Privacy Policy

according to Article 13 GDPR for the online service Shopudio.com

Thank you for your interest in our website. We aim to honor your trust with comprehensive protection of your privacy. We refrain from using cookies to track your stay on our website or evaluate it for advertising purposes. However, some data are essential for the security and functionality of the service. We inform you about this below.

  1. Controller and Data Protection Officer

    Responsible for this website:

    • Producto GmbH
    • Chausseestraße 84
    • 10115 Berlin
    • Contact
    The data protection officer can be reached:
    • by email at
    • by post at
      • Producto GmbH
      • - Data Protection Officer -
      • Chausseestraße 84
      • 10115 Berlin

  2. Website Usage and Integration of External Services

    1. Processing of data to provide the website and for log files

      2. As long as you are on our website, certain data processing is essential to ensure that our website is displayed correctly on your device and in your browser, and to ensure security and stability. For this purpose, the following data is stored in a log file while you remain on our website and for a short time afterwards: date and time of access, IP address of the requesting computer or your device, hostname of the accessing computer, browser type and version, operating system, referring website and website subsequently accessed, pages visited on our website, information on whether the website loaded correctly, and transmitted data volume, if applicable. We do not store any data on your device or in your browser as cookies do.

      • Date and time of access,
      • IP address of the requesting computer or the device you are using,
      • Hostname of the accessing computer,
      • Browser type used and its version
      • Operating system
      • Website from which our website was accessed and website accessed via our website
      • Pages visited on our website
      • Information on whether our website was accessed and displayed without errors,
      • Data volume transmitted, if applicable

      stored in a log file.
      We do not store any data on your device or in your browser as is the case with cookies.

    2. Personalized advertising via Google Ads

      3. On our website, we use Google Ads services to display personalized advertising based on your interests. In particular, this includes retargeting measures that allow you to be recognized and specifically addressed on other websites.
      Processing only takes place if you have given your consent in our consent banner (Art. 6(1)(a) GDPR). You may change your selection at any time.

      The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may transfer personal data to the USA. To ensure an adequate level of data protection, we have concluded EU Standard Contractual Clauses with Google. In addition, Google is certified under the EU-US Data Privacy Framework.
      Further information can be found in Google's Privacy Policy: Privacy Policy – Privacy Policy & Terms – Google

    3. Microsoft Advertising

      4. We use the online tool Microsoft Advertising, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, for better planning, execution and analysis of advertising on various Microsoft platforms and apps.
      Microsoft Advertising allows us to display ads in the Bing search engine or on third-party websites when users enter certain search terms on Bing (keyword targeting). Targeted ads can also be displayed based on user data available at Microsoft (e.g. location data and interests) (audience targeting). As the website operator, we can evaluate this data quantitatively, for example by analyzing which search terms triggered our ads and how many of these ads resulted in clicks.

      Our websites also contain a small code snippet, a conversion tracking tag, or Universal Event Tracking tag (UET). If you visit a Microsoft website or app and come to our website via one of our ads, a cookie is stored on your device using this UET. This cookie makes it possible to record and analyze your user behavior in a pseudonymized manner. We do not want to know who you personally are. Instead, we are interested in user behavior on our websites and the ads we place overall, e.g. which products or information are clicked on by many users. Both we and Microsoft can draw conclusions from this about which content on our websites is of relevance to more or fewer people. If you also have a Microsoft account, Microsoft may possibly recognize your IP address and link your usage behavior data with it.

      Provided you have given your consent for this in the privacy settings, Microsoft and we may also use cookies to present you with ads corresponding to your presumed interests during future visits (remarketing).

      The use of this service is based on your consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG.

      You can object or withdraw your consent by deactivating your consent in our privacy settings, by disabling cookies in your browser, by using your browser's cookie deletion function, or by adjusting your privacy settings at Microsoft, or by objecting to personalized advertising at Microsoft.

      Microsoft is certified under the EU-US Data Privacy Framework (DPF), and a Data Processing Agreement exists between Microsoft and us. Nevertheless, we point out that we ultimately have no influence on whether and which data Microsoft transfers to public or private bodies in the USA for further processing.

  3. Transparency and Consent Management under the TCF

    On our website, we use consent management technologies to manage your consents. There you can provide detailed consent for specific technologies or providers for different purposes. These are the advertising purposes of the Transparency & Consent Framework (TCF), which we briefly present below.

    1. Legal basis and withdrawal or objection

      2. Most processing for the purposes described below is based on your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time with future effect.
      Additionally, we base certain processing operations on legitimate interest, which is indicated in the respective purpose description (Art. 6(1)(f) GDPR). In such cases, you may object at any time with future effect.
      You can make settings on the website via the link Privacy Settings at the bottom of the page.

    2. Collection and transmission of your consent preferences

      3. Regardless of the purposes described below, your consent is transmitted in the form of the TC String—a string representing your preferences—to the vendors visible in the consent management interface. This is necessary and in our legitimate interest so that your settings are respected by all TCF participants. Processing is therefore based on Art. 6(1)(f) GDPR.

    3. Purposes of consent

      4. The following purposes can be managed via the TCF. Some require your prior consent, others rely on legitimate interest:

      1. Store or access information on a device

        2. Cookies, device identifiers or similar online identifiers (e.g. login-based identifiers, randomly generated identifiers, network-based identifiers) may be stored or read on your device together with other information (e.g. browser type and browser information, language, screen size, supported technologies, etc.) to recognize it whenever you access the website. This occurs for one or more of the processing purposes listed here.

      2. Use of reduced data to select ads

        3. Ads presented to you on this service may be based on reduced data, such as the website you are currently using, your approximate location, your device type, or the content you interact with (or have interacted with) (e.g. to limit ad frequency).

      3. Creation of profiles for personalized advertising

        4. Information about your activities on this service (such as completed forms, viewed content) may be stored and combined with other information about you (e.g. information from your previous activity on this service or other websites or apps) or similar users. This is then used to create or improve a profile about you (e.g. potential interests and personal characteristics). Your profile may be used (also at a later time) to present advertising that is more relevant to your possible interests.

      4. Use of profiles to select personalized advertising

        5. Ads displayed to you on this service may be based on your advertising profile. This advertising profile may include your activities on this service or other websites or apps, possible interests, and personal characteristics.

      5. Measurement of ad performance

        6. Information about which ads are presented to you and how you interact with them may be used to determine how well an ad resonated with you or other users and whether the advertising campaign goals were achieved. This includes, for example, whether you viewed an ad, clicked on it, whether it encouraged you to purchase a product or visit a website. This information is useful for determining the relevance of advertising campaigns.

      6. Audience analysis using statistics or data combinations

        7. Based on the combination of data sets (such as user profiles, statistics, market research, analytics data), reports can be created about your interactions and those of other users with advertising or non-advertising content to identify common characteristics (e.g. to determine which audiences are receptive to an advertising campaign or certain content).

      7. Development and improvement of offerings

        8. Information about your activities on this service, such as interaction with ads or content, may help improve products and offerings and develop new ones based on user interactions and audience characteristics. This processing purpose does not include developing, enhancing, or improving user profiles or identifiers.

      8. Ensure security, prevent fraud and detect fraud attempts

        9. Your data may be used to monitor and prevent unusual and potentially fraudulent activities (e.g. regarding advertising or ad clicks by bots) and to ensure that systems and processes operate properly and securely. Data may also be used to resolve issues experienced by you, the website or app operator, or advertisers when providing content and ads.

      9. Provision and display of advertising and content

        10. Certain information (such as IP address or device capabilities) is used to ensure the technical compatibility of content or advertising and to enable transmission to your device.

      10. Store and transmit your privacy choices

        11. The decisions you make regarding the purposes and vendors listed in this notice are stored and provided to the respective vendors as digital signals (e.g. a string). This is necessary and in our legitimate interest so that the settings you make are respected by all TCF participants. Processing is based on Art. 6(1)(f) GDPR.

      11. Matching and combining data from different sources

        12. Information about your activities on this service may be matched and combined with other information about you from different sources to support the purposes explained in this framework (e.g. your activities on another online service, use of a loyalty card in a store, responses to a survey).

      12. Linking different devices

        13. To support the purposes explained in this framework, it may be determined whether your device is likely linked to other devices belonging to you or your household (e.g. because you are logged into the same service on both your phone and computer, or because both devices use the same internet connection).

  4. Legal Basis for Processing the Above Data

    For the temporary storage of the listed data in log files, there is a legitimate interest for functional and security reasons in accordance with Article 6(1)(f) GDPR.

  5. Duration of Data Storage

    The data listed above will be deleted promptly once they are no longer required for the stated purposes. This includes particularly analyses for functionality, error-free operation, and stability.

  6. Your Rights as a Data Subject

    1. Under Art. 15 GDPR, you may request information on whether and which personal data we process about you.
    2. According to Art. 21(1) GDPR, you have the right to object to data processing if you find yourself in a special situation. Further processing is only permitted if we can demonstrate compelling legitimate grounds.
    3. You may request the deletion of your personal data under Art. 17 GDPR.
    4. Under Art. 77(1) GDPR, you may lodge a complaint with a data protection authority of your choice if you believe our processing violates data protection law.