Privacy Policy
This privacy policy explains how INCENTIVE design GmbH collects, uses and protects personal data when you visit our website or place an order with us. We process your data in accordance with the General Data Protection Regulation (GDPR) and supplementary German data protection laws.
1. Data Controller
INCENTIVE design GmbH
Hinter dem Hain 3
63454 Hanau, Germany
Tel.: +49 6181 97450
Email: info@incentive-cashmere.com
If you have any questions about data protection or wish to exercise your rights, you can reach us at info@incentive-cashmere.com.
2. Hosting and Website Provision
This website is operated on the Framer platform (Framer B.V., Netherlands). Framer provides hosting, delivery via a Content Delivery Network, as well as form and statistics functions, and processes data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR.
When accessing the website, technically necessary connection data is transmitted to Framer's servers. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and reliable provision).
3. Server Log Files
Each time the website is accessed, data is automatically recorded: IP address, date and time of access, browser type and version, operating system, accessed page, referrer URL and the amount of data transferred.
The purpose is the delivery of the website, ensuring system security and preventing misuse. The legal basis is Art. 6(1)(f) GDPR.
4. Cookies and Local Storage
We use technically necessary cookies and comparable storage technologies, for example to save your shopping cart, your language selection and security-relevant settings. The legal basis is Section 25(2) TDDDG in conjunction with Art. 6(1)(f) GDPR.
We only use cookies that are not technically necessary with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw consent at any time with effect for the future.
You can also delete or block cookies in your browser settings. This may restrict the functionality of the website.
5. Audience Measurement
We use the visitor statistics integrated into Framer to evaluate and improve the use of our website. Aggregated key figures such as page views, country of origin, referrer and device type are recorded.
The analysis is carried out without cookies and without cross-site tracking; the data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR.
6. Fonts
This website integrates fonts from Google Fonts. When the page is accessed, the font files are loaded from servers of Google Ireland Limited or Google LLC. Your IP address is transmitted to Google; processing in the USA is possible.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a uniform presentation of the website). Further information can be found in Google's privacy policy.
7. Online Shop and Order Processing
Our shop area is connected to the Shopify e-commerce platform. Product data, shopping cart and order processing are handled via the Shopify Storefront API; the payment process takes place on Shopify systems.
The provider is Shopify International Limited, Ireland, or Shopify Inc., Canada. An adequacy decision of the European Commission exists for Canada; transmissions beyond this are based on standard contractual clauses.
In particular, name, delivery and billing address, email address, telephone number, as well as order and payment data are processed. The legal basis is Art. 6(1)(b) GDPR (performance of a contract); for the retention of invoices, Art. 6(1)(c) GDPR (legal obligation).
For the technical connection of the shop to this website, we use the Frameship service, whose infrastructure is operated via Cloudflare.
8. Payment Service Providers
Your payment data is processed directly by the provider you selected, for example Shopify Payments or Stripe, PayPal or Klarna. We do not store complete payment data.
The payment service providers are independently responsible for processing within the scope of their own privacy policies.
9. Contact and Forms
If you contact us via a form on this website, by email or by telephone, we will process your details to handle your enquiry. Form entries are received and stored via Framer's form function.
The legal basis is Art. 6(1)(b) GDPR, insofar as the enquiry is aimed at a contract, otherwise Art. 6(1)(f) GDPR.
10. Newsletter
If you subscribe to our newsletter, we process your email address to send you information about novelties, limited pieces and invitations. Registration is carried out using the double opt-in procedure.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You can unsubscribe from the newsletter at any time via the unsubscribe link in any email or by sending a message to us.
11. Recipients and Processors
We only pass on personal data insofar as this is necessary for the operation of the website and the processing of your order. Recipients include: Framer (hosting, forms, audience measurement), Shopify (shop and checkout), Frameship and Cloudflare (technical shop connection), payment service providers, shipping and logistics partners, as well as tax advisers and authorities within the scope of legal obligations.
Processors are contractually bound pursuant to Art. 28 GDPR to process data securely and in accordance with instructions. We do not sell or rent your personal data.
12. Transfer to Third Countries
Insofar as data is processed outside the European Union, we base the transfer on an adequacy decision of the European Commission or on standard contractual clauses pursuant to Art. 46(2)(c) GDPR, supplemented by additional protective measures.
13. Storage Period
We store personal data only as long as necessary for the specified purposes or as required by statutory retention periods.
Server log files: 30 to 90 days. Customer enquiries: up to 24 months. Orders and invoices: up to 10 years according to commercial and tax law requirements. Newsletter data: until you withdraw your consent.
14. Your Rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) as well as the right to object to processing (Art. 21 GDPR), particularly in the case of direct marketing.
You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR). To exercise your rights, a message to info@incentive-cashmere.com is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority. The Hessischer Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information) is responsible for us.
15. Data Security
Transmission is encrypted via TLS. In addition, we apply appropriate technical and organisational measures, such as access restrictions and regular updates, to protect your data against loss, misuse and unauthorised access.
16. Children
Our offers are not directed at children. We do not knowingly collect personal data from minors.
17. Changes to this Privacy Policy
We adapt this privacy policy when the legal situation, technology or our services change. The current version can always be found on this page.
Status
21 August 2026
