Privacy policy

Last Updated: January 20, 2025

The entity responsible for data processing is:
Hardman Design
3110 Main Street, Building
Santa Monica, CA, 90405
Email: hello@hardmandesign.com

We appreciate your interest in our online store. Protecting your privacy is very important to us. Below, we provide detailed information on how we handle your personal data.

1. Access Data and Hosting

You can visit our website without providing any personal information. Each time you access a webpage, the web server automatically stores a so-called server log file that includes, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred, and the requesting provider (access data), and documents the retrieval. This access data is solely used to ensure the proper functioning of the website and to improve our services. This serves our legitimate interests in a proper representation of our offer, in accordance with Article 6(1) Sentence 1(f) of the GDPR.

Hosting

Our website is hosted by third-party service providers who process data on our behalf. All access data and data collected in designated forms on this website are processed on their servers. For further information about our service providers and our collaboration with them, please refer to the contact details provided in this Privacy Policy.
Our service providers operate servers in the following countries, which the European Commission has determined to have an adequate level of data protection: United Kingdom, Canada, and the USA.

A decision by the European Commission on the adequacy of data protection for the USA forms the basis for data transfer to the USA, provided the respective service provider is certified. Until certification, data transfer is based on the European Commission's Standard Contractual Clauses.

Our service providers may also use servers in Australia. There is no adequacy decision by the European Commission for Australia. Data transfers to these countries are based on the European Commission's Standard Contractual Clauses.

2. Data Processing for Contract Fulfillment and Communication

2.1 Contract Fulfillment

To fulfill contracts (including inquiries and processing of warranty claims or statutory update obligations) under Article 6(1)(b) of the GDPR, we collect personal data when you provide it to us voluntarily during the ordering process. Fields marked as mandatory are required for the contract execution, and without these details, we cannot process the order. The collected data is clearly indicated in the input forms.

After the completion of the contract, your data will be restricted for further processing and deleted once the statutory retention periods have expired, unless you have explicitly consented to further use of your data under Article 6(1)(a) of the GDPR or we reserve a further use that is permitted by law, as outlined in this Privacy Policy.

2.2 Customer Account

If you consent to the creation of a customer account under Article 6(1)(a) of the GDPR, we use your data to open the account and store your data for future orders on our website. You can delete your customer account at any time by contacting us as described in this Privacy Policy or via the customer account settings. Upon deletion, your data will be erased, unless you have consented to further use of your data as described above.

2.3 Communication

For customer communication, we collect personal data when you contact us (e.g., via contact forms, live chat, or email) under Article 6(1)(b) of the GDPR. Fields marked as mandatory are required to process your request. Once your inquiry is completed, your data will be deleted unless you consent to further use of your data.

3. Data Processing for Shipping

For contract fulfillment under Article 6(1)(b) of the GDPR, we share your data with the shipping provider to deliver the ordered goods. For information about our service providers and the basis of our collaboration with them, please refer to the contact details in this Privacy Policy.

4. Data Processing for Payment

4.1 Payment Transaction Processing

We collaborate with various partners (technical service providers, financial institutions, and payment service providers) for payment transactions. Depending on the payment method you choose, the necessary data for processing the transaction is forwarded to our technical service providers, financial institutions, or selected payment service providers.

4.2 Fraud Prevention and Payment Process Optimization

We may provide our service providers with additional data, which, together with the necessary payment transaction data, is used for fraud prevention and payment optimization under Article 6(1)(f) of the GDPR. This serves our legitimate interests in protecting against fraud and optimizing our payment processes.

5. Marketing via Email, Phone

5.1 Email Newsletter

If you sign up for our newsletter, we use the necessary or separately provided data to send you regular newsletters based on your consent under Article 6(1)(a) of the GDPR. You can unsubscribe at any time by contacting us or via a link in the newsletter. After unsubscribing, we will remove your email from the recipient list unless you have consented to further use of your data.

5.2 SMS Marketing

If you have provided your consent under applicable data privacy laws, we use the contact details you provided, particularly your phone number, to send you information about offers, products, or services via SMS.

Personalized SMS messages using cookies

To determine when sending an SMS message may be appropriate (e.g., for abandoned shopping carts), we use cookies or similar technologies. These technologies collect information about your visit to our website, such as the status of your shopping cart or other relevant interactions, which are used as the basis for sending personalized messages.

Opting out of SMS marketing

You can withdraw your consent at any time by contacting us using the details provided in this privacy policy or by replying directly to an SMS, for example, by texting "STOP." Once you withdraw your consent, we will remove your phone number from our SMS marketing list unless you have expressly consented to further use of your data or further use is permitted by applicable laws.

Data sharing with service providers

For sending SMS messages, we collaborate with specialized service providers that act on our behalf. Your data may be shared with these providers to enable the delivery of SMS services. Our service providers may be located or use servers in countries deemed to provide an adequate level of data protection, including under the EU-U.S. Data Privacy Framework (DPF) for certified providers in the United States.

If you have questions about our service providers and the basis of our collaboration, please contact us using the details provided in this privacy policy.

6. Cookies and Other Technologies

6.1 General Information

We use cookies and other technologies on our website to improve user experience. Cookies are small text files stored on your device. Some cookies are deleted after the browser session ends (session cookies), while others remain on your device to recognize your browser on subsequent visits (persistent cookies).

6.2 Cookie Settings

You can adjust your cookie settings in your browser. Please refer to the following links for your browser: Microsoft Edge, Safari, Chrome, Firefox, Opera

If you consent to the use of cookies under Article 6(1)(a) of the GDPR, you can withdraw your consent at any time through the contact information in this Privacy Policy or by visiting the cookie settings page. Refusing cookies may limit the functionality of our website.

7. Use of Cookies and Other Technologies

We use cookies and other technologies from third-party providers on our website. Unless otherwise stated for individual technologies, this is based on your consent under applicable laws, including the California Consumer Privacy Act (CCPA). After the purpose for which a specific technology was used has ended, the data collected in connection with it will be deleted. You can withdraw your consent at any time with effect for the future. Further information on how to withdraw your consent can be found in the section "Cookies and Other Technologies". More information, including the basis of our cooperation with individual providers, can be found with each technology. If you have questions about the providers and the basis of our cooperation with them, please contact us using the method described in this privacy policy.

7.1 Use of Google Services

We use the following technologies from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Information about your use of our website that is automatically collected by Google technologies is generally transmitted to a Google LLC server and stored there.

Unless otherwise stated for individual technologies, data processing is based on an agreement between joint controllers under applicable privacy laws, including the California Consumer Privacy Act (CCPA). Further information about data processing by Google can be found in Google’s privacy policy.

Our service providers are located and/or use servers outside the United States, for which the U.S. has adequate data protection laws under certain circumstances, including the EU-U.S. Data Privacy Framework (DPF). In cases where Google or our service providers do not comply with this framework, we ensure that Standard Contractual Clauses issued by the European Commission are applied to ensure compliance with applicable data protection laws.

Google Analytics

For the purpose of website analysis, data such as IP address, time of visit, device and browser information, and details about your usage of our website are automatically collected and stored via Google Analytics, from which pseudonymous usage profiles are created. Cookies may be used for this purpose.

If you do not give us consent under applicable data protection laws for the use of Google Analytics, no cookies will be stored or read on your device. The data processing described in the previous paragraphs will not take place. In order to close gaps in web analysis through behavioral and conversion modeling, certain non-personally identifiable data (such as user-agent, IP address, screen resolution, and information about your consent behavior) will be sent to Google.

Google Ads

For advertising purposes in Google search results and on third-party websites, the Google Remarketing Cookie is set when you visit our website. This automatically collects and processes data such as IP address, time of visit, device and browser information, and details about your use of our website for interest-based advertising through a pseudonymous cookie ID.

Further data processing will occur only if you have enabled personalized ads in your Google account. If you are logged into Google during your visit to our website, Google may use your data, along with Google Analytics data, to create audience lists for remarketing across devices.

For website analysis and event tracking, we use Google Ads Conversion Tracking. This measures your behavior after visiting our website through a Google Ads advertisement.

If you do not consent to the use of Google Ads under applicable privacy laws, no cookies will be stored or read on your device, and the data processing described above will not occur.

7.2 Use of Facebook Services

We advertise this website on Facebook (by Meta) and other platforms through Facebook Ads. We define the parameters of the advertising campaign, and Meta Platforms, Inc. (formerly Facebook) is responsible for the exact implementation, including the decision regarding ad placements for individual users.

Unless otherwise stated for individual technologies, data processing is based on an agreement between joint controllers under applicable privacy laws. The joint responsibility is limited to the data collection and transmission to Meta Platforms. Further processing by Meta is not included.

8. Contact Options and Your Rights

8.1 Your Rights

Under applicable privacy laws, including the California Consumer Privacy Act (CCPA), you have the following rights regarding your personal data:

• The right to request access to personal data we process.
• The right to request correction or deletion of your personal data.
• The right to opt out of the sale of your personal data.
• The right to request the restriction of data processing.
• The right to data portability.

To exercise these rights or for any questions regarding the collection, processing, or use of your personal data, please contact us using the contact details provided in our legal notice.

8.2 Contact Options

If you wish to exercise your rights under applicable laws (including the CCPA), or if you have any concerns about the use of your personal data, you can contact us directly using the contact information provided in this Privacy Policy.

Klarna

In order to be able to offer you Klarna’s payment options, we will pass to Klarna certain aspects of your personal information, such as contact and order details, in order for Klarna to assess whether you qualify for their payment options and to tailor the payment options for you.

General information on Klarna you can find here. Your personal data is handled in accordance with applicable data protection law and in accordance with the information in Klarna’s privacy policy.