Privacy Policy

Privacy Policy

Responsible for data processing is the operator of this website.

We are delighted about your interest in our website. Protecting your privacy is very important to us. Below we inform you in detail about how we handle your data.

1. Access Data and Hosting

You can visit our websites without providing any personal information. With each page view, the web server automatically stores a server log file containing, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred, and the requesting provider (access data), documenting the request. This access data is analyzed solely to ensure the site operates without disruption and to improve our offering. This serves to protect our legitimate interests in a correct presentation of our offering, which are overriding in the context of a balancing of interests. All access data is deleted no later than seven days after the end of your page visit. All access data is only processed as long as necessary to achieve the above processing purposes.

Hosting

Hosting and website presentation services are provided by our service providers as part of processing on our behalf. Unless otherwise stated in this privacy policy, all access data and data collected in designated forms on this website are processed on their servers. For questions about our service providers and the basis of our cooperation with them, please use the contact option described in this policy.

Our service providers are located and/or use servers in countries for which the European Commission has issued an adequacy decision regarding an appropriate level of data protection. For these countries, such a decision exists as a basis for third-country data transfers. Our cooperation with other service providers is based on standard contractual clauses of the European Commission.

2. Data Processing for Contract Fulfillment and Contact

2.1 Data Processing for Contract Fulfillment

For contract fulfillment purposes, we collect personal data when you voluntarily provide it to us during your order. Mandatory fields are marked as such because we need this data to process the contract. What data is collected can be seen from the respective input forms.

Further information on the processing of your data, particularly regarding disclosure to our service providers for order, payment, and shipping processing, can be found in the following sections. After full contract execution, your data will be restricted for further processing and deleted after the expiration of statutory retention periods, unless you have expressly consented to further use or we reserve the right to use data beyond this, which is legally permitted.

Warehouse Management System

We use warehouse management systems from external service providers for order and contract processing. Our service providers act on our behalf. For questions, please use the contact option described in this policy.

2.2 Customer Account

If you give your consent by choosing to open a customer account, we use your data for customer account opening and storing your data for future orders on our website. Your customer account can be deleted at any time via a message to the contact option described in this policy or a designated function in the customer account. After deletion, your data will be removed unless you have expressly consented to further use or we reserve the right to use data beyond this.

Contacting Us

For customer communication, we collect personal data to process your inquiries when you voluntarily provide it to us. Mandatory fields are marked as such. After full processing of your request, your data will be deleted unless you have consented to further use or we reserve the right to use data beyond this.

3. Data Processing for Shipping Purposes

To fulfill the contract, we pass on your data to the shipping service provider commissioned with delivery, as far as necessary for delivering ordered goods. For questions about our service providers and the basis of our cooperation, please use the contact option described in this policy.

3.1 Address Verification

On our website, you can have certain inputs in address forms checked for errors in real time. This helps avoid delivery problems due to incorrect information. We also want to ensure your contact details for order information or possible queries are valid. We use a service provider for these functions. The service provider processes data exclusively on instruction. The legal basis for the transfer, processing, and temporary storage of data is that checking the accuracy of some of the data you enter is mandatory for contract fulfillment or pre-contractual measures. The data processed includes address and email address. Data is deleted as soon as the status of the entered data is determined and storage in the webshop is completed.

4. Data Processing for Payment Processing

When processing payments in our online shop, we work with technical service providers, credit institutions, and payment service providers.

4.1 Data Processing for Transaction Processing

Depending on the selected payment method, we pass on data necessary for processing the payment transaction to our technical service providers, commissioned credit institutions, or the selected payment service provider, as far as required. This serves contract fulfillment. In some cases, payment service providers collect the necessary data themselves. The respective payment service provider’s privacy policy applies.

Depending on the payment method, data may be transferred to third countries. Where no adequacy decision exists, cooperation is based on standard contractual clauses. If you have questions, please use the contact option mentioned in this policy.

4.2 Data Processing for Fraud Prevention and Payment Process Optimization

We may give service providers additional data, which they use together with data necessary for payment processing, for fraud prevention and optimizing our payment processes. This serves to protect our legitimate interests in safeguarding against fraud and efficient payment management.

4.3 Identity and Credit Checks

If you choose certain payment services, we ask for your consent to transmit data necessary for payment processing and identity/credit checks to the payment service provider. They may use credit reporting agencies. The provider uses the information about the statistical probability of payment default for a balanced decision on establishing or executing the contract. You can revoke your consent at any time, which may mean we cannot offer certain payment options.

5. Advertising by Email

If you sign up for our newsletter, we use the required data to regularly send our email newsletter based on your consent. Unsubscribing is possible at any time. After unsubscribing, we delete your email address from the recipient list, unless you have expressly consented to further use.

We analyze your user behavior when sending the newsletter, including opening and click rates for designing future campaigns (“newsletter tracking”). Sent emails contain single-pixel technologies. For analysis, we link newsletter data with your email address or IP address. If you do not wish newsletter tracking, you can unsubscribe at any time. Information is stored as long as you are subscribed.

Newsletter dispatch and tracking may be carried out by our service providers on our behalf. For questions, please use the contact option described in this policy. Our service providers are located and/or use servers in countries with an adequacy decision or, where none exists, based on standard contractual clauses.

5.2.1 Email Direct Advertising for Existing Customers

If you have placed an order, we process your email address to recommend products that match your purchased products. The legal basis is our legitimate interest in direct advertising to existing customers. You can object to email direct advertising at any time.

5.3 Sending Rating Requests by Email

If you give your express consent, we use your email address to request a rating of your order. This consent can be revoked at any time. After revocation, we delete your email address from the recipient list. Rating requests may be sent by our service provider, who also provides information about the respective status. For data protection questions regarding joint responsibility, you may contact the service provider or us.

6. Cookies and Other Technologies

6.1 General Information

We use technologies including cookies to make our website attractive and enable certain functions. Some cookies are deleted after the browser session ends (session cookies), others remain (persistent cookies). For necessary functions, storage or access does not require consent. For non-essential functions, your consent is required. Without consent, parts of the website may not be fully usable.

We use technologies necessary for certain functions based on legitimate interests. We also use technologies for legal obligations, web analysis, and online marketing. Cookie settings can be found in your browser. If you have consented to technologies, you can revoke consent at any time. Not accepting cookies may limit website functionality.

We use a consent management platform to inform you about cookies and technologies, and to obtain, manage, and document your legally required consent. This is necessary to fulfill our legal obligation to prove consent. The platform provider processes your data on our behalf, storing a server log file with anonymized IP address, date and time of visit, device and browser information, and your consent behavior. Your data is deleted after a set period unless you have consented to further use.

7. Use of Cookies and Other Technologies

We use the following cookies and other technologies from third parties based on your consent, unless otherwise stated. After the purpose ceases and we end use of the technology, data collected is deleted. You can revoke your consent at any time. For more information, see the section “Cookies and other technologies.”

7.1 Use of Google Services

We use technologies from Google. Information about your use of our website collected by Google technologies is generally transferred to a server in the USA and stored there. Data processing is based on an agreement for joint controllership. Further information can be found in Google’s privacy notices. Our service providers are located and/or use servers in countries with an adequacy decision or, where none exists, based on standard contractual clauses.

Google Analytics

For website analysis, Google Analytics automatically collects and stores data, from which usage profiles are created using pseudonyms. Cookies may be used. Your IP address is stored on a server within the EU for location data derivation and then immediately deleted. Data processing is based on a data processing agreement. We use the User-ID function to assign a unique, permanent ID to your interaction data, allowing cross-device and cross-session analysis.

8. Integration of Trustbadge/Other Widgets

If you have given consent, Trusted Shops widgets are integrated to display services and offer products after an order. The provider offers these services jointly with us. For data protection questions regarding joint responsibility, please contact the provider preferably. The widget is provided by a CDN provider. An adequate level of data protection is ensured. When the widget is called up, a server log file is stored. The IP address is anonymized immediately. After order completion, if consented, the widget accesses order information and email address stored on your device. The email address is hashed. This checks if you are already registered. If not, you can manually register.

Our online presence on various social media platforms

If you have given consent to the respective social media operator, your data is automatically collected and stored for market research and advertising purposes when visiting our online presences, creating usage profiles using pseudonyms. Cookies are usually used. Information collected is generally transferred to a server in the USA and stored there. Data processing for fan page visits is based on an agreement for joint controllership.

10. Contact Options and Your Rights

10.1 Your Rights

As a data subject, you have the right to request information, rectification, erasure, restriction of processing, data portability, and to lodge a complaint with a supervisory authority.

Right to Object

If we process personal data to protect our legitimate interests, you can object to this processing for the future. If processing is for direct marketing, you can exercise this right at any time. For other purposes, you have the right to object only on grounds relating to your particular situation. After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds or the processing serves legal claims. This does not apply to direct marketing.

10.2 Contact Options

For questions regarding the collection, processing, or use of your personal data, or for requests, rectification, restriction, deletion, revocation of consent, or objection, please contact our data protection officer.