Privacy Policy

1) Introduction and Controller’s Contact Information

1.1 We appreciate your visit to our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is any information with which you can be personally identified.

1.2 The controller responsible for data processing on this website according to the General Data Protection Regulation (GDPR) is ANTS & FRIENDS GmbH, Konsul-Smidt-Str. 8e, 28217 Bremen, Germany, Tel.: +49 421/643 699 0, Email: info@bnd.shop. The controller responsible for processing personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website purely for informational purposes, meaning if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data technically necessary for us to display the website to you:

• Our visited website
• Date and time at the moment of access
• Amount of data sent in bytes
• Source/reference from which you reached the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymized form)

The processing is based on Art. 6 (1) lit. f GDPR on our legitimate interest in improving the stability and functionality of our website. Data is not transferred or otherwise used. However, we reserve the right to subsequently review server log files if concrete indications point to illegal usage.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" string and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

3.1 Shopify

We use the system of the following provider for hosting our website and displaying page content: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider to ensure the protection of our visitors' data and to prohibit unauthorized disclosure to third parties.

In the event of data transmission to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

3.2 Cloudflare

We use a content delivery network provided by the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA.

This service allows us to deliver large media files such as graphics, page content, or scripts faster through a regionally distributed server network. Processing occurs based on our legitimate interest in improving website stability and functionality pursuant to Art. 6 (1) lit. f GDPR. We have entered into a data processing agreement with the provider to ensure visitor data protection and prohibit unauthorized disclosure to third parties.

The provider is certified under the EU-US Data Privacy Framework, ensuring compliance with European data protection standards based on an adequacy decision by the European Commission.

4) Cookies

To make your visit to our website attractive and enable certain functions, we use cookies, small text files placed on your device. Some cookies are automatically deleted after closing your browser ("session cookies"), while others remain longer on your device to save page settings ("persistent cookies"). You can find the duration of cookie storage in the cookie settings overview of your web browser.

If individual cookies process personal data, this processing occurs according to Art. 6 (1) lit. b GDPR to execute the contract, Art. 6 (1) lit. a GDPR with your consent, or Art. 6 (1) lit. f GDPR based on our legitimate interest in optimal website functionality and customer-friendly site design.

You can configure your browser to inform you about cookie settings and individually decide on their acceptance or exclude cookie acceptance in certain cases or in general.

Please note that non-acceptance of cookies may restrict our website's functionality.

5) Contacting Us

When contacting us (e.g., via contact form or email), personal data is processed exclusively for processing and responding to your request, only to the extent necessary.

The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f GDPR. If your contact aims to conclude a contract, an additional legal basis is Art. 6 (1) lit. b GDPR. Your data will be deleted once the matter is resolved, provided no statutory retention requirements apply.

6) Data Processing for Opening a Customer Account

Pursuant to Art. 6 (1) lit. b GDPR, personal data continues to be collected and processed as necessary when you open a customer account. Required data for account creation is shown in the input mask on our website.

You can delete your customer account anytime by sending a message to the above-mentioned controller’s address. After deletion, your data is deleted provided all contracts are fully processed, no legal retention obligations apply, and we have no legitimate interest in continued storage.

7) Use of Customer Data for Direct Advertising

7.1 Email Newsletter Registration

If you subscribe to our email newsletter, we regularly send you information about our offers. The only mandatory information is your email address. Further details are voluntary to personalize communication. We use a double opt-in procedure ensuring you only receive the newsletter after explicitly confirming your consent via a verification link sent to the provided email address.

You can unsubscribe anytime using the link in the newsletter or by notifying the controller mentioned above.

7.2 CleverReach

We use CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany, to send our email newsletters.

We forward your newsletter registration data to this provider based on Art. 6 (1) lit. f GDPR to facilitate efficient newsletter marketing.

Further sections truncated for brevity...

Status: 10.06.2025, 13:01:55 CET