Privacy policy

POLICY FOR THE PROTECTION OF PERSONAL INFORMATION

1) INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT INFORMATION OF THE DATA CONTROLLER

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data is any information that can personally identify you.

1.2 The data controller for the data processing on this website according to the General Data Protection Regulation (GDPR) is Shop Name. The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser bar.

2) DATA COLLECTION WHEN YOU VISIT OUR WEBSITE

If you use our website solely for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser transfers to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website:

  • The visited website
  • Date and time of access
  • The amount of data sent in bytes
  • The source/reference from which you arrived at the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymized form)

The processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. However, we reserve the right to later review the server log files if there are concrete indications of illegal use.

3) COOKIES

To make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the browser session ends (i.e., after you have closed your browser – so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Permanent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

In some cases, cookies are used to simplify the ordering process by storing settings (e.g., by remembering the contents of a virtual shopping cart for a later visit to the website). If personal data are also processed by individual cookies implemented by us, the processing is carried out in accordance with Article 6(1)(b) GDPR (for the fulfillment of the contract) or in accordance with Article 6(1)(f) GDPR (to safeguard our legitimate interests in providing optimal website functionality and a customer-friendly, efficient design of your visit).

We may work with advertising partners who help make our website more interesting for you. For this purpose, cookies from partner companies may also be stored on your hard disk when you visit our website (third-party cookies). If we work with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the extent of the information collected in each case in the following sections.

Please note that you can set your browser to notify you about the setting of cookies and decide individually whether you want to accept them or exclude acceptance of cookies in certain cases or generally. Each browser has its own way of handling cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for the respective browsers under the following links:

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) CONTACT US

Personal data is collected when you contact us (e.g., via the contact form or email). The data collected in the case of a contact form can be seen on the respective contact form. This data is stored and used solely to respond to your inquiry or to contact you and manage the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your contact is intended to conclude a contract, this constitutes an additional legal basis under Art. 6(1)(b) GDPR. Your data will be deleted after the final processing of your inquiry; this is the case if it can be deduced from the circumstances that the particular issue has been conclusively resolved, and provided there are no legal retention obligations that contradict this.

5) DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PROCESSING

In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide us with them to fulfill a contract or when opening a customer account. The data collected can be seen in the respective input forms. Your customer account may be deleted at any time by sending a message to the above address of the data controller. We store and use the data you have provided to us to fulfill the contract. After the conclusion of the contract or deletion of your customer account, your data will be blocked concerning tax and commercial law retention periods and will be deleted when these periods have expired, unless you have explicitly given your consent for further use of your data or further use of data is legally permitted by us, in which case we will inform you accordingly below.

6) USE OF YOUR DATA FOR DIRECT MARKETING

6.1 Subscribe to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. All other information is voluntary and is used to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we only send you an email newsletter if you have explicitly confirmed to us that you agree to receive the newsletter. We then send you a confirmation email in which you are asked to confirm that you wish to receive future newsletters by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. When you subscribe to the newsletter, we store your IP address (entered by your Internet Service Provider) as well as the date and time of registration in order to be able to track any potential misuse of your email address at a later time. The data we collect when you sign up for the newsletter is used solely for advertising via the newsletter. You can unsubscribe from the newsletter at any time via the link in the newsletter or by sending a corresponding message to the aforementioned data controller. Once you have canceled your subscription, your email address is immediately deleted from our newsletter, unless you have explicitly given your consent for further use of your data or we reserve the right to use the data beyond this, which is permitted by law, and which we will inform you about in this declaration.

6.2 Sending the Email Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, as those you have already purchased from our range, via email. For this, we do not need to obtain your separate consent. In this regard, the data processing is carried out solely on the basis of our legitimate interest in direct personal advertising in accordance with Art. 6(1)(f) GDPR. If you have previously objected to the use of your email address for this purpose, we will not send you any emails. You have the right at any time to object to the use of your email address for the above advertising purposes with effect for the future by sending a message to the aforementioned data controller. You will only incur transmission costs in accordance with the basic rates. Upon receipt of your objection, the use of your email address for advertising purposes will cease immediately.

7) DATA PROCESSING FOR ORDER HANDLING

7.1 The personal data collected by us is disclosed to the transport company contracted for delivery, as part of contract processing, insofar as it is necessary for the delivery of the goods. We also disclose your payment data to the ordered credit institution as part of the payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will provide explicit information about this below. The legal basis for the data transfer is Art. 6(1)(b) GDPR.

7.2 Use of Payment Service Providers

  • PayPal

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal, we disclose your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereafter "PayPal") as part of the payment processing. The transfer is carried out in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to perform a credit check for payment methods (credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal). For this purpose, your payment data may be disclosed to credit bureaus in accordance with Art. 6(1)(f) GDPR on the basis of PayPal’s legitimate interest in determining your creditworthiness. PayPal uses the results of the credit check regarding the statistical probability of non-payment to decide whether the respective payment method should be made available. The credit report may contain probability values (so-called score values). If score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values is not limited to, but includes, address data. Further information about data protection, including details about the credit bureaus used, can be found in PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You may at any time object to this processing of your data by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for processing payments in accordance with the contract.

  • SOFORT

If you choose the payment method "SOFORT", the payment will be processed via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we disclose the information you have provided during the order process, along with the details of your order in accordance with Art. 6(1)(b) GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will only be disclosed for payment processing with SOFORT and only to the extent necessary for this purpose. You can find more information about SOFORT’s data protection provisions at: https://www.klarna.com/sofort/datenschutz

8) CONTACT FOR EVALUATION REMINDER

Self-reminder for evaluation (not sent by a customer evaluation system)

We use your email address as a one-time reminder to submit an evaluation of your order to the evaluation system we use, provided that you have given us your explicit consent to do so during or after your order in accordance with Art. 6(1)(a) GDPR.

You may withdraw your consent at any time by sending a message to the data controller.

9) USE OF SOCIAL MEDIA: SOCIAL PLUGINS

9.1 Facebook Plugins with Shariff Solution

Additional customs clearance costs and/or import duties are not included in the price and must be paid by the customer.

Our website uses so-called social plugins ("plugins") from the social network Facebook, operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook").

To increase the protection of your data when you visit our website, these buttons are not fully integrated into the page as plugins, but only via an HTML link. This type of integration ensures that no connection is made to Facebook’s servers when a page on our website that contains such buttons is opened. When you click the button, a new browser window opens where the Facebook page is loaded and where you can interact with the plugins (if necessary after entering your login data).

Facebook Inc., based in the USA, is certified under the US-EU Privacy Shield, which guarantees compliance with the data protection level applicable in the EU.

The purpose and scope of the data collection and Facebook’s further processing and use of the data, as well as your rights in this regard and options for protecting your privacy, can be found in Facebook’s data protection information: https://www.facebook.com/policy.php

9.2 Google+ Plugins as a Shariff Solution

Our website uses so-called social plugins ("plugins") from the social network Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

To increase the protection of your data when you visit our website, these buttons are not fully integrated into the page as plugins, but only via an HTML link. This type of integration ensures that no connection is made to Google+ servers when a page on our website that contains such buttons is opened. When you click the button, a new browser window opens where the Google+ page is loaded, and you can interact with the plugins there (if necessary after entering your login data).

Google LLC, based in the USA, is responsible for the US-EU data protection convention "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.

The purpose and scope of data collection and Google’s further processing and use of the data, as well as your rights in this regard and options for protecting your privacy, can be found in Google’s data protection information: https://www.google.com/intl/de/policies/privacy/

9.3 Instagram Plugin as a Shariff Solution

Our website uses so-called social plugins ("plugins") from the online service Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram").

To increase the protection of your data when you visit our website, these buttons are not fully integrated into the page as plugins, but only via an HTML link. This type of integration ensures that no connection is made to Instagram’s servers when a page on our website that contains such buttons is opened. When you click the button, a new browser window opens where the Instagram page is loaded, and you can interact with the plugins there (if necessary after entering your login data).

Instagram LLC, based in the USA, is certified under the US-EU Privacy Shield, which guarantees compliance with the data protection level applicable in the EU.

The purpose and scope of data collection and Instagram’s further processing and use of the data, as well as your rights in this regard and options for protecting your privacy, can be found in Instagram’s data protection information: https://help.instagram.com/155833707900388/

10) ONLINE MARKETING

10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick").

DoubleClick uses cookies to display ads relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ad more than once. Google uses a cookie ID to record which ads are shown in which browser and thereby prevent them from being shown more than once. The processing is based on our legitimate interest in optimal marketing of our website in accordance with Art. 6(1)(f) GDPR.

Additionally, DoubleClick may use cookie IDs to record so-called conversions related to ad requests. For example, when a user sees a DoubleClick ad and later visits the advertiser’s website with the same browser and makes a purchase there. According to Google, DoubleClick cookies do not contain personal information.

Due to the use of these marketing tools, your browser automatically establishes a direct connection with Google’s servers. We have no influence over the scope and further use of the data collected by Google through this tool, and therefore we inform you based on our current knowledge: Through the integration of DoubleClick, Google receives information that you have opened the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google may associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may determine and store your IP address.

If you wish to object to participating in this tracking process, you can disable cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com, https://www.google.de/settings/ads, whereby this setting is deleted when you delete your cookies. Alternatively, you can obtain information about cookie settings from the Digital Advertising Alliance at www.aboutads.info and make the relevant settings. Finally, you can set your browser so that you are informed about cookie settings and decide individually whether you want to accept them or exclude cookie acceptance in certain cases or generally. If you do not accept cookies, the functionality of our website may be limited.

Google LLC, based in the USA, is responsible for the US-EU data protection convention "Privacy Shield," which guarantees compliance with the data protection level applicable in the EU.

You can obtain further information about the data protection provisions for DoubleClick by Google at: https://www.google.de/policies/privacy/

10.2 Use of Google AdWords Conversion Tracking

This website uses the online advertising program "Google AdWords" and, as part of Google AdWords, conversion tracking from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use Google AdWords to draw attention to our attractive offers on external websites using advertising material (so-called Google AdWords). We can determine how successful individual advertising measures are based on campaign data. Our goal is to show you ads that are interesting to you, to make our website more appealing, and to achieve a fair calculation of advertising costs.

The cookie for conversion tracking is set when a user clicks on an AdWords ad placed by Google. Cookies are small text files stored on your computer. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked the ad and was redirected to that page. Each Google AdWords customer receives a different cookie. Therefore, cookies cannot be tracked via AdWords customers' websites. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are informed about the total number of users who have clicked your ad and have been redirected to a page with a conversion tracking tag. However, they receive no information that can be used to personally identify the users. If you do not wish to participate in tracking, you can block this use by disabling Google’s conversion tracking cookie via your browser settings. You will then not be included in the conversion tracking statistics. We use Google AdWords based on our legitimate interest in targeted advertising in accordance with Art. 6(1)(f) GDPR.

Google LLC, based in the USA, is responsible for the US-EU data protection convention "Privacy Shield," which guarantees compliance with the data protection level applicable in the EU.

You can find more information about Google's privacy policy at: https://www.google.de/policies/privacy/

You can permanently disable the setting of cookies for ad preferences by downloading and installing the browser plug-in available at: https://www.google.com/settings/ads/plugin?hl=de

Please note that if you do not accept cookies, the functionality of our website may be limited.

10.3 Use of Google AdWords Remarketing

Our website uses the functions in Google AdWords Remarketing, which we use to advertise for this website in Google's search results and on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For this purpose, Google sets a cookie in your browser, which automatically enables interest-based advertising using a pseudonymous cookie ID based on the pages you visit. The processing is based on our legitimate interest in optimal marketing of our website in accordance with Art. 6(1)(f) GDPR.

Any further data processing will only take place if you have given your consent for Google to link your internet and app browsing history to your Google account and the information from your Google account to customize the ads you see on the web. In this case, if you are logged into Google while visiting our website, Google will use your data together with Google Analytics data to create and define audience lists for remarketing across devices. For this purpose, Google will temporarily associate your personal data with Google Analytics data to create target groups.

You can permanently disable the setting of cookies for ad preferences by downloading and installing the browser plug-in available at: https://www.google.com/settings/ads/onweb/

Alternatively, you may visit the Digital Advertising Alliance at www.aboutads.info to learn more about the use of cookies and make the relevant settings. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually whether you want to accept them or exclude cookie acceptance in certain cases or generally. If you do not accept cookies, the functionality of our website may be limited.

Google LLC, based in the USA, is responsible for the US-EU data protection convention "Privacy Shield," which guarantees compliance with the data protection level applicable in the EU.

Further information and data protection provisions regarding advertising and Google can be found here: https://www.google.com/policies/technologies/ads/

11) WEB ANALYTICS SERVICES

Google (Universal) Analytics – Google Universal Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses cookies, which are text files stored on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including the truncated IP address) is normally transferred to a Google server in the USA and stored there.

This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures the anonymization of your IP address by truncating it and excluding direct personal reference. This extension means that your IP address will be truncated by Google within the EU member states or other states that have signed the agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. In these exceptional cases, this processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in statistical analysis of user behavior for optimization and marketing purposes.

Google will use this information to analyze your use of the website, to compile reports on website activity, and to provide us with other services in connection with website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can refuse the use of cookies by choosing the relevant settings in your browser, but please note that if you do so, you may not be able to use all the functions on this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing these data by downloading and installing the browser plug-in available at: https://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, for browsers on mobile devices, click the following link to set an opt-out cookie that prevents Google Analytics from collecting data on this website in the future (this opt-out cookie works only in this browser and only for this domain; if you delete your cookies in this browser, you must click this link again): Disable Google Analytics

Google LLC, based in the USA, is responsible for the US-EU data protection convention "Privacy Shield," which guarantees compliance with the data protection level applicable in the EU.

This website also uses Google Analytics for analyzing traffic flows across devices via a user-ID. When a page is opened for the first time, the user is assigned a unique, permanent, and anonymized ID that is set across all devices. This makes it possible to assign interaction data from different devices and sessions to a single user. The user-ID contains no personal data and does not transfer such data to Google.

You may at any time object to the collection and storage of data via the user-ID with future effect. To do this, you must disable Google Analytics on all systems you use (e.g., in another browser or on your mobile device). You can disable this using a browser plug-in from Google (https://tools.google.com/dlpage/gaoptout?hl=de). Alternatively, for browsers on mobile devices, click the following link to set an opt-out cookie that prevents Google Analytics from collecting data on this website in the future (this opt-out cookie works only in this browser and only for this domain; if you delete your cookies in this browser, you must click this link again): Disable Google Analytics

You can find more information about Universal Analytics here: https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376

12) RETARGETING/ REMARKETING/ REFERRAL ADVERTISING – Facebook Custom Audience via Pixel Method

This website uses the "Facebook Pixel" from Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). If you have given explicit consent, this allows us to track your behavior after you have seen or clicked on a Facebook ad. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimize future advertising efforts.

The data collected is anonymous for us, so it does not allow us to draw any conclusions about your identity. However, the data is stored and processed by Facebook, so a connection to your respective user profile is possible, and Facebook can use the data for its own advertising purposes in accordance with Facebook's data usage policy (https://www.facebook.com/about/privacy/). You may enable Facebook and its partner companies to place ads on and off Facebook. A cookie may also be stored on your computer for these purposes. These processing operations are carried out only with your explicit consent in accordance with Art. 6(1)(a) GDPR.

Consent for the use of the Facebook Pixel can only be given by users aged 13 or older. If you are younger, please ask your guardian for permission.

Facebook Inc., based in the USA, is certified under the US-EU Privacy Shield, which guarantees compliance with the data protection level applicable in the EU.

13) THE DATA SUBJECT’S RIGHTS

13.1 The applicable data protection law gives you extensive rights regarding the data controller’s processing of your personal data.

The rights of the data subject (information and intervention rights) are outlined below:

  • Right of Access (Art. 15 GDPR): You have the right to obtain information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned retention period or the criteria for determining the retention period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, the right to lodge a complaint with a supervisory authority, the origin of your data if not collected from you, the existence of automated decision-making including profiling and, where relevant, meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for you, and your right to be informed about the safeguards under Art. 46 GDPR if your data are transferred to third countries.
  • Right to Rectification (Art. 16 GDPR): You have the right to have inaccurate personal data corrected and incomplete data completed without undue delay.
  • Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data if the conditions of Art. 17(1) GDPR are met. However, this right does not apply if the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
  • Right to Restriction of Processing (Art. 18 GDPR): You have the right to request restriction of the processing of your personal data, provided that the accuracy of your data, which you contest, is verified, if you object to the deletion of your data due to unauthorized processing and instead request a restriction of the processing of your data, or if you require your data to assert, exercise, or defend legal claims after we no longer need these data for the original purpose, or if you have objected based on your particular situation, provided it is not yet clear whether our legitimate grounds prevail.
  • Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request that the data be transferred to another data controller, insofar as it is technically feasible.
  • Right to Withdraw Consent (Art. 7(3) GDPR): You have the right to withdraw your consent for data processing at any time with effect for the future. Upon withdrawal, we will immediately delete the data unless further processing is based on another legal basis. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
  • Right to Lodge a Complaint (Art. 77 GDPR): If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State where you have your habitual residence, workplace, or where the alleged violation occurred, without prejudice to other administrative or judicial remedies.

13.2 RIGHT TO OBJECT

If we process your personal data based on our balanced legitimate interest, you have the right at any time to object to such processing with future effect for reasons relating to your specific situation.

If you exercise your right to object, we will cease processing the relevant data. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights, and freedoms, or if the processing is necessary to establish, exercise, or defend legal claims.

If your personal data are processed by us for direct marketing purposes, you have the right at any time to object to the processing of your personal data for such purposes. You may exercise your right of objection as described above. If you exercise your right to object, we will immediately cease processing your personal data for direct marketing purposes.

14) DURATION OF STORAGE OF PERSONAL DATA

The duration of storage of personal data is determined by the applicable statutory retention period (e.g., retention periods under commercial and tax law). After the period expires, the respective data are routinely deleted, provided they are no longer necessary for contract fulfillment or initiation, and/or we do not have any legitimate interest in further retention. Otherwise, your data will be deleted once these periods have expired, unless you have explicitly given consent for further use of your data, or further use is legally permitted by us, in which case we will inform you accordingly.