Privacy Policy

1) INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we provide information about the handling of your personal data when using our website. Personal data includes all data that can be used to personally identify you.

1.2 The controller for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is Shop Name. The controller for the processing of personal data is the individual or legal entity that determines the purposes and means of processing personal data, either alone or jointly with others.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the padlock symbol in your browser's address bar.


2) DATA COLLECTION WHEN VISITING OUR WEBSITE
When you use our website for informational purposes only, i.e., when you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data necessary for technical reasons to display the website:

  • The website visited
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referral from which you reached the page
  • Browser used
  • Operating system used
  • IP address (if applicable: in anonymized form)

Processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. Data is neither shared nor otherwise used. However, we reserve the right to review server log files retrospectively if there are specific indications of unlawful use.


3) COOKIES
To make visiting our website more attractive and to enable the use of certain functions, we use cookies on various pages. These are small text files stored on your device. Some of the cookies we use are deleted after the browser session ends, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). Persistent cookies are automatically deleted after a specified duration, which may vary depending on the cookie.

Some cookies help streamline the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit). Where personal data is processed by individual cookies implemented by us, processing occurs either in accordance with Article 6(1)(b) GDPR to perform the contract or in accordance with Article 6(1)(f) GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly, effective website experience.

We may collaborate with advertising partners who help make our internet offering more interesting for you. In this case, cookies from partner companies may also be stored on your hard drive when you visit our website (third-party cookies). You will be informed individually and separately about the use of such cookies and the scope of information collected in the following sections if applicable.

Please note that you can configure your browser to inform you about the placement of cookies and to decide individually whether to accept them, to accept cookies for specific cases, or to generally block them. Each browser differs in how it manages cookie settings. These settings are described in the help menu of each browser, which explains how to change your cookie settings. You can find the relevant instructions for each browser at the links below:

Please note that disabling cookies may limit the functionality of our website.

4) CONTACTING US
When you contact us (e.g., via a contact form or email), personal data is collected. The specific data collected through a contact form is visible on the respective form. This data is used solely for the purpose of responding to your inquiry or for making contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your inquiry in accordance with Article 6(1)(f) GDPR. If your contact aims to conclude a contract, an additional legal basis for the processing is Article 6(1)(b) GDPR. Your data will be deleted once your inquiry has been fully processed, provided there are no statutory retention obligations preventing this.


5) DATA PROCESSING WHEN CREATING A CUSTOMER ACCOUNT AND FOR CONTRACT EXECUTION
In accordance with Article 6(1)(b) GDPR, personal data will be collected and processed when you provide it to us for contract execution or when creating a customer account. The specific data collected is visible on the respective input forms. You can delete your customer account at any time by sending a message to the address of the controller mentioned above. We store and use the data you provide for contract processing. After the complete execution of the contract or deletion of your customer account, your data will be restricted for further use and deleted after the retention periods specified by tax and commercial law, unless you have expressly consented to the further use of your data or we reserve the right to use your data for purposes permitted by law, which we inform you about in this policy.


6) USE OF YOUR DATA FOR DIRECT MARKETING
6.1 Subscribing to our email newsletter
If you subscribe to our email newsletter, we will send you regular information about our offers. The only mandatory information required to send the newsletter is your email address. Any additional data is voluntary and will be used to personalize the newsletter. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter once you have explicitly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm your subscription by clicking on a relevant link.

By activating the confirmation link, you consent to the use of your personal data in accordance with Article 6(1)(a) GDPR. When subscribing to the newsletter, we store your IP address as recorded by your internet service provider (ISP) as well as the date and time of subscription, to be able to trace any potential misuse of your email address at a later date. The data collected during newsletter registration is used solely for promotional purposes via the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by notifying the controller mentioned above. Upon unsubscribing, your email address will immediately be removed from our newsletter distribution list unless you have expressly consented to the continued use of your data or we reserve the right to use your data in ways permitted by law, about which we inform you in this policy.

6.2 Sending the email newsletter to existing customers
If you have provided your email address to us during the purchase of goods or services, we reserve the right to regularly send you offers for similar goods or services from our range via email. For this, we do not require separate consent from you. The data processing is based solely on our legitimate interest in personalized direct marketing in accordance with Article 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You can object to the use of your email address for this advertising purpose at any time with effect for the future by notifying the controller mentioned above. For this, you will only incur transmission costs according to the basic tariffs. After receiving your objection, the use of your email address for advertising purposes will be immediately stopped.


7) DATA PROCESSING FOR ORDER HANDLING
7.1 Personal data collected by us will be passed on to the transport company entrusted with the delivery as part of contract processing, insofar as this is necessary for delivering the goods. Your payment data will be passed on to the commissioned credit institution as part of payment processing, insofar as this is necessary for the payment process. If payment service providers are used, we explicitly inform you about this below. The legal basis for the data transfer is Article 6(1)(b) GDPR.

7.2 Use of Payment Service Providers (Payment Providers)

  • PayPal
    When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal, your payment data will be passed on to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment process. The data transfer is carried out in accordance with Article 6(1)(b) GDPR and only to the extent necessary for the payment processing.

    Additional Privacy Policy Details (Translated to English)


    PayPal Credit Check
    For payment methods such as credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal, PayPal reserves the right to perform a credit check. For this purpose, your payment data may be forwarded to credit agencies in accordance with Article 6(1)(f) GDPR, based on PayPal's legitimate interest in assessing your payment ability. The result of the credit check, which may include statistical probability values (so-called score values), is used by PayPal to decide on the availability of the respective payment method. Score values are based on scientifically recognized mathematical-statistical methods and may include address data among other factors.
    For further information on data protection, including details of the credit agencies used, please refer to PayPal's privacy policy:
    https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
    You can object to this processing of your data at any time by notifying PayPal. However, PayPal may still process your personal data to the extent necessary for contract-compliant payment processing.


    SOFORT Payment Method
    If you select the "SOFORT" payment method, payment is processed via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter referred to as "SOFORT"), to whom we transfer your information provided during the order process, along with details about your order, in accordance with Article 6(1)(b) GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Data is transferred solely for the purpose of payment processing and only to the extent necessary for this purpose.
    For more information on SOFORT's privacy policy, please visit:
    https://www.klarna.com/sofort/datenschutz.


    8) CONTACTING CUSTOMERS FOR REVIEW REMINDERS
    Self-Initiated Review Reminders (No Third-Party Review System)
    We may use your email address to send a one-time reminder to submit a review for your order in the review system we use, provided that you have expressly consented to this during or after your order in accordance with Article 6(1)(a) GDPR.
    You can revoke your consent at any time by notifying the data controller.


    9) USE OF SOCIAL MEDIA: SOCIAL PLUGINS
    9.1 Facebook Plugins with Shariff Solution
    Our website uses social plugins ("plugins") from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook").

    To enhance the protection of your data, these buttons are integrated into our website only as HTML links, rather than unrestricted plugins. This ensures that when you visit a page on our site containing such buttons, no direct connection is made to Facebook servers. By clicking the button, a new browser window opens, directing you to Facebook, where you can interact with plugins (if logged into your account).

    Facebook Inc., based in the USA, is certified under the EU-U.S. Privacy Shield Framework, ensuring compliance with EU data protection standards.
    For more information on Facebook's privacy practices, please visit:
    https://www.facebook.com/policy.php.

    9.2 Google+ Plugins with Shariff Solution
    Our website uses social plugins ("plugins") from the social network Google+, operated by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

    To protect your data, these buttons are embedded as HTML links instead of unrestricted plugins. This ensures no direct connection is made to Google's servers when you access pages containing these buttons. Clicking the button opens a new browser window to Google+, where you can interact with plugins (if logged into your account).

    Google LLC is certified under the EU-U.S. Privacy Shield Framework, ensuring compliance with EU data protection standards.
    For more details on Google's data protection practices, visit:
    https://www.google.com/intl/de/policies/privacy/.

    9.3 Instagram Plugins with Shariff Solution
    Our website uses social plugins ("plugins") from the Instagram online service, operated by Instagram LLC., 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram").

    To protect your data, these buttons are embedded as HTML links instead of unrestricted plugins. This ensures no direct connection is made to Instagram servers when accessing pages containing these buttons. Clicking the button opens a new browser window to Instagram, where you can interact with plugins (if logged into your account).

    Instagram LLC is certified under the EU-U.S. Privacy Shield Framework, ensuring compliance with EU data protection standards.
    For more information on Instagram's privacy practices, visit:
    https://help.instagram.com/155833707900388/.

    10) ONLINE MARKETING
    10.1 DoubleClick by Google

    This website uses the online marketing tool DoubleClick by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick").

    DoubleClick uses cookies to display ads relevant to users, improve campaign performance reports, or prevent users from seeing the same ads multiple times. Through a cookie ID, Google tracks which ads are displayed in which browser, and can prevent the same ad from being shown repeatedly. The processing is based on our legitimate interest in the optimal marketing of our website under Article 6(1) f GDPR.

    Furthermore, DoubleClick can capture conversions related to ad requests using cookie IDs. This happens, for example, when a user views a DoubleClick ad and later visits the advertiser’s website using the same browser and makes a purchase. According to Google, DoubleClick cookies do not contain any personal information.

    Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through this tool and, therefore, inform you to the best of our knowledge: By integrating DoubleClick, Google receives information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google may associate the visit with your account. Even if you are not registered with Google or are not logged in, there is a possibility that the provider will detect and store your IP address.

    If you do not want to participate in this tracking process, you can deactivate cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com at https://www.google.de/settings/ads, but this setting will be deleted if you delete your cookies. Alternatively, you can visit the Digital Advertising Alliance website at www.aboutads.info to learn about cookie placement and make your settings. Finally, you can set your browser to notify you when cookies are placed and decide individually whether to accept them, or exclude the acceptance of cookies for specific cases or in general. Not accepting cookies may limit the functionality of our website.

    Google LLC, based in the USA, is certified under the US-EU Privacy Shield Agreement, ensuring compliance with the level of data protection applicable in the EU.

    For further information on DoubleClick by Google’s privacy policies, visit:
    https://www.google.de/policies/privacy/

    10.2 Use of Google AdWords Conversion Tracking

    This website uses the online advertising program "Google AdWords" and, in the context of Google AdWords, the conversion tracking of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use Google AdWords to attract attention to our attractive offers on external websites with the help of advertising materials (so-called Google AdWords). We can determine, in relation to the data of the advertising campaigns, how successful the individual advertising measures are. This is done in the interest of showing you ads that are of interest to you, making our website more appealing to you, and ensuring a fair calculation of advertising costs.

    The cookie for conversion tracking is set when a user clicks on an ad served by Google AdWords. Cookies are small text files that are stored on your computer system. These cookies generally expire after 30 days and do not serve to personally identify you. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to that page. Each Google AdWords customer receives a different cookie. Therefore, cookies cannot be tracked across AdWords customers' websites. The information collected through the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are informed about the total number of users who clicked on their ad and were redirected to a page that includes a conversion tracking tag. However, they do not receive any information that could personally identify users. If you do not want to participate in tracking, you can block the use of the Google Conversion Tracking cookie by adjusting your browser settings to disable cookies from www.googleadservices.com. You will then not be included in the conversion tracking statistics. We use Google AdWords due to our legitimate interest in targeted advertising according to Article 6(1) f GDPR.

    Google LLC, based in the USA, is certified under the US-EU Privacy Shield Agreement, ensuring compliance with the level of data protection applicable in the EU.

    For further information on Google’s privacy policies, visit:
    https://www.google.de/policies/privacy/

    You can permanently disable cookies for ad preferences by preventing them through an appropriate setting in your browser software or by downloading and installing the browser plug-in available at:
    https://www.google.com/settings/ads/plugin?hl=en

    Please note that certain features of this website may not be available or may be limited if you disable the use of cookies.

    11) WEB ANALYTICS SERVICES
    Google (Universal) Analytics

    • Google Universal Analytics

    This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies," text files stored on your computer that allow for analysis of your use of the website. The information generated by the cookie regarding your use of this website (including your shortened IP address) is usually transmitted to a server of Google in the USA and stored there.
    This website uses Google Analytics exclusively with the "_anonymizeIp()" extension, which ensures the anonymization of the IP address by truncation and excludes direct personal identification. Through this extension, your IP address will be truncated by Google within the member states of the European Union or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. In these exceptional cases, this processing is carried out according to Article 6(1) f GDPR based on our legitimate interest in statistical analysis of user behavior for optimization and marketing purposes.
    On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide further services related to website and internet use. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other Google data.
    You can prevent the storage of cookies by adjusting the settings of your browser software; however, we would like to point out that, in this case, you may not be able to fully use all the features of this website. You can also prevent the collection of data generated by the cookie related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at the following link:
    https://tools.google.com/dlpage/gaoptout?hl=en
    Alternatively, to prevent data collection in mobile browsers or browsers on other devices, please click on the following link to set an opt-out cookie that prevents Google Analytics from collecting data on this website in the future (this opt-out cookie works only in this browser and only for this domain; if you delete your cookies in this browser, you must click this link again): Disable Google Analytics
    Google LLC, based in the USA, is certified under the US-EU Privacy Shield Agreement, ensuring compliance with the level of data protection applicable in the EU.
    This website also uses Google Analytics for cross-device tracking of visitor flows, which is conducted using a user ID. When a user first visits a page, a unique, permanent, and anonymized ID is assigned to the user, which is used across devices. This enables interaction data from different devices and sessions to be attributed to a single user. The user ID does not contain personal data and does not transmit any such data to Google.
    You can object to the collection and storage of data via the user ID at any time with future effect. To do this, you must disable Google Analytics on all systems you use, such as another browser or your mobile device. You can do this with the help of a Google browser plugin (https://tools.google.com/dlpage/gaoptout?hl=en). Alternatively, for mobile browsers, please click the following link to set an opt-out cookie to prevent Google Analytics from collecting data on this website in the future (this opt-out cookie works only in this browser and for this domain; if you delete your cookies in this browser, you must click this link again): Disable Google Analytics
    For further information on Universal Analytics, please visit:
    https://support.google.com/analytics/answer/2838718?hl=en

    12) RETARGETING / REMARKETING / RECOMMENDATION ADVERTISING

    Facebook Custom Audience via Pixel Method

    This website uses the "Facebook Pixel" of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). With explicit consent, this tool tracks the behavior of users after they have viewed or clicked on a Facebook ad. This method helps evaluate the effectiveness of Facebook ads for statistical and market research purposes, and can help optimize future advertising efforts.

    The collected data is anonymous to us, meaning it does not provide insight into the identity of users. However, Facebook stores and processes the data, which allows it to be linked to individual user profiles. Facebook may use this data for its own advertising purposes, as per Facebook's data usage policy (https://www.facebook.com/about/privacy/).

    You may allow Facebook and its partners to show ads on and off Facebook. Additionally, a cookie may be stored on your device for these purposes. These processing activities occur only with your explicit consent, according to Art. 6(1)(a) GDPR.

    Consent for the use of the Facebook Pixel may only be given by users who are over 13 years old. If you are under 13, please ask your legal guardians for permission.

    Facebook Inc., located in the USA, is certified under the US-EU "Privacy Shield" agreement, which ensures compliance with the EU data protection standards.

    To disable cookies from being stored on your computer, you can configure your internet browser to block cookies or delete existing ones. However, disabling all cookies may result in certain website features no longer being accessible. You can also disable the use of cookies by third parties like Facebook at the following website: https://www.aboutads.info/choices/


    Google AdWords Remarketing

    Our website uses the functions of Google AdWords Remarketing to advertise our website in Google search results and on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). To do this, Google places a cookie in your browser, which enables interest-based advertising based on a pseudonymous cookie ID and the pages you have visited. The processing is based on our legitimate interest in the optimal marketing of our website according to Art. 6(1)(f) GDPR.

    Further data processing occurs only if you have consented to Google linking your web and app browsing history to your Google account and using data from your Google account to personalize ads you see on the web. If you are logged into Google during your visit to our website, Google uses your data, together with Google Analytics data, to create and define audience lists for cross-device remarketing. Your personal data will be temporarily linked with Google Analytics data to form audiences.

    You can permanently deactivate the setting of cookies for ad preferences by downloading and installing the browser plugin available at this link: https://www.google.com/settings/ads/onweb/

    Alternatively, you can learn about setting cookies and make adjustments through the Digital Advertising Alliance at www.aboutads.info. You can also configure your browser to inform you when cookies are being set, and decide whether to accept them individually, or block cookies for specific cases or generally. If you reject cookies, some functions of our website may be limited.

    Google LLC, based in the USA, is certified under the US-EU "Privacy Shield" agreement, ensuring compliance with the data protection standards in the EU.

    For more information on advertising and Google’s privacy policies, you can visit: https://www.google.com/policies/technologies/ads/


    13) RIGHTS OF THE DATA SUBJECT

    13.1 The applicable data protection law grants you comprehensive rights regarding the processing of your personal data by the data controller, which we will outline below:

    • Right of Access (Art. 15 GDPR): You have the right to obtain information about your personal data processed by us, including the processing purposes, categories of data processed, recipients or categories of recipients to whom your data has been disclosed, the intended retention period or the criteria for determining the retention period, the right to rectification, erasure, restriction of processing, objection to processing, complaints to a supervisory authority, the origin of your data if it has not been collected by us, the existence of automated decision-making, including profiling, and significant information about the logic involved and the potential impact of such processing.

    • Right to Rectification (Art. 16 GDPR): You have the right to request immediate correction of any inaccurate data related to you and/or the completion of incomplete data stored by us.

    • Right to Erasure (Art. 17 GDPR): You have the right to request the erasure of your personal data if certain conditions are met, particularly when the data is no longer necessary for the purposes it was collected for, or you withdraw consent.

    • Right to Restriction of Processing (Art. 18 GDPR): You have the right to request the restriction of processing of your personal data while the accuracy of your data is being verified, or if you oppose the processing and request restriction instead of deletion, or if the data is needed for the establishment, exercise, or defense of legal claims.

    • Right to Notification (Art. 19 GDPR): If you have requested correction, deletion, or restriction of processing, the controller must inform all recipients to whom your personal data has been disclosed.

    • Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format or to request the transfer to another controller.

    • Right to Withdraw Consent (Art. 7(3) GDPR): You have the right to withdraw your consent at any time, and such withdrawal will not affect the lawfulness of processing based on consent before the withdrawal.

    • Right to Lodge a Complaint (Art. 77 GDPR): If you believe that your personal data is being processed in violation of the GDPR, you have the right to lodge a complaint with a supervisory authority.


    13.2 Right to Object

    If we process your personal data based on a legitimate interest, you have the right to object to this processing on grounds relating to your particular situation. Upon exercising your right to object, we will cease processing the affected data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

    If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your data for this purpose, as outlined above.


    14) STORAGE DURATION OF PERSONAL DATA

    The storage duration of personal data depends on the respective legal retention periods (e.g., commercial and tax law retention periods). After the retention period has expired, the relevant data is routinely deleted, unless it is required for contract fulfillment or initiation, or if we have a legitimate interest in further retention.