Privacy

PRIVACY POLICY & COOKIES

Privacy Notice

Data privacy is of high importance for Shanghai Tofu and we want to be open and transparent with our processing of your personal data. This privacy policy sets out clear guidelines for how Shanghai Tofu processes your personal information. Purposes of processing “Personal information” means any information relating to users and that identifies them personally, either alone or in combination with other information. Personal information is collected automatically by the Site or received via multiple sources: forms, chat, e-mail, apps, devices, social media and other means.

 

Data Controller and Contact Information

This website is operated and owned by Shanghai Tofu

Adress: Chodowiecki Straße 22, 10405 Berlin

Fone: +49 177 5065767

Email: nihao [at] shanghaitofu.com


Purposes of Personal Data Processing

In compliance with the provisions of the European General Data Protection Regulation (GDPR) 2016/679, as well as any applicable national legislation, we inform you that at Shanghai Tofu we process the personal data you provide us with for the following purposes:

        Completion of orders in our web shop
        Sign-ups for newsletter
        Management of user accounts/profiles
        Participation in competitions and/or other events
        Send-outs of other marketing material, including invitations to events and allocation of discount codes
        Overview of purchase history
        Statistics
        Marketing initiatives

Your personal data is collected in one or several of below cases:

        Completion of orders in our web shop
        Sign-ups for newsletter
        Management of user accounts/profil

The personal information we collect includes the following:

        Personal information including payment related information you give us when you register or purchase through the site or mobile app;
        Content that you generate when interacting with our customer services team including details we require to contact you and verify your identity;
        Other content that you generate through browsing activity including intended purchases, your marketing preferences, completion of surveys, wishlists, and participation in promotional activity; and
        Device identifiers such as IP addresses, cookie IDs, IDFAs and other device identifiers, as well as geo location information, IoT technologies and connection information such as statistics on your page views, traffic to and from the sites, referral URL, ad data, your browsing history, hashed email addresses, and your web log information.

We will only use your personal data to send marketing material if you prior have given your explicit consent. Shanghai Tofu keeps statistics about user behaviour and preferences on the website. This data does not contain personal data. Knowledge about the users' use of the website is gained with help from the collected data. This information is used to improve the website. We do use data about how our users navigate, to better understand how our users use shanghaitofu.com and from that we try to improve the website. We do not sell or otherwise disclose information about how our user navigate and use our website. We do not sell or disclose information about your purchase history to third parties.

Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers, paypal, email address, and phone number.)  We refer to this information as “Order Information.”

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations).  Additionally, we use this Order Information to:
Communicate with you;
Screen our orders for potential risk or fraud; and
When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with third parties to help us use your Personal Information, as described above.  For example, we use Shopify to power our online store--you can read more about how Shopify uses your Personal Information here:  https://www.shopify.com/legal/privacy.
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
 

Cookie Policy

We use cookies, web beacons and similar technologies to collect information about the pages you view, the links you click and other actions you take on our Services, within our advertising or e-mail content. To make full use of the online shopping and personalised features on Shanghai Tofu, your computer, tablet or mobile phone will need to accept cookies, as we can only provide you with certain personalised features of this website by using them.

 
BEHAVIOURAL ADVERTISING
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you.  For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by:
[[
  INCLUDE OPT-OUT LINKS FROM WHICHEVER SERVICES BEING USED.
  COMMON LINKS INCLUDE:
    FACEBOOK - https://www.facebook.com/settings/?tab=ads
    GOOGLE - https://www.google.com/settings/ads/anonymous
]]

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at:  http://optout.aboutads.info/.


Access to Personal Data and Other Data Controllers

Your personal data will not be disclosed to any third party, except to those third parties whose intervention is necessary for the correct management of the service provided (transport companies, financial institutions, etc.). Under specific circumstances and with reference to legislation, it might be necessary to transfer information to public authorities or the police. For example, information may be disclosed to the police in case of suspicion of credit card fraud. In the case of a re-organization, full or partial sale of the company, any disclosure in such connection will be in accordance with current legislation for the processing of personal data.

    - “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
    - “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.

DO NOT TRACK
Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

YOUR RIGHTS
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information above.

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above.  Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.
 

DATA RETENTION
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.


Disclosure

Your personal data is disclosed to partners of Shanghai Tofu who deliver services on behalf of Shanghai Tofu, for example in relation to send-outs of newsletters. These partners only process the personal data on behalf of Shanghai Tofu and in accordance with the instructions.


Retention Period

Your data will be kept as long as we have a contractual relationship, or until you request its cancellation, as well as for the time necessary to comply with our legal obligations.


Your Rights as a Data Subject

At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:

          Right of access – you have the right to request a copy of the information that we hold about you.
          Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
          Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
          Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
          Right of portability – you have the right to have the data we hold about you transferred to another organisation.
          Right to object – you have the right to object to certain types of processing such as direct marketing.
          Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
         Right to judicial review: in the event that Organisation Name refuses your request under rights of access, we will provide you with a reason as to why. You have the right to complain as outlined in clause 3.6 below.

All of the above requests will be forwarded on should there be a third party involved (as stated in 3.4 above) in the processing of your personal data.


Complaints

If you wish to appeal against the processing of your personal data, please contact us by email, telephone or letter.

 
CHANGES
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.