Privacy Policy

This Privacy Policy describes how www.notabag.com (the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information that can uniquely identify an individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.

Device information

  • Examples of Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.
  • Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.
  • Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.
  • Disclosure for a business purpose: shared with our processor Shopify.

Order information

  • Examples of Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers, Paypal data, and other payment providers data), email address, and phone number.
  • Purpose of collection: we use this data to provide products or services to you to fulfill our contract, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
  • Source of collection: collected from you.
  • Disclosure for a business purpose: shared with our processor Shopify, with our shipping providers and with our payment providers.

Customer support information

  • Examples of Personal Information collected: name, billing address, shipping address, email address, and phone number.
  • Purpose of collection: to provide customer support.
  • Source of collection: collected from you.

Minors

The Site is not intended for individuals under the age of 18 years. We do not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us at the address below to request deletion.

Sharing Personal Information

We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example:

  • We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
  • We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
  • We also use Google Analytics to help us understand how our customers use the Site--you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/ You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Behavioural Advertising

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

Using Personal Information

We use your personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.

Lawful basis

Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:

  • Your consent;
  • The performance of the contract between you and the Site;
  • Compliance with our legal obligations;
  • To protect your vital interests;
  • To perform a task carried out in the public interest;
  • For our legitimate interests, which do not override your fundamental rights and freedoms.

Retention

When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. For more information on your right of erasure, please see the ‘Your rights’ section below.

Automatic decision-making

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.

We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.

Services that include elements of automated decision-making include:

  • Temporary denylist of IP addresses associated with repeated failed transactions. This denylist persists for a small number of hours.
  • Temporary denylist of credit cards associated with denylisted IP addresses. This denylist persists for a small number of days.

Your rights

GDPR

If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below.

Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.

CCPA

If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the ‘Right to Know’), to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below.

If you would like to designate an authorized agent to submit these requests on your behalf, please contact us at the address below.

Cookies

Cookies

A cookie is a small text file that is stored on your computer or mobile device by a website.

The cookie can only be read by the website that created it, and is used to measure how people are using that site so that the administrators are better able to maintain and improve it.

The cookie is also anonymous. It cannot be used to identify you personally.

 

Opting Out of Using Cookies

Most web browsers allow some control of most cookies through the browser settings. You can set your browser to notify you before receiving a cookie so that you can decide whether to accept it or you can refuse all cookies although this may prevent the website from working properly.

Cookies We Use

We have categorized the cookies we use as follows:

  • Functionality Cookies: These cookies enable our website to offer additional functions and personal settings. They can be set by us or by third-party service providers that we have placed on our pages. If you do not allow these cookies, these or some of these services may not work properly.
  • Strictly Required Cookies: These cookies are required for the website to run and cannot be switched off. Such cookies are only set in response to actions made by you such as language, currency, login session, privacy preferences. You can set your browser to block these cookies but this might affect the way our site is working.
  • Marketing and Retargeting Cookies: These cookies are usually set by our marketing and advertising partners. They may be used by them to build a profile of your interest and later show you relevant ads. If you do not allow these cookies you will not experience targeted ads for your interests.
  • Analytics and Statistics Cookies: These cookies allow us to measure visitors traffic and see traffic sources by collecting information in data sets. They also help us understand which products and actions are more popular than others.

Analytics and Statistics Cookies:

Name

Description

_shopify_s

This cookie is associated with Shopify's analytics suite.

_y

This cookie is associated with Shopify's analytics suite.

_shopify_y

This cookie is associated with Shopify's analytics suite.

_ga

This cookie name is associated with Google Universal Analytics. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports.

_gid

This cookie name is asssociated with Google Universal Analytics. It stores and updates a unique value for each page visited.

_s

This cookie is associated with Shopify's analytics suite.

_shopify_s

This cookie is associated with Shopify's analytics suite.

_gat

Used to read and filter requests from bots.

_sp_id.5015

Used to store a unique user ID

_s

This cookie is associated with Shopify's analytics suite.

_gac_UA-36372715-1

Used to analyze data

_shopify_fs

This cookie is associated with Shopify's analytics suite.

source

Used for analyze information about the origin of the visitor

_fbc

Used to store and track visits across websites.

_shopify_ga

Used to analyze data

_y

This cookie is associated with Shopify's analytics suite.

_shopify_y

This cookie is associated with Shopify's analytics suite.

ab.storage.userId.7af503ae-0c84-478f-98b0-ecfff5d67750

Used to determine whether the currently-logged-in user has changed, and to associate events with the current user.

ab.storage.deviceId.7af503ae-0c84-478f-98b0-ecfff5d67750

Out-of-the-box randomly generated string used to identify anonymous users, and to differentiate users’ devices and enables device-based messaging.

ab.storage.sessionId.7af503ae-0c84-478f-98b0-ecfff5d67750

Out-of-the-box randomly generated string used to determine whether the user is starting a new or existing session, in order to sync messages and calculate session analytics.

Functionality Cookies:

Name

Description

cookiesNotification

Used to store cookie consent preferences

Marketing and Retargeting Cookies:

Name

Description

_fbp

Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.

_gcl_au

Used by Google AdSense for experimenting with advertisement efficiency across websites using their services

KL_FORMS_MODAL

From Klaviyo, our email service. Tracks when someone subscribes (opts in) to a form.

_sp_ses.5015

Measures anonymous click behavior on the website and traffic to the website to improve user experince

_shopify_sa_t

This cookie is associated with Shopify's analytics suite concerning marketing and referrals.

_shopify_sa_p

This cookie is associated with Shopify's analytics suite concerning marketing and referrals.

__kla_id

Tracks when someone clicks through a Klaviyo email to your website

_fbp

Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.

IsCampaign

Used for marketing purposes

_gcl_aw

Used by Google for experimenting with advertisement efficiency across websites.

_hjid

Used by Hotjar to store a unique user ID.

Strictly Required Cookies:

Name

Description

_orig_referrer

This cookie is associated with Shopify

cart_currency

This cookie is provided by Shopify and is used in connection with a shopping cart.

shopify_pay_redirect

This cookie is provided by Shopify and is used in connection with checkout.

motivator_initialised_15574

Shopping Cart Functionality

motivator_last_total

Shopping Cart Functionality

cart_currency

This cookie is provided by Shopify and is used in connection with a shopping cart.

cart

This cookie is provided by Shopify and is used in connection with a shopping cart.

dynamic_checkout_shown_on_cart

Used in connection with checkout.

cookie_notice

Used to identify whether the user has accepted cookies or not

motivator_initialised_32746

Shopping Cart Functionality

motivator_confirmed_15574

Shopping Cart Functionality

_checkout_queue_token

This cookie is used in conjunction with the payment window - The cookie is necessary for making secure transactions on the website.

_checkout_queue_checkout_token

This cookie is used in conjunction with the payment window - The cookie is necessary for making secure transactions on the website.

Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.

Do Not Track

Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Contact

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at info@notabag.com or by mail using the details provided below:

Moinch GmbH, Eschenheimer Anlage 25a, 60318 Frankfurt Am Main, Germany

Last updated: 02.08.2021

If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority. You can contact your local data protection authority, or our supervisory authority here: https://edpb.europa.eu/about-edpb/about-edpb/members_en