Privacy Policy

6) Use of Customer Data for Direct Advertising

6.1 Registration for our Email Newsletter

When you subscribe to our email newsletter, we regularly send you information about our offers. The only required information for sending the newsletter is your email address. The provision of additional data is voluntary and is used to address you personally. For the newsletter dispatch, we use the so-called double opt-in procedure, which ensures that you receive newsletters only after you have explicitly confirmed your consent to receive them by clicking on a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent for the use of your personal data according to Art. 6 Para. 1 lit. a GDPR. We store the IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration to trace any possible misuse of your email address at a later date. The data collected by us at the time of newsletter registration is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this statement.

6.2 Klaviyo

The dispatch of our email newsletters is carried out by this provider: Klaviyo, 225 Franklin St, Boston, MA 02110, USA.

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data provided during newsletter registration according to Art. 6 Para. 1 lit. f GDPR to this provider, so they can carry out the newsletter dispatch on our behalf.

Subject to your explicit consent according to Art. 6 Para. 1 lit. a GDPR, the provider also carries out a statistical evaluation of the success of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure opening rates and specific interactions with the content of the newsletter. End device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data sets.

You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits its transfer to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection levels based on an adequacy decision by the European Commission.

 

7) Data Processing for Order Processing

7.1 To the extent necessary for contract processing, including delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b GDPR.

If, based on a corresponding contract, we owe you updates for goods with digital elements or digital products, we process the contact details you provided during the order (name, address, email address) to personally inform you about upcoming updates within the legally prescribed period, as part of our statutory information obligations under Art. 6 Para. 1 lit. c GDPR. Your contact details are strictly used for the purpose of notifications about updates owed by us and are processed by us only to the extent necessary for each notification.

Furthermore, for the processing of your order, we work with the following service provider(s) who support us wholly or partly in the execution of concluded contracts. Certain personal data are transmitted to these service providers according to the following information.

7.2 Use of Payment Service Providers (Payment Services)

• Paypal

On this website, one or more online payment methods of the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

When you choose a payment method of the provider where you pay in advance, your payment data communicated during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about the contents of your order are passed on to them in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data in this case is exclusively for the purpose of payment processing with the provider and only to the extent necessary.

When selecting a payment method where we pay in advance, you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, possibly data on an alternative payment method) during the order process.

To preserve our legitimate interest in determining your creditworthiness in such cases, these data are forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 Para. 1 lit. f GDPR. The provider checks, based on the personal data you provided and other data (such as shopping cart, invoice amount, order history, payment experiences), whether the payment option you selected can be granted in terms of payment and/or default risks.

The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, among other things but not exclusively, address data.

You can object to this processing of your data at any time by sending a message to us or the provider. However, the provider may continue to process your personal data if necessary for contractual payment processing.

 

8) Retargeting/Remarketing and Conversion Tracking

Facebook Pixel for Creating Custom Audiences with Advanced Data Matching (with Cookie Consent Tool)

Within our online offering, we use the service "Facebook Pixel" of the following provider in the mode of advanced data matching: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").

When a user clicks on an advertisement we have placed on Facebook, the URL of our linked page is extended by a parameter using "Facebook Pixel". This URL parameter is then entered into the user's browser via a cookie that our linked page sets itself. In addition, this cookie captures specific customer data such as the email address that we collect on our webpage linked to the Facebook ad for processes like purchase completions, account logins, or registrations (advanced data matching). The cookie is then read out and enables the transmission of data including the specific customer data to Facebook.

We use "Facebook Pixel" with advanced data matching to make our Facebook advertisements (so-called "Facebook Ads") more effective and to ensure that they correspond to the interests of users or exhibit certain characteristics (e.g., interests in specific topics or products determined based on visited web pages), which we transmit to Facebook (so-called "Custom Audiences").

Furthermore, we analyze the effectiveness of our ads by tracking whether users are redirected to our website after clicking on an advertisement (conversion). Compared to the standard version of "Facebook Pixel," the advanced data matching function helps us better measure the effectiveness of our advertising campaigns by capturing more associated conversions.

All data transmitted are stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes according to Facebook's data usage policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to place advertisements on and off Facebook.

All the processing described above, especially setting cookies to read information on the used end device, is only carried out if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

The information generated by Facebook is usually transferred to a server of Facebook and stored there; in this context, it may also involve transmission to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection levels based on an adequacy decision by the European Commission.

 

9) Tools and Miscellaneous

Cookie Consent Tool

This website uses a so-called "Cookie Consent Tool" to obtain effective user consents for cookies that require consent and cookie-based applications. The "Cookie Consent Tool" is displayed to users as an interactive user interface when they visit the site, where consents for specific cookies and/or cookie-based applications can be granted by ticking checkboxes. By using this tool, all consent-required cookies/services are loaded only when the respective user grants corresponding consents by ticking checkboxes. This ensures that such cookies are set on the user's end device only in the case of granted consent.

The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data (such as the IP address) are processed for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our internet presence.

Another legal basis for processing is Art. 6 Para. 1 lit. c GDPR. As the responsible party, we are legally obliged to make the use of technically non-essential cookies dependent on the respective user consent.

Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

Further information about the operator and the setting options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

 

10) Rights of the Data Subject

10.1 The applicable data protection law grants you the following rights as a data subject with respect to the processing of your personal data by the controller (rights to information and intervention), for which the respective exercise requirements refer to the stated legal basis:

• Right of access according to Art. 15 GDPR;
• Right to rectification according to Art. 16 GDPR;
• Right to erasure according to Art. 17 GDPR;
• Right to restriction of processing according to Art. 18 GDPR;
• Right to notification according to Art. 19 GDPR;
• Right to data portability according to Art. 20 GDPR;
• Right to withdraw consent given according to Art. 7 Para. 3 GDPR;
• Right to lodge a complaint according to Art. 77 GDPR.

10.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS DUE TO OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

 

11) Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and – if applicable – additionally by the respective statutory retention period (e.g., commercial and tax retention periods).

When processing personal data based on explicit consent according to Art. 6 Para. 1 lit. a GDPR, the affected data is stored until you revoke your consent.

If there are legal retention periods for data that are processed within the framework of legal transactions or obligations similar to legal transactions based on Art. 6 Para. 1 lit. b GDPR, these data are routinely deleted after the retention periods expire, provided they are no longer necessary for the fulfillment or initiation of a contract and/or there is no longer a legitimate interest on our part in their continued storage.

When processing personal data based on Art. 6 Para. 1 lit. f GDPR, this data is stored until you exercise your right to object according to Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is for the establishment, exercise, or defense of legal claims.

When processing personal data for direct marketing purposes based on Art. 6 Para. 1 lit. f GDPR, this data is stored until you exercise your right to object according to Art. 21 Para. 2 GDPR.

Unless otherwise stated in the other information of this statement on specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.