after twelve months unless you have expressly consented to
further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.

Our service providers are located in and/or use servers in countries for which the European Commission has determined an adequate level of data protection: USA.
The adequacy decision for the USA applies insofar as the respective service provider is certified; otherwise, transfers are based on the Standard Contractual Clauses
of the European Commission.

6.3 Information on Third-Country Transfers

We use technologies from service providers whose registered office and/or server locations may be in third countries outside the EU/EEA. If there is no adequacy
decision for that country, an adequate level of data protection must be ensured by other appropriate safeguards.

Appropriate safeguards may include Standard Contractual Clauses of the European Commission or Binding Corporate Rules; however, the parties must first assess
whether an adequate level of protection can be ensured. According to the case law of the CJEU, additional protective measures may be required.

We generally agree Standard Contractual Clauses with technology providers who process personal data in a third country and, where possible, additional safeguards
to ensure adequate protection.

Nevertheless, it may happen that despite all contractual and technical measures, the level of data protection in the third country does not correspond to that in
the EU. In such cases, we ask for your consent under Art. 49(1)(a) GDPR (where necessary) as part of the cookie consent.

In particular, there is a risk that local authorities in the third country may obtain access rights to your personal data that are not sufficiently limited from an
EU data protection perspective, and that we as data exporter or you as data subject may not become aware of this and/or you may not have sufficient legal remedies.

Examples of third countries currently without an adequacy decision include: China, Russia, Taiwan. 

Which third countries we transfer data to is described in the privacy notices for the respective tools and/or services we use and/or in the consent management platform.