Privacy Policy
This Privacy Policy explains how INCENTIVE design GmbH collects, uses and protects personal data when you visit our website or place an order with us. We process your data in accordance with the General Data Protection Regulation (GDPR) and supplementary German data protection laws.
1. Data Controller
INCENTIVE design GmbH
Hinter dem Hain 3
63454 Hanau, Germany
Tel.: +49 6181 97450
E-mail: info@incentive-cashmere.com
If you have any questions about data protection or wish to exercise your rights, you can reach us at info@incentive-cashmere.com.
2. Hosting and Provision of the Website
This website is operated on the Framer platform (Framer B.V., Netherlands). Framer provides hosting, distribution via a Content Delivery Network, as well as form and statistics functions, and processes data on our behalf based on a data processing agreement pursuant to Art. 28 GDPR.
When you access the website, technically necessary connection data is transmitted to Framer's servers. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and reliable provision).
3. Server Log Files
Each time the website is accessed, data is automatically recorded: IP address, date and time of access, browser type and version, operating system, page accessed, referrer URL and volume of data transferred.
The purpose is the delivery of the website, ensuring system security and preventing misuse. The legal basis is Art. 6 (1) (f) GDPR.
4. Cookies and Local Storage
We use technically necessary cookies and comparable storage technologies, for example to save your shopping basket, your language selection and security-relevant settings. The legal basis is Section 25 (2) TDDDG in conjunction with Art. 6 (1) (f) GDPR.
We only use cookies that are not technically necessary with your consent (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR). You can withdraw consent you have granted at any time with future effect.
You can also delete or block cookies in your browser settings. This may limit the functionality of the website.
5. Traffic Measurement
We use the visitor statistics integrated into Framer to evaluate and improve the use of our website. Aggregated key figures such as page views, country of origin, referrer and device type are recorded.
The analysis is carried out without cookies and without cross-site tracking; the data is not merged with other data sources. The legal basis is Art. 6 (1) (f) GDPR.
6. Fonts
This website integrates fonts from Google Fonts. When the page is accessed, the font files are loaded from servers of Google Ireland Limited or Google LLC. Your IP address is transmitted to Google; processing in the USA is possible.
The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a uniform presentation of the website). Further information can be found in Google's privacy policy.
7. Online Shop and Order Processing
Our shop area is linked to the Shopify e-commerce platform. Product data, shopping basket and the ordering process are processed via the Shopify Storefront API; the payment process takes place on Shopify's systems.
The provider is Shopify International Limited, Ireland, or Shopify Inc., Canada. An adequacy decision of the European Commission exists for Canada; we base transfers going beyond this on standard contractual clauses.
In particular, your name, delivery and billing address, email address, telephone number, as well as order and payment data are processed. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract), and for the retention of invoices Art. 6 (1) (c) GDPR (legal obligation).
For the technical connection of the shop to this website, we use the service Frameship, whose infrastructure is operated via Cloudflare.
8. Payment Service Providers
Your payment details are processed directly by the provider you have chosen, for example Shopify Payments or Stripe, PayPal or Klarna. Complete payment details are not stored by us.
The payment service providers are independently responsible for the processing within the scope of their own privacy policies.
9. Contact and Forms
If you contact us via a form on this website, by email or by telephone, we will process your details to handle your enquiry. Form entries are received and saved via the form function of Framer.
The legal basis is Art. 6 (1) (b) GDPR, insofar as the enquiry is aimed at a contract, otherwise Art. 6 (1) (f) GDPR.
10. Newsletter
If you subscribe to our newsletter, we process your email address to send you information on new arrivals, limited pieces and invitations. Registration takes place via the double-opt-in process.
The legal basis is your consent in accordance with Art. 6 (1) (a) GDPR. You can unsubscribe from the newsletter at any time via the unsubscribe link in any email or by message to us.
11. Recipients and Processors
We only pass on personal data to the extent necessary for the operation of the website and the processing of your order. Recipients include: Framer (hosting, forms, traffic measurement), Shopify (shop and checkout), Frameship and Cloudflare (technical shop connection), payment service providers, shipping and logistics partners, as well as tax advisors and authorities within the framework of legal obligations.
Processors are contractually bound under Art. 28 GDPR to instruction-based and secure processing. We do not sell or rent your personal data.
12. Transfer to Third Countries
Insofar as data is processed outside the European Union, we base the transfer on an adequacy decision of the European Commission or on standard contractual clauses pursuant to Art. 46 (2) (c) GDPR, supplemented by additional protective measures.
13. Storage Period
We store personal data only as long as necessary for the purposes mentioned or as required by statutory retention periods.
Server log files: 30 to 90 days. Customer enquiries: up to 24 months. Orders and invoices: up to 10 years in accordance with commercial and tax law requirements. Newsletter data: until you withdraw your consent.
14. Your Rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and the right to object to processing (Art. 21 GDPR), in particular for direct marketing.
You can withdraw consent you have granted at any time with future effect (Art. 7 (3) GDPR). To exercise your rights, a message to info@incentive-cashmere.com is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is the Hessian Commissioner for Data Protection and Freedom of Information.
15. Data Security
Transmission is encrypted via TLS. In addition, we apply suitable technical and organisational measures, such as access restrictions and regular updates, to protect your data against loss, misuse and unauthorised access.
16. Children
Our services are not aimed at children. We do not knowingly collect personal data from minors.
17. Changes to this Privacy Policy
We adjust this Privacy Policy when the legal situation, technology or our services change. You can always find the current version on this page.
Status
21 August 2026
