Privacy
General Information
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are under no obligation to provide your data. Failure to provide such data will have no consequences. This only applies where no other indication is given in the following processing activities.
"Personal data" means any information relating to an identified or identifiable natural person.
Server Log Files
You can visit our website without providing any personal information.
Each time you access our website, usage data is transmitted by your internet browser to us or to our web hosting/IT service provider and stored in log files (known as server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting internet service provider.
The processing is carried out on the basis of Article 6(1)(f) GDPR, based on our overriding legitimate interest in ensuring the uninterrupted operation of our website and improving our services.
Contact
Data Controller
You may contact us at any time if you wish.
The processing of your personal data is carried out by us as the data controller. The name and contact details of the data controller (and, where applicable, the contact details of the Data Protection Officer) can be found in our Legal Notice (Imprint).
Customer-Initiated Contact by Email
If you contact us by email on your own initiative for business purposes, we collect your personal data (name, email address, and the content of your message) only to the extent that you provide it.
The processing of your data serves the purpose of handling and responding to your enquiry.
If your enquiry relates to pre-contractual measures (for example, advice regarding a purchase or the preparation of a quotation) or concerns an existing contract between you and us, the data processing is carried out on the basis of Article 6(1)(b) GDPR.
If the contact is made for other purposes, the processing is based on Article 6(1)(f) GDPR, reflecting our overriding legitimate interest in processing and responding to your enquiry.
In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR.
We use your email address solely for the purpose of responding to your enquiry. Your data will subsequently be deleted in accordance with the applicable statutory retention periods unless you have consented to further processing or use.
Collection and Processing of Data When Using the Contact Form
When you use our contact form, we collect your personal data (name, email address, and message) only to the extent that you provide it.
The data is processed for the purpose of responding to your enquiry.
If your enquiry relates to pre-contractual measures (for example, purchase advice or the preparation of a quotation) or concerns an existing contract between you and us, the processing is carried out on the basis of Article 6(1)(b) GDPR.
If your enquiry is made for other purposes, the processing is carried out on the basis of Article 6(1)(f) GDPR, reflecting our overriding legitimate interest in processing and responding to your request.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR.
Your email address will be used solely to process your enquiry. Your data will then be deleted in accordance with the applicable statutory retention periods unless you have agreed to further processing or use.
WhatsApp Business
If you contact us via WhatsApp for business purposes, we use WhatsApp Business, provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "WhatsApp"). If your habitual residence is outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The processing of your data serves the purpose of handling and responding to your enquiry.
For this purpose, we collect and process the mobile phone number registered with WhatsApp and, where provided, your name and any other information you make available to us during the communication.
We use a mobile device for this service whose address book contains only the contact details of users who have contacted us via WhatsApp. Accordingly, personal data is not disclosed to WhatsApp unless you have already consented to such disclosure directly with WhatsApp.
Your data is transmitted by WhatsApp to servers operated by Facebook Inc. in the United States.
The European Commission has not adopted an adequacy decision for the United States. Data transfers are based, among other things, on the European Commission's Standard Contractual Clauses (SCCs), which serve as appropriate safeguards for the protection of personal data.
If your enquiry relates to pre-contractual measures (for example, advice regarding a purchase or the preparation of a quotation) or concerns an existing contract between you and us, your personal data is processed on the basis of Article 6(1)(b) GDPR.
If you contact us for other reasons, your personal data is processed on the basis of Article 6(1)(f) GDPR, reflecting our overriding legitimate interest in providing a fast and straightforward means of communication and responding to your enquiry.
In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR.
We use your personal data solely for the purpose of processing your enquiry. Your data will subsequently be deleted in accordance with the applicable statutory retention periods unless you have consented to further processing or use.
Further information about WhatsApp's Terms of Service and Privacy Policy can be found on the WhatsApp website.
Customer Account and Orders
Customer Account
When you create a customer account, we collect your personal data only to the extent specified during the registration process.
The processing of your data serves the purpose of improving your shopping experience and simplifying the order process.
Your data is processed on the basis of your consent pursuant to Article 6(1)(a) GDPR.
You may withdraw your consent at any time by notifying us. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
Upon withdrawal of your consent, your customer account will be deleted.
Collection, Processing and Disclosure of Personal Data in Connection with Orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to respond to your enquiries.
The provision of your data is necessary for the conclusion of the contract. Failure to provide the required data will prevent the contract from being concluded.
The processing is carried out on the basis of Article 6(1)(b) GDPR and is necessary for the performance of a contract concluded with you.
Your data may be disclosed, for example, to:
-
the shipping company you have selected;
-
dropshipping providers;
-
payment service providers;
-
order processing service providers; and
-
IT service providers.
In all cases, we strictly comply with the applicable legal requirements. The scope of any data transfer is limited to the minimum necessary.
Newsletter
Use of Your Email Address for Newsletter Distribution
We use your email address, independently of the performance of any contract, solely for our own marketing purposes by sending you our newsletter, provided that you have expressly consented to this.
The processing is carried out on the basis of your consent pursuant to Article 6(1)(a) GDPR.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.
You can unsubscribe from the newsletter at any time by clicking the unsubscribe link contained in each newsletter or by contacting us directly.
Once you unsubscribe, your email address will be removed from the mailing list.
Your data is processed by an email marketing service provider acting on our behalf under a data processing agreement. Your data will not be disclosed to any other third parties.
Shipping Service Providers
Disclosure of Your Email Address to the Shipping Company
As part of the performance of the contract, we will pass your email address to the shipping company if you have expressly consented to this during the ordering process.
The purpose of the disclosure is to allow the shipping company to inform you by email about the status of your shipment.
The processing is based on your consent pursuant to Article 6(1)(a) GDPR.
You may withdraw your consent at any time by notifying either us or the shipping company. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Payment Service Providers
Use of PayPal
All PayPal transactions are subject to PayPal's Privacy Statement.
Use of PayPal Express
We use the PayPal Express payment service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg ("PayPal") on our website.
The processing of your data serves the purpose of offering you payment via PayPal Express.
To integrate this payment service, PayPal collects, stores and analyses certain information when you visit our website, including:
-
your IP address;
-
device type;
-
operating system;
-
browser type; and
-
the location of your device.
Cookies may also be used for this purpose. These cookies enable your browser to be recognised.
The processing of your personal data is carried out on the basis of Article 6(1)(f) GDPR, reflecting our overriding legitimate interest in offering a customer-friendly selection of payment methods.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR.
If you choose and use PayPal Express, the data required to process your payment will be transmitted to PayPal in order to fulfil the contract using your selected payment method.
This processing is carried out on the basis of Article 6(1)(b) GDPR.
Further information regarding data processing by PayPal Express can be found in PayPal's Privacy Statement.
Use of Personal Data When Selecting Klarna Payment Options
To offer you Klarna's payment options, we will transmit personal data, such as your contact details and order information, to Klarna.
This enables Klarna to assess whether you are eligible to use the payment methods offered by Klarna and to tailor those payment options to your needs.
General information about Klarna can be found on Klarna's website.
Your personal data will be processed by Klarna in accordance with the applicable data protection legislation and as described in Klarna's Privacy Notice.
Cookies
Our website uses cookies. Cookies are small text files that are stored by your internet browser on your computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a unique character string that enables the browser to be identified when the website is visited again.
Cookies are stored on your computer. You therefore have full control over their use. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are stored and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, please note that if you do so, you may not be able to use all of the functions of this website to their full extent.
You can find information on how to manage (including disable) cookies in the most common browsers by visiting the respective browser support pages.
Technically Necessary Cookies
Unless otherwise stated in this Privacy Policy, we use only those cookies that are technically necessary to make our website more user-friendly, effective, and secure.
Cookies also enable our systems to recognize your browser after you have navigated between pages and to provide certain services. Some features of our website cannot function without the use of cookies, as they require the browser to be recognized even after changing pages.
The use of cookies or similar technologies is based on Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TTDSG).
The processing of your personal data is carried out on the basis of Article 6(1)(f) GDPR, reflecting our overriding legitimate interest in ensuring the optimal functionality of our website and providing a user-friendly and efficient online service.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR.
Use of the CookieBar Plugin
We use the CookieBar plugin provided by Frontend Studios GmbH (Treppenstraße 12–14, 34117 Kassel, Germany) on our website.
This tool enables you to grant consent for data processing activities carried out via the website, particularly the use of cookies, and to exercise your right to withdraw any consent previously given.
The purpose of the data processing is to obtain and document the legally required consents for data processing activities and thereby comply with our legal obligations.
Cookies may be used for this purpose.
Among other things, the following information may be collected and transmitted to the provider:
-
Date and time of your visit;
-
Information about the browser you use;
-
Information about the device you use;
-
An anonymized IP address;
-
Consent (opt-in) and withdrawal (opt-out) preferences.
This data is not disclosed to any other third parties.
The processing is carried out for compliance with a legal obligation pursuant to Article 6(1)(c) GDPR.
Further information about the CookieBar plugin is available from the provider.
Analytics and Advertising
Use of Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
If your habitual residence is within the European Economic Area or Switzerland, your data controller is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), which is responsible for processing your data in accordance with applicable data protection laws.
Google Analytics is used to analyze the use of our website and its visitors, as well as for marketing and advertising purposes.
On our behalf, Google uses the information collected to evaluate your use of the website, compile reports on website activity, and provide additional services related to website and internet usage.
The following information may be collected, among other things:
-
IP address;
-
Date and time of your visit;
-
Click path;
-
Information about your browser;
-
Information about your device;
-
Pages visited;
-
Referrer URL (the website from which you accessed our website);
-
Location data;
-
Purchase activity.
The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
Google Analytics uses technologies such as:
-
Cookies;
-
Browser web storage;
-
Tracking pixels.
These technologies enable an analysis of your use of the website.
The information generated is generally transmitted to a Google server in the United States and stored there.
The European Commission has not adopted an adequacy decision for the United States.
Data transfers are based, among other things, on the European Commission's Standard Contractual Clauses (SCCs), which provide appropriate safeguards for the protection of personal data.
Both Google and U.S. government authorities may have access to your data.
Google may combine your data with other information it already holds about you, such as:
-
your search history;
-
your personal Google accounts;
-
usage data from other devices; and
-
any other information associated with you.
IP anonymization is activated on this website. This means that Google truncates your IP address within Member States of the European Union or other parties to the Agreement on the European Economic Area before transmitting it.
Only in exceptional cases is the full IP address transmitted to a Google server in the United States and shortened there.
The processing of your personal data is based on Article 6(1)(f) GDPR, reflecting our overriding legitimate interest in the needs-based and targeted design of our website.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR.
You can prevent Google from collecting data generated by Google Analytics relating to your use of the website (including your IP address) and from processing that data by downloading and installing Google's browser add-on.
To prevent data collection across devices, you may also set an opt-out cookie. Opt-out cookies prevent Google Analytics from collecting your data during future visits to this website. You must activate the opt-out on each browser and device you use for it to be effective. If you delete the opt-out cookie, requests to Google will resume.
Further information about Google Analytics, Google's Terms of Service, and Google's Privacy Policy is available from Google.
Google Remarketing / Similar Audiences
We use the Google Remarketing (or Similar Audiences) feature provided by Google LLC.
If your habitual residence is within the European Economic Area or Switzerland, Google Ireland Limited is responsible for processing your data.
This feature is used to analyze visitor behaviour and interests so that interest-based advertising can be displayed.
Google uses cookies to analyze website usage. These cookies collect anonymized information regarding visits to our website.
No personal data identifying visitors is stored.
If you subsequently visit another website within the Google Display Network, you may be shown advertisements that are highly likely to reflect products or information that you previously viewed on our website.
Your data may be transferred to the United States.
The European Commission has not adopted an adequacy decision for the United States.
Such transfers are based, among other things, on the European Commission's Standard Contractual Clauses.
The processing of your personal data is carried out on the basis of Article 6(1)(f) GDPR, reflecting our overriding legitimate interest in providing visitors with targeted, interest-based advertising.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR.
You can permanently disable Google's use of cookies for advertising purposes by downloading and installing the browser plugin provided by Google.
Alternatively, you can disable the use of cookies by third-party advertising providers through the Network Advertising Initiative's opt-out page.
Further information regarding Google Remarketing and Google's advertising privacy practices can be found in Google's Privacy Policy.
Plug-ins and Other Services
Use of YouTube
We use the YouTube video embedding feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website.
YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
This feature displays videos hosted on YouTube within an embedded iFrame on our website.
The Enhanced Privacy Mode is enabled. This means that YouTube does not store information about visitors to our website unless they actively play a video.
Only when you play a video is information transmitted to YouTube and stored there.
Your data may be transferred to the United States.
The European Commission has not adopted an adequacy decision for the United States. Data transfers are based, among other things, on the European Commission's Standard Contractual Clauses (SCCs), which provide appropriate safeguards for the protection of personal data.
The processing of your personal data is carried out on the basis of Article 6(1)(f) GDPR, reflecting our overriding legitimate interest in providing a website that is tailored to users' needs and presented in an effective manner.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR.
Further information about how YouTube and Google collect and use data, your rights, and the options available to protect your privacy can be found in YouTube's Privacy Policy.
Data Subject Rights and Data Retention
Retention Period
Once a contract has been fully performed, your data will initially be retained for the duration of the applicable warranty period.
After that, your data will be stored in accordance with the statutory retention obligations, particularly those arising under tax and commercial law.
Once the applicable retention periods have expired, your data will be deleted unless you have expressly consented to its continued processing or use.
Rights of the Data Subject
Where the statutory requirements are met, you have the following rights under Articles 15 to 20 GDPR:
-
the right of access;
-
the right to rectification;
-
the right to erasure ("right to be forgotten");
-
the right to restriction of processing; and
-
the right to data portability.
In addition, under Article 21(1) GDPR, you have the right to object to the processing of your personal data where such processing is based on Article 6(1)(f) GDPR (legitimate interests), as well as to processing carried out for the purposes of direct marketing.
Right to Lodge a Complaint with a Supervisory Authority
Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful.
You may submit a complaint, for example, to the supervisory authority responsible for our organization:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen)
Postal address:
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Telephone:
+49 (0)211 38424-0
Email:
poststelle@ldi.nrw.de
Website:
Right to Object
Where the processing of your personal data described in this Privacy Policy is based on our legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to such processing at any time, with effect for the future, on grounds relating to your particular situation.
Once you have exercised your right to object, the processing of the data concerned will cease unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
.