1. Access data and hosting
You can visit our website without providing any personal information. Each time you access our website, the web server automatically saves so-called server log files, which contain, for example, the name of the requested file, your IP address, the date and time of access, the volume of data transferred, and the requesting provider. This access data documents the retrieval of our website. The processing of this data is carried out to ensure the trouble-free operation of our website and to improve our services. This serves to safeguard our legitimate interests in the correct and secure presentation of our online services in accordance with Art. 6 (1) (f) GDPR. The access data is deleted as soon as it is no longer required for the stated purposes.
2. Data processing for contract fulfillment and for contacting purposes
2.1 Data processing for contract execution :
We collect personal data when you voluntarily provide it to us as part of your order or when contacting us (e.g., via contact form or email). Mandatory fields are marked as such, as in these cases we require the data for contract fulfillment or to process your inquiry, and you cannot complete the order or send the inquiry without providing them. Which data is collected can be seen from the respective input forms. We use the data you provide for contract fulfillment and the processing of your inquiries pursuant to Art. 6 Para. 1 Sentence 1 lit. b GDPR. Further information on the processing of your data, in particular regarding its disclosure to our service providers for the purpose of order, payment, and shipment processing, can be found in the following sections of this privacy policy. After complete processing of the contract, your data will be restricted for further processing and deleted after the expiry of any tax and commercial retention periods pursuant to Art. 6 Para. 1 Sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6 Para. 1 Sentence 1 lit. a GDPR or we reserve the right to further data use that is legally permitted and about which we inform you in this statement.
3. Data processing for the purpose of order fulfilment
For the performance of a contract pursuant to Art. 6 (1) sentence 1 (b) GDPR, we share your data with the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.
3.1 Data transfer to shipping service providers for the purpose of shipment notification
Provided that you have given us your express consent to do so during or after your order, we will pass on your e-mail address and telephone number to the selected shipping service provider based on this consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR, so that they can contact you prior to delivery for the purpose of announcing or coordinating the delivery. You may revoke your consent at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider. After revocation of consent, the data transmitted for the delivery announcement will no longer be used for this purpose, unless there is another legal basis for further processing.
4. Data processing for payment processing
For the processing of payments in our online shop, we work with the following partners: technical service providers, financial institutions, and payment service providers.
4.1 Data processing for transaction handling
Depending on the payment method selected, we pass the data necessary for processing the payment transaction to our technical service providers, who act on our behalf as data processors, or to the commissioned credit institutions or the selected payment service provider, insofar as this is necessary for the processing of the payment. This serves the purpose of fulfilling the contract in accordance with Art. 6 (1) sentence 1 point (b) GDPR. In some cases, the payment service providers collect the data required for processing the payment themselves, e.g. on their own website or via a technical integration in the ordering process. In this case, the data protection provisions of the respective payment service provider apply additionally.
4.2 Data processing for the purpose of fraud prevention and the optimization of our payment processes
To ensure secure payment processing, personal data may be processed to the extent necessary to prevent payment fraud, verify payment transactions, and guarantee the proper execution of payments. This processing is carried out to safeguard our legitimate interests in secure and reliable payment processing in accordance with Article 6(1)(f) GDPR.
5. Shopify
To operate our online shop, we use the e-commerce platform Shopify, provided by Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify provides the technical platform through which our online shop is operated. In this process, personal data may be processed that is generated during the use of our shop, the ordering process, and payment and shipping processing. The processing is carried out for the performance and fulfillment of contracts in accordance with Art. 6 (1) (b) GDPR, as well as to safeguard our legitimate interests in the secure and efficient operation of our online shop in accordance with Art. 6 (1) (f) GDPR. Further information on data processing by Shopify can be found in Shopify's privacy policy.
6. Advertising via email
6.1 E-mail newsletter with registration
If you subscribe to our newsletter, we will use your email address to regularly send you information about our products, offers, and news. Processing is based on your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect. To do so, you can use the unsubscribe link in the newsletter or contact us via the provided contact details. Once you have unsubscribed from the newsletter, your email address will be removed from our newsletter distribution list, provided there is no other legal basis for further storage.
6.2 E-mail newsletter without registration and your right to object
If we receive your email address in connection with the sale of a product or service and you have not objected to this, we reserve the right to regularly send you offers for products similar to those already purchased from our range via email, based on Section 7 (3) of the German Act Against Unfair Competition (UWG). This serves to protect our legitimate interests in addressing our customers for advertising purposes, which outweigh other interests as part of a balancing of interests. You can object to this use of your email address at any time by sending a message to the contact option described in this privacy policy or via a link provided for this purpose in the promotional email, without incurring any costs other than the transmission costs according to the basic tariffs.
6.3 Newsletter distribution
Our newsletter may be sent with the involvement of technical service providers who assist us in the management and delivery of newsletters. Your data is processed for the purpose of sending our newsletter based on your consent in accordance with Art. 6 (1) (a) GDPR. The data you provide for the newsletter subscription will be used exclusively for this purpose. Further information on the service providers used and their data processing can be found in the respective sections of this privacy policy.
7. Contact options and your rights
7.1 Your rights
As a data subject, you have the following rights :
- In accordance with Art. 15 GDPR, the right to request information about your personal data processed by us, within the scope specified therein;
- In accordance with Art. 16 GDPR, the right to request the immediate correction of inaccurate personal data or completion of your personal data stored by us;
- In accordance with Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is required :
for exercising the right to freedom of expression and information;
for compliance with a legal obligation;
for reasons of public interest; or
for the establishment, exercise, or defence of legal claims;
- In accordance with Art. 18 GDPR, the right to request restriction of the processing of your personal data where :
the accuracy of the data is contested by you;
the processing is unlawful, but you refuse deletion of the data;
we no longer require the data, but you need it for the establishment, exercise, or defence of legal claims; or
you have objected to processing pursuant to Art. 21 GDPR;
- In accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request transmission of this data to another controller; In accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your usual place of residence, your workplace, or our company headquarters.
7.2 Right to object
Insofar as we process personal data as explained above to safeguard our overriding legitimate interests in the context of a balancing of interests, you may object to this processing with effect for the future. If the processing is for direct marketing purposes, you may exercise this right at any time as described above. Insofar as processing takes place for other purposes, you only have a right to object if there are grounds arising from your particular situation. After you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. This does not apply if the processing is for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.
7.3 Contact options
If you have any questions regarding the collection, processing, or use of your personal data, for information, correction, restriction, or deletion of data, as well as to revoke granted consents or object to a specific use of data, please contact us directly using the contact details in our legal notice.