Privacy policy

1. Data Processing for Order Handling
   8.1 To the extent necessary for the fulfillment of the contract for delivery and payment purposes, the personal data collected by us will be shared with the appointed shipping company and the appointed financial institution in accordance with Article 6(1)(b) GDPR.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact information you provided during the order (name, address, email address) to personally inform you of upcoming updates via a suitable communication method (e.g., postal mail or email) within the legally prescribed period, in accordance with our legal information obligations under Article 6(1)(c) GDPR. Your contact information will be used strictly for the purpose of providing updates owed by us and will only be processed to the extent necessary for this communication.

To process your order, we also collaborate with the following service providers who fully or partially support us in the execution of contracts. Certain personal data will be shared with these service providers based on the following information.

8.2 Transfer of Personal Data to Shipping Service Providers

• DHL

We use the following provider as a shipping service: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.

We will forward your email address and/or phone number to the provider before the delivery of the goods, for the purpose of coordinating a delivery date or delivery notification, based on your explicit consent during the order process (Article 6(1)(a) GDPR). Otherwise, only the recipient’s name and delivery address will be shared with the provider for delivery purposes under Article 6(1)(b) GDPR. The data transfer will only take place to the extent necessary for the delivery of the goods. In such cases, prior coordination of the delivery date or delivery notification is not possible.

You can revoke your consent at any time with future effect by notifying the responsible party mentioned above or by contacting the provider directly.

8.3 Use of Payment Service Providers (Payment Services)

• PayPal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you choose a payment method from this provider where you make an advance payment, your payment data (including name, address, bank and card details, currency, and transaction number) and information about the content of your order will be forwarded to the provider according to Article 6(1)(b) GDPR for the purpose of payment processing. The transfer of your data will only take place to the extent necessary for this purpose.

If you select a payment method where we make an advance payment, you will also be asked to provide certain personal information (first and last name, street, house number, postal code, city, date of birth, email address, phone number, possibly alternative payment method details) during the order process.

To protect our legitimate interest in determining your payment capability, this data will be forwarded to the provider in accordance with Article 6(1)(f) GDPR for the purpose of a credit check. Based on the personal data you provided and other data (such as cart contents, invoice amount, order history, payment experiences), the provider will assess whether the payment option you selected can be granted based on potential payment and/or default risks.

The credit check may include probability values (known as score values). If score values are included in the credit check result, they are based on a scientifically recognized mathematical-statistical process. Address data is included in the calculation of the score values, among other factors.

You may object to this data processing at any time by notifying us or the provider. However, the provider may still be entitled to process your personal data if it is necessary for the contractual payment processing.

• Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

If you select a payment method from this provider where you make an advance payment (e.g., credit card payment), your payment data (including name, address, bank and card details, currency, and transaction number) and information about the content of your order will be forwarded to the provider according to Article 6(1)(b) GDPR for the purpose of payment processing. The transfer of your data will only take place to the extent necessary for this purpose.

1. Web Analytics Services
   9.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows for the analysis of your use of our website.

By default, no cookies are used by Google Analytics 4 when you visit the website, unless you explicitly consent to cookies. Instead, information about your user behavior is collected and processed through "pings" (small data packets sent to the host of an end device). This information includes your IP address, which is shortened by Google to exclude direct personal identification.

The information is transmitted to and processed on Google's servers, including possible transfers to Google LLC, based in the USA.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is anonymized and not combined with other Google data. Data collected through Google Analytics 4 is stored for two months and then deleted.

All the described processing, including data transfer via "pings" and the possible use of Google Analytics cookies, only takes place if you have given us your explicit consent in accordance with Article 6(1)(a) GDPR.

Without your consent, Google Analytics 4 will not be used during your visit to our site. You can revoke your consent at any time with future effect by disabling the service via the "cookie-consent tool" provided on the website.

We have entered into a data processing agreement with Google to ensure the protection of our website visitors' data and prevent unauthorized sharing with third parties.

Further legal information on Google Analytics 4 can be found at https://policies.google.com/privacy?hl=en and https://policies.google.com/technologies/partner-sites.

Demographic Features
Google Analytics 4 includes the "demographic features" function, which can be used to create reports on the age, gender, and interests of website visitors. This is done by analyzing advertising and third-party information. Target groups for marketing activities can be identified based on the collected data. However, this data cannot be linked to any specific person and is deleted after two months.

Google Signals
As an extension of Google Analytics 4, this website may use Google Signals to generate cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google may analyze your usage behavior across devices with your consent to the use of Google Analytics, in accordance with Article 6(1)(a) GDPR, and create database models for cross-device conversions. We only receive statistics, not personal data from Google. If you wish to stop cross-device analysis, you can deactivate "Personalized Advertising" in your Google account settings. Follow the instructions here: https://support.google.com/ads/answer/2662922?hl=en. Further information on Google Signals can be found at: https://support.google.com/analytics/answer/7532985?hl=en.

UserIDs
As an extension of Google Analytics 4, the "UserIDs" function may be used on this website. If you have consented to the use of Google Analytics 4 (in accordance with Article 6(1)(a) GDPR), created an account on this website, and log in across various devices, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with European data protection levels based on an adequacy decision by the European Commission.

9.2 Google Tag Manager

This website uses the "Google Tag Manager," a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

The Google Tag Manager provides a technical framework to bundle various web applications, including tracking and analytics services, and to manage and conditionally control them via a unified user interface. The Google Tag Manager itself does not store or retrieve any information from user devices, nor does it perform any independent data analysis. However, the Google Tag Manager transmits your IP address to Google upon page load, where it may be stored. Transfers to Google LLC servers in the USA may also occur.

This processing only occurs if you have given your explicit consent in accordance with Article 6(1)(a) GDPR. Without this consent, the Google Tag Manager will not be used during your visit. You can revoke your consent at any time with future effect by disabling this service in the "cookie-consent tool" provided on the website.

We have entered into a data processing agreement with the provider to ensure the protection of our website visitors' data and prevent unauthorized sharing with third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with European data protection levels based on an adequacy decision by the European Commission.

Further legal information on Google Tag Manager can be found at https://policies.google.com/privacy?hl=en and https://policies.google.com/technologies/partner-sites.

 

1. Data Processing for Order Fulfillment
   8.1 To the extent necessary for fulfilling the contract for delivery and payment purposes, the personal data we collect will be shared with the appointed transport company and the appointed financial institution, in accordance with Article 6(1)(b) GDPR.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact information you provided during the order (name, address, email) to inform you personally, within the legally prescribed period, about upcoming updates via an appropriate communication channel (e.g., by mail or email) as part of our legal information obligations in accordance with Article 6(1)(c) GDPR. Your contact details are strictly used for notifications about updates owed by us and are processed only to the extent necessary for this information.

To fulfill your order, we also work with the following service provider(s), who partially or fully support us in executing the contracts. Certain personal data is shared with these service providers in accordance with the following information.

8.2 Transfer of Personal Data to Shipping Service Providers

• DHL

We use the following provider as our shipping service: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.

We provide your email address and/or phone number to the provider before the delivery of the goods, for the purpose of coordinating a delivery date or delivery notification, based on your explicit consent during the order process (Article 6(1)(a) GDPR). Otherwise, for delivery purposes, we only provide the provider with the recipient’s name and delivery address in accordance with Article 6(1)(b) GDPR. The data transfer occurs only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

You may revoke your consent at any time with future effect by notifying the responsible party named above or by contacting the provider directly.

8.3 Use of Payment Service Providers (Payment Services)

• PayPal

This website offers one or more online payment methods from the following provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you select a payment method from this provider where you pay in advance, your payment data (including name, address, bank and card details, currency, and transaction number) and information about your order will be shared with the provider in accordance with Article 6(1)(b) GDPR. The transfer of your data will only take place for the purpose of payment processing and only to the extent necessary for this purpose.

If you select a payment method where we provide services in advance, you will also be asked during the order process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and possibly alternative payment method details).

In such cases, to safeguard our legitimate interest in determining your payment capability, this data will be forwarded to the provider in accordance with Article 6(1)(f) GDPR for the purpose of a credit check. The provider will assess, based on the personal data you provide and other information (such as shopping cart, invoice amount, order history, and payment experience), whether the payment option you selected can be granted based on potential payment and/or default risks.

The credit check may include probability values (known as score values). If score values are included in the credit check result, they are based on a scientifically recognized mathematical-statistical procedure. Address data is included in the score value calculation, among other factors.

You may object to this data processing at any time by notifying us or the provider. However, the provider may still be entitled to process your personal data if it is necessary for the contractual payment processing.

• Shopify Payments

This website offers one or more online payment methods from the following provider: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

If you select a payment method from this provider where you pay in advance (e.g., credit card payment), your payment data (including name, address, bank and card details, currency, and transaction number) and information about your order will be shared with the provider in accordance with Article 6(1)(b) GDPR. The transfer of your data will only take place for the purpose of payment processing and only to the extent necessary for this purpose.

1. Web Analytics Services
   9.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows for the analysis of your usage of our website.

By default, Google Analytics 4 does not use cookies when you visit the website unless you explicitly consent to cookies. Instead, information about your user behavior is collected and processed through "pings" (small data packets sent to the host of an end device). This information includes your IP address, which Google shortens to exclude direct personal identification.

The information is transmitted to and processed on Google’s servers, including possible transfers to Google LLC, located in the USA.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is anonymized and not combined with other Google data. Data collected through Google Analytics 4 is stored for two months and then deleted.

All described processing, including the transfer of data through "pings" and the possible setting of Google Analytics cookies, only takes place if you have given us your explicit consent in accordance with Article 6(1)(a) GDPR.

Without your consent, Google Analytics 4 will not be used during your visit to our site. You can revoke your consent at any time with future effect by disabling the service via the "cookie-consent tool" provided on the website.

We have entered into a data processing agreement with Google to ensure the protection of our website visitors’ data and prevent unauthorized sharing with third parties.

Further legal information on Google Analytics 4 can be found at: https://policies.google.com/privacy?hl=en and https://policies.google.com/technologies/partner-sites.

Demographic Features
Google Analytics 4 uses the "demographic features" function to create reports that provide information about the age, gender, and interests of website visitors. This is done by analyzing ads and information from third parties. Target groups for marketing activities can be identified based on the collected data. However, this data cannot be linked to any specific person and is deleted after two months.

Google Signals
As an extension to Google Analytics 4, this website may use Google Signals to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google may analyze your usage behavior across devices with your consent to the use of Google Analytics, in accordance with Article 6(1)(a) GDPR, and create database models, including cross-device conversions. We only receive statistics from Google, not personal data. If you wish to stop cross-device analysis, you can disable the "Personalized Ads" feature in your Google account settings. Follow the instructions here: https://support.google.com/ads/answer/2662922?hl=en. More information about Google Signals can be found here: https://support.google.com/analytics/answer/7532985?hl=en.

UserIDs
As an extension of Google Analytics 4, the "UserIDs" function can be used on this website. If you have consented to the use of Google Analytics 4 (in accordance with Article 6(1)(a) GDPR), created an account on this website, and logged in across different devices, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with European data protection levels based on an adequacy decision by the European Commission.

9.2 Google Tag Manager

This website uses the "Google Tag Manager," a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

The Google Tag Manager provides a technical framework to bundle various web applications, including tracking and analytics services, and to manage and conditionally control them through a unified user interface. The Google Tag Manager itself does not store or retrieve any information from user devices, nor does it perform independent data analysis. However, the Google Tag Manager transmits your IP address to Google upon page load, where it may be stored. Transfers to Google LLC servers in the USA may also occur.

This processing only occurs if you have given your explicit consent in accordance with Article 6(1)(a) GDPR. Without this consent, the Google Tag Manager will not be used during your visit. You can revoke your consent at any time with future effect by disabling this service via the "cookie-consent tool" provided on the website.

We have entered into a data processing agreement with the provider to ensure the protection of our website visitors’ data and prevent unauthorized sharing with third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with European data protection levels based on an adequacy decision by the European Commission.

Further legal information on Google Tag Manager can be found at: https://policies.google.com/privacy?hl=en and https://policies.google.com/technologies/partner-sites.

 

11.2 Google Maps

This website uses an online map service from the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service that displays interactive (land) maps to visually represent geographic information. Through the use of this service, our location will be displayed to you, and any potential route will be made easier to navigate.

As soon as you access the subpages where the Google Maps map is embedded, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there. This may involve transmission to Google LLC servers in the USA. This happens regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not want this data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users not logged in) as usage profiles and evaluates them.

The collection, storage, and evaluation are carried out in accordance with Art. 6(1)(f) of the GDPR based on Google's legitimate interest in displaying personalized advertising, market research, and/or the demand-oriented design of Google websites. You have the right to object to the creation of these user profiles, which you must address to Google to exercise. If you do not agree with the future transmission of your data to Google in connection with the use of Google Maps, you also have the option of disabling the Google Maps web service entirely by deactivating the JavaScript application in your browser. In that case, Google Maps and the map display on this website cannot be used.

Where legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect. To exercise your revocation, please follow the procedure outlined above for raising an objection.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

11.3 Google reCAPTCHA

We use the CAPTCHA service from the following provider on this website: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transmitted to: Google LLC, USA. For the visual design of the CAPTCHA window, the provider uses "Google Fonts," i.e., fonts loaded from Google via the internet. No further information beyond what is already transmitted through the functionality of reCAPTCHA is processed in this case.

The service checks whether an input is made by a natural person or abusively by automated, machine processing. It helps block spam, DDoS attacks, and similar automated malicious access. To ensure that an action is performed by a human and not an automated bot, the provider collects the IP address of the device used, recognition data of the browser and operating system type, as well as the date and duration of the visit, and transmits this information for analysis to the provider's servers.

The legal basis is our legitimate interest in determining individual responsibility on the internet and preventing misuse and spam in accordance with Art. 6(1)(f) GDPR.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with European data protection standards based on an adequacy decision by the European Commission.

11.4 Google Customer Reviews (formerly Google Certified Merchant Program)

We work with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program allows us to collect customer reviews from users of our website. After making a purchase on our website, you will be asked if you would like to participate in a Google email survey.

If you provide your consent in accordance with Art. 6(1)(a) GDPR, we will transmit your email address to Google. You will then receive an email from Google Customer Reviews asking you to rate your purchase experience on our website. Your review will then be aggregated with our other reviews and displayed in our Google Customer Reviews logo as well as in our Merchant Center dashboard. Additionally, your review will be used for Google Seller Ratings. In the course of using Google Customer Reviews, personal data may also be transmitted to Google LLC servers in the USA.

You can revoke your consent at any time by notifying the data controller or Google.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with European data protection standards based on an adequacy decision by the European Commission.

11.5 Microsoft Power BI

For internal visualization of business processes and customized analysis of business operations, we use the "Microsoft Power BI" service from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Customer personal data may be subject to visualization and analysis processes and prepared by Microsoft Power BI for this purpose. In this case, Microsoft processes personal data as a data processor on behalf of the data controller in accordance with Art. 28 GDPR and has contractually committed to us to protect this data in compliance with legal requirements.

Microsoft uses the latest encryption techniques and ensures that data processing procedures only take place in data centers within the EU.

12) Tools and Miscellaneous

12.1 - BuchhaltungsButler

For our accounting, we use the cloud-based accounting software service provided by the following provider: BuchhaltungsButler GmbH, Ausbau 1, 15910 Unterspreewald, Germany.

The provider processes incoming and outgoing invoices, and potentially also the bank transactions of our company, to automatically record invoices, match them to transactions, and create financial accounting through a semi-automated process.

If personal data is processed, it is done in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in efficient organization and documentation of our business transactions.

12.2 Cookie Consent Tool

This website uses a "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "cookie consent tool" is displayed to users upon visiting the website in the form of an interactive interface, where consent for certain cookies and/or cookie-based applications can be given by ticking checkboxes. Only if the respective user grants consent will these cookies be loaded on their device.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this process.

If personal data (such as the IP address) is processed for storage, assignment, or logging of cookie settings, this is done in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in a lawful, user-specific, and user-friendly cookie consent management system and the lawful design of our website.

The further legal basis for this processing is Art. 6(1)(c) GDPR. We are legally obligated to base the use of non-essential cookies on the respective user consent.

Where necessary, we have entered into a data processing agreement with the provider to ensure the protection of our website visitors' data and prevent unauthorized disclosure to third parties.

Further information about the provider and cookie consent tool settings can be found directly in the respective user interface on our website.

 

 

02.10.2024, 12:04:04 Uhr