data protection

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.

access data and hosting

As part of processing on our behalf, a third-party provider provides us with the services for hosting and displaying the website. All data collected as part of the use of this website or in the forms provided for this purpose in the online shop as described below is processed on its servers. Processing on other servers only takes place within the scope explained here.

This service provider is located within a country of the European Union or the European Economic Area.

If you have given your consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account.

After the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after the tax and commercial retention periods have expired, unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we will inform you in this declaration. Your customer account can be deleted at any time and can be done either by sending a message to the contact option described below or via a function provided for this purpose in the customer account.

data transfer

In order to fulfil the contract in accordance with Art. 6 Paragraph 1 Clause 1 Letter b of GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the ordering process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service in order to process payments. In some cases, the selected payment service providers also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the data protection declaration of the respective payment service provider applies.

We also use an external merchandise management system to process orders and contracts. The data transfer or processing that takes place in this regard is based on order processing.

data transfer to shipping service providers

If you have given us your express consent to do so during or after your order, we will pass on your email address and telephone number to the selected shipping service provider in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR so that they can contact you before delivery for the purpose of notifying or coordinating the delivery.

Consent can be revoked at any time by sending a message using the contact option described above or directly to the shipping service provider. After revocation, we will delete the data you have provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we will inform you in this declaration.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.

cookies

Some of the websites use so-called cookies. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies are used to make our offering more user-friendly, effective and secure. In order to make visiting our website more attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to protect our legitimate interests, which prevail in the context of a balancing of interests, in an optimized presentation of our offering in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR.

Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Cookies that are required to carry out the electronic communication process or to provide certain functions you require (e.g. shopping cart function) are stored on the basis of Art. 6 Paragraph 1 Letter f of GDPR. The website operator has a legitimate interest in storing cookies to ensure technically error-free and optimized provision of its services. If other cookies (e.g. cookies to analyze your surfing behavior) are stored, these are treated separately in this data protection declaration.

contact form

If you send us inquiries using the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.

The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send us an informal email. The legality of the data processing operations carried out up to the time of revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.

email advertising with newsletter registration

If you subscribe to our newsletter, we will use the data required for this purpose or separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.

You can unsubscribe from the newsletter at any time by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address from the recipient list unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we inform you in this privacy policy.

Inquiry by email, telephone, Whatsapp or contact form

If you contact us by email, telephone, WhatsApp or contact form, your request, including all personal data resulting from it (name, request), will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

This data is processed on the basis of Art. 6 (1) (b) GDPR, provided that your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 (1) (a) GDPR) and/or on our legitimate interests (Art. 6 (1) (f) GDPR), as we have a legitimate interest in the effective processing of the requests addressed to us.

The data you send to us via contact requests will remain with us until you request deletion, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular statutory retention periods - remain unaffected.

social media

Use of social plugins from Facebook, Instagram, using the Shariff solution. Social buttons from social networks are used on our website.

This serves to protect our legitimate interests in the optimal marketing of our offer in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, which prevail within the framework of a balancing of interests. In order to increase the protection of your data when visiting our website, these buttons are not integrated into the page as plug-ins without restrictions, but only using an HTML link. This integration ensures that when you access a page on our website that contains such buttons, no connection is established with the servers of the provider of the respective social network.

If you click on one of the buttons, a new window will open in your browser and call up the page of the respective service provider, where you can (if necessary after entering your login data) e.g. press the Like or Share button.

The purpose and scope of data collection and the further processing and use of the data by the providers on their websites as well as a contact option and your related rights and setting options to protect your privacy can be found in the data protection information of the providers:

https://www.facebook.com/policy.php

https://help.instagram.com/155833707900388

Our online presence on Facebook, Instagram

Our presence on social networks and platforms serves to improve and actively communicate with our customers and interested parties. We provide information about our products and current special offers there.

When you visit our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from this data using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are usually used on your device for this purpose. These cookies store visitor behavior and the interests of users. In accordance with Art. 6 (1) (f) GDPR, this serves to safeguard our legitimate interests, which prevail within the framework of a balancing of interests, in an optimized presentation of our offer and effective communication with customers and interested parties. If you are asked by the respective social media platform operators for consent (agreement) to data processing, e.g. using a checkbox, the legal basis for data processing is Art. 6 (1) (a) GDPR.

If the aforementioned social media platforms have their headquarters in the USA, the following applies: For the USA, there is an adequacy decision from the European Commission. This is based on the EU-US Privacy Shield. A current certificate for the respective company can be viewed here.

For detailed information on the processing and use of data by the providers on their websites, as well as a contact option and your rights and setting options to protect your privacy, in particular the option to object (opt-out), please refer to the providers' data protection notices linked below. If you still need help in this regard, you can contact us.

Facebook: https://www.facebook.com/about/privacy/

The data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR, which you can view here.

Further information on data processing when visiting a Facebook fan page (information on Insights data) can be found here.

Instagram: https://help.instagram.com/519522125107875

Opt-out option:

Facebook: https://www.facebook.com/settings?tab=ads

To protect against misuse of our web forms and against spam, we use the Google reCAPTCHA service in some forms on this website. Google reCAPTCHA is an offer from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). By checking a manual input, this service prevents automated software (so-called bots) from carrying out abusive activities on the website. In accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, this serves to safeguard our legitimate interests, which prevail in the context of a balancing of interests, in protecting our website against misuse and in ensuring that our online presence is displayed without disruption.

Google reCAPTCHA uses a code embedded in the website, a so-called JavaScript, to perform the check, using methods such as cookies that enable an analysis of your use of the website. The automatically collected information about your use of this website, including your IP address, is usually transferred to a Google server in the USA and stored there. In addition, other cookies stored in your browser by Google services are evaluated by Google reCAPTCHA.

No personal data will be read or saved from the input fields of the respective form.

To the extent that information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has determined an appropriate level of data protection for companies certified under the Privacy Shield.

You can prevent Google from collecting the data generated by the JavaScript or cookie and relating to your use of the website (including your IP address) and from processing this data by Google by disabling the execution of JavaScripts or the setting of cookies in your browser settings. Please note that this may limit the functionality of our website for your use.

Further information on Google’s privacy policy can be found here.

Google Fonts

The script code "Google Fonts" is integrated into this website. Google Fonts is an offer from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). This serves to protect our legitimate interests in a uniform presentation of the content on our website in accordance with Art. 6 Paragraph 1 Letter f) GDPR, which prevail within the framework of a balancing of interests. In this context, a connection is established between the browser you use and the Google servers. This enables Google to know that our website was accessed via your IP address.

To the extent that information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has determined an appropriate level of data protection for companies certified under the Privacy Shield. Further information on data processing by Google can be found in Google's privacy policy.

Adobe Typekit

This website contains the script code “Adobe Typekit” from Adobe Systems Incorporated 345 Park Avenue San Jose, CA 95110-2704, USA (hereinafter: Adobe). This serves to protect our legitimate interests in a uniform presentation of the content on our website in accordance with Art. 6 (1) (f) GDPR, which prevail within the framework of a balancing of interests. In this context, a connection is established between the browser you use and the Adobe servers. This allows Adobe to know that our website was accessed via your IP address.

What rights do you have regarding your data?

You have the right to obtain information about the origin, recipient and purpose of your stored personal data free of charge at any time in accordance with Art. 15 GDPR. You also have the right to request the correction or completion of this data in accordance with Art. 16 GDPR. Likewise, you have the right to request the blocking or deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless further processing is necessary to exercise the right to freedom of expression and information; to fulfil a legal obligation; for reasons of public interest or

is necessary for the establishment, exercise or defence of legal claims;

You can contact us at any time at the address provided here if you have any questions about this or other questions relating to data protection. You also have the right to lodge a complaint with the responsible supervisory authority. You also have the right to request that the processing of your personal data be restricted under certain circumstances. You can find details of this in the data protection declaration under "Right to restriction of processing".

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke your consent at any time. All you need to do is send us an informal email. The legality of the data processing carried out up to the time of revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

If the data processing is carried out on the basis of Art. 6 Para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection declaration. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims (objection in accordance with Art. 21 Para. 1 GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for the purposes of direct marketing (objection in accordance with Art. 21 Para. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR

In the event of violations of the GDPR, those affected have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged violation. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

Right to data portability according to Art. 20 GDPR

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request that the data be transferred directly to another responsible party, this will only be done if it is technically feasible.

right to restriction of processing

If we no longer need your personal data, but you do need it to exercise, defend or assert legal claims, you have the right to request that the processing of your personal data be restricted instead of deleted. If you have lodged an objection in accordance with Art. 21 Para. 1 GDPR, your interests must be weighed against ours. As long as it has not yet been determined whose interests prevail, you have the right to request that the processing of your personal data be restricted. If you have restricted the processing of your personal data, this data may only be processed - with the exception of storage - with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.