Privacy Policy

Privacy Policy

Unless otherwise stated below, providing your personal data is neither legally nor contractually required nor necessary for concluding a contract. You are not obliged to provide the data. Failure to provide data has no consequences. This only applies as long as no other indication is made in the following processing operations.
"Personal data" means all information relating to an identified or identifiable natural person.

Server log files

You can visit our websites without providing any personal information.

Each time our website is accessed, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log files (so-called server log files). These stored data include, for example, the name of the accessed page, date and time of access, IP address, amount of data transferred, and the requesting provider.
The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our offer.

Use of the address validation from Google Maps API
We use the address validation of the provider Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland "Google") on our website.
The data processing serves the purpose of checking your entries in our address forms in real time for input and typing errors, as well as supplementing missing data if necessary. If data is entered incorrectly, alternative suggestions for correcting the data are displayed. For this purpose, the address data you enter is transmitted to the provider, stored there, and evaluated.
Among other things, the following information may be transmitted to and processed by Google: postal addresses (country, city, postal code, street, house number), email address, phone number.
Your data may also be transferred to the USA if necessary. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to comply with European data protection principles.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in a correct data basis to fulfill our contractual obligations. You have the right to object at any time to the processing of personal data concerning you for reasons arising from your particular situation.
The data is processed separately by the provider and is not merged with other data. It is deleted by the provider as soon as the status of the entered data has been determined, but no later than after 30 days.
More information about terms of use and data protection at Google can be found at: https://cloud.google.com/maps-platform/terms or at https://www.google.de/policies/privacy/.

Collection and processing of applications by email

Website visitors can apply by email for open vacancies advertised on our website if interested. In doing so, we collect your personal data only to the extent you provide it. This includes your contact details (e.g., name, email address, phone number), information about your professional qualifications and education, details of professional further training, and performance-specific certificates.

The data processing serves the purpose of contacting you and deciding on establishing an employment relationship with you. Providing the data is necessary to carry out the application process. The processing of your personal data is based on Art. 6 para. 1 lit. b GDPR in conjunction with § 26 para. 1 BDSG for carrying out pre-contractual measures (going through the application process as a job contract initiation).

If you have given us consent to process personal data for inclusion in our applicant pool, e.g., by checking a checkbox, the processing is based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation.

If special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from applicants during the application process, such as information about the degree of disability, this is done on the basis of Art. 9 para. 2 lit. b GDPR so that we can exercise the rights arising from labor law and social security and social protection law and fulfill our related obligations.

We store your personal data as long as it is necessary for the decision regarding your application. Your data will then be deleted no later than six months afterward, unless you have consented to further processing and use. If an employment relationship arises following the application process, the provided data will be further processed based on Art. 6 para. 1 lit. b GDPR in conjunction with § 26 para. 1 BDSG for the purpose of carrying out the employment relationship and then transferred to the personnel file.

WhatsApp Business
If you contact us for business purposes via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The data processing serves to handle and respond to your contact request. For this purpose, we collect and process your mobile phone number stored with WhatsApp, your name if provided, and other data to the extent you have made available. We use a mobile device for the service, whose address book contains only data from users who have contacted us via WhatsApp. No personal data is passed on to WhatsApp without your prior consent to WhatsApp.
Your data is transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has certified under the TADPF and thus committed to comply with European data protection principles. If the contact serves the execution of pre-contractual measures (e.g., advice on purchase interest, offer preparation) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in providing quick and easy contact as well as responding to your inquiry. In this case, you have the right to object at any time to this processing of your personal data based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.
We use your personal data only to process your inquiry. Your data will then be deleted in compliance with legal retention periods, unless you have consented to further processing and use.
More information about the terms of use and data protection when using WhatsApp can be found at https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.

Customer account Orders

Customer account
When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out based on the consent until the revocation. Your customer account will then be deleted.

Collection, processing, and sharing of personal data when ordering

When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Providing the data is necessary for concluding the contract. Failure to provide the data means that no contract can be concluded. The processing is based on Art. 6 para. 1 lit. b GDPR and is necessary for the performance of a contract with you.

Your data may be shared, for example, with shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly observe legal requirements. The scope of data transmission is limited to a minimum.

Your data may be transferred to third countries outside the EU, especially to Canada and the USA, and processed there. There is an adequacy decision by the EU Commission for Canada. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.

Reviews Advertising

Data collection when writing a comment or a review
When commenting/reviewing an article or a post, we collect your personal data (name, email address, comment text) only to the extent you provide it. The processing serves the purpose of enabling commenting/reviewing and displaying comments/reviews.

By submitting the comment/review, you consent to the processing of the data you have provided. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out based on the consent until the revocation. Your personal data will then be deleted.

When you publish your comment/review, the name you provide and the email address you share will be published.

In addition, when submitting a comment/review, your IP address is stored to prevent abuse of the comment or review function and to ensure the security of our IT systems. By submitting the comment/review, you consent to the processing of the transmitted data. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the lawfulness of the processing carried out based on the consent until the revocation. Your IP address will then be deleted.

Use of your personal data for sending postal advertising
We use your personal data (name, address), which we have received in connection with the sale of goods or services, to send you postal advertising, provided you have not objected to this use. Providing this data is necessary for concluding the contract. Failure to provide it means that no contract can be concluded.
The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your address data at any time by notifying us. The contact details for exercising the objection can be found in the imprint.

Use of the email address for sending Newsletters
We use your email address to send information and offers via Newsletter, provided you have explicitly agreed to this. The data processing serves exclusively the purpose of advertising communication. For this purpose, we process your email address as well as any other data you have voluntarily provided during registration for our Newsletter.
The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation.
You can unsubscribe from the Newsletter at any time using the corresponding Link in the Newsletter or by notifying us. Your email address will then be removed from the distribution list. Despite removal from the distribution list, we may continue to store your email address on a so-called blacklist to prevent you from receiving Newsletter emails from us in the future. This storage is based on Art. 6 para. 1 lit. f GDPR due to our and your legitimate interest in preventing the reuse of your email address for sending our Newsletter. You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.

Use of the email address for sending direct advertising
We use your email address, which we received in connection with the sale of goods or services, to electronically send advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. Providing the email address is necessary for concluding the contract. Failure to provide it means that no contract can be concluded. The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. The contact details for exercising the objection can be found in the imprint. You can also use the designated link in the advertising email. No costs other than the transmission costs according to the basic tariffs will be incurred.

Use of Klaviyo
We use the service of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”) for sending the newsletter within the scope of order processing.
We pass on the information you provide during newsletter registration (email address, possibly first and last name) to Klaviyo. The data processing serves the purpose of sending the newsletter and its statistical evaluation.
To evaluate newsletter campaigns, the sent newsletters contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links. In this context, we collect your personal data such as IP address, browser type and device, as well as the time. Usage profiles can be created from this data under a pseudonym. The collected data is not used to personally identify you. The collected data is only used for statistical evaluation to improve newsletter campaigns.
Your data is usually transmitted to servers of Klaviyo in the USA and stored there. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo has certified itself under the TADPF and thus committed to comply with European data protection principles.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in a targeted, effective, and user-friendly Newsletter system. You have the right to object at any time to this processing of personal data concerning you for reasons arising from your particular situation.
Further information on data protection at Klaviyo can be found at https://www.klaviyo.com/legal/privacy-notice as well as at https://www.klaviyo.com/legal/data-processing-agreement.

Use of the email address for availability notifications
We offer the service of product availability notification on our website. If an item is temporarily unavailable, you have the option to enter your email address on the respective product and be informed by us via email when it becomes available, provided you have agreed to this. You will receive a one-time notification by email about the availability of the respective item. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out based on the consent until the revocation. You can unsubscribe from the availability notification at any time by notifying us. Your email address will then be removed from the distribution list.

Shipping service provider

Passing on the email address to the shipping company to inform about the shipping status
We pass on your email address to the shipping company as part of contract processing, provided you have explicitly agreed to this during the ordering process. The transfer serves the purpose of informing you by email about the shipping status. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the shipping company without affecting the legality of the processing carried out based on the consent until the revocation.

Payment service provider

Use of PayPal
We use the payment service PayPal from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you payment via the payment service. By selecting and using payment via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR.

All PayPal transactions are subject to the PayPal Privacy Policy. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Plus

We use the PayPal Plus payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, or direct debit via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR.

For certain payment methods such as credit card via PayPal or direct debit via PayPal, PayPal reserves the right to obtain a credit check based on mathematical-statistical methods using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information obtained about the statistical probability of a payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, which incorporate address data among other factors. Your legitimate interests are taken into account in accordance with legal provisions. The data processing serves the purpose of credit checking for contract initiation. The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when PayPal advances payment.

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data concerning you based on Art. 6 para. 1 lit. f GDPR by notifying PayPal. Providing the data is necessary for concluding the contract with the payment method you desire. Failure to provide the data means that the contract cannot be concluded with the payment method you have chosen.

Use of Klarna payment options

We use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna") on our website. By selecting and using payment via Klarna, the data required for payment processing is transmitted to Klarna in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR.

Cookies may be stored that enable the recognition of your browser. The data processing that takes place is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in offering a customer-oriented selection of various payment methods.You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data.

"Pay Later" (invoice), "Pay Now" (payment by direct debit, credit card, instant transfer), "Financing" (installment purchase)

For certain payment methods such as „For "Pay Later" (invoice), "Pay Now" (payment by direct debit, credit card, instant transfer), and "Financing" (installment purchase), Klarna reserves the right to obtain a credit report based on mathematical-statistical methods using credit agencies if necessary.

For this purpose, Klarna transmits the personal data required for a credit check, such as first and last name, address, gender, email address, IP address, as well as data related to the order, to a credit agency for the purpose of identity and creditworthiness verification and uses the received information about the statistical probability of payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, which incorporate address data among other factors. Your legitimate interests are taken into account in accordance with legal requirements. The data processing serves the purpose of creditworthiness assessment for contract initiation. The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when Klarna advances payment. You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR by notifying Klarna. Providing the data is necessary for concluding the contract with the payment method you have chosen. Failure to provide the data will result in the contract not being concluded with the payment method you selected.

Further information, especially about which credit agencies Klarna shares your personal data with, can be found at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.

General information about Klarna can be found at: https://www.klarna.com/de/Your personal data will be handled by Klarna in accordance with applicable data protection regulations and as described in Klarna's privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy processed.

Cookies

Our website uses Cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user visits a website, a Cookie can be stored on the user's operating system. This Cookie contains a characteristic string that enables unique identification of the browser when the website is accessed again.

Cookies are stored on your computer. Therefore, you have full control over the use of Cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before Cookies are set and decide individually whether to accept them, as well as prevent the storage of Cookies and the transmission of the contained data. Already stored Cookies can be deleted at any time. However, we point out that you may then not be able to use all functions of this website fully.

At the following links, you can find information on how to manage (including disable) Cookies in the most important browsers:

Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary Cookies

Unless otherwise stated in the privacy policy below, we only use these technically necessary Cookies for the purpose of making our offer more user-friendly, effective, and secure. Furthermore, Cookies allow our systems to recognize your browser even after switching pages and to offer you services. Some functions of our website cannot be offered without the use of Cookies. For these, it is necessary that the browser is recognized again after switching pages.

The use of Cookies or similar technologies is based on § 25 para. 2 TDDDG. The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer.

You have the right to object at any time to the processing of your personal data concerning you for reasons arising from your particular situation.

Use of the Shopify consent tool (Shopify Privacy & Compliance)
We use the consent tool “Shopify Privacy & Compliance” from Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Shopify is an affiliated company of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool allows you to give consent to data processing on the website, especially the setting of Cookies, and to exercise your right of withdrawal for consents already given. The data processing serves the purpose of obtaining and documenting necessary consents for data processing and thus complying with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify.
Your data may be transferred to third countries outside the EU, especially to Canada and the USA, and processed there. There is an adequacy decision by the EU Commission for Canada. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
The data processing is carried out to fulfill a legal obligation based on Art. 6 para. 1 lit. c GDPR.
More information about data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz.

Analysis Advertising tracking Communication Affiliate

Use of Google Analytics 4
We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities, and to provide other services related to website and internet usage to the website operator.
The following information may be collected, among others: IP address, date and time of the page visit, click path, information about the browser and device you use, visited pages, referrer URL (website from which you accessed our website), location data, purchase activities.Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.

The IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand.

Google uses technologies such as cookies, browser web storage, and tracking pixels that enable analysis of your use of the website. The use of cookies or similar technologies is based on your consent according to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR.

The processing of your personal data is carried out with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation.

The information generated about your use of this website is usually transferred to and stored on a Google server in the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to comply with European data protection principles. Both Google and US government authorities have access to your data.

More information about terms of use and privacy can be found at https://policies.google.com/technologies/partner-sites and at https://policies.google.com/privacy?hl=de&gl=de.

Use of Shopify statistics
We use the statistics and analysis functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") as part of order processing. Shopify is an affiliated company of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The data processing serves the purpose of analyzing this website and its visitors. For this, data is stored for marketing and optimization purposes and provided in reports, analyses, and statistics. Among other things, the following device information is collected and processed: information about the web browser, IP address, time zone, and some of the cookies installed on your device. When you navigate the website, information about visited web pages or products, the referrer URL (the website through which you accessed our website), and information about how you interact with the website are also collected. Technologies such as cookies as well as web beacons, tags, and pixels (electronic files to capture information about how you navigate the website) are used for this purpose.
Your data may be transferred to third countries outside the EU, especially to Canada and the USA, and processed there. There is an adequacy decision by the EU Commission for Canada. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
The use of Cookies or similar technologies is based on your consent according to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation.
You can find more information about data protection at Shopify at https://www.shopify.com/de/legal/datenschutz, information about the data processing agreement at https://www.shopify.com/de/legal/dpa, as well as information about the cookies used at https://www.shopify.com/de/legal/cookies.

Use of the Meta Pixel

We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.

Meta and we are joint controllers for the collection of your data and the transmission of this data to Meta when the service is integrated. The basis for this is an agreement between us and Meta on the joint processing of personal data, which defines the respective responsibilities. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools accessible. We are particularly responsible for fulfilling the information obligations according to Articles 13 and 14 GDPR, for complying with the security requirements of Article 32 GDPR regarding the correct technical implementation and configuration of the service, as well as for complying with the obligations under Articles 33 and 34 GDPR, insofar as a breach of the protection of personal data concerns our obligations under the joint processing agreement. Meta is responsible for enabling the data subject rights according to Articles 15 to 20 GDPR, complying with the security requirements of Article 32 GDPR regarding the security of the service, and fulfilling the obligations under Articles 33 and 34 GDPR, insofar as a breach of the protection of personal data concerns Meta’s obligations under the joint processing agreement.

The application is intended to target visitors of the website with interest-based advertising on the social networks Facebook and Instagram. For this purpose, the Meta remarketing tag has been implemented on the website. This tag establishes a direct connection to the Meta servers when visiting the website. This transmits to the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will then be shown personalized, interest-based ads.

The application also serves the purpose of creating conversion statistics. In this process, we learn the total number of users who clicked on one of our ads and were redirected to a page tagged with conversion tracking, as well as which actions were taken after the redirection to this website. However, we do not receive any information that would allow users to be personally identified.

Your data may be transferred to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and thus committed to complying with European data protection principles.

The processing of your personal data is carried out with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation.
You can deactivate the remarketing feature "Custom Audiences" here. More information about the collection and use of data by Meta, your related rights, and options to protect your privacy can be found in Meta's privacy policy at https://www.facebook.com/about/privacy/.

Use of Google Ads Conversion Tracking
We use the online advertising program "Google Ads" on our website and, within this framework, conversion tracking (visit action evaluation). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, contain no personal data, and therefore do not serve personal identification. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Therefore, there is no possibility for cookies to be tracked across the websites of Ads customers.
The information collected with the help of the conversion cookie is used to create conversion statistics. This allows us to know the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag. However, we do not receive any information that would allow users to be personally identified.
Your data may be transmitted to the servers of Google LLC in the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to comply with European data protection principles.

The use of Cookies or similar technologies is based on your consent according to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation.
Further information as well as Google's privacy policy can be found at: https://www.google.de/policies/privacy/

Use of the Pinterest Tag
We use the Pinterest Tag from Pinterest Europe Limited (Palmerston House, 2nd, Fenian Street, Floor, Dublin 2, Ireland "Pinterest") on our website.
The application serves the purpose of targeting visitors of the website with interest-based advertising on the social network Pinterest. For this purpose, the Pinterest conversion tag has been implemented on the website. This tag establishes a direct connection to Pinterest servers when visiting the website. This transmits to the Pinterest server which of our pages you have visited. Pinterest assigns this information to your personal Pinterest user account if you are logged into the social network. When you visit Pinterest, personalized, interest-based Pinterest ads are then shown to you.
If you arrive at our website via a pin on the social network Pinterest, a cookie for conversion tracking will be placed on your device. These cookies have a limited validity, contain no personal data, and therefore do not serve personal identification. If you visit certain pages of our website and the cookie has not yet expired, Pinterest and we can recognize that you clicked on the pin and were redirected to this page. The information collected with the help of the conversion cookie is used to create conversion statistics and thus optimize our website. This may include the following information: total number of users who clicked on one of our pins and were redirected to our website, subpages visited on our website (e.g., category or product pages), search queries on our website, your shopping cart contents, completed transactions.
Your data may be transferred to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of Cookies or similar technologies is based on your consent according to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation.
More information about the collection and use of data by Pinterest, your related rights, and options to protect your privacy can be found in Pinterest’s privacy policy at https://policy.pinterest.com/de/privacy-policy.

Use of TikTok Pixel
On our website, we use the TikTok Pixel of TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; “TikTok Ireland”) and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; “TikTok UK”). Both companies are jointly responsible for data processing (hereinafter “TikTok”).
The data processing serves the purpose of identifying and analyzing our customers' website visits as well as better customer targeting through the placement of targeted advertisements and evaluating the effectiveness of advertisements on TikTok. For this, TikTok uses technologies such as Cookies and Pixels that enable the recognition of your browser. Among other things, the following information may be collected and transmitted to TikTok: date and time of the visit, information about the browser and device type you use, screen resolution, IP address. TikTok can assign this information to your personal TikTok user account. Usage profiles can be created from the data collected in this way using pseudonyms. However, personal identification of users is not possible.
Your data may be transferred to third countries, such as the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). TikTok is not certified under the TADPF. Data transfer to the USA and to third countries without an adequacy decision is carried out, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of Cookies or similar technologies is based on your consent according to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation.
More information on data protection can be found at https://www.tiktok.com/legal/page/eea/privacy-policy/de and https://ads.tiktok.com/i18n/official/policy/controller-to-controller.

Use of Shopify Inbox
We use the live chat system Shopify Inbox on our website of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") within the scope of order processing. Shopify is an affiliated company of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The data processing serves the purpose of immediate and efficient communication between you and us as the provider. Data is stored and processed for the operation of the system as well as for optimizing the service.
To operate the live chat system, Cookies may be used that enable the browser to be recognized again. The following information may be collected and processed: IP address as well as personal data you provide when using the chat system.
Your data may be transferred to third countries outside the EU, especially to Canada and the USA, and processed there. There is an adequacy decision by the EU Commission for Canada. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
The use of Cookies or similar technologies is based on your consent according to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz and https://www.shopify.com/de/legal/dpa.

Use of the ADCELL partner program
We use the partner program “ADCELL” of Firstlead GmbH (Rosenfelder Str. 15-16, 10315 Berlin; “ADCELL”).
ADCELL and we are jointly responsible for the collection of your data and its transmission to ADCELL when the service is integrated. This is based on an agreement between us and ADCELL on the joint processing of personal data. The agreement can be accessed at https://www.adcell.de/datenverarbeitung. According to this, both we and ADCELL are equally responsible for fulfilling the obligations under the GDPR, especially for fulfilling the information obligations according to Articles 13 and 14 GDPR and for granting the rights of data subjects according to Articles 15 - 21 GDPR.
If you click on an ad with a partner link, ADCELL places a cookie for conversion tracking on your device. The cookies serve the purpose of correct billing within the partner program by recording the success of an advertising medium. The cookies detect that you clicked on the ad and the origin of the order can be traced back to the advertiser. ADCELL also uses so-called tracking pixels. These allow information such as visitor traffic on the pages to be evaluated.
The information generated by Cookies and tracking pixels about the use of this website (including the IP address) and the delivery of advertising formats is transmitted to a server of ADCELL and stored there. Among other things, ADCELL can recognize that the partner link on this website was clicked. ADCELL may share this (anonymized) information with contractual partners under certain circumstances, but data such as the IP address is not combined with other stored data.
The use of Cookies or similar technologies is based on your consent according to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation.

Use of the Awin Partner Program
We use the partner program "Awin" of AWIN AG (Eichhornstraße 3, 10785 Berlin; "Awin").
If you click on an advertisement with a partner link, Awin places a cookie for conversion tracking on your device. The cookies serve the purpose of correct billing within the partner program by recording the success of an advertising medium. The cookies detect that you clicked on the ad and the origin of the order can be traced back to the advertiser. Additionally, Awin uses so-called fingerprinting. This allows the device you use to be recognized. Among other things, Awin can detect that the partner link on this website was clicked or viewed. Awin collects, among other data, your transaction data (such as order value, product type, sales channel, use of a voucher) and your username in the form of a unique number sequence, so no identity is recognizable, but information about specific user actions and the device used by the user is included.
Your data may be transferred to third countries such as the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of Cookies or similar technologies is based on your consent according to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation.
The privacy policy with detailed information on data use by Awin can be found at https://www.awin.com/de/datenschutzerklarung.

Plug-ins and Others

Use of the Google Tag Manager
We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application manages JavaScript tags and HTML tags used especially for implementing tracking and analysis tools. The data processing serves the purpose of tailoring and optimizing our website according to demand.
The Google Tag Manager itself neither stores cookies nor processes personal data. However, it enables the triggering of additional tags that may collect and process personal data.
More information about terms of use and data protection can be found here.

Use of Social Plug-ins
We use social network plug-ins on our website. The integration of social plug-ins and the data processing involved serve the purpose of optimizing advertising for our products.
When social plug-ins are integrated, a connection is established between your computer and the servers of the social network providers, and the plug-in is displayed on the page by notifying your browser, provided you have explicitly consented. In this process, both your IP address and information about which of our pages you visited are transmitted to the provider's servers. This applies regardless of whether you are registered or logged in to the social network. Transmission also occurs for users who are not registered or logged in. If you are simultaneously connected to one or more of your social network accounts, the collected information may also be assigned to your corresponding profiles. When using the plug-in functions (e.g., by clicking the button), this information is also assigned to your user account. You can prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons.
The use of Cookies or similar technologies is based on your consent according to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation.
The social networks named below are integrated into our website via social plug-ins. More information about the scope and purpose of data collection and use, as well as your related rights and options to protect your privacy, can be found in the linked privacy notices of the providers.

Facebook of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Meta Platforms Ireland and we are jointly responsible for the collection of your data and its transmission to Facebook when the service is integrated. This is based on an agreement between us and Meta Platforms Ireland regarding the joint processing of personal data, which defines the respective responsibilities. The agreement can be accessed at https://www.facebook.com/legal/controller_addendum. According to this, we are particularly responsible for fulfilling the information obligations under Articles 13 and 14 GDPR, for complying with the security requirements of Article 32 GDPR regarding the correct technical implementation and configuration of the service, as well as for fulfilling the obligations under Articles 33 and 34 GDPR insofar as a breach of personal data protection concerns our obligations under the joint processing agreement. Meta Platforms Ireland is responsible for enabling data subject rights under Articles 15 to 20 GDPR, complying with the security requirements of Article 32 GDPR regarding the security of the service, and fulfilling the obligations under Articles 33 and 34 GDPR insofar as a breach of personal data protection concerns Meta Platforms Ireland's obligations under the joint processing agreement.
Your data may be transferred to the USA if necessary. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has been certified according to the TADPF and thus committed to complying with European data protection principles.
More information about the collection and use of data by Facebook, your related rights, and options to protect your privacy can be found in Facebook's privacy policy at https://www.facebook.com/about/privacy/.

Instagram of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
https://help.instagram.com/155833707900388
Your data may be transferred to the USA if necessary. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has been certified according to the TADPF and thus committed to complying with European data protection principles.

Pinterest of Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA)
https://policy.pinterest.com/de/privacy-policy
Your data may be transferred to the USA if necessary. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF.

Use of hCaptcha
We use the hCaptcha service from Intuition Machines Inc. (1065 SW 8th St #704, Miami, FL 33130, USA; "hCaptcha") on our website as part of order processing.
HCaptcha protects our website from spam and abuse by automated access (bots). By implementing hCaptcha, we ensure that certain actions on our website are only performed by real people, which guarantees the security and integrity of our online services.
When using hCaptcha, the following data may be collected and processed: user's IP address, information about the device used (e.g., browser and operating system), mouse movements and interactions on the website, time spent on the website, user input behavior.
Your data may be transferred to the USA if necessary. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). HCaptcha is certified under the TADPF and has committed to complying with European data protection principles.
The use of Cookies or similar technologies is based on your consent according to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation.
More information about data processing and privacy at hCaptcha can be found at https://www.hcaptcha.com/gdpr.

Use of GoogleMaps
We use the feature to embed GoogleMaps maps from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, "Google") on our website.
This feature enables the visual display of geographic information and interactive maps. When pages containing GoogleMaps maps are accessed, Google also collects, processes, and uses data from the website visitors.
Your data may also be transferred to the USA if necessary. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has been certified according to the TADPF and thus committed to complying with European data protection principles.
The use of Cookies or similar technologies is based on your consent according to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation.
More information about the collection and use of data by Google can be found in Google's privacy policy at https://www.google.com/privacypolicy.html. There, you also have the option in the privacy center to change your settings so that you can manage and protect your data processed by Google.

Use of YouTube
We use the function to embed YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
The function displays videos stored on YouTube in an iFrame on the website. The "Enhanced Privacy Mode" option is activated. This means that YouTube does not store any information about visitors to the website. Only when you watch a video are information transmitted to YouTube and stored there. Your data may be transferred to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has been certified according to the TADPF and thus committed to complying with European data protection principles.
The use of Cookies or similar technologies is based on your consent according to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation.
More information about the collection and use of data by YouTube and Google, your related rights, and options to protect your privacy can be found in YouTube's privacy policy at https://www.youtube.com/t/privacy.

Use of Doofinder
We use the search function "Doofinder" from DooFinder S.L. (Madrid 28037, Rufino González 23 bis, 1º 1, Spain; "Doofinder") on our website.
The data processing serves the purpose of making the information contained on our website easier to find and improving user-friendliness.
When using the search function on our website, the following information is processed, among others: IP address, information about the device you are using (e.g., device type, model, and version), anonymized user ID.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in designing our website to be as user-friendly as possible. You have the right to object at any time, for reasons arising from your particular situation, to this processing of your personal data based on Art. 6 para. 1 lit. f GDPR.
More information about data protection at Doofinder can be found at https://www.doofinder.com/en/privacy-policy.

Data subject rights and storage duration

Duration of storage
After the contract is fully completed, the data will initially be stored for the duration of the warranty period, then, taking into account statutory retention periods, especially tax and commercial law retention periods, and then deleted after the expiration of these periods, unless you have consented to further processing and use.

Rights of the data subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: right of access, rectification, erasure, restriction of processing, and data portability.
Furthermore, according to Art. 21 para. 1 GDPR, you have the right to object to processing based on Art. 6 para. 1 f GDPR, as well as to processing for direct marketing purposes.

Right to complain to the supervisory authority
According to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is unlawful.

You can file a complaint, among other places, with the supervisory authority responsible for us, which you can reach at the following contact details:

Saxon Data Protection and Transparency Officer
Maternistraße 17
01067 Dresden
Tel.: +49 351 85471101
Fax: +49 351 85471109
E-mail: saechsdsb@slt.sachsen.de

Right to object
If the personal data processing listed here is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.
After your objection, the processing of the affected data will cease unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.

If the processing of personal data is carried out for direct marketing purposes, you can object to this processing at any time by notifying us. After your objection, we will stop processing the affected data for direct marketing purposes.

last updated: 22.10.2024