Privacy Policy

Thank you for your interest in our company. We care about protecting your data.

Unless otherwise specified below, providing your personal data is not required by law or contractual conditions, and is not required for establishing a contract. You are not obligated to provide data. Not providing data has no consequences. This only applies insofar as no deviating statements are made for the following processing operations.

“Personal data” refers to all information concerning an identified or identifiable natural person.

Server log files

You can visit our website without providing personal information. Every time you access our website, usage data is transmitted to us or our web host/IT service provider from your Internet browser and saved in log files (known as server log files). These stored data include the name of the page accessed, date and time of access, IP address, volume of data transmitted and the requesting provider. This processing is carried out on the basis of Art. 6 (1)(f) GDPR due to our overriding legitimate interest in ensuring faultless operation of our website and in improving our services. In the process, your data will be transferred to Canada. The EU Commission has issued an adequacy decision regarding data transfer to Canada.

Contact

Controller

Feel free to contact us. You can find the contact data of the controller for data processing in our Legal Notice.

Voluntary customer contact by e-mail

If you choose to contact us for business purposes via e-mail, we only collect your personal data (name, e-mail address, message text) to the extent that you provide such information. Data processing occurs in order to manage and respond to your contact request. If contact serves the purpose of taking steps prior to entering into a contract (for example advice given an interest in purchasing, preparing a quotation) or relates to a contract already established between you and us, this data processing occurs on the basis of Art. 6(1)(b) GDPR.

We only use your e-mail address to process your enquiry. Your data are then erased observing statutory retention periods unless you have agreed to more extensive processing and use.

Collecting and processing when using the contact form

If you use the contact form, we only collect your personal data (name, e-mail address, message text) to the extent that you provide such information. Data processing occurs for the purpose of establishing contact. If contact serves the purpose of taking steps prior to entering into a contract (for example advice given an interest in purchasing, preparing a quotation) or relates to a contract already established between you and us, this data processing occurs on the basis of Art. 6(1)(b) GDPR.

If contact occurs for other reasons, this data processing is carried out on the basis of Art. 6 (1)(f) GDPR due to our overriding legitimate interest in managing and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 (1)(f) GDPR.
We only use your e-mail address to process your enquiry. Your data are then erased observing statutory retention periods unless you have agreed to more extensive processing and use.

Customer account orders

Customer account

When you open a customer account, we collect your personal data in the scope indicated there. Data processing occurs for the purpose of improving your shopping experience and facilitating order management. Processing occurs with your consent on the basis of Art. 6 (1)(a) GDPR. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the data processing that has occurred up until withdrawal. Your customer account will then be deleted.

Collection, processing and transfer of personal data for orders

When you place an order, we only collect and process your personal data to the extent required for fulfilling and handling your order as well as for managing your enquiries. It is necessary to provide data in order to establish a contract. If no data is provided, consequently it will not be possible to establish a contract. Processing occurs on the basis of Art. 6 (1)(b) GDPR and is required for the fulfilment of a contract with you. Your data may be transferred in this context for example to your chosen shipping companies and drop shipping providers, payment providers, service providers for order handling and IT providers. In all cases, we strictly observe the legal requirements. The scope of data transfer is restricted to a minimum.

In the process, your data will be transferred to Canada. The EU Commission has issued an adequacy decision regarding data transfer to Canada.

Marketing

Use of e-mail address for newsletter mailing

Independently of managing the contract, we use your e-mail address exclusively for our own marketing purposes for newsletter mailing as long as you have granted your express consent. Processing occurs with your consent on the basis of Art. 6 (1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the data processing that has occurred up until withdrawal. To do so, you can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Afterwards, your e-mail address will be removed from the distribution list. Your data will be transferred to a service provider for e-mail marketing within the framework of contract processing. The data will not be transferred to other third parties.

Use of e-mail address for sending direct marketing

We use your e-mail address which we obtained in the process of purchasing goods or services for the electronic transmission of marketing for our own goods or services that are similar to those which you previously acquired from us, unless you have objected to this use. It is necessary to provide your e-mail address in order to establish a contract. If no data is provided, consequently it will not be possible to establish a contract. This processing is carried out on the basis of Art. 6 (1)(f) GDPR due to our overriding legitimate interest in direct marketing. You can object to this use of your e-mail address at any time by notifying us. You can find the contact data for exercising your right to object in the Legal Notice. You can also use the link provided for this purpose in the marketing e-mail. This does not incur costs other than the costs of transmission according to the base rates.

Merchandise management

Use of an external merchandise management system For the fulfilment of contracts, we use a merchandise management system as part of contract processing. For this purpose, your personal data collected during the order will be transferred to Descartes Systems Group, 120 Randall Drive Waterloo, N2V 1C6.

Payment provider

Use of PayPal

All PayPal transactions are subject to the PayPal Privacy Policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of personal data when selecting Klarna payment options

In order to offer you the payment options provided by Klarna, we will transfer personal data to Klarna such as contact details and order data. This allows Klarna to assess whether you can use the payment options offered via Klarna and adjust the payment options to your requirements. You can find general information about Klarna at: https://www.klarna.com/de/. Your personal information will be processed by Klarna in compliance with the applicable data protection regulations and according to the statements in Klarna’s Privacy Policy under https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

Shopify Payments

We use the payment provider “Shopify Payments”, 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment provider Shopify Payments, payment processing is handled via the technical provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will transfer your information that was communicated during the order process along with the information about your order (name, address, account number, sort code, credit card number where relevant, invoice amount, currency and transaction number) pursuant to Art. 6 (1)(b) GDPR. The transfer of your data occurs exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent that this is required. You can find more information about data protection by Shopify Payments at the following Internet address: thttps://www.shopify.com/legal/privacy. You can find data protection information about Stripe Payments Europe Ltd. here: https://stripe.com/de/privacy

Cookies

Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. If a user accesses a website, a cookie may be saved on the user’s operating system. This cookie contains a characteristic sequence that enables unambiguous identification of the browser when accessing our website again. Cookies are saved on your computer. As a result, you have full control over the use of cookies. By selecting relevant technical settings in your Internet browser, you can be notified before cookies are set and decide individually whether to accept them, or prevent the storage of cookies and the transfer of the data they contain. Cookies that have previously been saved may be erased at any time. However, we inform you that you may not be able to use all functions of this website to their full extent in that case. The links below inform you how to manage cookies (including how to delete them) in the most common browsers:

Chrome: https://support.google.com/accounts/answer/61416?hl=de Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless stated otherwise in the rest of this Privacy Policy, we only use these technically necessary cookies for the purpose of making our website more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser and offer services to you even after switching pages. Certain functions of our website cannot be offered without using these cookies. For these functions, it is necessary to be able to recognise your browser even after switching pages.

The use of cookies or comparable technologies occurs on the basis of Section 25 (2) TTDSG. The processing of your personal data occurs on the basis of Art. 6 (1)(f) GDPR due to our overriding legitimate interest in ensuring optimal website functionality as well as user-friendly and effective design of our website. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.

Use of GDPR Legal Cookie

On our website, we use the consent management tool GDPR Legal Cookie by beeclever GmbH (Universitätsstraße 3, 56070 Koblenz am Rhein; “beeclever”). This tool enables you to grant consent to data processing via the website, particularly by setting cookies, and to exercise your right of withdrawal for previously granted consent. This data processing serves the purpose of obtaining and documenting the required consent to data processing, and thereby complying with legal obligations. Cookies can be set for this purpose. In this context, the following information may be collected and transferred to beeclever: anonymised IP address; date and time of consent; URL from which consent was submitted; anonymous, random, encrypted key; status of consent. These data will not be transferred to other third parties.
Data processing occurs to fulfil a legal obligation on the basis of Art. 6 (1)(c) GDPR. You can find more detailed information about the terms of use and data protection by beeclever at: https://gdpr-legal-cookie.com/pages/termsconditions as well as https://gdpr-legal-cookie.com/pages/datenschutzerklarung.

Analysis advert tracking

Use of Google Analytics

On our website, we use the web analysis service Google Analytics provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”). Data processing occurs for the purpose of analysing this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of this website’s operator to analyse your use of the website, to prepare reports about the website activities and perform other services for the website operator associated with the website and Internet use. The following information may be collected: IP address, date and time of page access, click path, information about the browser you are using and device you are using, pages visited, referrer URL (website from which you were directed to our website), location data, purchasing activities. The IP address transmitted by your browser when using Google Analytics will not be aggregated with other Google data.
Google Analytics uses technologies such as cookies, web storage in the browser and tracking pixels, which make it possible to analyse your use of the website. The information generated in this manner about your user of this website is generally transferred to a Google server in the USA and saved there. No adequacy decision of the EU Commission exists for the USA. The transfer of data occurs in part on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adsprocessorterms/. Neither Google nor official US authorities have access to your data. Google may link your data together with other data, such as your search history, personal accounts, usage data on other devices and all other data which Google possesses concerning you.
IP anonymisation is activated on this website. As a result, Google will truncate your IP address before transfer within member states of the European Union or other treaty states of the Agreement regarding the European Economic Area. The full IP address will only be transferred to a Google server in the USA and truncated there in exceptional cases. The processing of your personal data occurs on the basis of Art. 6 (1)(f) GDPR due to our overriding legitimate interest in ensuring optimal website functionality as well as needs-based and target-oriented design of our website. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
You can prevent Google from collecting of the data generated by Google Analytics regarding your use of the website (including your AP address) and processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de To prevent data collection and storage by Google across devices, you can set an opt-out cookie. Opt-out cookies prevent the future collection of your data when visiting this website. You must apply the opt-out to all systems and devices that you use in order for this to take full effect. If you delete the opt-out cookie, requests will again be transmitted to Google. If you click here, the opt-out cookie will be set: Deactivate Google Analytics. You can find more detailed information about the terms of use and data protection at https://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/ as well as https://policies.google.com/technologies/cookies?hl=de.

Use of the Facebook Pixel

On our website, we use the remarketing function “Custom Audiences” of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland “Facebook”). Along with Meta Platforms Ireland, we are joint controllers for the collection of your data which occurs when integrating this service and the transfer of these data to Facebook. This is based on the agreement between us and Meta Platforms Ireland regarding the joint processing of personal data in which the respective responsibilities are specified. This agreement can be accessed at https://www.facebook.com/legal/controller_addendum. Under this agreement, we are responsible particularly for the fulfilment of notification obligations pursuant to Art. 13, 14 GDPR, for compliance with security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service as well as compliance with the obligations pursuant to Art. 33, 34 GDPR insofar as a breach in the protection of personal data relates to our obligations under the agreement regarding joint processing. Meta Platforms Ireland is responsible for enabling data subjects to exercise their rights pursuant to Art. 15 - 20 GDPR, for compliance with security requirements of Art. 32 GDPR with regard to the security of the service as well as the obligations pursuant to Art. 33, 34 GDPR insofar as a breach in the protection of personal data relates to the obligations of Meta Platforms Ireland under the agreement regarding joint processing. This application serves the purpose of addressing website visitors strategically with interest-based advertisements on the social network Facebook. For this purpose, Facebook’s remarketing tag is integrated on the website. Via this tag, a direct connection is established with the Facebook servers when the website is visited. As a result, information is transferred to the Facebook server regarding which of our pages you have visited. Facebook attributes this information to your personal Facebook user account. When you visit the social network Facebook, you will be shown personalised Facebook ads related to your interests. Your data may be transmitted into the USA. No adequacy decision of the EU Commission exists for the USA. The transfer of data occurs in part on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum. The processing of your personal data occurs on the basis of Art. 6 (1)(f) GDPR due to our overriding legitimate interest in addressing website visitors individually with interest-related advertisements. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. You can deactivate the “Custom Audiences” remarketing function here. You can find more detailed information about Facebook’s collection and use of data, your associated rights and options to protect your privacy in Facebook’s Privacy Policy at https://www.facebook.com/about/privacy/.

TikTok Pixel

On our website, we use the TikTok Pixel. The TikTok Pixel is a TikTok advertiser tool from the two providers:

TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and
TikTok Information Technologies UK Limited, WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom (both are referred to jointly in the following as “TikTok”).

The TikTok Pixel is a JavaScript code fragment that enables us to understand and track the activity of users on our website. For this purpose, the TikTok Pixel collects and processes information about the visitors to our website or the devices they use (known as event data).

The event data collected by the TikTok Pixel are used for targeting our adverts and for improving advert delivery as well as for personalised marketing. To this end, the event data collected on our website using the TikTok Pixel are transmitted to TikTok.

Some of these event data are information saved in the end device that you are using. The TikTok Pixel also involves the use of cookies that save information on the end device that you are using. Such storage of information by the TikTok Pixel or access to information already saved in your end device only occurs with your consent. The use of this service is based on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG. Your consent can be revoked at any time.

This collection and transfer of event data is carried out by us and TikTok as joint controllers pursuant to Art. 26 GDPR. We have established an agreement with TikTok regarding processing as joint controllers which stipulates the distribution of data protection obligations between us and TikTok. In this agreement, we have agreed to the following with TikTok:

that we are responsible for providing you with all information pursuant to Art. 13, 14 GDPR regarding joint processing of personal data;
that TikTok is responsible for enabling data subjects to assert their rights pursuant to Art. 15 to 20 GDPR against Facebook Ireland after the joint processing of saved personal data.

You can access the agreement concluded between us and TikTok at https://ads.tiktok.com/i18n/official/article?aid=300871706948451871 .

TikTok is the sole controller for the subsequent processing of the transmitted event data after transmission. You can find more information about how TikTok processes personal data, including the legal basis on which TikTok bases its processing, and the options for exercising your rights against TikTok, in TikTok’s Privacy Policy at https://www.tiktok.com/legal/privacy-policy?lang=de-DE.

Rights of the data subject and duration of storage

Duration of storage

After the contract has been fully implemented, the data will initially be stored for the duration of the warranty period, then under consideration of statutory retention obligations, particularly relating to tax and trade law, and deleted after the end of this period unless you have consented to more extensive processing and use.

Rights of the data subject

If the legal requirements are met, you are entitled to the following rights pursuant to Art. 15 to 20 GDPR: Right to access information, rectification, erasure, restriction of processing, data portability. Furthermore, pursuant to Art. 21 (1) GDPR you have the right to object to processing based on Art. 6 (1)(f) GDPR as well processing for the purposes of direct marketing.

Right to lodge a complaint with a supervisory authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you are of the option that the processing of your personal data is not lawful. You can submit a compliant with the supervisory authority responsible for our region, who can be reached using the following contact details:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach, Germany
Phone: +49 981 1800930
Fax: +49 981 180093800
E-mail: poststelle@lda.bayern.de

Right to object

If the personal data processing specified here is carried out on the basis of our legitimate interest pursuant to Art. 6 (1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation, with effect for the future. After you object, processing of the relevant data will be discontinued, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if processing is necessary for the assertion, exercise or defence of legal claims.

If personal data processing occurs for the purpose of direct marketing, you can object to this processing at any time by contacting us. After you object, we will cease processing the relevant data for the purpose of direct marketing.