Data protection declaration

Unless otherwise stated below, the provision of your personal data is neither legally or contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This only applies if no other information is provided in the subsequent processing operations. “Personal data” is all information that relates to an identified or identifiable natural person.

Server log files

You can visit our websites without providing any personal information. Every time you access our website, usage data is transmitted to us or our web host / IT service provider through your Internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing is carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our offering. Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. There is an adequacy decision of the EU Commission for Canada. There is an adequacy decision of the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified according to the TADPF. This data transfer is based on contractual obligations that are comparable to those of the EU Commission’s standard contractual clauses.

Contact

Person responsible Contact us if you wish. The person responsible for data processing is: Pfungstädter Str. , Griesheim , Hessen , Germany, +49-152-18002288, [email protected] Customer’s unsolicited contact by email If you initiate business contact with us by email, we only collect your personal data (name, email address, message text) to the extent you provide it. The data processing serves to process and answer your contact request. If the contact serves to carry out pre-contractual measures (e.g. advice in the event of interest in purchasing, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR. If you contact us for other reasons, this data processing will be carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right to object to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR at any time for reasons arising from your particular situation. We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Customer account orders

Customer account

When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Art. 6 Paragraph 1 Letter a of GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until the revocation. Your customer account will then be deleted.

Collection, processing and transfer of personal data when placing orders

When placing an order, we only collect and process your personal data to the extent that this is necessary to fulfil and process your order and to process your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing is carried out on the basis of Art. 6 Paragraph 1 Letter b of GDPR and is necessary for the fulfilment of a contract with you. Your data is passed on, for example, to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal requirements. The scope of data transfer is limited to a minimum. Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. There is an adequacy decision of the EU Commission for Canada. There is an adequacy decision of the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified according to the TADPF. This data transfer is based on contractual obligations that are comparable to those of the EU Commission’s standard contractual clauses.

Advertising

Use of the email address for sending newsletters

We use your email address, regardless of the contract processing, exclusively for our own advertising purposes to send newsletters, provided that you have expressly consented to this. The processing is carried out on the basis of Art. 6 Paragraph 1 Letter a of GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.

Use of the email address for sending direct advertising

We use your email address, which we received as part of the sale of a product or service, to electronically send advertising for our own products or services that are similar to those you have already purchased from us, provided that you have not objected to this use. The provision of the email address is necessary for the conclusion of the contract. Failure to provide this information means that no contract can be concluded. The processing is carried out on the basis of Art. 6 Paragraph 1 Letter f of GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. The contact details for exercising your objection can be found in the imprint. You can also use the link provided for this purpose in the advertising email. There are no costs for this other than the transmission costs according to the basic rates.

 

Payment service provider credit report

Use of PayPal Express

We use the PayPal Express payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”) on our website. The data processing serves the purpose of being able to offer you payment via the PayPal Express payment service. In order to integrate this payment service, PayPal must collect, save and analyze data (e.g. IP address, device type, operating system, browser type, location of your device) when you visit the website. Cookies can also be used for this purpose. The cookies enable your browser to be recognized.

The processing of your personal data is based on Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.

By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to be able to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 Para. 1 lit. b GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated data protection declaration at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.

Use of PayPal Check-Out

We use the PayPal Check-Out payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”) on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or “Pay later” via PayPal, the data required for payment processing is transmitted to PayPal in order to be able to fulfill the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.

Cookies can be stored here that enable your browser to be recognized. The resulting data processing is carried out on the basis of Art. 6 (1) (f) GDPR due to our predominantly legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.

Credit card via PayPal, direct debit via PayPal & “Pay later” via PayPal

For individual payment methods such as credit card via PayPal, direct debit via PayPal or “Pay later” via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies. To do this, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balancedDecision on the establishment, implementation or termination of the contractual relationship. The credit report may contain probability values ​​(score values) that are calculated on the basis of scientifically recognized mathematical-statistical procedures and whose calculation includes, among other things, address data. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit checks for the initiation of a contract. The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when PayPal makes advance payments.

For reasons arising from your particular situation, you have the right to object at any time to this processing of personal data concerning you based on Art. 6 Para. 1 lit. f GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide the data means that the contract cannot be concluded with the payment method you have chosen.

Third-party providers

When paying using a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR. To carry out this payment method, PayPal may then pass the data on to the respective provider. This processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR. Local third-party providers can be, for example:

Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)

Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

 Purchase on account via PayPal

When paying using the purchase on account payment method, the data required for payment processing is first transmitted to PayPal. To carry out this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; “Ratepay”) in order to be able to fulfill the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR. Ratepay may carry out a credit check on the basis of mathematical-statistical procedures (probability or score values) using credit agencies according to the process already described above. The data processing serves the purpose of credit checks for the initiation of a contract. The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in protecting against payment default when Ratepay makes advance payments. Further information on data protection and which credit agencies use Ratpay can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

Further information on data processing when using PayPal can be found in the associated data protection declaration at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Klarna payment options

We use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; “Klarna”) on our website. By selecting and using payment via Klarna, the data required for payment processing will be transmitted to Klarna in order to be able to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1)(b) GDPR.

Cookies can be stored here that enable your browser to be recognized. The data processing that takes place as a result is carried out on the basis of Art. 6 (1)(f) GDPR due to our predominantly legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.

“Pay Later” (invoice), “Pay Now” (payment by direct debit, credit card, instant transfer), “Financing” (installment purchase)

For individual payment methods such as “Pay Later” (invoice), “Pay Now” (payment by direct debit, credit card, instant transfer), “Financing” (installment purchase), Klarna reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies.

For this purpose, Klarna transmits the personal data required for a credit check.

Personal data such as first and last name, address, gender, email address, IP address and data related to the order are sent to a credit agency for the purpose of identity and credit checks and the information received about the statistical probability of a payment default is used to make a balanced decision about the establishment, implementation or termination of the contractual relationship. The credit report may contain probability values ​​(score values) that are calculated on the basis of scientifically recognized mathematical-statistical procedures and that include address data in their calculation. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of a credit check for the initiation of a contract. The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when Klarna makes advance payments. You have the right to object to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR at any time by notifying Klarna for reasons arising from your particular situation. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide the data means that the contract cannot be concluded with the payment method you have selected.

Further information, in particular which credit agencies Klarna passes on your personal data to, can be found at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.

General information about Klarna can be found at: https://www.klarna.com/de/. Your personal data will be treated by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna’s data protection regulations at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on a user’s computer system. When a user visits a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is accessed again.

Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your Internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the cookies from being stored and the data they contain from being transmitted. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may then not be able to use all of the functions of this website to their full extent.

You can find out how to manage cookies in the most important browsers (including deactivating them) using the links below:

Chrome: https://support.google.com/accounts/answer/61416?hl=de

Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies for the purpose of to make our offer more user-friendly, effective and secure. Cookies also enable our systems to recognize your browser even after you change pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after you change pages.

The use of cookies or comparable technologies is based on Section 25 Paragraph 2 TDDDG. The processing of your personal data is based on Art. 6 Paragraph 1 Letter f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.

You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.

Use of Consent Manager

We use the consent management tool Consent Manager from Consent Manager AB (Håltegelvägen 1b, 72348 Västerås, Sweden; “Consent Manager”) on our website.

The tool enables

allows you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent for consents already given.

The data processing serves the purpose of obtaining and documenting the necessary consents to data processing and thus complying with legal obligations.

Cookies can be used for this purpose. The following information, among others, can be collected and sent to Consentmanager: date and time of the page visit, information about the browser you use and the device you use, anonymized IP address, opt-in and opt-out data. This data will not be passed on to other third parties.

The data is processed to fulfill a legal obligation on the basis of Art. 6 Para. 1 lit. c GDPR.

Further information on data protection at Consentmanager can be found at: https://www.consentmanager.net/privacy.php

Rights of the data subject and storage period

Duration of storage

After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, then taking into account statutory retention periods, in particular tax and commercial law, and then deleted after the deadline has expired, unless you have consented to further processing and use.

Rights of the data subject

If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, to rectification, to erasure, to restriction of processing, to data portability.

In addition, according to Art. 21 Para. 1 GDPR, you have the right to object to processing based on Art. 6 Para. 1 f GDPR and to processing for the purposes of direct advertising.

Right to complain to the supervisory authority

According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint with the supervisory authority responsible for us, among others, which you can reach using the following contact details:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia

P.O. Box 20 04 44

40102 Düsseldorf

Tel.: +49 211 384240

Fax: +49 211 38424999

E-mail: [email protected]

Right to object

If the personal data processing listed here is based on our legitimate interest in accordance with Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation.

After the objection has been made, the processing of the data concerned will be stopped unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If the personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. After the objection has been made, we will stop processing the data concerned for direct marketing purposes.

last updated: Nov, 20, 2024