Privacy Policy

1. Access Data and Hosting

You can visit our websites without providing any personal information. Each time you visit a webpage, the web server automatically stores a so-called server log file that contains, for example, the name of the requested file, your IP address, the date and time of the visit, the amount of data transferred, and the requesting provider (access data), and documents the visit.

This access data is analyzed solely for the purpose of ensuring the smooth operation of the website and improving our services. This serves to safeguard our legitimate interests—which prevail following a balancing of interests—in the proper presentation of our services, in accordance with Article 6(1)(f) of the DSGVO. All access data is processed only for as long as is necessary to achieve the aforementioned processing purposes.

The services for hosting and displaying the website are provided in part by our service providers as part of data processing on our behalf. Unless otherwise specified in this Privacy Policy, all access data and all data collected via the forms provided for that purpose on this website are processed on their servers. If you have any questions about our service providers or the basis of our collaboration with them, please use the contact information provided in this Privacy Policy.

 

Our service providers are located in and/or use servers in the following countries, for which the European Commission has determined, by decision, that an adequate level of data protection exists: Brazil, Israel, the United Kingdom, and the United States. The adequacy decision for the United States serves as the basis for transfers to third countries, provided that the respective service provider is certified. Certification has been obtained.

Our service providers are located in and/or use servers in the following countries: Mexico, India, and Ukraine. There is no adequacy decision by the European Commission for these countries. Our collaboration with you is based on the following safeguards: the European Union’s Standard Data Protection Clauses.

 

 

2. Data Processing for Contract Fulfilment and to Establish Contact

2.1 Data Processing for Contract Fulfilment

 For the purpose of contract fulfillment (including inquiries regarding and the handling of any existing claims arising from warranty rights, rights arising from breach of contract, and the right of withdrawal, as well as any statutory obligations to provide updates) in accordance with Article 6(1)(b) of the DSGVO, we collect personal data when you voluntarily provide it to us as part of your order.

Required fields are marked as such because we need this information to process the contract, and we cannot ship the order without it. The specific data collected is indicated on the respective input forms. For more information about the processing of your data—in particular, its disclosure to our service providers for the purposes of order processing, payment processing, and shipping—please refer to the following sections of this Privacy Policy.

Once the contract has been fully fulfilled, your data will be restricted for further processing and deleted upon expiration of the retention periods required under tax and commercial law in accordance with Article 6(1), sentence 1, subparagraph (c) of the DSGVO, unless you have expressly consented to the further use of your data in accordance with Article 6(1)(a) of the DSGVO, or we reserve the right to use your data beyond this scope in a manner that is permitted by law and about which we inform you in this statement.

 

2.2 Customer Account

To the extent that you have given your consent pursuant to Article 6(1)(a) of the DSGVO by choosing to open a customer account, we use your data for the purpose of opening the customer account and for storing your data for future orders on our website. You can delete your customer account at any time by either sending a message using the contact information provided in this Privacy Policy or by using the feature provided for this purpose in your customer account.

After your customer account is deleted, your data will be deleted unless you have expressly consented to the continued use of your data in accordance with Article 6(1), first sentence, letter a of the DSGVO, or unless we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

 

2.3 Contacting Us

As part of our customer communications, we collect personal data to process your inquiries in accordance with Article 6(1)(b) of the DSGVO if you voluntarily provide this information to us when contacting us (e.g., via the contact form, live chat tool, or email). Required fields are marked as such, as we absolutely need this data in these cases to process your inquiry.

The data collected is specified in the respective input forms. Once your request has been fully processed, your data will be deleted, unless you have expressly consented to further use of your data in accordance with Article 6(1), sentence 1, subparagraph (a) of the DSGVO, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

 

3. Data Processing for the Purpose of Shipping

To fulfill the contract in accordance with Article 6(1)(b) of the DSGVO, we share your data with the shipping provider responsible for delivery, to the extent necessary to deliver the ordered goods. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact information provided in this Privacy Policy.

 

 

4. Data Processing for Payment Processing

When processing payments in our online store, we work with the following partners: technical service providers, financial institutions, and payment service providers.

 

4.1 Data Processing for Transaction Processing

Depending on the selected payment method, we disclose the data necessary for processing the payment transaction to our technical service providers, the designated financial institutions, or the selected payment service provider, to the extent necessary to process the payment.

This is necessary for the performance of the contract pursuant to Article 6(1)(b) of the DSGVO. In some cases, the payment service providers collect the data required to process the payment themselves, e.g., on their own website or through technical integration into the ordering process. In such cases, the privacy policy of the respective payment service provider applies.

 

Depending on the selected payment method, data may be transferred to third countries outside the EU/EEA for which the European Commission has determined, by decision, that an adequate level of data protection exists. To the extent that data is transferred to third countries outside the EU/EEA for which the European Commission has not issued a decision on an adequate level of data protection, the cooperation is based on the European Commission’s Standard Data Protection Clauses.

If you have any questions about our payment processing partners or the basis of our collaboration with them, please contact us using the contact information provided in this Privacy Policy.

 

4.2 Data Processing for the Purpose of Fraud Prevention and Optimizing Our Payment Processes

Where applicable, we provide the aforementioned service providers with additional data, which they use—along with the data necessary for processing the payment—for the purpose of fraud prevention and optimizing our payment processes (e.g., invoicing, handling disputed payments, and supporting accounting). In accordance with Article 6(1), first sentence, subparagraph (f) of the DSGVO, this serves to protect our legitimate interests—which, following a balancing of interests, are deemed to prevail—in safeguarding ourselves against fraud and in ensuring efficient payment management.

 

 

5. Advertising via Email

5.1 Email Newsletters Requiring Subscription; Newsletter Tracking Requiring Separate Consent

When you subscribe to our newsletter, we use the data required for this purpose or data you have separately provided to send you our email newsletter on a regular basis based on your consent in accordance with Article 6(1)(a) of the DSGVO. . You can unsubscribe from the newsletter at any time by either sending a message using the contact information provided below or by clicking the link provided for that purpose in the newsletter.

 

After you unsubscribe, we will remove your email address from the recipient list, unless you have expressly consented to the continued use of your data in accordance with Article 6(1)(a) of the DSGVO, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

If you have also given us your consent in accordance with Article 6(1)(a) of the DSGVO to analyze our newsletters, we will also analyze your interaction with our newsletter by measuring, storing, and evaluating open rates and click-through rates for the purpose of designing future newsletter campaigns (“newsletter tracking”).

 

For this analysis, the emails sent contain single-pixel technologies (e.g., so-called web beacons, tracking pixels) that are stored on our website. For the analyses, we link the following “newsletter data” in particular:

 

•    the page from which the page was requested (known as the referrer URL),

•    the date and time of the request,

•    a description of the type of web browser used,

•    the IP address of the requesting computer,

•    the email address,

•    the date and time of registration and confirmation

and the one-pixel technologies with your email address or your IP address and, if applicable, a unique ID. Links included in the newsletter may also contain this ID.

 

You can unsubscribe from the newsletter tracking at any time by either sending a message using the contact information provided or by clicking the link provided for this purpose in the newsletter. Your information will be stored for as long as you remain subscribed to the newsletter.

 

5.2 Newsletter Distribution

The newsletter and the newsletter tracking described above may also be sent by our service providers as part of processing carried out on our behalf. If you have any questions about our service providers or the basis of our collaboration with them, please use the contact information provided in this Privacy Policy.

 

 

6. Cookies and Other Technologies

6.1 General Information

To make your visit to our website more engaging and to enable the use of certain features, we use various technologies on different pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session—that is, when you close your browser (so-called session cookies).

Other cookies remain on your device and allow us to recognize your browser the next time you visit (persistent cookies). You can find the storage duration in the overview in your web browser’s cookie settings.

 

 

6.2 Privacy Protection on End Devices

When you use our online services, we employ technologies that are strictly necessary to provide the digital service you have expressly requested. The storage of information on your end device or access to information already stored on your end device does not require your consent in this regard..

For features that are not strictly necessary, storing information on your device or accessing information already stored on your device requires your consent. Please note that if you do not provide your consent, you may not be able to use certain parts of the website without restrictions. Any consent you have provided remains in effect until you adjust or reset the relevant settings on your device.

 

6.3 Any Subsequent Data Processing via Cookies and Other Technologies

We use technologies that are strictly necessary for the use of certain features of our website (e.g., the shopping cart feature). These technologies collect and process your IP address, the time of your visit, device and browser information, and information regarding your use of our website (e.g., information about the contents of your shopping cart).

 

 

This is based on a balancing of interests and serves our overriding legitimate interests in optimizing the presentation of our offerings in accordance with Article 6(1), first sentence, letter f of the DSGVO.

 

In addition, we use technologies to comply with the legal obligations to which we are subject (e.g., to be able to demonstrate consent to the processing of your personal data) as well as for web analytics and online marketing.

 

For more information on this, including the respective legal basis for data processing, please refer to the following sections of this Privacy Policy. In some cases, we may also use technologies that are not listed individually in this Privacy Policy. For more information on these technologies, including the respective legal basis for data processing, please visit the Usercentrics platform.

 

You can access these by clicking the fingerprint button in the lower-right or lower-left corner of the page.

 

6.4 Cookie Settings

You can find the cookie settings for your browser at the following links:

•    Microsoft Edge

•    Safari

•    Chrome

•    Firefox

•    Opera.

 

If you have consented to the use of these technologies in accordance with Article 6(1)(a) of the DSGVO, you may withdraw your consent at any time by sending a message using the contact information provided in the Privacy Policy. Alternatively, you can click the fingerprint button in the lower right or lower left corner of the page. If you do not accept cookies, the functionality of our website may be limited.

 

6.5 Use of the Usercentrics Consent Management Platform to Manage Consent

On our website, we use the Usercentrics Consent Management Platform (“Usercentrics”) to inform you about the cookies and other technologies we use on our website, as well as to obtain, manage, and document your consent—where required by law—to the processing of your personal data by these technologies.

This is required under Article 6(1), first sentence, subparagraph (c) of the DSGVO to fulfill our legal obligation under Article 7(1) of the DSGVO to be able to demonstrate your consent to the processing of your personal data, to which we are subject. Usercentrics is a service provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, which processes your data on our behalf.

When you visit our website, the Usersentrics web server stores a server log file that contains your anonymized IP address, the date and time of your visit, device and browser information, and information regarding your consent preferences.

Your data will be deleted after three years, unless you have expressly consented to the continued use of your data in accordance with Article 6(1)(a) of the DSGVO, or we reserve the right to use your data beyond this period in a manner permitted by law, in which case we will inform you of such use in this statement.

 

Our service providers are located in and/or use servers in the following countries, for which the European Commission has determined, by means of a decision, that an adequate level of data protection exists: the United States. The adequacy decision for the United States serves as the basis for transfers to third countries, provided that the respective service provider is certified. Certification has been obtained.

 

6.6 Information on Transfers to Third Countries (Data Transfers to Third Countries)

We use technologies from service providers on our website whose headquarters and/or server locations may be in third countries outside the EU or the EEA. If there is no adequacy decision by the European Commission for that country, an adequate level of data protection must be ensured through other appropriate safeguards.

 

Appropriate safeguards in the form of the European Commission’s standard contractual clauses or binding corporate rules are generally possible; however, the contracting parties must first verify whether an adequate level of protection can be ensured. According to the case law of the European Court of Justice, it may be necessary to implement additional safeguards for this purpose.

 

As a general rule, we have agreed to the Standard Data Protection Clauses issued by the European Commission with the technology providers we use that process personal data in a third country. Where possible, we also agree to additional safeguards designed to ensure an adequate level of data protection in third countries without an adequacy decision.

 

Notwithstanding this, it may happen that, despite all contractual and technical measures, the level of data protection in the third country does not meet that of the EU. In such cases, we ask you, if necessary, as part of the cookie consent process, to provide your consent under Article 49(1)(a) of the DSGVO to the transfer of your personal data to a third country.

 

The risk that local authorities in the third country may be granted access rights to your personal data that are not sufficiently restricted from a European data protection perspective, that we, as the data exporter, or you, as the data subject, may not be aware of this, and/or that you may not have sufficient legal remedies available to prevent this and/or to take action against such access.

 

In particular, the following countries are currently among the third countries for which the European Commission has not issued an adequacy decision (examples only):

•    China

•    Russia

•    Taiwan

You can find out to which third countries we transfer data in the privacy notices for the respective tool and/or the consent management service we use (Consent Manager Platform, CMP).

 

7. Use of Cookies and Other Technologies

We use the following cookies and other third-party technologies on our website. Unless otherwise specified for each individual technology, this is based on your consent pursuant to Article 6(1)(a) of the DSGVO. Once the purpose has been fulfilled and we have ceased using the respective technology, the data collected in this context will be deleted.

You may withdraw your consent at any time, effective for the future. For more information on your options for withdrawing consent, please see the "Cookies and Other Technologies" section. For additional information, including the basis for our collaboration with individual providers, please refer to the sections on the individual technologies. If you have any questions about our service providers or the basis of our collaboration with them, please use the contact information provided in this Privacy Policy.

 

7.1 Use of Google Services

We use the following technologies provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google technologies regarding your use of our website is generally transmitted to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

. Unless otherwise specified for individual technologies, data processing is carried out on the basis of an agreement concluded between joint controllers for the respective technology in accordance with Article 26 of the DSGVO. For more information about data processing by Google, please see Google’s Privacy Policy:

Google’s Privacy Policy.

 

Our service providers are located in and/or use servers in countries outside the EU and the EEA for which the European Commission has issued a decision determining that they provide an adequate level of data protection. Our service providers are located in and/or use servers in countries outside the EU and the EEA. No adequacy decision has been issued by the European Commission for these countries. Our collaboration with them is based on the European Commission’s Standard Data Protection Clauses.

 

Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website), which is used to create usage profiles using pseudonyms. Cookies may be used for this purpose. If you visit our website from within the EU, your IP address is stored on a server located in the EU to derive location data and is then immediately deleted before the traffic is forwarded to other Google servers for processing. Data processing is carried out on the basis of a data processing agreement with Google.

 

To optimize the marketing of our website, we use the so-called user ID feature. This feature allows us to assign a unique, permanent ID to your interaction data from one or more sessions on our websites, enabling us to analyze your user behavior across devices and sessions.

 

If you do not grant us consent pursuant to Article 6(1)(a) of the DSGVO to use Google Analytics, no cookies will be stored on or read from your device. The data processing described in the preceding paragraphs will not take place. To fill gaps in web analytics through behavioral and conversion modeling, pings containing data (user agent, information about your consent behavior, screen resolution, IP address) are sent to Google.

 

 

7.2  Other Providers of Web Analytics and Online Marketing Services

Use of the Pinterest Tag for Web Analytics and Advertising Purposes For web analytics and advertising purposes on Pinterest and on third-party websites, when you visit our website, technologies provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Irland “Pinterest” automatically enable interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information, as well as information about your use of our website based on events we define, such as visiting a webpage or subscribing to a newsletter) and using a pseudonymous cookie ID, based on the pages you visit.

Usage profiles are created from the collected data using pseudonyms. Pinterest will combine this information with other data from your Pinterest account and use it to compile reports on website activity and to provide other services related to website usage. We have no control over how Pinterest processes data and only receive statistics generated by the Pinterest tag. We use this data to analyze website traffic and track events by monitoring your subsequent usage behavior if you arrived at our website via a Pinterest ad. The information automatically collected by Pinterest is generally transmitted to and stored on a server operated by Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA. Data processing is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the DSGVO.

 

Our service providers are located in and/or use servers in countries outside the EU and the EEA for which the European Commission has issued a decision determining that they provide an adequate level of data protection. Our service providers are located in and/or use servers in countries outside the EU and the EEA. No adequacy decision has been issued by the European Commission for these countries. Our collaboration with them is based on the European Commission’s Standard Data Protection Clauses.

 

Use of Wix Statistics for Web Analytics For the purpose of website analytics, data (IP address, time of visit, device and browser information, location information, and information regarding your use of our website) is automatically collected and stored using technologies provided by Wix Ltd., 40 Nemal St., Tel Aviv 6350671, Israel (“Wix”) to automatically collect and store data (IP address, time of visit, device and browser information, location information, and information regarding your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. The pseudonymized usage profiles will not be combined with personal data about the person behind the pseudonym without separate, explicit consent. Wix acts on our behalf.

 

Our service providers are located in and/or use servers in the following countries, for which the European Commission has determined, by decision, that an adequate level of data protection exists: Brazil, Israel, the United Kingdom, and the United States. The adequacy decision for the United States serves as the basis for transfers to third countries, provided that the respective service provider is certified. Certification has been obtained. Our service providers are located in and/or use servers in the following countries: Mexico, India, and Ukraine. There is no adequacy decision by the European Commission for these countries. Our collaboration with you is based on the following safeguards: the European Union’s Standard Data Protection Clauses.

 

Use of Visitor Analytics for Web Analytics We use what is known as fingerprinting technology to achieve the purposes described above. This involves analyzing the technical characteristics of your device or web browser to enable reliable analysis. The pseudonymized usage profiles are not combined with personal data about the holder of the pseudonym without separate, explicit consent. Visitor Analytics acts on our behalf as a data processor. Using the Visitor Recording tool from Visitor Analytics, statistics can be generated based on visitor recordings showing where you scrolled and what you clicked on the website. This feature helps us make the website more user-friendly and fix technical errors.

 

8. Social Media

8.1 Social media buttons from Instagram (by Meta) and Pinterest

Our website uses social media buttons from various social networks. These are embedded in the page solely as HTML links, so no connection to the respective provider’s servers is established when you visit our website. If you click on one of the buttons, the website of the respective social network will open in a new browser window. There, you can, for example, click the “Like” or “Share” button.

 

8.2 Our online presence on Instagram (by Meta) and Pinterest

To the extent that you have provided your consent pursuant to Article 6(1)(a) of the DSGVO to the respective social media operator, when you visit our online presence on the aforementioned social media platforms, your data will be automatically collected and stored for market research and advertising purposes, and usage profiles will be created using pseudonyms. These can be used, for example, to display advertisements—both on and off the platforms—that are presumed to match your interests. Cookies are typically used for this purpose. For detailed information on how each social media provider processes and uses data, as well as contact information, your rights in this regard, and privacy settings, please refer to the providers’ privacy policies linked below. If you still need assistance with this, please feel free to contact us.

 

Instagram (by Meta)

Instagram is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland regarding your use of our online presence on Instagram is generally transmitted to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Data processing in connection with visits to an Instagram (by Meta) fan page is based on an agreement between joint controllers in accordance with Article 26 of the DSGVO. Further information (including information on Insights data) can be found here.

 

Our service providers are located in and/or use servers in the following countries, for which the European Commission has determined, by decision, that an adequate level of data protection exists: Brazil, the United States, Canada, Japan, South Korea, New Zealand, the United Kingdom, and Argentina. The adequacy decision for the United States serves as the basis for transfers to third countries, provided that the respective service provider is certified. Certification is in place.

Our service providers are located in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, and Mexico. The European Commission has not issued an adequacy decision for these countries. Our collaboration with you is based on the following safeguards:

European Commission Standard Data Protection Clauses.

 

Pinterest

Pinterest is a service provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”). The information automatically collected by Pinterest regarding your use of our online presence on Pinterest is generally transmitted to and stored on a server operated by Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA. Our service providers are located in and/or use servers in countries outside the EU and the EEA for which the European Commission has determined, by means of a decision, that an adequate level of data protection exists.

Our service providers are located in and/or use servers in countries outside the EU and the EEA. The European Commission has not issued an adequacy decision for these countries. Our collaboration with them is based on the European Commission’s Standard Data Protection Clauses.

 

9. Contact Information and Your Rights

9.1 Your Rights

As a data subject, you have the following rights:

•    Pursuant to Article 15 of the DSGVO, the right to request information about the personal data we process about you, to the extent specified therein;

•    pursuant to Article 16 of the DSGVO, the right to request, without delay, the rectification of inaccurate personal data or the completion of your personal data stored by us;

•    pursuant to Article 17 of the DSGVO, the right to request the erasure of your personal data stored by us, unless further processing is

o    necessary for the exercise of the right to freedom of expression and information;

o    necessary to comply with a legal obligation;

o    for reasons of public interest; or

o    is necessary for the establishment, exercise, or defense of legal claims;

 

•    Pursuant to Article 18 of the DSGVO, the right to request the restriction of the processing of your personal data, provided that

o    you contest the accuracy of the data;

o    the processing is unlawful, but you object to its erasure;

o    we no longer need the data, but you need it to assert, exercise, or defend legal claims; or

o    you have objected to the processing pursuant to Article 21 of the DSGVO;

                                               

•    pursuant to Article 20 of the DSGVO, the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller;

•    Pursuant to Article 77 of the DSGVO, you have the right to lodge a complaint with a supervisory authority. As a general rule, you may contact the supervisory authority in your usual place of residence, your place of work, or where our company is headquartered.

 

9.2 Right to Object

To the extent that we process personal data as described above to protect our legitimate interests that prevail following a balancing of interests, you may object to such processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above.

If the processing is carried out for other purposes, you have the right to object only if there are grounds arising from your particular situation.

Once you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

This does not apply if the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for that purpose.

 

9.3 Contact Information

If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request information, correction, restriction, or deletion of data, or to revoke your consent or object to a specific use of your data, please contact us directly using the contact information provided in our legal notice.