Responsible for data processing and storage:
Thank you for your interest in our online shop. The protection of your privacy is very important to us. In the following we inform you in detail about the handling of your data.
1. Access data and hosting
You can visit our website without providing any personal information. Each time the website is accessed, the web server only automatically saves a so-called server log file, which contains the name of the requested data, your IP address, date and time of access, transferred data volume and the requesting provider (access data), and which documents the access.
These access data are evaluated exclusively for the purpose of ensuring the smooth and trouble-free operation of the site and improving our services. This is in accordance with Art. 6 Para. 1 S. 1 lit. f of the General Data Protection Regulation (hereinafter: GDPR) and serves to safeguard our predominantly legitimate interests in a correct presentation of our offer as part of a weighing of interests. All access data will be deleted at the latest seven days after your visit.
Hosting services by a third-party provider
In the context of processing on our behalf, a third party provider provides us with the services of hosting and display of the website. This serves to protect our predominantly legitimate interests in a correct presentation of our offer within the scope of a weighing of interests. All data collected within the framework of the use of this website or in the forms provided for this purpose in the online shop, as described below, will be processed on its servers. A processing on other servers takes place only in the framework explained here.
This service provider is located within a country of the European Union or the European Economic Area.
2. Collection and use of data for the execution of contracts, establishment of contact
We collect personal data when you provide it to us within the framework of your order or when contacting us (e.g. via contact form or e-mail). Mandatory fields are marked as such, because in these cases we need the data to process the contract or to process your contact, and you cannot complete the order or send the contact form without including this information. Which data is mandatory will be evident from the respective input forms. We use the data provided by you in accordance with Art. 6 Para. 1 S. 1 lit. b of the GDPR for the processing of contracts and of your enquiries. After the contract has been fully processed (including product returns, when applicable), your data will be limited from further processing and deleted after any tax and commercial law retention periods have expired, unless you have expressly consented to further use of your data, or when the law explicitly permits us the right to use the data, as stated in this declaration.
3. Data transfer
In order to fulfill the contract, pursuant to Art. 6 Para. 1 S. 1 lit. b of the GDPR, we pass on your data to the companies responsible for production and delivery. Depending on which payment service provider you select in the ordering process, we will pass on the payment data collected for this purpose to the credit institution and payment service provider commissioned by us, or to the selected payment service in order to process payments. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must register with the payment service provider using your access data during the ordering process. In this respect, the data protection declaration of the respective payment service provider applies.
We also use an external merchandise management system for order and contract processing. The data transfer or processing taking place in this respect is based on data related to order processing.
The same terms apply to the data transfer to our manufacturers or wholesalers in the cases in which they take over the shipping for us (drop shipment).
We partially use production and shipping service providers who are based in a country outside the European Union. The transmission of personal data to these companies only takes place within the framework of the necessity to fulfil the contract.
4. Cookies and web analysis
If cookies are not accepted, the functionality of our website may be restricted.
Use of Google (Universal) Analytics for Web Analytics
For web page analysis this website uses Google (Universal) Analytics, a web analysis service of Google LLC (www.google.com). This serves to safeguard our predominantly legitimate interests in an optimised presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f of the GDPR. Google (Universal) Analytics uses methods that enable the analysis of your use of the website, such as cookies. The automatically collected information about your use of this website is generally transmitted to a Google server in the USA and stored there. By activating IP anonymization on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The anonymous IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The data collected in this context will be deleted after we have stopped using Google Analytics for the intended purpose and at the end of its use.
Google LLC has its headquarters in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Due to this agreement between the USA and the European Commission, the latter has determined an appropriate level of data protection for companies certified under the Privacy Shield.
You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en
As an alternative to the browser plug-in, you can click this link to prevent Google Analytics from collecting data from this website in the future. An opt-out cookie is stored on your device. If you delete your cookies, you must click the link again to activate its functionality.
On this website, we have integrated the script code “Google Fonts” of the company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: Google). This serves to protect our predominantly legitimate interests in a uniform presentation of the contents on our website in accordance with Art. 6 Para. 1 lit. f of the GDPR.
Within this framework, a connection is established between the browser you use and the Google servers. As a result, Google becomes aware that our website has been accessed via your IP address.
Google is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the United States and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.
For more information about data processing by Google, please see Google’s Privacy Notice.
5. Social media plug-ins
Using social plugins from Facebook, Twitter using the Shariff solution.
Social buttons from social networks are used on our website.
This serves to protect our predominantly legitimate interests in an optimal marketing of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f of the GDPR within the scope of a weighing of interests. In order to increase the protection of your data when you visit our website, these buttons are not integrated into the page without restriction as plug-ins, but only using an HTML link. This integration ensures that when a page on our website containing such buttons is accessed, no connection is established with the servers of the provider of the respective social network.
If you click on one of these social buttons, a new browser window opens and calls up the page of the respective service provider, on which you can press (if necessary after input of your login data) e.g. the Like or Share button.
For the purpose and scope of the data collection and the further processing and use of the data by the providers on their pages, as well as a contact option and your rights and setting options in this regard for the protection of your privacy, please refer to the privacy notices of the providers.
Using social plugins from Instagram
So-called social plugins (“plugins”) from the social network Instagram are used on our website.
When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. By integrating the plugins, the provider receives the information that your browser has called up the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted by your browser directly to a server of the respective provider (possibly to the USA) and stored there. If you are logged in to one of the services, the provider can assign the visit to our website directly to your profile in the respective social network. If you interact with the plugins, for example by pressing the “Like” button or posting a comment, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published in the social network and displayed there to your contacts. This serves to protect our predominantly legitimate interests in an optimal marketing of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f of the GDPR.
The purpose and scope of the data collection and the further processing and use of the data by the provider, as well as a contact option and your rights in this regard and how to adjust settings to protect your privacy can be found in the data protection information of the provider.
If you do not want social networks to directly associate the information collected through our website with your profile on that service, you must log out of that service before visiting our website. You can also use add-ons for your browser to completely prevent plugins from loading, e.g. the script blocker “NoScript” (https://noscript.net/).
Our online presence on Facebook, Google, Twitter, Instagram, LinkedIn
Our presence on social networks and platforms serves a better, more active communication with our customers and prospective customers. We inform them about our products and ongoing special promotions using these networks and platforms.
When you visit our online presence in social media, your data may be automatically collected and stored for market research and advertising purposes. From this data, so-called usage profiles are created using pseudonyms. These can be used, for example, to place advertisements inside and outside the platforms that are presumed to correspond to your interests. Cookies are generally used on your end device for this purpose. The visitor behaviour and the interests of the users are stored in these cookies. This serves in accordance with Art. 6 Para. 1 lit. f. of the GDPR to safeguard our predominantly legitimate interests in an optimised presentation of our offer, and for effective communication with customers and interested parties within the scope of a weighing of interests. If you are asked by the respective social media platform operators for their consent to data processing, e.g. with the help of a checkbox, the legal basis for data processing is Art. 6 Para. 1 lit. a of the GDPR.
Insofar as the aforementioned social media platforms have their headquarters in the USA, the following applies: The European Commission has issued an adequacy decision for the USA. This goes back to the EU-US Privacy Shield. A current certificate for the respective company can be viewed here.
The detailed information on the processing and use of the data by the providers on their pages, as well as a contact option and your rights and settings to protect your privacy and particular opt-out options, can be found in the data protection information of the providers linked below. Should you nevertheless require help in this regard, you can contact us.
Data processing is carried out on the basis of an agreement between jointly responsible parties pursuant to Art. 26 of the GDPR, which you can view here:
Possibility of objection (opt-out):
6. Contact options and your rights
As a data subject, you have the following rights:
· Pursuant to Art. 15 of the GDPR, you have the right to request information about your personal data processed by us to the extent specified therein;
· Pursuant to Art. 16 of the GDPR, you have the right to immediately request the correction of incorrect or incomplete personal data stored by us;
· Pursuant to Art. 17 of the GDPR, you have the right to demand the deletion of your personal data stored by us, unless further processing is required
– on the exercise of freedom of expression and information;
– to fulfil a legal obligation;
– for reasons of public interest, or
– for the assertion, exercise or defence of legal claims;
· Pursuant to Art. 18 of the GDPR, you have the right to request the restriction of the processing of your personal data, insofar as
– the correctness of the data is denied by you;
– the processing is unlawful, but you refuse to delete it;
– we no longer need the data, but you need it to assert, exercise or defend legal claims, or
– you have lodged an objection against the processing under Article 21 of the GDPR;
· Pursuant to Art. 20 of the GDPR, you have the right to receive all your personal data which you have provided to us in a structured, common and machine-readable format or to request the transfer to another responsible party;
· Pursuant to Art. 77 of the GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or workplace, or at our company headquarters.
If you have any questions regarding the collection, processing or use of your personal data, for information, correction, restriction or deletion of data as well as revocation of consent given or objection to a specific use of data, please contact us directly via the contact data in our imprint.
Right of objection
Insofar as we process personal data as described above in order to safeguard our predominantly legitimate interests as part of a weighing of interests, you may object to this processing with effect for the future. If the processing is carried out for the purposes of direct marketing, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you are only entitled to object if there are reasons arising from your particular situation.
After exercising your right of objection, we will not process your personal data further for these purposes unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims.
This shall not apply if the processing is carried out for the purposes of direct marketing. Then we will not further process your personal data for this purpose.