Privacy policy

Controller responsible for data processing:
AkibaDreams GmbH
Siemensstr. 1
53121 Bonn
Germany

Email: harajukudreams@dokomi.de

We are pleased about your interest in our online shop. Protecting your privacy is very important to us. Below, we inform you in detail about how we handle your data.

1. Access Data and Hosting

You can visit our website without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which contains information such as the name of the requested file, your IP address, date and time of the request, the amount of data transferred, and the requesting provider (access data), and logs the access.

These access data are evaluated exclusively for the purpose of ensuring the trouble-free operation of the site and improving our services. This serves to protect our legitimate interests in a proper presentation of our services in accordance with Art. 6 (1) sentence 1 lit. f GDPR.

All access data will be deleted no later than thirty days after the end of your visit to the website.

Hosting

The services for hosting and displaying the website are partly provided by our service providers within the scope of processing on our behalf.

Unless otherwise stated in this privacy policy, all access data and all data collected via the forms provided on this website are processed on their servers. If you have questions about our service providers or the legal basis of our cooperation with them, please use the contact details provided in this privacy policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: Canada.

Our service providers are also located and/or use servers in the United States and other countries outside the EU and EEA. For these countries, no adequacy decision of the European Commission exists. Our cooperation with them is based on standard contractual clauses of the European Commission.

 

2. Data Processing for Contract Fulfillment and Contact Purposes

2.1 Data Processing for Contract Fulfillment

For the purpose of fulfilling the contract (including inquiries and the handling of any existing warranty and performance disruption claims as well as any statutory update obligations) pursuant to Art. 6 (1) sentence 1 lit. b GDPR, we collect personal data if you voluntarily provide it to us as part of your order. Required fields are marked as such, as we need the data in these cases to process the contract, and we cannot send the order without this information. The data collected can be seen from the respective input forms.

This also applies to so-called pre-orders, where delivery of the ordered goods takes place at a later date. In such cases, we process your order data at the time the contract is concluded to ensure the availability of the goods and to prepare for later delivery. Data processing for pre-orders is also carried out pursuant to Art. 6 (1) sentence 1 lit. b GDPR on the basis of contract fulfillment.

If, in the context of a pre-order, you have registered to receive notifications about availability, delivery updates, or similar information, data processing takes place based on your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR. You can revoke this consent at any time.

For more information about the processing of your data, particularly regarding the sharing with our service providers for order, payment, and shipping processing, please refer to the following sections of this privacy policy. After the contract has been fully processed, your data will be restricted from further processing and deleted after expiration of the tax and commercial retention periods pursuant to Art. 6 (1) sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use the data beyond this as permitted by law and as outlined in this privacy policy.

2.2 Customer Account

If you have given your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR by choosing to open a customer account, we will use your data to open the account and to store your data for future orders on our website.

You may delete your customer account at any time by sending a message to the contact option described in this privacy policy or using the function provided in the customer account settings. After deleting your account, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use the data beyond this as permitted by law and as outlined in this privacy policy.

2.3 Contacting Us

As part of customer communication, we collect personal data in order to process your inquiries pursuant to Art. 6 (1) sentence 1 lit. b GDPR if you voluntarily provide us with this information when contacting us (e.g., via contact form or email). Required fields are marked as such because we need the data in these cases to process your inquiry.

The specific data collected is evident from the respective input forms. After your inquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use the data beyond this as permitted by law and as outlined in this privacy policy.

3. Data Processing for Shipping Purposes

For the purpose of fulfilling the contract pursuant to Art. 6 (1) sentence 1 lit. b GDPR, we forward your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

Disclosure to Shipping Providers for Shipment Notification Purposes

If you have given your express consent during or after your order pursuant to Art. 6 (1) sentence 1 lit. a GDPR, we will forward your email address to the selected shipping provider so that they can contact you prior to delivery for the purpose of delivery notification or coordination.

You may revoke your consent at any time by sending a message to the contact address specified in this privacy policy or directly to the shipping provider using the contact address provided below. After revocation, we will delete your data unless you have expressly consented to further use of your data or we reserve the right to use your data in a manner permitted by law and described in this policy.

DHL Paket GmbH 
Sträßchensweg 10 
53113 Bonn 
Germany

4. Data Processing for Payment Transactions

4.1 Data Processing for Transaction Execution

In handling payments in our online shop, we work with the following partners: technical service providers, credit institutions, and payment service providers.

Depending on the selected payment method, we transmit the data required to carry out the payment transaction to our technical service providers working under a data processing agreement, to the commissioned credit institutions, or to the selected payment service provider, to the extent this is necessary for processing the payment. This is done pursuant to Art. 6 (1) sentence 1 lit. b GDPR for contract fulfillment.

In some cases, payment service providers collect the necessary data themselves, for example on their own websites or via a technical interface integrated in the ordering process. The respective payment service provider’s privacy policy applies in these cases.

If you have any questions about our payment processing partners or the legal basis of our cooperation with them, please contact us using the details provided in this privacy policy.

4.2 Data Processing for Fraud Prevention and Payment Optimization

Where applicable, we may provide our service providers with additional data which, together with the data necessary for processing payments, they use on our behalf as data processors for the purpose of fraud prevention and optimization of our payment processes (e.g., invoicing, handling disputed payments, supporting accounting).

This processing serves our legitimate interests in safeguarding against fraud and in efficient payment management, pursuant to Art. 6 (1) sentence 1 lit. f GDPR.

4.3 Identity and Credit Checks When Using Klarna Payment Services

If you choose Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden ("Klarna") as your payment service provider and opt to pay via invoice, we will ask for your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR to transmit the data required for payment processing as well as for identity and credit checks to Klarna.

In Germany, Klarna may use credit agencies listed in Klarna’s privacy policy for the identity and credit check. The information received on the statistical probability of payment default is used by Klarna for a balanced decision about the establishment, implementation, or termination of the contractual relationship.

You may withdraw your consent at any time by contacting us using the contact details provided in this privacy policy. This may result in certain payment options no longer being available to you.

You can also withdraw your consent for the use of personal data directly from Klarna at any time.

5. Advertising by Email

5.1 Email Newsletter with Subscription, Newsletter Tracking with Separate Consent

If you subscribe to our newsletter, we use the required data for this purpose or any data you have separately provided to regularly send you our email newsletter based on your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR.

You may unsubscribe from the newsletter at any time by sending a message to the contact option described below or via a dedicated link in the newsletter. After unsubscribing, we will delete your email address from the recipient list, unless you have expressly consented to fur...

If you have additionally given us your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR to analyze our newsletter, we will also analyze how you interact with our newsletter by measuring, storing, and evaluating open rates and click rates for the purpose of designing future newsletter campaigns (“newsletter tracking”).

For this analysis, the emails sent include one-pixel technologies (e.g., so-called web beacons, tracking pixels), which are stored on our website. For the evaluations, we link in particular the following “newsletter data”:
• the page from which the page was requested (so-called referrer URL),
• the date and time of access,
• a description of the type of web browser used,
• the IP address of the requesting computer,
• the email address,
• the date and time of registration and confirmation

These one-pixel technologies are linked with your email address or your IP address and, if applicable, with an individual ID. Links contained in the newsletter may also contain this ID.

You can unsubscribe from newsletter tracking at any time either by sending a message to the contact option described or via a designated link in the newsletter.

The information is stored as long as you are subscribed to the newsletter.

5.2 Newsletter Delivery

The newsletter and the above-described newsletter tracking may also be sent by our service providers within the framework of processing on our behalf. If you have questions about our service providers and the basis of our cooperation with them, please contact us using the details provided in this privacy policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: Canada.

6. Cookies and Other Technologies

6.1 General Information

To make visiting our website attractive and to enable the use of certain features, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies).

Privacy Protection on End Devices 
When using our online offering, we use technologies that are strictly necessary to provide the expressly requested telemedia service. The storage of information on your device or access to information already stored on your device does not require consent in this context.

For functions that are not strictly necessary, the storage of information or access to information on your device requires your consent. Please note that if you do not grant consent, parts of the website may not be fully usable. Any consents you may have given remain in effect until you adjust or reset your device settings.

Subsequent Data Processing by Cookies and Other Technologies 
We use such technologies as are absolutely necessary for the use of certain website features (e.g. shopping cart functionality). These technologies collect and process IP addresses, visit time, device and browser information, and data regarding your use of our website (e.g. cart content). This serves our legitimate interests in optimizing our website pursuant to Art. 6 (1) sentence 1 lit. f GDPR.

In addition, we use technologies to fulfill legal obligations (e.g. to prove your consent to data processing) and for web analysis and online marketing. More details on these, including the relevant legal basis, can be found in the following sections of this privacy policy. Additional technologies not individually listed here may also be used. Further details, including legal basis, can be found via the Usercentrics platform by clicking the fingerprint icon at the lower right or left corner of the page.

You can find the cookie settings for your browser under these links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™ 
If you have consented to the use of technologies pursuant to Art. 6 (1) sentence 1 lit. a GDPR, you can revoke your consent at any time by contacting us or clicking the fingerprint icon. If cookies are not accepted, the functionality of our website may be limited.

6.2 Use of Usercentrics Consent Management Platform

We use the Usercentrics Consent Management Platform (“Usercentrics”) to inform you about the cookies and other technologies we use, and to collect, manage, and document your legally required consent to the processing of your personal data. This is required to comply with our legal obligations pursuant to Art. 6 (1) sentence 1 lit. c GDPR in conjunction with Art. 7 (1) GDPR. Usercentrics is a service of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, which processes your data on our behalf.

When visiting our website, Usercentrics’ server stores a so-called server log file, which contains your anonymized IP address, date and time of your visit, device and browser information, and information about your consent behavior. Your data is deleted after three years unless you have consented to further use under Art. 6 (1) sentence 1 lit. a GDPR or we are legally permitted to use the data otherwise.

Information on Data Transfers to Third Countries

We use technologies from service providers whose locations and/or servers may be in third countries outside the EU/EEA. Where no adequacy decision exists, an appropriate level of data protection must be ensured through other safeguards.

Standard contractual clauses (SCCs) or binding corporate rules may be used for this purpose, subject to prior verification of the adequate level of protection. Additional safeguards may be necessary according to the ECJ.

We have concluded SCCs with these providers and, where possible, additional safeguards. Nonetheless, the level of data protection may not match EU standards. In such cases, we seek your consent under Art. 49 (1) lit. a GDPR for the transfer.

Risks include that authorities in the third country may access your data in ways not compliant with EU standards, without adequate remedies or recourse. Countries currently lacking adequacy decisions include (examples):
• USA 
• China 
• Russia 
• Taiwan

Details of transfers can be found in this privacy policy or through the consent manager tool we use.

7. Use of Cookies and Other Technologies

7.1 Use of Google Services

If you have given your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR, we use the following cookies and technologies from third-party providers on our website. Once the purpose for which the technology was implemented ceases and we no longer use it, the data collected in connection with it will be deleted. You may withdraw your consent at any time with future effect. For more details, please refer to the "Cookies and Other Technologies" section of this privacy policy.

We use technologies provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Information collected by these technologies is usually transferred to a Google LLC server in the USA and stored there. The USA is not deemed by the European Commission to have adequate data protection. Our collaboration is based on standard contractual clauses. Unless otherwise stated, processing is carried out based on joint controllership agreements under Art. 26 GDPR. More information can be found in Google's privacy policy.

GOOGLE ANALYTICS 
For website analytics, Google Analytics collects and stores data (IP address, time of visit, device/browser info, usage behavior) from which user profiles may be created using pseudonyms. Cookies may be used. If you access our website from the EU, your IP address is first stored on an EU-based server to derive location data and is then immediately deleted before any traffic is forwarded to other Google servers. Data processing is based on a data processing agreement with Google.

For optimized marketing, we have enabled data sharing with Google Products & Services, allowing Google to use collected data for improving its own services. This occurs under a separate joint controller agreement. We have no influence over Google's further processing of this data.

GOOGLE ADS 
For advertising in Google search results and on third-party websites, a Google Remarketing cookie is set upon visiting our site, which enables interest-based advertising via a pseudonymous cookie ID and the pages visited. Additional data processing only occurs if you’ve enabled “personalized advertising” in your Google account. If logged in during the visit, Google combines this data with Google Analytics data for cross-device remarketing.

We also use Google Ads Conversion Tracking to measure user behavior after clicking on a Google ad. This includes cookies and tracking of events (e.g., page visits, newsletter subscriptions).

GOOGLE TAG MANAGER 
This tool allows us to manage various codes and services on our website. During tag implementation, Google may process personal data (e.g., IP address, online identifiers). Data processing is governed by a processor agreement with Google. If specific tracking services are deactivated, their tags remain inactive via the Tag Manager.

YOUTUBE VIDEO PLUGIN 
We embed YouTube content using enhanced privacy mode. Data (IP address, time, device/browser info) is transmitted to and processed by Google only when you play a video.

7.2 Use of Facebook Services

FACEBOOK PIXEL 
We use Facebook Pixel from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta”). It automatically collects and stores data (IP address, time, device/browser info, usage data) to create pseudonymous usage profiles. In extended data matching, hashed identifiers (e.g., name, email, phone) may also be collected. A cookie with a pseudonymous ID enables browser recognition. Meta may combine this data with your Facebook account data for analytics and advertising.

This data is typically transferred to Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. No adequacy decision exists for the USA. Our cooperation relies on EU Standard Contractual Clauses. See Meta’s privacy policy for more.

FACEBOOK ANALYTICS 
Visitor stats for our website are created using Facebook Business Tools based on data collected via the Facebook Pixel. Data processing is based on a processing agreement with Meta and serves to enhance marketing efforts.

FACEBOOK ADS 
We use Facebook Ads to advertise this website on Meta platforms. We define campaign parameters; Meta controls ad delivery. Unless stated otherwise, data processing occurs under joint controller agreements per Art. 26 GDPR. This joint control applies only to data collection and transmission to Meta.

Using Custom Audiences, we create group-based ads on Facebook. Meta acts as our processor in extended data matching. Based on the pseudonymous cookie ID and usage data, we conduct personalized remarketing. 
Facebook Pixel Conversions allow us to analyze post-click behavior after you reach our site via a Facebook ad.

8. Social Media

8.1 Social Plugins from Facebook (by Meta), Twitter, Instagram (by Meta)

Social buttons from social networks are used on our website. These are integrated into the page solely as HTML links, so no connection is established with the servers of the respective provider when you visit our website. If you click on one of the buttons, the website of the respective social network will open in a new window of your browser. There you can, for example, click the Like or Share button.

8.2 Our Online Presence on Facebook (by Meta), Instagram (by Meta)

If you have given your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR to the respective social media provider, your data will be automatically collected and stored for market research and advertising purposes when visiting our online presence on the aforementioned social media platforms. Pseudonymized user profiles are created from this data, which can be used to display advertisements both within and outside the platforms that presumably match your interests. Cookies are usually used for this purpose.

For detailed information about the processing and use of data by the respective social media provider, as well as contact options and your rights and settings to protect your privacy, please refer to the providers’ data protection notices linked below. If you need assistance in this regard, feel free to contact us.

Facebook (by Meta) is a service of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Facebook is generally transferred to and stored on a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on standard data protection clauses adopted by the European Commission.

The data processing in connection with visiting a Facebook (by Meta) fan page is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (regarding Insights data) can be found here.

Instagram (by Meta) is a service of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is generally transferred to and stored on a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on standard data protection clauses adopted by the European Commission.

The data processing in connection with visiting an Instagram (by Meta) fan page is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (regarding Insights data) can be found here.

9. Contact Options and Your Rights

9.1 Your Rights

As a data subject, you have the following rights:
• In accordance with Art. 15 GDPR, the right to obtain information about your personal data processed by us, within the scope defined therein;
• In accordance with Art. 16 GDPR, the right to request the rectification of inaccurate or incomplete personal data stored by us without undue delay;
• In accordance with Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is necessary
  o to exercise the right to freedom of expression and information;
  o to comply with a legal obligation;
  o for reasons of public interest; or
  o for the establishment, exercise, or defense of legal claims;
• In accordance with Art. 18 GDPR, the right to request the restriction of processing of your personal data, where
  o the accuracy of the data is contested by you;
  o the processing is unlawful but you oppose the erasure of the data;
  o we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims; or
  o you have objected to processing pursuant to Art. 21 GDPR;
• In accordance with Art. 20 GDPR, the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to request the transmission to another controller;
• In accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our company headquarters.

Right to Object

If we process personal data as explained above in order to safeguard our legitimate interests that prevail in the context of a balancing of interests, you may object to this processing with effect for the future. If the data is processed for direct marketing purposes, you may exercise this right at any time as described above. If the processing is carried out for other purposes, you only have the right to object on grounds relating to your particular situation.
After you exercise your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
This does not apply if the processing is for direct marketing purposes. In that case, we will not process your personal data for such purposes.

9.2 Contact Options

If you have any questions regarding the collection, processing, or use of your personal data, or if you require information, rectification, restriction, or deletion of data, or wish to revoke any consent you have given or object to a particular use of your data, please contact us directly using the contact details provided in our legal notice (Impressum).