Privacy Policy (Data Protection Declaration)
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no other information is provided for the subsequent processing operations.
“Personal data” refers to all information relating to an identified or identifiable natural person.
Server Log Files
You can visit our websites without providing any personal information. Every time you access our website, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in log data (so-called server log files).
The stored data includes, for example:
- The name of the page accessed
- The date and time of retrieval
- The IP address
- The volume of data transmitted
- The requesting provider
Legal Basis: Processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our offer.
Order Processing and Data Transfer
When you place an order, we collect and process your personal data only to the extent necessary for the fulfillment and handling of your order and to process your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded.
Legal Basis: Processing is based on Art. 6 (1) lit. b GDPR and is necessary for the performance of a contract with you.
Your data is transferred to third parties including:
- Selected shipping companies and dropshipping providers
- Payment service providers
- Service providers for order processing
- IT service providers
In all cases, we strictly adhere to the legal requirements. The scope of data transmission is limited to a minimum.
Contact Form and Comments
Contact Form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. Data processing serves the purpose of establishing contact. By sending your message, you consent to the processing of the transmitted data.
Legal Basis: Art. 6 (1) lit. a GDPR (Consent). You may withdraw your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until withdrawal. We use your email address only to process your inquiry. Your data will subsequently be deleted unless you have agreed to further processing and use.
Comments
When commenting on an article or post, we collect your personal data (name, email address, comment text) only to the extent provided by you. The processing serves the purpose of enabling commenting and displaying comments. By submitting the comment, you consent to the processing of the transmitted data based on Art. 6 (1) lit. a GDPR. You may withdraw this consent at any time by notifying us. Your personal data will then be deleted.
Upon publication of your comment, the name and email address you provided will be published.
Furthermore, when the comment is submitted, your IP address is stored for the purpose of preventing misuse of the comment function and ensuring the security of our information technology systems. By submitting the comment, you consent to this processing under Art. 6 (1) lit. a GDPR. Your IP address will be deleted after withdrawal of consent or once the purpose is fulfilled.
Customer Reviews
We use a shop evaluation tool on our website, operated by a third party.
Following your order, we would like to ask you to review and comment on your purchase. For this purpose, you will be contacted by us via email. We will collect the:
- Order number / Invoice number
- Purchase value
- Shipping costs
- Email address
Legal Basis: Art. 6 (1) lit. a GDPR. This processing occurs only if you have expressly consented to the transfer of your data and the receipt of the review request. You can withdraw your consent at any time by using the corresponding link in the email or by notifying us.
Newsletter and Direct Advertising
Newsletter
If you have expressly consented, we use your email address independently of contract processing exclusively for our own advertising purposes for newsletter distribution.
Legal Basis: Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time by unsubscribing via the link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.
Your data will be passed to a service provider for email marketing as part of order processing. No transfer to other third parties occurs. Your data is transmitted to a third country for which an adequacy decision by the European Commission is in place.
Direct Advertising
We use your email address, which we received in connection with the sale of a good or service, for the electronic transmission of advertising for our own goods or services that are similar to those you have already purchased from us, provided you have not objected to this use. The provision of the email address is necessary for contract conclusion. Failure to provide it will result in no contract being concluded.
Legal Basis: Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in direct advertising. You may object to this use of your email address at any time by notifying us. The contact details for exercising the objection can be found in the Imprint (Impressum). You can also use the link provided in the advertising email. You will incur no costs for this other than the transmission costs according to the basic rates.
Payment Service Providers
PayPal
All PayPal transactions are subject to the PayPal Privacy Policy, which can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Payment Processing
The controller has integrated components of a third party provider on this website that handles payment processing. If a data subject selects a payment method during the ordering process in the online shop, the data subject’s data is automatically transmitted to the third party. By selecting a payment option, the data subject consents to this transmission of personal data for the purpose of payment processing.
The personal data transmitted usually includes:
- First name, last name, address, date of birth, gender, email address, IP address, phone number, and mobile phone number.
- Other data necessary for payment processing, such as bank details, card number, expiry date, CVC code, and data related to the goods and services and their prices.
The transmission of data serves in particular identity verification, payment administration, and fraud prevention. The controller will transmit personal data to the third provider especially if there is a legitimate interest for the transmission.
The data subject has the option to withdraw consent for the handling of personal data at any time from the third party. A withdrawal does not affect personal data that must be processed, used, or transmitted for mandatory (contractual) payment processing.
Legal Basis: Art. 6 (1) lit. f GDPR (Legitimate interest in offering various payment methods and protecting against payment default). You have the right to object to this processing based on Art. 6 (1) lit. GDPR at any time for reasons arising from your particular situation by notifying us.
Provision of the data is necessary for contract conclusion with your desired payment method. Failure to provide it will result in the contract not being concluded with that payment method.
Rights of the Data Subject and Data Retention
Storage Duration
After complete contract execution, the data is initially stored for the duration of the warranty period, then subsequently stored in consideration of statutory retention periods (especially those required by tax and commercial law), and then deleted after the expiry of these periods, unless you have consented to further processing and use.
Data Subject Rights
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR:
- Right of Access
- Right to Rectification
- Right to Erasure
- Right to Restriction of Processing
- Right to Data Portability
Furthermore, according to Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) f GDPR, as well as to processing for the purpose of direct marketing. Please contact us if you wish to exercise these rights; contact details can be found in our Imprint.
Right to Lodge a Complaint
According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful.
Right to Object
If the personal data processing described here is based on our legitimate interest according to Art. 6 (1) lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.
Once an objection is made, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.
If personal data is processed for the purpose of direct marketing, you may object to this processing at any time by notifying us. Following such an objection, we will stop processing the data for direct marketing purposes.
