PRIVACY

APA Intemporal UG
Bernauer Straße 31
10115 Berlin, Germany
Tel. +49 176 4583 9976
info@apa-intemporal.com
VAT ID DE361541304

Privacy officer: Simone Potache, at the same address, info@apa-intemporal.com.

Visiting the site

When you open a page, our hosting provider stores access data in server log files: the page requested, date and time, the amount of data transferred, your browser and operating system, the referring page and your IP address. We use this to run the site securely and to find faults. Legal basis: our legitimate interest in a working, secure website (Art. 6(1)(f) GDPR). Log files are deleted after 30 days unless needed to investigate an incident.

The site is hosted by Kinsta Inc. on Google Cloud servers in the EU and delivered through Cloudflare’s network. Both act for us under data processing agreements.

Buying a coat

Your order is placed through Shopify (Shopify International Ltd., Dublin, Ireland), which runs our shopping cart and checkout. To fulfil the contract we process your name, delivery and billing address, e-mail address, telephone number, the items ordered and your payment method; the payment itself is handled by the payment provider you choose at checkout (Shopify Payments, PayPal, Klarna or similar), who receives your payment details directly. We pass your name, address and the parcel’s contents to the carrier. We also record how your visit reached us (for example a newsletter or an ad campaign name, the referring website and the first page you opened) and attach it to your order, so we know which of our channels lead to orders. This contains no personal data and does not depend on your cookie choice. Legal basis: our legitimate interest in measuring our own marketing (Art. 6(1)(f) GDPR). Legal basis: performance of the contract (Art. 6(1)(b) GDPR). We keep order data for the periods set by German commercial and tax law (six and ten years).

If you came to the site through a link with campaign parameters (for example from an Instagram post or a search advert) and have accepted analytics cookies, we store those parameters, the referring page and the landing page in a cookie for 30 days and attach them to your order, so we know which of our channels led to it.

Writing to us

The contact form, the newsletter forms and the “tell me when it is back” form run on Contact Form 7 and send us your message with your name and e-mail address. We use them only to answer you. Legal basis: pre-contractual steps and our legitimate interest in answering enquiries (Art. 6(1)(b) and (f) GDPR). The forms are protected by Google reCAPTCHA, which checks that a human is sending the form; Google receives your IP address and browser data for this. Messages are deleted once the matter is settled, at the latest after two years, unless they belong to an order.

Newsletter

When you sign up we store your e-mail address and the time of your sign-up and send you a confirmation link (double opt-in). The newsletter is sent through Mailchimp (The Rocket Science Group LLC, USA, under the EU–US Data Privacy Framework). Mailchimp records whether a mail was opened and which links were clicked. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time with the link in every mail or by writing to us; we then delete your address from the list.

Customer reviews

We quote reviews that customers have published on Kickstarter, Makuake or social media, shortened and with first name and country only. If one of them is yours and you would like it changed or removed, write to info@apa-intemporal.com and we will do so.

When you first visit, a banner asks whether we may use cookies beyond the necessary ones. Nothing in the “analytics” and “marketing” categories runs before you agree, and you can change or withdraw your choice at any time through the cookie settings link in the footer. Legal basis for everything in those categories: your consent (Art. 6(1)(a) GDPR and § 25 TDDDG).

Necessary

• cookielawinfo-checkbox-*, viewed_cookie_policy (1 year): remember your cookie choice.
• topbar, popup and their keys (7 days): remember that you closed the announcement bar or the newsletter window.
• _shopify_y, _shopify_s, cart (Shopify, up to 1 year): keep your cart and checkout session.
• apa_views (session storage, until you close the tab): counts pages of your visit so the newsletter window appears at most once.

Analytics, only after consent

Google Analytics 4 (Google Ireland Ltd.): measures which pages are visited, how far they are read and which products are viewed, added to the cart or bought, so we can improve the site. We use Google Consent Mode: before you agree, Google receives no cookies and no personal identifiers. IP addresses are shortened by Google. Cookies: _ga, _ga_* (up to 2 years). Data may be transferred to Google LLC in the USA under the EU–US Data Privacy Framework. Opt out at any time through the cookie settings or with Google’s browser add-on.

Microsoft Clarity (Microsoft Ireland Operations Ltd.): records how visitors use the pages (clicks, scrolling, mouse movement) as anonymised heatmaps and session replays. Text you type into forms and the contents of the cart are masked before anything is recorded. Cookies: _clck (1 year), _clsk (1 day). Microsoft may process data in the USA under the EU–US Data Privacy Framework.

Traffic source: the campaign and referrer cookies described under “Buying a coat” (apa_touch_first, apa_touch_last, 30 days) are set only after you accept analytics.

Marketing, only after consent

Meta pixel (Meta Platforms Ireland Ltd.): lets us measure whether our Instagram and Facebook adverts lead to visits and purchases, and show our adverts to people who viewed a coat. Meta receives the pages and products you viewed, what you added to the cart and started to buy, and a hashed version of data you enter at checkout. Cookies: _fbp (90 days), _fbc (90 days). Meta may process data in the USA under the EU–US Data Privacy Framework. Our shop also reports completed purchases to Meta through Shopify’s Facebook & Instagram channel, under the same consent. More on Meta’s processing: facebook.com/privacy/policy.

Embedded content

Some pages embed videos or players from SoundCloud, YouTube or the Kickstarter and BX1 websites. They load only when you open the page they are on, and the provider then receives your IP address and may set its own cookies. Our social media links (Instagram, Facebook, LinkedIn, Pinterest) are plain links; nothing is sent to those networks until you click.

We share data only with the providers named above (hosting, shop and payment, carriers, newsletter, analytics and advertising) and only to the extent each needs it. Where a provider processes data outside the EU, this rests on an adequacy decision (the EU–US Data Privacy Framework) or on the European Commission’s standard contractual clauses. You can ask us for a copy of these safeguards.

Order and invoice data: as long as commercial and tax law require. Enquiries: until settled, at most two years. Newsletter: until you unsubscribe. Server logs: 30 days. Analytics and advertising cookies: see the durations above; the data behind them is kept by the provider for up to 14 months (Google Analytics), 13 months (Microsoft Clarity) and as described by Meta.

You have the right to ask what data we hold about you, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, and to object to processing based on our legitimate interests. Consent you have given can be withdrawn at any time with effect for the future, for cookies through the cookie settings link, for the newsletter through the unsubscribe link. You can complain to a supervisory authority; ours is the Berlin Commissioner for Data Protection and Freedom of Information (datenschutz-berlin.de). To exercise any of these rights, write to info@apa-intemporal.com.

We update this policy when the site or the law changes. The date at the top tells you which version you are reading.