Privacy policy

Unless otherwise stated below, the provision of your personal data is neither required by law nor contractually, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data has no consequences. This applies only where no other indication is given in the processing operations described below.

“Personal data” means any information relating to an identified or identifiable natural person.

Server Log Files

You may visit our website without providing any personal information.

Whenever you access our website, usage data are transmitted to us or to our web host / IT service provider by your internet browser and stored in log data (so-called server log files). These stored data include, for example, the name of the page accessed, the date and time of access, the IP address, the volume of data transferred and the requesting provider.

Processing is carried out on the basis of Article 6(1)(f) GDPR, based on our overriding legitimate interest in ensuring the uninterrupted operation of our website and improving our services.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the United States. The European Commission has issued an adequacy decision for Canada. For the United States, an adequacy decision of the European Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the European Commission’s Standard Contractual Clauses.

Contact

Controller

Please contact us if you wish. The controller responsible for data processing is:

Customer-Initiated Contact by Email

If you initiate business contact with us by email, we collect your personal data (name, email address and message text) only to the extent provided by you. The data processing serves to handle and respond to your contact request.

If the contact serves the performance of pre-contractual measures (e.g. advice in the event of an interest in purchasing or preparation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Article 6(1)(b) GDPR.

If contact is made for other reasons, this data processing is based on Article 6(1)(f) GDPR, based on our overriding legitimate interest in handling and responding to your request. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is based on Article 6(1)(f) GDPR.

We use your email address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and Processing When Using the Contact Form

When you use the contact form, we collect your personal data (name, email address and message text) only to the extent provided by you. The data processing serves the purpose of establishing contact.

If the contact serves the performance of pre-contractual measures (e.g. advice in the event of an interest in purchasing or preparation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Article 6(1)(b) GDPR.

If contact is made for other reasons, this data processing is based on Article 6(1)(f) GDPR, based on our overriding legitimate interest in handling and responding to your request. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is based on Article 6(1)(f) GDPR.

We use your email address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and Processing When Using the Cancellation Button

If you have concluded a contract through our online presence, we provide a cancellation function (cancellation button) through which you can submit your declaration of cancellation directly.

When using the cancellation function, we collect your personal data (name, email address, information for identifying the contract or part of the contract you wish to cancel, and the time, date and time of dispatch of the declaration of cancellation) only to the extent provided by you. The data processing serves to provide you with the legally required option to cancel your contract and to properly process your cancellation.

If the contact concerns a contract already concluded between you and us, this data processing is based on Article 6(1)(b) GDPR. Otherwise, the data processing is based on Article 6(1)(c) GDPR in order to fulfil a legal obligation to provide you with a cancellation function through our online presence.

We use your email address only to process your declaration of cancellation. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Disclosure to Third Parties When Using the Plug-in

To technically provide and manage the cancellation function on our online presence, we use a software solution of the third-party provider Händlerbund Legal GmbH, Kohlgartenstraße 11-13, 04315 Leipzig, Germany, within the scope of processing on our behalf. The plug-in enables you to submit your declaration of cancellation directly via the cancellation button if you have concluded a contract with us through our website. Technically necessary cookies are used for this purpose and the following information is collected: encrypted session ID.

Your data may be transferred to third countries such as the United States. For the United States, an adequacy decision of the European Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). If providers are not certified under the TADPF, data are transferred to the United States on the basis of Standard Contractual Clauses as appropriate safeguards for the protection of personal data, available at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.

When the cancellation function is used, the personal data collected from you are transmitted to the servers of the third parties named above.

The processing of your personal data serves to ensure that the legal requirements for the legally compliant design of the cancellation function are met and is based on Article 6(1)(c) GDPR. This data processing is also based on Article 6(1)(f) GDPR, based on our overriding legitimate interest in being able to provide you with a user-friendly option to cancel. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is based on Article 6(1)(f) GDPR.

The use of cookies or comparable technologies is based on Section 25(2) TDDDG. Further information on data protection is available at: https://www.haendlerbund.de/de/datenschutzerklaerung.

WhatsApp Business

If you initiate business contact with us via WhatsApp, we use the WhatsApp Business version provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”) for this purpose. If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).

The data processing serves to handle and respond to your contact request. For this purpose, we collect and process the mobile phone number stored with WhatsApp, your name if provided, and further data to the extent provided by you. We use a mobile device for the service whose address book contains only the data of users who have contacted us via WhatsApp. Consequently, personal data are not disclosed to WhatsApp unless you have already consented to this vis-à-vis WhatsApp.

WhatsApp transfers your data to servers of Meta Platforms Inc. in the United States. For the United States, an adequacy decision of the European Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has certified under the TADPF and has therefore undertaken to comply with European data-protection principles.

If the contact serves the performance of pre-contractual measures (e.g. advice in the event of an interest in purchasing or preparation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Article 6(1)(b) GDPR.

If contact is made for other reasons, this data processing is based on Article 6(1)(f) GDPR, based on our overriding legitimate interest in providing a quick and simple means of contact and responding to your request. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is based on Article 6(1)(f) GDPR.

We use your personal data only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Further information on the terms of use and data protection when using WhatsApp is available at https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.

Customer Account and Orders

Customer Account

When you open a customer account, we collect your personal data to the extent specified there. The data processing serves to improve your shopping experience and simplify order processing. Processing is based on Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. Your customer account will subsequently be deleted.

Collection, Processing and Disclosure of Personal Data When Placing Orders

When you place an order, we collect and process your personal data only insofar as this is necessary to fulfil and process your order and handle your enquiries. Providing the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. Processing is based on Article 6(1)(b) GDPR and is necessary for the performance of a contract with you.

In this context, your data may be disclosed, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly comply with the legal requirements. The scope of data transfer is limited to the minimum necessary.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the United States. The European Commission has issued an adequacy decision for Canada. For the United States, an adequacy decision of the European Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the European Commission’s Standard Contractual Clauses.

Reviews and Advertising

Use of Trustpilot

We use the “Trustpilot” review system of Trustpilot A/S (Pilestræde 58, 1112 Copenhagen, Denmark; “Trustpilot”) on our website.

Trustpilot enables us to collect customer reviews and display them on our website in order to give you an insight into the quality of our services.

Following an order, you may receive an invitation from us or Trustpilot to submit a review and may then submit one. In this context, the following data may be processed by us or Trustpilot: email address, name, information about your device and location (IP address, browser settings, type of browser used, browser language, time zone), information about your Trustpilot user account (user name, photo, preferred language), information about the purchased product or service used (reference or order number, product details), the content of your review and the star rating you have given, and your product photos or videos (if you have attached them to your product review). These data may also be used to verify your review.

Processing is based on Article 6(1)(a) GDPR with your consent, provided that you have expressly consented to the disclosure of your data and to receiving the review invitation. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

Further information on data protection when using Trustpilot is available at: https://de.legal.trustpilot.com/for-reviewers/end-user-privacy-terms.

Use of Email Address for Sending Newsletters

We use your email address to send information and offers by newsletter if you have expressly consented to this. The data processing serves exclusively the purpose of advertising. For this purpose, we process your email address and, where applicable, further data that you voluntarily provided when registering for our newsletter.

Processing is based on Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

You may unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address on a so-called blacklist in order to prevent you from receiving newsletter emails from us in the future. This storage is based on Article 6(1)(f) GDPR, based on our and your legitimate interest in preventing your email address from being used again to send our newsletter. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.

Use of Email Address for Availability Notifications

We offer an availability notification service on our website. If an item is temporarily unavailable, you may enter your email address for that item and, if you have consented, receive an email from us when it becomes available. When the goods become available, you will receive a one-time email notification about the availability of the relevant item. Processing is based on Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. You may unsubscribe from availability notifications at any time by notifying us. Your email address will subsequently be removed from the mailing list.

Shipping Service Providers and Merchandise Management

Disclosure of Email Address to Shipping Companies for Information on Shipping Status

As part of contract processing, we disclose your email address to the transport company if you have expressly consented to this during the order process. The disclosure serves to inform you by email about the shipping status. Processing is based on Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us or the transport company, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

Use of an External Merchandise Management System

To process contracts, we use a merchandise management system within the scope of processing on our behalf. For this purpose, the personal data collected in connection with your order are transmitted to Ascend.

The processing of your personal data serves to fulfil the contract concluded with you and is based on Article 6(1)(b) GDPR.

Payment Service Providers and Credit Checks

Use of Klarna Payment Options

We use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; “Klarna”) on our website. When you select and use payment via Klarna, the data required to process the payment are transferred to Klarna in order to fulfil the contract with you using the payment method you selected. This processing is based on Article 6(1)(b) GDPR.

Cookies that enable your browser to be recognised may be stored. The resulting data processing is based on Article 6(1)(f) GDPR, based on our overriding legitimate interest in offering various customer-oriented payment methods. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.

Pay Later, Pay Now and Financing

For certain payment methods such as “Pay Later” (invoice), “Pay Now” (payment by direct debit, credit card or instant bank transfer) and “Financing” (instalment purchase), Klarna reserves the right to obtain credit information, where applicable, from credit reference agencies using mathematical-statistical methods.

For this purpose, Klarna transfers personal data required for a credit check, such as first and last name, address, gender, email address, IP address and data related to the order, to a credit reference agency for identity and credit assessment. Klarna uses the information received on the statistical probability of a payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship. The credit information may include probability values (score values) calculated using scientifically recognised mathematical-statistical methods, which include address data among other factors. Your interests deserving protection are taken into account in accordance with the statutory provisions.

The data processing serves the purpose of credit assessment for the initiation of a contract. Processing is based on Article 6(1)(f) GDPR, based on our overriding legitimate interest in protection against payment default where Klarna makes advance payments. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you based on Article 6(1)(f) GDPR by notifying Klarna. Providing the data is necessary for the conclusion of the contract using the payment method you require. Failure to provide the data means that the contract cannot be concluded using the payment method you selected.

Further information, in particular on the credit reference agencies to which Klarna discloses your personal data, is available for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/credit_rating_agencies.

General information about Klarna is available for Germany at: https://www.klarna.com/de/ and for Austria at https://www.klarna.com/at/. Klarna processes your personal data in accordance with the applicable data-protection provisions and the information set out in Klarna’s privacy policy for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.

Cookies

Our website uses cookies. Cookies are small text files that are stored in a user’s internet browser or by the internet browser on a user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.

Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set, decide whether to accept them individually, and prevent cookies from being stored and the data they contain from being transmitted. Cookies already stored can be deleted at any time. Please note, however, that you may then be unable to use all functions of this website to their full extent.

The links below provide information on how to manage, including disable, cookies in the most important browsers:

• Chrome: https://support.google.com/accounts/answer/61416?hl=de
• Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
• Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically Necessary Cookies

Unless otherwise stated below in this privacy policy, we use only these technically necessary cookies in order to make our services more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser after you move to another page and to offer you services. Some functions of our website cannot be offered without cookies. For these functions, it is necessary that the browser is recognised again after moving to another page.

The use of cookies or comparable technologies is based on Section 25(2) TDDDG. Your personal data are processed on the basis of Article 6(1)(f) GDPR, based on our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly, effective design of our services.

You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.

Use of the Shopify Privacy & Compliance Consent Tool

We use the “Shopify Privacy & Compliance” consent tool of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) on our website. Shopify is an affiliated company of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).

The tool enables you to give consent to data processing via the website, in particular to the setting of cookies, and to exercise your right to withdraw consent already given. The data processing serves to obtain and document the necessary consents to data processing and thereby comply with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the United States. The European Commission has issued an adequacy decision for Canada. For the United States, an adequacy decision of the European Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the European Commission’s Standard Contractual Clauses.

Data processing is carried out to fulfil a legal obligation on the basis of Article 6(1)(c) GDPR.

Further information on data protection at Shopify is available at https://www.shopify.com/de/legal/datenschutz.

Analytics

Use of Google Analytics 4

We use the Google Analytics web analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.

The data processing serves to analyse this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity and provide the website operator with further services related to website and internet use.

The following information may be collected: IP address, date and time of page access, click path, information about the browser and device you use, pages visited, referrer URL (the website from which you accessed our website), location data and purchasing activity. Google may link your data with other data, such as your search history, your personal accounts, your usage data from other devices and any other data Google holds about you.

Google shortens the IP address in Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand.

Google uses technologies such as cookies, web storage in the browser and tracking pixels, which enable an analysis of your use of the website. The use of cookies or comparable technologies takes place with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR.

Your personal data are processed with your consent on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

The information generated in this way about your use of this website is generally transferred to and stored on a Google server in the United States. For the United States, an adequacy decision of the European Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified under the TADPF and has therefore undertaken to comply with European data-protection principles. Both Google and US state authorities have access to your data.

Further information on terms of use and data protection is available at https://policies.google.com/technologies/partner-sites, https://policies.google.com/privacy?hl=de&gl=de and https://business.safety.google/privacy/.

Plug-ins and Other Services

Use of hCaptcha

We use the hCaptcha service of Intuition Machines Inc. (1065 SW 8th St #704, Miami, FL 33130, USA; “hCaptcha”) on our website within the scope of processing on our behalf.

hCaptcha serves to protect our website against spam and misuse through automated access (bots). By implementing hCaptcha, we ensure that certain actions on our website are carried out only by real persons, which ensures the security and integrity of our online services.

When using hCaptcha, the following data may be collected and processed: the user’s IP address, information about the device used (e.g. browser and operating system), mouse movements and interactions on the website, time spent on the website and the user’s input behaviour.

Your data may be transferred to the United States. For the United States, an adequacy decision of the European Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). hCaptcha has certified under the TADPF and has therefore undertaken to comply with European data-protection principles.

The use of cookies or comparable technologies takes place with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. Your personal data are processed with your consent on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

Further information on data processing and data protection at hCaptcha is available at https://www.hcaptcha.com/gdpr.

Use of YouTube

We use the function for embedding YouTube videos provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website. YouTube is an affiliated company of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

The function displays videos stored on YouTube in an iFrame on the website. The “enhanced privacy mode” option is activated. As a result, YouTube does not store information about visitors to the website. Information is transferred to and stored by YouTube only when you watch a video. Your data may be transferred to the United States. For the United States, an adequacy decision of the European Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified under the TADPF and has therefore undertaken to comply with European data-protection principles.

The use of cookies or comparable technologies takes place with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. Your personal data are processed with your consent on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

Further information on the collection and use of data by YouTube and Google, your related rights and options for protecting your privacy can be found in YouTube’s privacy policy at https://www.youtube.com/t/privacy.

Rights of Data Subjects and Storage Period

Storage Period

Once the contract has been fully processed, the data are initially stored for the duration of the statutory warranty period and thereafter in consideration of statutory retention periods, in particular those under tax and commercial law. They are deleted after those periods expire, unless you have consented to further processing and use.

Rights of the Data Subject

Where the legal requirements are met, you have the following rights under Articles 15 to 20 GDPR: the right of access, the right to rectification, the right to erasure, the right to restriction of processing and the right to data portability.

In addition, under Article 21(1) GDPR, you have the right to object to processing based on Article 6(1)(f) GDPR and to processing for direct-marketing purposes.

Right to Lodge a Complaint with a Supervisory Authority

Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data is not lawful.

You may lodge a complaint, among others, with the supervisory authority responsible for us, whose contact details are as follows:

Right to Object

Where the processing of personal data listed here is based on our legitimate interest pursuant to Article 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object to this processing at any time with effect for the future.

Once you have objected, processing of the data concerned will cease unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or where processing serves the establishment, exercise or defence of legal claims.