I. General information on data processing
The protection of your privacy is very important to us. We would therefore like to inform you at this point which of your personal data we collect during your visit to our website and what it is used for. But we also offer you a variety of services outside of our website that you can use in different ways. Depending on whether you contact us online, by phone, in person or in any other way and which services you use, different data is generated from different sources. We collect or receive personal information when that information is provided to us (e.g., when you contact us); in the course of our relationship with you (e.g., when you make a purchase); when you make personal information public (e.g., when you post a public statement about us in social media); when you visit our sites; when you register to use our site; or when you interact with third-party content or advertisements on a website or in an app. Translated with www.DeepL.com/Translator (free version) Personal data is any information relating to an identified or identifiable natural person. This includes information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior. Information where we cannot (or only with a disproportionate effort can) establish a connection to your person, e.g. by making the information anonymous, is not personal data. If we process your personal data for the provision of certain offers, we will inform you in the following about the specific procedures, the scope and purpose of the data processing, the legal basis for the processing and the respective storage period.
1. Extent of the processing of your personal data
Your personal data will be processed in accordance with the principles of the EU General Data Protection Regulation (hereinafter “GDPR“) and only if you have given your consent. An exception to this rule applies only in those cases where prior consent cannot be obtained for factual reasons or where the processing of the data is permitted by law.
2. Legal basis for the processing of your personal data
Insofar as we obtain your consent for the processing of your personal data, Art. 6 para. 1 lit. a GDPR as legal basis. In the processing of your personal data, which is necessary to carry out pre-contractual measures on the basis of your request or to fulfil a contract to which you are party, Art. 6 paragraph. 1 lit. b GDPR as legal basis. Insofar as processing of your personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR as legal basis. When you view our website, we collect the data mentioned under III.1 because it is technically necessary to display our website and to ensure the stability and security of the system. The storage in log files is done to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems. These purposes also include our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.
3. Deletion and storage period of your personal data
Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which we are subject. The data will also be blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data in order to conclude or fulfill a contract. We encourage parents and guardians to take an active role in their children’s online activities. It may happen that we unconsciously collect personal data from children without the consent of their parents or guardians. If you believe that we have collected personal information without appropriate consent from a person who is not yet contractually capable, please inform us by e-mail at email@example.com. We will then immediately take appropriate measures to investigate or delete the respective data. By clicking on data excerpt, you can view your current data stored with us at any time and delete it yourself.
4. Data security
All data transmitted by you personally will be encrypted using the common and secure standards (SSL or TLS). TLS or SSL are secure and proven standards that are also used in online banking, for example. You can recognize a secure TLS or SSL connection by the “s” appended to the “http” (i.e. https://..) in the address bar of your browser or by the lock symbol at the bottom of your browser. We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
II. Name and address of the person responsible
Person responsible within the meaning of the EU General Data Protection Regulation (hereinafter referred to as GDPR) and other national data protection laws of the member states and other data protection regulations is:
III. collection and storage of personal data as well as type and purpose and their use
1. When visiting our website
The following data is processed:
- Browser type and version and other information transmitted by the browser, such as the operating system of your computer, the name of your access provider, geographical origin, language setting, etc.
- The IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Websites from which the user’s system accesses our website
- Web pages that are accessed by the user’s system via our website
The legal basis for the temporary storage of data and log files is Art. 6 paragraph. 1 lit. f GDPR.
The mentioned data will be processed by us for the following purposes:
- Guarantee of a smooth connection of the website
- Ensuring a comfortable use of our website
- Evaluation of system security and stability
- continuous improvement of the website
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this, your IP address must remain stored for the duration of the session. The storage in log files is done to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person. These purposes also include our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR. The data will be deleted as soon as they are no longer required to achieve the purpose of their collection. The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. There is therefore no possibility of objection on the part of the user.
2. When buying goods
On our website we offer you the possibility to purchase goods by entering personal data. This data is entered by you in an input mask, transmitted to us and stored.
When you order goods through our website, the following information is processed:
- First and last name
- Street, postal code and city
- Phone number (optional)
- E-mail address
- Billing address
- Shipping address
- Date of birth, depending on the payment method you choose
- Payment data, depending on the payment method you choose
The mentioned data will be processed by us for the following purposes:
- to identify you as a contractual partner
- to check the plausibility of the data entered by you
- to the payment processing of your order
- to process any warranty claims that may exist and to assert any claims against you
- to coordinate appointments by telephone in the context of a delivery
The data processing is carried out on your order and is subject to article 6 paragraph. 1 lit. b and lit. f GDPR for the aforementioned purposes and is necessary for the performance of the contract and for other pre-contractual measures and our legitimate interests. When you place an order, we process your personal data only to the extent necessary to fulfill and process your order. The provision of the data is necessary for the conclusion of the contract. Non-provision has the consequence that no contract can be concluded. The personal data processed by us for the order will be stored until the expiry of the statutory warranty period and will be automatically deleted thereafter, unless we have been informed in accordance with Art. 6 para. 1 lit. c GDPR due to tax and commercial law storage and documentation obligations (from HGB, StGB or AO) to a longer storage obligated or you have agreed in a storage going beyond it after art. 6 paragraph. 1 lit. a GDPR.
3. When using vouchers within the scope of an order
When using vouchers, we also store the following data when an order is placed:
- Voucher value
- Voucher code
- Time of the voucher redemption
We use the data provided in the context of an order for vouchers for the purpose of checking and processing the order as well as for sending and redeeming the voucher in accordance with article 6 paragraph. 1 lit. b GDPR. This also includes the logging and processing of data related to the use of vouchers, in particular for the prevention of fraud (Art. 6 para. 1 lit. f GDPR).
4. In connection with our newsletters
5. When using our contact form
Via a contact form provided in our helpcenter, we offer you the opportunity to contact us at any time with questions of any kind. In the course of processing your contact, the following data is requested so that we can allocate your request and then answer it:
- valid e-mail address
- First and last name
- your message to us
Additional personal information such as your address or your order number is not recorded unless you provide this information voluntarily. Data processing for the purpose of establishing contact is carried out in accordance with article 6 paragraph. 1 lit. b GDPR based on your request. In addition, we have a legitimate interest in being able to respond to inquiries from our customers and interested parties and thus ensure a functioning customer service (Art. 6 para. 1 lit. f GDPR). As soon as the request you have made has been dealt with and the matter in question has been finally clarified, the personal data processed via the contact form will be deleted, unless, in accordance with Article 6 paragraph. 1 lit. c GDPR due to tax and commercial law storage and documentation obligations (from HGB, StGB or AO).
6. For (telephone) inquiry to the customer service/individual e-mail inquiry
When you contact our customer service by phone or e-mail, we collect personal data such as
- First and last name
- Phone number
- e-mail address and
- message text or request
only to the extent provided by you. Additional personal information such as your address or your order number is not recorded unless you provide this information voluntarily. Your phone number is recorded by our phone software for a short period of time and remains only temporarily stored in the phone software. The data processing serves the purpose of establishing contact and processing your request. By making the call or sending your message you agree to the processing of the transmitted data. The processing is carried out on the basis of Art. 6 paragraph. 1 lit. a GDPR with your consent or based on your request (Art. 6 para. 1 lit. b DSGVO). Even in this case, our legitimate interest lies in being able to respond to inquiries from our customers and interested parties and thus ensure a functioning customer service (Art. 6 para. 1 lit. f GDPR). You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until revocation. Your telephone number or e-mail address will only be used to process your request. Your data will then be deleted unless you have agreed to further processing and use.
7. When visiting linked websites / hyperlinks
On our website there are so-called hyperlinks to websites of other providers. If you activate these hyperlinks, you will be redirected from our website directly to the websites of the other providers. You can recognize this by the change of the URL. We cannot take responsibility for the confidential handling of your data on these third party websites, as we have no influence on these companies’ compliance with data protection regulations. Please inform yourself directly on these websites about how these companies handle your personal data.
IV. Transfer of data to third parties
We may share personal information with other companies for legitimate business purposes and for the operation of our website in accordance with applicable law. For example on:
– Supplier of software for newsletter marketing (direct marketing):
– Provider of our used chat platform for customer support:
– globally operating payment service providers for the purpose of payment processing:
- Some of the above-mentioned payment service providers make use of (credit) inquiry agencies, such as SCHUFA Holding AG (you can obtain information about the stored data concerning you from SCHUFA Holding AG, Verbraucherservice, Postfach 5640, 30056 Hannover, (https://www.schufa.de/de/impressum/,
https://www.schufa.de/de/datenschutz/) or Creditreform Boniversum GmbH, Hellersbergstraße 11, D-41460 Neuss, Tel.: +49 (0)2131-109-501, Fax: -557, served (
https://www.boniversum.de/impressum/,https://www.boniversum.de/datenschutzerklaerung/) . The data exchange with the credit agencies also serves the fulfilment of legal obligations to carry out credit checks of customers (§ 505a and 506 BGB).
– Shipping companies and authorized dealers for the purpose of handing over or delivering the goods:
- Our goods are delivered by DHL (https://www.dhl.de/de/toolbar/footer/datenschutz.html,https://www.dhl.de/de/toolbar/footer/impressum/vertragspartner-impressum.html).
– Furthermore, we transmit personal data to:
- you and your appointed representatives, if any;
- Legal and regulatory authorities upon request or for the purpose of reporting an actual or suspected violation of applicable law or regulation;
- Accountants, auditors, lawyers and other external professional consultants, subject to binding contractual confidentiality obligations;
- any relevant party, law enforcement agency or court, to the extent necessary to establish, exercise or defend legal claims
- any relevant party for the purpose of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties
In addition, we will only pass on your personal data to third parties if you have agreed to this in accordance with Art. 6 Par. 1 lit. a GDPR, you have given your express consent to a legal obligation to pass on the information in accordance with Art. 6 para. 1 lit. c GDPR exists or the transfer pursuant to Art. 6 para. 1 lit. f GDPR is required to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data. If we commission a third party company (contract processor) to collect or process personal data, the contractor is subject to the following contractual obligations: (i) Process personal data only in accordance with our prior written instructions; and (ii) Take measures to protect the confidentiality and security of personal data; together with (iii) Additional requirements under applicable law.
V. Social Media Plugins
For the integration of videos on our website we use the provider YouTube, among others. YouTube is operated by YouTube LLC with headquarters at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc. based in in 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For this we use plugins from the provider YouTube. When you access the internet pages of our website that are equipped with such a plugin, a connection to the YouTube servers is established and the plugin is displayed. This tells the YouTube server which of our websites you have visited. If you are logged in as a YouTube member, YouTube will associate this information with your personal account. When using the plugin, such as clicking the start button of a video, this information is also assigned to your user account. You can prevent this association by logging out of your YouTube user account and other user accounts of YouTube LLC and Google Inc. and delete the corresponding cookies of the companies. Further information on data processing and notes on data protection by YouTube (Google) can be found at https://policies.google.com/privacy.
On our websites are social media plugins of the social network of Facebook Inc., 1601 S. California Ave, Palo Alto, California 94304, USA. It is possible that through this plugin, personal data about the visitors of the website is also collected and transmitted to the service and linked to the service of the visitor. For further information about your data protection rights and setting options to protect your privacy on Facebook, please contact https://www.facebook.com/policy.php and https://www.facebook.com/help/186325668085084.
On our website a button of the service Instagram is integrated. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged in to your Instagram account, you can link the contents of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our sites with your account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram. For more information about your privacy rights at Instagram, please contact https://help.instagram.com/155833707900388.
A button of the service Instagram is integrated on our website. These functions are offered by Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA. If you are logged into your Pinterest account, you can link the content of our pages to your Pinterest profile by clicking on the Pinterest button. This allows Pinterest to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Pinterest. For more information about your privacy rights on Pinterest, please visit https://policy.pinterest.com/en/privacy-policy.
VI. Cookies and pixel tags
1. What are cookies
- Language settings
- Articles in a shopping cart
- Log-in information
- Entered search terms
- Frequency of page views
- Use of website functions
2. What are pixel tags
3. Opt-Out possibilities
- Mozilla Firefox
- Google Chrome
- Microsoft Edge
- Microsoft Internet Explorer 9
- Microsoft Internet Explorer 10
- Microsoft Internet Explorer 11
VII. Tracking and analysis tools
We use tracking and analysis tools to ensure that our website is continuously optimized and designed to meet your needs. On the other hand, we use the tracking and analysis tools to statistically record the use of our website and evaluate it for the purpose of optimizing our offer for you. The tracking and analysis measures listed below and used by us are based on Art. 6 para. 1 lit. f GDPR. The following description of the tracking and analysis tools also indicates the respective processing purposes and the data processed.
1. Google Analytics
2. Google reCAPTCHA
We use on this website the Facebook pixel of Facebook, a social media network of the company Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. The code implemented on this site can evaluate the behavior of visitors who have come to this website from a Facebook advertisement. This can be used to enhance Facebook advertisements and this data is collected and stored by Facebook. The collected data is not visible to us, but can only be used in the context of ad placements. By using the Facebook pixel code, cookies are also set. By using the Facebook pixel, the visit of this website is communicated to Facebook so that visitors to Facebook can see suitable ads. If you have a Facebook account and are logged in, your visit to this website is assigned to your Facebook user account. You can find out how the Facebook pixel is used for advertising campaigns on https://www.facebook.com/business/learn/facebook-ads-pixel. You can change your settings for ads on Facebook at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen as long as you are logged into Facebook. At http://www.youronlinechoices.com/de/praferenzmanagement/ you can manage your preferences for usage-based online advertising. You can disable or enable many providers at once or set the settings for individual providers. More information about Facebook’s data policy can be found at https://www.facebook.com/policy.php.
4. Pinterest Rich Pins
We use on this website the Pinterest Rich Pins from Pinterest, a social media network of the company Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA. The code implemented on this page can evaluate the behavior of visitors who have arrived at this website from a Pinterest advertisement. This can be used to improve Pinterest ads and this data is collected and stored by Pinterest. The collected data is not visible to us but can only be used in the context of ad placements. Cookies are also set through the use of the Pinterest Rich Pins code. By using Pinterest Rich Pins, your visit to this website is communicated to Pinterest so that visitors can see matching ads on Pinterest. If you have a Pinterest account and are logged in, your visit to this website will be associated with your Pinterest user account. To learn how Pinterest Rich Pins is used for advertising campaigns, visit https://help.pinterest.com/en/business/article/rich-pins. For more information about Pinterest’s data policy, please visit https://policy.pinterest.com/en/privacy-policy.
5. Microsoft Calrity
We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.
VIII. Rights of data subjects
You have the right:
- to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, cancellation, limitation of processing or opposition, the existence of a right of appeal, the origin of your data, if it has not been collected from us, as well as the existence of automated decision making including profiling and, where applicable, meaningful information on the details of such data;
- in accordance with Art. 16 GDPR to immediately request the correction of incorrect or incomplete personal data stored by us;
- in accordance with Art. 17 GDPR to request the deletion of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims
- pursuant to Art. 18 GDPR, to demand the restriction of the processing of your personal data, if the accuracy of the data is disputed by you, if the processing is unlawful but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or if you have lodged an objection to the processing pursuant to Art. 21 GDPR;
- in accordance with Art. 20 GDPR, to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request its transfer to another responsible party;
- according to Art. 7 para. 3 GDPR to revoke your once given consent to us at any time. As a result, we may no longer continue the data processing that was based on this consent for the future and
- complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our company headquarters.
You can assert your rights against us at any time by contacting us, for example, by e-mail at firstname.lastname@example.org.
IX. Right of objection
Provided that your personal data is based on legitimate interests in accordance with Art. 6 paragraph. 1 lit. f GDPR, you have the right, in accordance with Art. 21 GDPR, to object to the processing of your personal data for reasons arising from your particular situation or to object to direct marketing. In the latter case you have a general right of objection, which will be implemented by us without indication of a special situation. If you wish to exercise your right of objection, simply send an e-mail to email@example.com.