privacy policy

**PRIVACY POLICY**

**1) INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE RESPONSIBLE PARTY**

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is any data with which you can be personally identified.

1.2 The responsible party for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Shop Name. The responsible party for the processing of personal data is the individual or legal entity that decides alone or jointly with others on the purposes and means of processing personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser's address bar.

**2) DATA COLLECTION WHEN VISITING OUR WEBSITE**

When you use our website for informational purposes only, meaning you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website you visited.


**Date and time at the time of access**
**Amount of data sent in bytes**
**Source/reference from which you accessed the site**
**Browser used**
**Operating system used**
**IP address used (if applicable: in anonymized form)**

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used for other purposes. However, we reserve the right to retrospectively review the server log files if there are concrete indications of illegal use.

**3) COOKIES**

To make the visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the browser session ends, meaning after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, certain user information such as browser and location data as well as IP address values are collected and processed to a specific extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

In some cases, cookies are used to simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by cookies we implement, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract or ...



... **for the implementation of pre-contractual measures** or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

If we cooperate with third-party providers who use cookies to process your data, we will inform you about this separately within the context of this privacy policy.

**4) CONTACTING US**

When you contact us (e.g., via contact form or email), personal data is collected. The specific data collected in the case of a contact form can be seen from the contact form itself. This data is stored and used solely for the purpose of responding to your request or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after the final processing of your inquiry. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations.

**5) DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PROCESSING**

In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the purpose of fulfilling a contract or when opening a customer account. The specific data collected can be seen from the respective input forms. A deletion of your customer account is possible at any time and can be done by sending a message to the address mentioned above. We store and use the data you provide for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired unless you have expressly consented to further use of your data or we have reserved a legally permitted further data use.

**6) USE OF YOUR DATA FOR DIRECT ADVERTISING**

**6.1 Registration for our email newsletter**

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only information required for sending the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter if you have expressly confirmed to us that you agree to receive newsletters. We will then send you a confirmation email asking you to confirm by clicking a corresponding link that you wish to receive newsletters in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you subscribe to the newsletter, we store your IP address as well as the date and time of registration to track any possible misuse of your email address at a later date. The data collected by us when you register for the newsletter will be used exclusively for promotional purposes via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the responsible party mentioned above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data, or we reserve the right to further data use that is legally permitted and about which we inform you in this declaration.


**6.2 Sending the newsletter to existing customers**

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, such as those already purchased, from our range via email. According to § 7 para. 3 UWG (German Act Against Unfair Competition), we do not need to obtain separate consent from you for this. In this regard, the data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6 para. 1 lit. f GDPR. If you initially objected to the use of your email address for this purpose, we will not send you emails. You are entitled to object to the use of your email address for the aforementioned advertising purposes at any time with effect for the future by notifying the responsible party mentioned above. After receiving your objection, the use of your email address for advertising purposes will immediately cease.

**6.3 Newsletter delivery via CleverReach**

Our email newsletters are sent via the technical service provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede ("CleverReach"), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. The data you enter for the purpose of receiving the newsletter (e.g., email address) will be stored on CleverReach's servers in Germany or Ireland.

CleverReach uses this information to send and statistically analyze the newsletters on our behalf. For analysis purposes, the emails sent contain so-called web beacons or tracking pixels, which represent single-pixel image files stored on our website. This allows us to determine whether a newsletter email has been opened and which links, if any, were clicked. With the help of the so-called conversion tracking, it can also be analyzed whether a predefined action (e.g., purchase of a product on our website) took place after clicking on the link in the newsletter. Furthermore, technical information is recorded (e.g., time of access, IP address, browser type, and operating system). The data is collected exclusively in pseudonymized form and is not linked to your other personal data. Direct personal reference is excluded. This data is used solely for statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients.

If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.



**6.4 Advertising by mail**

Based on our legitimate interest in personalized direct advertising, we reserve the right to store your first name, last name, postal address, and – if we have received this additional information from you within the scope of the contractual relationship – your title, academic degree, year of birth, and your professional, industry, or business designation in accordance with Art. 6 para. 1 lit. f GDPR, and to use this information for sending offers and information about our products by postal mail.

You can object to the storage and use of your data for this purpose at any time by sending a message to the responsible party.

**7) DATA PROCESSING FOR ORDER PROCESSING**

**7.1 To process your order, we work together with the following service provider(s), who support us either wholly or partially in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.**

The personal data we collect will be passed on to the transport company commissioned with the delivery as part of the contract processing, to the extent that this is necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution as part of the payment processing, if this is necessary for the handling of payments. If payment service providers are used, we will explicitly inform you of this below. The legal basis for the transfer of the data is Art. 6 para. 1 lit. b GDPR.

**7.2 Use of payment service providers (payment services)**

- **Paypal**

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal, we pass your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment process. The data transfer is carried out in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR based on PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data is used to calculate the score values. Further data protection information, including the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

- **Stripe**

If you choose a payment method from the payment service provider Stripe, the payment processing is carried out by Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland (hereinafter "Stripe"). We pass on your data to Stripe solely for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR. Stripe may transmit data to its parent company in the USA and is certified under the EU-US Privacy Shield, ensuring compliance with European data protection law.

Details on Stripe’s data protection can be found at: [https://stripe.com/gb/privacy](https://stripe.com/gb/privacy).

**8) ONLINE MARKETING**

**8.1 Google AdSense**

This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called "DoubleClick DART Cookies." These are text files that are stored on your computer and allow an analysis of your use of the website. Additionally, Google AdSense also uses so-called "web beacons" (small invisible graphics) to gather information. By using web beacons, simple actions like visitor traffic to the website can be recorded and collected.

The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. This may also involve transmission to the servers of Google LLC in the USA.

Google uses the obtained information to analyze your usage of Google AdSense ads for improving the ads displayed and for compiling reports about website activity. The processing of the data is based on our legitimate interest in personalized advertising in accordance with Art. 6 para. 1 lit. f GDPR.

You can prevent the installation of cookies by adjusting your browser settings accordingly. However, please note that in this case, you may not be able to use all the functions of this website to their full extent.

For more information about Google’s privacy practices, visit: [https://www.google.com/policies/privacy/](https://www.google.com/policies/privacy/).

**8.2 Google Ads Conversion Tracking**

This website uses the online advertising program "Google Ads" and in the context of Google Ads, the conversion tracking service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to promote our offers on external websites with the help of advertising materials (so-called Google Ads). Based on the data from the advertising campaigns, we can determine how successful individual advertising measures are. Our goal is to show you advertisements that are of interest to you, to make our website more interesting for you, and to achieve a fair calculation of advertising costs.


**In this case, the conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies generally lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked via the websites of Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users. If you do not want to participate in tracking, you can opt out of this use by easily deactivating the Google conversion tracking cookie via your Internet browser under user settings. In doing so, you will not be included in the conversion tracking statistics.**

The use of Google Ads is based on our legitimate interest in targeted advertising according to Art. 6 para. 1 lit. f GDPR. You can find more information about Google’s privacy policy at the following Internet address: [https://www.google.de/policies/privacy/](https://www.google.de/policies/privacy/)

**9) WEB ANALYSIS SERVICES**

**Google (Universal) Analytics**

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Analytics uses so-called "cookies," text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transmitted to a Google server and stored there. This may also involve transmission to the servers of Google LLC in the USA.

This website uses Google Analytics exclusively with the extension "_anonymizeIp()," which ensures anonymization of the IP address by shortening it and excludes direct personal reference. As a result of the extension, your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.

On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services relating to website activity and Internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by setting your browser software accordingly. However, please note that in this case, you may not be able to use all functions of this website to their full extent.

You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: [https://tools.google.com/dlpage/gaoptout?hl=en](https://tools.google.com/dlpage/gaoptout?hl=en).

Further information on how Google Analytics handles user data can be found in Google's privacy policy: [https://support.google.com/analytics/answer/6004245?hl=en](https://support.google.com/analytics/answer/6004245?hl=en).

This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate cross-device tracking in your customer account under "My Data," "Personal Data."

**10) RETARGETING/REMARKETING/RECOMMENDATION ADVERTISING**

**Google Ads Remarketing**

Our website uses the functions of Google Ads Remarketing, which promotes this website in Google search results as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and based on the pages you visit. The processing is based on our legitimate interest in optimal marketing of our website according to Art. 6 para. 1 lit. f GDPR.

Further data processing will only take place if you have agreed with Google that your Internet and app browsing history will be linked to your Google account and information from your Google account will be used to personalize ads that you see on the web. If you are logged into Google during your visit to our website, Google will use your data together with Google Analytics data to create and define target audience lists for cross-device remarketing. To do this, Google temporarily links your personal data with Google Analytics data to form target groups.

You can permanently deactivate the setting of cookies for ad preferences by downloading and installing the browser plugin available at the following link: [https://www.google.com/settings/ads/onweb/](https://www.google.com/settings/ads/onweb/).

Further information and the privacy policy regarding advertising and Google can be viewed here: [https://www.google.com/policies/technologies/ads/](https://www.google.com/policies/technologies/ads/).

**11) RIGHTS OF THE DATA SUBJECT**

11.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the data controller regarding the processing of your personal data, which we inform you about below:

- **Right of access** according to Art. 15 GDPR: You have the right to obtain information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the envisaged storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the source of your data if it was not collected from you by us, the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed about the safeguards pursuant to Art. 46 GDPR when your data is transferred to third countries;

- **Right to rectification** according to Art. 16 GDPR: You have the right to immediate rectification of inaccurate data concerning you and/or completion of your incomplete data stored by us;

- **Right to erasure ("right to be forgotten")** according to Art. 17 GDPR: You have the right to demand the deletion of your personal data if the requirements of Art. 17 para. 1 GDPR are met. However, this right does not exist, in particular, if the processing is necessary for exercising the right of freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest, or for asserting, exercising, or defending legal claims;

- **Right to restriction of processing** according to Art. 18 GDPR: You have the right to demand the restriction of the processing of your personal data as long as the accuracy of your data contested by you is verified, if you refuse the deletion of your data due to unlawful data processing and instead request the restriction of its use, if you need your data for the assertion, exercise, or defense of legal claims after we no longer need this data once the purpose has been achieved, or if you have objected to the processing for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail;

- **Right to notification** according to Art. 19 GDPR: If you have asserted the right to rectification, erasure, or restriction of processing against the controller, they are obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or restriction of processing unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.

- **Right to data portability** according to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request the transmission to another controller, where technically feasible;

- **Right to withdraw consent** according to Art. 7 para. 3 GDPR: You have the right to withdraw your consent at any time with future effect. In the event of withdrawal, we will delete the data concerned immediately unless further processing can be based on a legal basis for processing without consent. Withdrawal of consent does not affect the legality of the processing carried out based on the consent before its withdrawal;

- **Right to lodge a complaint** according to Art. 77 GDPR: If you believe that the processing of personal data concerning you violates the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace, or the place of the alleged infringement.

**11.2 RIGHT TO OBJECT**

If, in the context of a balancing of interests, we process your personal data based on our overriding legitimate interest, you have the right at any time to object to this processing with effect for the future on grounds arising from your particular situation.

If you make use of your right to object, we will stop processing the data concerned. However, further processing remains reserved if we can demonstrate compelling