Last Updated: Oct 15, 2024, 12:00 AM
1. Access Data and Hosting
You can visit our website without providing any personal information. Whenever our website is accessed, the web server automatically stores so-called server log files, which may include the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider. These access data document the retrieval of our website. The processing of this data is carried out to ensure the smooth operation of our website and to improve our services. This serves to protect our legitimate interests in the correct and secure presentation of our online offering in accordance with Art. 6(1)(f) GDPR. Access data is deleted once it is no longer required for the purposes stated above.
2. Data Processing for Contract Fulfilment and Contacting Us
2.1 Data Processing for Contract Fulfillment :
2.1 Data Processing for Contract Fulfillment : We collect personal data when you voluntarily provide us with this information as part of your order or when contacting us (e.g. via contact form or email). Mandatory fields are marked as such because we require this information for contract processing or to handle your enquiry. Without providing this information, you may not be able to complete your order or submit your enquiry. The data collected can be seen from the respective input forms. We use the information you provide for contract processing and handling enquiries in accordance with Art. 6(1)(b) GDPR. Further information regarding the processing of your data, in particular the transfer of data to our service providers for order processing, payment processing, and shipping, can be found in the following sections of this Privacy Policy. After the contract has been fully processed, your data will be restricted from further processing and deleted after the expiry of any statutory retention periods under tax and commercial law in accordance with Art. 6(1)(c) GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6(1)(a) GDPR, or we reserve the right to use data beyond this scope where legally permitted and where we inform you accordingly in this Privacy Policy.
3. Data Processing for Shipping Fulfilment
For the fulfilment of the contract in accordance with Art. 6(1)(b) GDPR, we transfer your data to the shipping service provider responsible for delivery, insofar as this is necessary for delivering ordered goods.
3.1 Transfer of Data to Shipping Service Providers for Delivery Notifications :
If you have expressly given your consent during or after your order, we will transfer your email address and telephone number to the selected shipping service provider on the basis of Art. 6(1)(a) GDPR. This enables the shipping provider to contact you before delivery for the purpose of delivery notification or coordination. You may withdraw your consent at any time by sending a message using the contact details provided in this Privacy Policy or directly contacting the shipping provider at the contact address provided below. After withdrawal of consent, the data transferred for delivery notifications will no longer be used for this purpose unless another legal basis permits further processing.
4. Data Processing for Payment Processing
For processing payments in our online shop, we work with the following partners: technical service providers, financial institutions, and payment service providers.
- Technical service providers
- Banks and financial institutions
- Payment service providers
4.1 Data Processing for Transaction Processing
Depending on the selected payment method, we transfer the data required to process the payment transaction to our technical service providers, who act as processors on our behalf, or to the commissioned financial institutions or selected payment service providers, insofar as this is necessary for payment processing. This serves the fulfilment of the contract in accordance with Art. 6(1)(b) GDPR. In some cases, payment service providers collect the data required for payment processing themselves, for example on their own website or through technical integration into the ordering process. In such cases, the privacy policies of the respective payment service provider also apply.
4.2 Data Processing for Fraud Prevention and Optimization of Payment Processes
To ensure secure payment processing, personal data may be processed to the extent necessary to prevent payment fraud, verify payment transactions, and ensure the proper processing of payments. The processing is carried out to protect our legitimate interests in secure and reliable payment processing in accordance with Art. 6(1)(f) GDPR.
5. Shopify
We use the e-commerce platform Shopify, provided by Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland, to operate our online shop. Shopify provides the technical platform through which our online shop is operated. In this context, personal data may be processed that arises from the use of our shop, the ordering process, as well as payment and shipping processing. The processing is carried out for the performance and fulfilment of contracts in accordance with Art. 6(1)(b) GDPR and to protect our legitimate interests in the secure and efficient operation of our online shop in accordance with Art. 6(1)(f) GDPR. Further information on data processing by Shopify can be found in Shopify’s Privacy Policy.
6. Advertising by Email
6.1 Email Newsletter with Registration
If you register for our newsletter, we use your email address to regularly send you information about our products, offers, and news. The processing is based on your consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future. To do so, you can use the unsubscribe link provided in the newsletter or contact us using the contact details provided. After unsubscribing from the newsletter, your email address will be removed from the newsletter distribution list unless there is another legal basis for continued storage.
6.2 Email Newsletter Without Registration and Right to Object
If we receive your email address in connection with the sale of goods or services and you have not objected to its use, we reserve the right to send you regular offers for similar products from our range by email in accordance with Section 7(3) UWG. This serves to protect our legitimate interests, which prevail after balancing interests, in advertising communication with our customers. You may object to the use of your email address for this purpose at any time by sending a message to the contact details provided in this Privacy Policy or by using the link provided in the advertising email. No costs other than transmission costs according to the basic rates will arise from this.
6.3 Newsletter Distribution
- The distribution of our newsletter may involve technical service providers who support us in managing and sending newsletters.
- Your data is processed for the purpose of sending our newsletter on the basis of your consent in accordance with Art. 6(1)(a) GDPR.
- The data you provide for newsletter distribution will only be used for this purpose.
- Further information about the service providers used and their data processing can be found in the relevant sections of this Privacy Policy.
7. Contact Options and Your Rights
7.1 Your Rights
As a data subject, you have the following rights :
- In accordance with Art. 15 GDPR, the right to request information about your personal data processed by us, within the scope specified therein;
- In accordance with Art. 16 GDPR, the right to request the immediate correction of inaccurate personal data or completion of your personal data stored by us;
- In accordance with Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is required :
for exercising the right to freedom of expression and information;
for compliance with a legal obligation;
for reasons of public interest; or
for the establishment, exercise, or defence of legal claims;
- In accordance with Art. 18 GDPR, the right to request restriction of the processing of your personal data where :
the accuracy of the data is contested by you;
the processing is unlawful, but you refuse deletion of the data;
we no longer require the data, but you need it for the establishment, exercise, or defence of legal claims; or
you have objected to processing pursuant to Art. 21 GDPR;
- In accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request transmission of this data to another controller; In accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your usual place of residence, your workplace, or our company headquarters.
7.2 Right to Object
Where we process personal data as explained above to protect our legitimate interests that prevail following a balancing of interests, you have the right to object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. If the processing is carried out for other purposes, you only have a right to object where there are grounds arising from your particular situation. After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defence of legal claims. This does not apply where processing is carried out for direct marketing purposes. In this case, your personal data will no longer be processed for such purposes.
7.3 Contact Options
If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request access, correction, restriction, or deletion of your data, withdraw previously granted consent, or object to a specific use of your data, please contact us directly using the contact details provided in our legal notice.