NOTE23

Privacy policy

1. Controller

The controller responsible for data processing on this website is:

Leading International GbR
Wiesenstr. 6
33824 Werther (Westfalen)
Germany
Email: hello@note23.de
Website: www.note23.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. NOTE23 is a brand of Leading International GbR.

2. Collection and storage of personal data, type and purpose of use

a) When visiting the website

When you access our website, the following data is automatically collected by the server:

IP address
Date and time of access
Browser type and version
Operating system
Referrer URL
Host name of the accessing computer

This data is technically necessary to ensure the stability and security of the website (Art. 6(1)(f) GDPR) and is automatically deleted after 30 days at the latest.

b) When ordering in the online shop

When you place an order, we collect the following data:

Surname, first name
Billing and delivery address
Email address
Telephone number (optional)
Payment information

Processing is carried out for the performance of the contract (Art. 6(1)(b) GDPR) and to comply with legal obligations (Art. 6(1)(c) GDPR).

c) Contact form, withdrawal form and email enquiries

If you contact us via a form or by email, we store your details in order to process your enquiry. This data is not passed on without your consent.

d) Customer account

If you create a customer account, we store your data to make future purchases easier for you. You can have your account deleted at any time.

3. Disclosure of data to third parties

Your data is only passed on if this is necessary for the performance of the contract or if you have expressly consented:

Payment service providers (see section 4)
Shipping service providers (e.g. DHL, UPS, DPD)
IT and hosting service providers (Shopify as shop system)
Review platforms (see section 6)
Tracking tools and marketing platforms (see section 7)
Tax advisers and accounting for statutory retention obligations

Disclosure takes place exclusively within the legally permissible framework.

4. Payment providers

We offer various payment methods which are processed by external payment service providers. Your payment data is transmitted directly to the providers:

PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg)
Klarna (Klarna Bank AB, Sweden): invoice, instalments, instant transfer
Visa, Mastercard, Maestro
Apple Pay and Google Pay
Shopify Payments (Stripe Inc., USA)

Further information on data processing by these providers can be found in their privacy policies.

5. Newsletter and email advertising

If you subscribe to our newsletter, we use your email address exclusively to send information about offers and news. Subscription takes place using the double opt-in procedure. You can withdraw your consent at any time with effect for the future by clicking the unsubscribe link in the newsletter or by sending us a message.

6. Reviews and customer feedback

We may use review platforms to collect customer feedback. After a purchase, these platforms may receive your email address or order details in order to invite you to leave a review. If you do not want this, you can object at any time by email to hello@note23.de.

7. Cookies and tracking technologies

Our website uses cookies to improve user-friendliness and to analyse user behaviour.

a) Necessary cookies

These cookies are necessary for the website to function, for example for the shopping cart or login.

b) Analytics and marketing cookies

We use tracking tools to analyse user behaviour and for targeted advertising:

Google Analytics
Meta Pixel (Facebook and Instagram Ads)
Google Ads Conversion Tracking
TikTok Pixel

These technologies are only used on the basis of your consent via the cookie banner (Art. 6(1)(a) GDPR). You can withdraw your consent at any time via the cookie settings.

8. Data processing in the EU and in third countries

We generally process your data within the European Union. If data is transferred to third countries (e.g. USA), this only takes place with appropriate safeguards:

EU Standard Contractual Clauses (SCCs)
Certification under the EU-US Data Privacy Framework

9. Your rights as a data subject

Under the GDPR you have the following rights:

Right of access to your stored data
Right to rectification of incorrect data
Right to erasure ("right to be forgotten")
Right to restriction of processing
Right to data portability
Right to object to data processing
Right to withdraw consent given

To exercise your rights, write to us at hello@note23.de. You also have the right to lodge a complaint with the competent data protection supervisory authority.