Privacy Policy - GET MADE

In this privacy policy we inform you about the processing of your personal data.

RESPONSIBLE (CONTROLLER)

GET MADE LLC, 1209 Mountain Road Pl NE Ste N, Albuquerque, NM 87110, USA,
[email protected]

CONTACT FORM

You can contact us by using a contact form provided on our website. After submission of the contact form, we
process the personal data you provide (such as name, email address and message content) for the purpose of handling
your request on the basis of your consent according to Art. 6 (1) (a) GDPR, or – where your request is clearly
directed towards the conclusion of a contract – on the basis of Art. 6 (1) (b) GDPR, until your request has been
finally answered or you revoke your consent.

You have no legal or contractual obligation to provide personal data. If you do not provide such data, you are
simply not able to submit the form and we are not able to process your request.

WEB SHOP

You can buy products directly via our webshop. If you do so, the data you provide and the data relating to the
products you have selected will be processed by us in order to provide you with an offer, for the conclusion of the
contract, for the performance of the contract and for the fulfilment of post‑contractual obligations on the basis
of Art. 6 (1) (b) GDPR.

If you use an existing customer account to buy our products or create a customer account to buy the products, your
personal data will be processed until you delete your customer account, unless longer storage is required by
statutory retention obligations.

When customers buy our products via a guest checkout, their personal data will be processed until the legal
retention periods (in particular tax and commercial law retention periods) have expired.

We may process your data for the purpose of direct marketing in a manner compatible with the purpose of performing
the contract (for example, postal advertising) based on our legitimate interests according to Art. 6 (1) (f) GDPR,
until you object.

You have no legal or contractual obligation to provide personal data. However, the provision of data is necessary
for the conclusion of the contract. If you do not provide such data, a contract cannot be concluded.

Shopping carts of non‑registered users will be deleted after 14 days at the latest. User accounts of registered
users remain active until the account is deleted by the user. Contract data are processed until the limitation
period of potential post‑contractual claims has expired and any statutory retention periods have ended.

TAG MANAGER

GOOGLE TAG MANAGER

If you give your consent, we will process your personal data in cooperation with
Google Tag Manager,
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, as joint controllers pursuant to Art. 26 GDPR
for the purpose of initiating, controlling and managing further services (such as analytics and marketing tools) on
our website. In this case those services are loaded and operated via Google Tag Manager.

We enable Google Tag Manager to collect connection data and data of your web browser. This data is used by Google to
provide and further develop the Tag Manager service.

The legal basis of processing is your consent according to Art. 6 (1) (a) GDPR. Depending on the configuration,
Google may transfer your personal data to the USA. In these cases, Google relies on the EU‑US Data Privacy Framework
and/or EU Standard Contractual Clauses; in addition, we obtain your explicit consent to such transfers according to
Art. 49 (1) (a) GDPR and inform you that in third countries such as the USA an EU‑equivalent level of data
protection cannot always be guaranteed.

ANALYSIS SERVICES

GOOGLE ANALYTICS (GA4)

If you give your consent, we will process your personal data in cooperation with
Google Analytics, Google LLC,
1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, as joint controllers pursuant to Art. 26 GDPR for the
purpose of statistical analysis and optimisation of our website. A failure to give consent will have no impact on
the basic function of the website.

We enable the service to collect connection data, data of your web browser and data of accessed content and to
execute analysis software and to store information (for example cookies) on your terminal device. The service
anonymises collected IP addresses as soon as technically possible and provides us with statistics containing
aggregated data. We use these statistics for error analysis and for improving our website. Data stored on your
terminal device are kept for up to two years, unless you delete them earlier.

ADS, PROFILING, TRACKING, RETARGETING

LINKEDIN INSIGHT TAG / PIXEL

If you have given your consent, we will process your personal data in cooperation with
LinkedIn Ireland Unlimited Company,
Wilton Plaza, Wilton Place, Dublin 2, Ireland, as joint controllers pursuant to Art. 26 GDPR for the purpose of
providing personalised ads and measuring our advertising success (conversion tracking).

There will not be any direct impact on the function of the website if you do not give your consent, although we will
not be able to provide you with personalised ads.

We enable the service to collect connection data, data of your web browser and data of accessed content. We also
enable the service to execute tracking and recognition software and to store information on your device. This then
allows the service to recognise you across websites and to provide personalised ads. We also use the collected data
to measure and optimise our advertising campaigns. Data on your device are kept for up to two years, unless you
delete them earlier.

The legal basis of processing is your consent according to Art. 6 (1) (a) GDPR. LinkedIn may transfer personal data
to the USA or other third countries. In such cases LinkedIn relies on the EU‑US Data Privacy Framework and/or
Standard Contractual Clauses; in addition, we obtain your explicit consent to such transfers according to Art. 49
(1) (a) GDPR and inform you that in some third countries an EU‑equivalent level of data protection cannot always be
guaranteed.

MICROSOFT ADVERTISING (BING ADS)

If you have given your consent, we will process your personal data in cooperation with
Microsoft Advertising,
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, as (joint) controllers for the purpose of
providing personalised ads and measuring our advertising success.

There will not be any direct impact on the function of the website if you do not give your consent, although we will
not be able to provide you with personalised ads.

We enable the service to collect connection data, data of your web browser and data of accessed content. We also
enable the service to execute tracking and recognition software and to store information on your device. This allows
the service to recognise you across websites and to provide personalised ads. We also use the collected data to
measure and optimise our advertising campaigns. Data on your device are kept for up to two years, unless you delete
them earlier.

The legal basis of processing is your consent according to Art. 6 (1) (a) GDPR. Microsoft may transfer personal data
to the USA or other third countries. In such cases Microsoft relies on the EU‑US Data Privacy Framework and/or EU
Standard Contractual Clauses; in addition, we obtain your explicit consent to such transfers according to Art. 49
(1) (a) GDPR and inform you that in some third countries an EU‑equivalent level of data protection cannot always be
guaranteed.

RIGHT TO OBJECT

Where we process your personal data on the basis of our legitimate interests according to Art. 6 (1) (f) GDPR, you
have the right to object to such processing on grounds relating to your particular situation at any time.

If you object, we will cease the processing based on legitimate interests, unless we can demonstrate compelling
legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves
the establishment, exercise or defence of legal claims.

You also have the right to object at any time to the processing of your personal data for the purposes of direct
marketing. In this case, we will cease the processing of your personal data for such purposes.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

WITHDRAWAL OF CONSENT

You have the right to withdraw your consent at any time with effect for the future by changing the settings.

If you have given your consent to the receipt of advertising by email, you may withdraw your consent by clicking the
unsubscribe link contained in every such email. In this case, we will cease the corresponding processing operations,
unless there is another legal basis.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

DATA SUBJECT RIGHTS

You have the right to obtain confirmation as to whether or not personal data concerning you is being processed and,
where that is the case, access to such data (Art. 15 GDPR).

You also have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) and restriction of processing
(Art. 18 GDPR) of personal data.

Where processing is based on your consent or on a contract with you, you have the right to data portability according
to Art. 20 GDPR.

You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your
habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).

Up‑to‑date contact details of the supervisory authorities in the European Union can be found at
https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.