PayPal Tracking Autopilot Privacy Policy

PayPal Tracking Autopilot "the App” provides an interface between your Shopify Store and your PayPal account to synchronize order tracking data "the Service" to merchants who use Shopify to power their stores. This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.

We are firmly committed to protecting the privacy of your personal information and the personal information of your customers. By using the Service, you acknowledge and agree that our collection, usage and disclosure of this personal information is governed by our Privacy Policy.

Personal Information the App processes

When you install the App, we are automatically able to access certain types of information from your Shopify account:

  • • Shop master data
    When you install PayPal Tracking Autopilot to extend your Shopify Store we save master data such as shop domain, shop id, country settings, contact email, installation date as necessary to offer and fulfill the Service. We may require you to provide additional Personal Data as you use the PayPal Tracking Autopilot.
  • • Transactional and experience information
    When you use the services of PayPal Tracking Autopilot or access PayPal Tracking Autopilot, for example, to configure PayPal credentials, to start the time machine, to change subscription plans, or to review the state of the Shopify App, we collect information about the access, as well as other information associated with the access such as date and time.
  • • Personal Data
    When you use the PayPal Tracking Autopilot, we collect Personal Data you provide about Shopify Store orders. No Customer Personal Data is stored.
    • • Order Data
      When your customers place orders in your Shopify Store, we collect Personal Data such as order date, order id, order items id, payment gateway, PayPal transaction number according to Shopify API (access granted with installation) necessary to provide and fulfil Services. By using time machine function also historical orders will be processed.
    • • Fulfillment creation and update
      When you enter or change the fulfillment information of a customer order in your Shopify Store, we collect Personal Data such as fulfillment date and time, shipping company and tracking id as well as shipping status according to Shopify API (access granted with installation) as necessary to provide and fulfil Services.
    • • PayPal synchronization
      The PayPal synchronization service processes Personal Data such as successfully synchronized tracking data as well as errors during synchronizations.
    • • PayPal API credentials
      When you use the PayPal Tracking Autopilot, you must provide write access for fulfillment data at your PayPal account.
  • • App Charge Data
    When you use the PayPal Tracking Autopilot, application usage charges as well as recurring charges may apply according to the selected subscription plan. We, therefore, collect usage data such as charge rate, and charge date as well as subscription data such as subscription change date, and subscription model. Furthermore, we provide these data to your Shopify Store for billing and invoicing according to Shopify’s billing API.
  • • Other information collected related to your use of our Sites or Services
    We may collect additional information from or about you when you communicate with us, contact customer support teams, or respond to a survey.

We collect personal information directly from the relevant individual, through your Shopify account, or using the following technologies:

Cookies

Our website uses cookies. Cookies are small text files which are saved in a user’s internet browser or by the user’s internet browser on their computer system. When a user calls up a website, a cookie may be saved on the user’s operating system. This cookie contains a characteristic character string which allows the browser to be clearly identified when the website is called up again.
We use these cookies to make our offering more user-friendly, effective and secure. Cookies also allow our systems to recognise your browser after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. These services require the browser to be recognised again after a page change.
Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our largely justified interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our range of services.
Cookies will be stored on your computer. You therefore have full control over the use of cookies. By choosing corresponding technical settings in your internet browser, you can be notified before the setting of cookies and you can decide whether to accept this setting in each individual case as well as prevent the storage of cookies and transmission of the data they contain. Cookies which have already been saved may be deleted at any time. We would, however, like to point out that this may prevent you from making full use of all the functions of this website.
Using the links below, you can find out how to manage cookies (or deactivate them, among other things) in major browsers:
Chrome Browser: https://support.google.com/accounts/answer/61416?hl=en
Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.

Server log files

Every time our website is accessed, user data is transferred to us or our web hosts/IT service providers by your internet browser and stored in server log files. This stored data includes for example the name of the site called up, date and time of the request, the IP address, amount of data transferred and the provider making the request. The processing is carried out on the basis of Article 6(1) f) GDPR due to our legitimate interests in ensuring the smooth operation of our website as well as improving our services. “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.

Subscriptions

When you select a subscription plan we only collect and use your personal data insofar as this is necessary for the fulfilment and handling of your order as well as processing of your queries. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of Article 6(1) b) GDPR and is required for the fulfilment of a contract with you.

How Do We Use Your Personal Information?

We use the personal information we collect from you and your customers in order to provide the Service and to operate the App. Additionally, we use this personal information to: Communicate with you; Optimize or improve the App; and Provide you with information or advertising relating to our products or services.

We use your email address, which we obtained in the course of selling a good or service, for the electronic transmission of marketing for our own goods or services which are similar to those you have already purchased from us, unless you have objected to this use. You must provide your email address in order to conclude a contract. Failure to provide it will prevent the conclusion of any contract. The processing will be carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in direct marketing. You can object to this use of your email address at any time by contacting us. You will find the contact details for exercising your right to object in our imprint. You can also use the link provided in the marketing email. This will not involve any costs other than transmission costs at basic tariffs.

Sharing Your Personal Information

According to our Data Processing Agreement (DPA) that amends our Terms of Service we do not share your Personal Information with third parties without your prior permission.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Analysis, Advertising

The data processing described subsequently in this section, especially the setting of cookies, will be carried out on the basis of art. 6 (1) lit. f GDPR due to our largely justified interest:

  • - in the needs-based and target-oriented design of our website, for example, with tools for analysis and statistics
  • - in addressing the website visitors in a targeted manner using interest-based advertisement, e.g. using conversion tracking

You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR, for reasons relating to your personal situation.

Use of Google Analytics

Our website uses the web analysis service Google Analytics by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller responsible for your data if you have your habitual residence in the European Economic Area or Switzerland. Google Ireland Limited is therefore the company affiliated with Google which is responsible for processing your data and for compliance with applicable data protection laws.

The processing of data serves to analyse this website and its visitors. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services to the website operator relating to website and internet use. The IP address communicated by your browser as part of Google Analytics is not associated with any other data held by Google. Google Analytics uses cookies, which make it possible to analyse your use of the website. The information generated by the cookie regarding your use of this website is usually transferred to a Google server in the USA and stored there. IP anonymisation is activated on this website. Google uses this to shorten your IP address beforehand within Member States of the European Union or in other signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Your data may be transmitted to the USA. Following the US-EU Data Protection Agreement, Google has become “Privacy Shield“ certified and is therefore obliged to observe European data protection laws. You can prevent collection of the data (including your IP address) generated by the cookies and related to your use of the website by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link [https://tools.google.com/dlpage/gaoptout?hl=en]. You can set an opt-out cookie to prevent collection by Google Analytics across devices. Opt-out cookies prevent the future collection of your data when you visit this website. You need to opt-out on all systems and devices in use for this to work comprehensively. If you click here, the opt-out cookie is set: Disable Google Analytics.

You can find more detailed information on the terms and conditions of use and data protection at https://www.google.com/analytics/terms/gb.html and at https://policies.google.com/?hl=en.

Use of the remarketing or “similar target groups” function by Google

Our website uses the remarketing or “similar target groups” function by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller responsible for your data if you have your habitual residence in the European Economic Area or Switzerland. Google Ireland Limited is therefore the company affiliated with Google which is responsible for processing your data and for compliance with applicable data protection laws.

This function serves to analyse visitor behaviour and visitor interests. Google uses cookies to analyse website use, forming the basis for producing interest-related adverts. Cookies allow for the recording of website visits as well as anonymised data on the use of the website. The personal data of website visitors is not saved. If you then visit another website in the Google display network you will then be shown adverts which are more likely to take previous areas of product and information interest into account. Your data may also be transmitted to the USA. Following the US-EU Data Protection Agreement, Google has become “Privacy Shield“ certified and is therefore obliged to observe European data protection laws. For this purpose you can permanently deactivate the use of cookies by following the link below and downloading and installing the plug-in: support.google.com/ads/answer/7395996?hl=en

Alternatively, you can deactivate the use of cookies by third parties by calling up the Network Advertising Initiative deactivation page at https://www.networkadvertising.org/choices/ and following the opt-out instructions. You can find more detailed information on Google remarketing as well as the associated data protection declaration at: https://www.google.com/privacy/ads/

Use of Google Ads conversion tracking

Our website uses the online marketing programme “Google Ads”, including conversion tracking. Google conversion tracking is a service operated by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller responsible for your data if you have your habitual residence in the European Economic Area or Switzerland. Google Ireland Limited is therefore the company affiliated with Google which is responsible for processing your data and for compliance with applicable data protection laws.

If you click on adverts placed by Google, a cookie is placed on your computer for conversion tracking. These cookies have limited validity, do not contain any personal data and thus cannot be used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Google can recognise that you have clicked on the advert and were forwarded to this page. Every Google Ads customer receives a separate cookie. Therefore, it is not possible to track cookies relating to the websites of AdWords customers. The information collected using the conversion cookie serves the purpose of producing conversion statistics. This allows us to find out the total number of users who have clicked on our adverts and were forwarded to a page equipped with a conversion tracking tag. However, they do not receive any information with which could be used to personally identify users. You can prevent the storage of cookies by choosing corresponding technical settings in your internet browser. We would, however, like to point out that this may prevent you from making full use of all the functions of this website. You will then not be included in the conversion tracking statistics.You can also deactivate personalised advertising in Google’s advertising settings. You can find an introduction to this at https://support.google.com/ads/answer/2662922?hl=en You can also deactivate the use of cookies by third parties by calling up the Network Advertising Initiative deactivation page at https://www.networkadvertising.org/choices/ and following the opt-out instructions.You will find more information as well as Google’s data protection declaration at: https://www.google.de/policies/privacy/

Use of Facebook remarketing

Our website uses the remarketing function “Custom Audiences” by Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA; “Facebook”).This function serves to address the visitor to the website with interest-related advertising on the social network Facebook. We have implemented Facebook’s remarketing tag on our website for this purpose. This tag sets up a direct connection to Facebook’s servers when you visit our website. This informs the Facebook server which of our web pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the social network Facebook you will then be shown personalised, interest-related Facebook ads. Your data may also be transmitted to the USA. Following the US-EU Data Protection Agreement, Facebook has become “Privacy Shield“ certified and is therefore obliged to observe European data protection laws. You can deactivate the remarketing function “Custom Audiences” here. You can find more detailed information on Facebook’s collection and use of data, your associated rights and options for protecting your privacy in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.

Use of Google AdSense

Our website uses the AdSense function by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller responsible for your data if you have your habitual residence in the European Economic Area or Switzerland. Google Ireland Limited is therefore the company affiliated with Google which is responsible for processing your data and for compliance with applicable data protection laws.

This function serves the purpose of renting out advertising space on the website and using these to address visitors to the website with targeted, interest-related advertising. This function displays personalised, interest-related adverts from the Google display network to visitors to the website. Google Analytics uses cookies, which make it possible to analyse your use of the website. The information generated by the cookie regarding your use of this website is usually transferred to a Google server in the USA and stored there. Following the US-EU Data Protection Agreement, Google has become “Privacy Shield“ certified and is therefore obliged to observe European data protection laws. Google may also transmit this data to third parties if this is required by law or the third party is processing the data on behalf of Google. On no account will Google associate your IP address with other Google data. You can permanently deactivate the use of cookies by following the link below and downloading and installing the plug-in: https://support.google.com/ads/answer/7395996?hl=en.You can also deactivate the use of cookies by third parties by calling up the Network Advertising Initiative deactivation page at https://www.networkadvertising.org/choices/ and following the opt-out instructions. You will find more information as well as Google’s data protection declaration at: https://www.google.com/policies/technologies/ads/, https://www.google.com/policies/privacy/

You can find more detailed information on the terms and conditions of use and data protection at https://www.google.com/analytics/terms/gb.html and at https://policies.google.com/?hl=en.

Use of Vimeo

On our website, we use plug-ins of Vimeo Inc. (555 West 18th Street New York, New York 10011, USA; "Vimeo") to integrate videos into the "Vimeo" portal.

If you access pages on our website that contain this kind of plug-in, this will generate a connection to the Vimeo server and indicate the plug-in on the site by means of a message in your browser. Information such as your IP address and which websites you have visited will be transmitted to the Vimeo server.

If you are logged into Vimeo, Vimeo will assign this information to your personal user account. When using the plug-in functions (e.g. starting a video by pressing the appropriate button), this information will also be assigned to your Vimeo account.

Your data may be transmitted to the USA. Following the US-EU Data Protection Agreement, Vimeo has become subject to the “Privacy Shield“ and is therefore obliged to observe European data protection laws.

Processing is carried out on the basis of Article 6(1)(f) GDPR due to Vimeo's legitimate interest in market analysis and improving its services appropriately and in a targeted manner.

If you would not like Vimeo to directly assign the information collected to your Vimeo account, you must log out of Vimeo before you visit our site.

Further information on the purpose and scope of enquiry and continued use and processing of the data by Vimeo, including your rights concerning this matter and opportunities to protect your privacy, can be found in the Vimeo data protection information: https://vimeo.com/privacy

European residents

Your Rights If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.

Additionally, if: (a) you are established in the European Economic Area (EEA); (b) you provide goods or services to customers in the EEA; or (c) you are otherwise subject to the requirements of the EU General Data Protection Regulation, our collection and use of personal information of any European residents is also subject to our Data Processing Agreement.

Data retention

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at mail(at)tracking-autopilot.com or by mail using the details provided below:

ShopWerk UG (haftungsbeschränkt)
Bleckenburgstraße 11a
ST 39104 Magdeburg
GERMANY


last update: 27.07.2020