Privacy policy

PRIVACY POLICY

1) INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how we handle your personal data when you use our website. Personal data includes all data that can personally identify you.

1.2 The responsible party for data processing on this website, in accordance with the General Data Protection Regulation (GDPR), is [Shop Name]. The entity responsible for processing personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the lock symbol in your browser's address bar.

2) DATA COLLECTION WHEN VISITING OUR WEBSITE

If you use our website for informational purposes only, meaning you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server ("server log files"). When you access our website, we collect the following technically necessary data to display the website:

  • The website visited
  • Date and time of access
  • Amount of data transmitted (in bytes)
  • Source/reference from which you accessed the site
  • Browser used
  • Operating system used
  • IP address (possibly anonymized)

Processing is carried out in accordance with Art. 6 (1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is neither shared nor used for any other purpose. However, we reserve the right to review the server log files later if there are concrete indications of unlawful use.

3) COOKIES

To make visiting our website more attractive and enable certain functions, we use cookies. These are small text files stored on your device. Some of the cookies we use are deleted after you close your browser (session cookies). Others remain on your device and allow us or our partners (third-party cookies) to recognize your browser the next time you visit (persistent cookies). Persistent cookies are automatically deleted after a predefined period, which varies by cookie.

Some cookies simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart). If cookies also process personal data, this is done in accordance with Art. 6 (1)(b) GDPR for contract fulfillment or in accordance with Art. 6 (1)(f) GDPR to safeguard our legitimate interest in the optimal functionality of the website.

We may work with advertising partners who also place cookies on your device when you visit our site. You will be informed about these cookies separately in the following sections.

You can configure your browser to notify you about cookies and decide on their acceptance individually or exclude them altogether. Please note that disabling cookies may limit the functionality of our website.

For cookie settings in different browsers, refer to:

4) CONTACTING US

When you contact us (e.g., via contact form or email), personal data is collected. The data collected via a contact form is visible within the form itself. This data is stored and used solely for responding to your inquiry and related technical administration. The legal basis for this processing is our legitimate interest in responding to your request (Art. 6 (1)(f) GDPR). If the inquiry aims at contract execution, an additional legal basis is Art. 6 (1)(b) GDPR. Your data will be deleted once your inquiry has been fully resolved, provided there are no legal retention obligations.

5) DATA PROCESSING FOR ACCOUNT CREATION AND CONTRACT EXECUTION

According to Art. 6 (1)(b) GDPR, personal data is collected and processed if you provide it for contract execution or when opening a customer account. The required data is visible in the respective entry forms. You can delete your customer account at any time by notifying the responsible party mentioned above.

After contract completion or account deletion, your data will be restricted for further processing and deleted after the required legal retention periods, unless you have explicitly consented to further use or we have a legally permissible reason to continue storing the data.

6) USE OF YOUR DATA FOR DIRECT MARKETING

6.1 Subscription to Our Email Newsletter

If you subscribe to our newsletter, we will regularly send you updates about our offers. The only required information for receiving the newsletter is your email address. Any additional information is voluntary and used for personalizing the newsletter.

We use a double opt-in procedure, meaning you will only receive the newsletter after confirming your subscription via a verification email. By clicking the confirmation link, you give your consent for the use of your personal data under Art. 6 (1)(a) GDPR.

We store your IP address and the date/time of registration to prevent misuse. You can unsubscribe at any time via the link in the newsletter or by notifying the responsible party. Once unsubscribed, your email address is immediately deleted unless further use is legally permitted.

6.2 Email Marketing to Existing Customers

If you provided your email during a purchase, we reserve the right to send you offers for similar products via email. This is based on our legitimate interest in personalized direct marketing (Art. 6 (1)(f) GDPR). You may opt out at any time by notifying the responsible party, incurring only transmission costs as per base rates. After opting out, your email will no longer be used for advertising purposes.

7) DATA PROCESSING FOR ORDER HANDLING

7.1 The personal data we collect is passed on to the transport company responsible for delivery as part of contract processing, insofar as this is necessary for the delivery of the goods. Your payment data is forwarded to the commissioned credit institution as part of payment processing, insofar as this is necessary for handling the payment. If we use payment service providers, we will explicitly inform you below. The legal basis for data transfer is Article 6(1)(b) of the GDPR.

7.2 Use of Payment Service Providers

  • PayPal
    When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal, we forward your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), as part of the payment process. The transfer of data takes place in accordance with Article 6(1)(b) of the GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to conduct a credit check for payment methods such as credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Article 6(1)(f) of the GDPR, based on PayPal's legitimate interest in determining your payment ability. The result of the credit check regarding the statistical probability of non-payment is used by PayPal to decide whether to provide the respective payment method. The credit check may include probability values (so-called score values). These score values are based on a scientifically recognized mathematical-statistical method and may include, among other factors, address data.
For further data protection information, including details on the credit agencies used, please refer to PayPal’s privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to the processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

  • SOFORT
    If you select the payment method "SOFORT," the payment process is handled by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we forward the information you provided during the ordering process, along with information about your order, in accordance with Article 6(1)(b) of the GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The transfer of your data occurs exclusively for payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose.
    For further information on SOFORT’s privacy policy, please visit:
    https://www.klarna.com/sofort/datenschutz

8) CONTACT FOR REVIEW REMINDERS

Own Review Reminder (No Dispatch via a Customer Review System)

We use your email address to send a one-time reminder to submit a review of your order for the review system we use, provided that you have expressly consented to this during or after your order in accordance with Article 6(1)(a) of the GDPR.
You can revoke your consent at any time by sending a message to the data controller.

9) USE OF SOCIAL MEDIA: SOCIAL PLUGINS

9.1 Facebook Plugins with Shariff Solution

Additional customs clearance costs and/or import duties are not included in the price and are the responsibility of the customer.

Our website uses so-called social plugins ("Plugins") from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook").

To enhance the protection of your data when visiting our website, these buttons are not fully integrated as plugins but are instead embedded into the page using an HTML link. This ensures that no direct connection to Facebook servers is established when a page on our website containing such buttons is accessed. If you click on the button, a new browser window will open, directing you to Facebook, where you can interact with the plugins (if necessary, after logging in).

Facebook Inc., based in the USA, is certified under the EU-U.S. Privacy Shield framework, which ensures compliance with EU data protection standards.

For information on the scope and purpose of data collection, as well as the further processing and use of data by Facebook, including your rights and settings options for protecting your privacy, please refer to Facebook’s privacy policy:
https://www.facebook.com/policy.php

9.2 Google+ Plugins with Shariff Solution

Our website uses so-called social plugins ("Plugins") from the social network Google+, operated by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

To enhance the protection of your data when visiting our website, these buttons are not fully integrated as plugins but are instead embedded into the page using an HTML link. This ensures that no direct connection to Google+ servers is established when a page on our website containing such buttons is accessed. If you click on the button, a new browser window will open, directing you to Google+, where you can interact with the plugins (if necessary, after logging in).

Google LLC, based in the USA, is certified under the EU-U.S. Privacy Shield framework, which ensures compliance with EU data protection standards.

For information on the scope and purpose of data collection, as well as the further processing and use of data by Google, including your rights and settings options for protecting your privacy, please refer to Google’s privacy policy:
https://www.google.com/intl/de/policies/privacy/

9.3 Instagram Plugin with Shariff Solution

Our website uses so-called social plugins ("Plugins") from the online service Instagram, operated by Instagram LLC., 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram").

To enhance the protection of your data when visiting our website, these buttons are not fully integrated as plugins but are instead embedded into the page using an HTML link. This ensures that no direct connection to Instagram servers is established when a page on our website containing such buttons is accessed. If you click on the button, a new browser window will open, directing you to Instagram, where you can interact with the plugins (if necessary, after logging in).

Instagram LLC, based in the USA, is certified under the EU-U.S. Privacy Shield framework, which ensures compliance with EU data protection standards.

For information on the scope and purpose of data collection, as well as the further processing and use of data by Instagram, including your rights and settings options for protecting your privacy, please refer to Instagram’s privacy policy:
https://help.instagram.com/155833707900388/

10) ONLINE MARKETING
10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, operated by
Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick").

DoubleClick uses cookies to display relevant ads for users, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Using a cookie ID, Google tracks which ads are displayed in which browser and can thus prevent multiple displays. Processing is carried out based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 (1) lit. f GDPR.

Furthermore, DoubleClick can use cookie IDs to track so-called conversions related to ad requests. This occurs, for example, when a user sees a DoubleClick ad and later visits the advertiser's website using the same browser and makes a purchase. According to Google, DoubleClick cookies do not contain personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server. We have no influence on the extent and further use of the data collected by Google through this tool and inform you based on our current knowledge: By integrating DoubleClick, Google receives information that you have visited a certain part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate your visit with your account. Even if you are not registered with Google or logged in, Google may obtain and store your IP address.

If you wish to object to participation in this tracking process, you can deactivate conversion tracking cookies by setting your browser to block cookies from the domain www.googleadservices.com at
https://www.google.de/settings/ads,
although this setting will be deleted if you delete your cookies. Alternatively, you can find out about the setting of cookies and make relevant settings at the Digital Advertising Alliance website at
www.aboutads.info.
Finally, you can configure your browser to inform you about the setting of cookies and decide on a case-by-case basis whether to accept them or exclude them in general. If cookies are not accepted, the functionality of our website may be restricted.

Google LLC, based in the USA, is certified under the US-European data protection agreement "Privacy Shield," which ensures compliance with the data protection level applicable in the EU.

You can find further information about the privacy policy of DoubleClick by Google at:
https://www.google.de/policies/privacy/

10.2 Use of Google AdWords Conversion Tracking

This website uses the online advertising program "Google AdWords" and, within Google AdWords, the conversion tracking feature of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use Google AdWords to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google AdWords). We can determine how successful individual advertising measures are in relation to the data from advertising campaigns. This helps us to show you advertisements of interest to you, make our website more interesting, and achieve a fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on a Google AdWords ad. Cookies are small text files that are stored on your computer system. These cookies usually expire after 30 days and are not intended to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to that page. Each Google AdWords customer receives a different cookie, so cookies cannot be tracked across different AdWords customers' websites. The information obtained via conversion cookies is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers receive information about the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users.

If you do not wish to participate in tracking, you can disable this function by deactivating the Google Conversion Tracking cookie in your browser's user settings. In doing so, you will not be included in the conversion tracking statistics. We use Google AdWords based on our legitimate interest in targeted advertising in accordance with Art. 6 (1) lit. f GDPR.

Google LLC, based in the USA, is certified under the US-European data protection agreement "Privacy Shield," ensuring compliance with the data protection level applicable in the EU.

You can find further information about Google's privacy policy at:
https://www.google.de/policies/privacy/

You can permanently deactivate cookies for ad preferences by adjusting your browser settings accordingly or by downloading and installing the browser plugin available at:
https://www.google.com/settings/ads/plugin?hl=en

Please note that if you disable cookies, some functions of this website may not be fully available.

13) RIGHTS OF THE DATA SUBJECT

13.1 The applicable data protection law grants you, as the data subject, comprehensive rights regarding the processing of your personal data by the data controller. These rights (access and intervention rights) are outlined below:

  • Right of access (Art. 15 GDPR): You have the right to obtain information about your personal data processed by us, including processing purposes, categories of processed personal data, recipients or categories of recipients to whom your data has been disclosed or will be disclosed, the planned retention period or criteria for determining it, the existence of a right to rectification, erasure, restriction of processing, or objection to processing, the right to lodge a complaint with a supervisory authority, the origin of your data (if not collected by us), the existence of automated decision-making including profiling, and, where applicable, meaningful information about the logic involved and the significance and intended consequences of such processing. You also have the right to be informed about safeguards under Art. 46 GDPR regarding data transfers to third countries.

  • Right to rectification (Art. 16 GDPR): You have the right to request the immediate correction of incorrect personal data concerning you and/or the completion of your incomplete data stored with us.

  • Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data if the requirements of Art. 17 (1) GDPR are met. This right does not apply if processing is necessary for the exercise of the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

  • Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing of your personal data if the accuracy of your data is contested and under verification, if you oppose the deletion of your data due to unlawful processing and instead request restriction, if you need your data for the establishment, exercise, or defense of legal claims after we no longer need it for processing purposes, or if you have objected to processing for reasons related to your particular situation while it is being determined whether our legitimate grounds outweigh yours.

  • Right to notification (Art. 19 GDPR): If you have asserted your right to rectification, erasure, or restriction of processing, the controller must notify all recipients to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You also have the right to be informed about these recipients.

  • Right to data portability (Art. 20 GDPR): You have the right to receive your personal data, which you provided to us, in a structured, commonly used, and machine-readable format or to request transmission to another controller where technically feasible.

  • Right to withdraw consent (Art. 7 (3) GDPR): You have the right to withdraw consent for data processing at any time with future effect. Upon withdrawal, we will delete the affected data immediately unless further processing can be based on a legal ground that does not require consent. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

  • Right to lodge a complaint (Art. 77 GDPR): If you believe that the processing of your personal data violates the GDPR, you have the right to file a complaint with a supervisory authority, particularly in the member state of your residence, workplace, or the location of the alleged violation, without prejudice to other administrative or judicial remedies.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTEREST AFTER A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH FUTURE EFFECT.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, CONTINUED PROCESSING MAY BE PERMITTED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF PROCESSING SERVES TO ESTABLISH, EXERCISE, OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR DATA FOR SUCH ADVERTISING AT ANY TIME. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

14) DURATION OF STORAGE OF PERSONAL DATA

The duration of personal data storage is determined by the respective statutory retention period (e.g., commercial and tax retention obligations). After the retention period expires, the corresponding data is routinely deleted unless it is still required for contract fulfillment or initiation and/or there is a legitimate interest on our part in continued storage.