Data Privacy

We are pleased that you are interested in our online shop. The protection of your privacy is a matter of great importance for us. In the following, we wish to provide you with detailed information about how we handle your data.

1. ACCESS DATA AND HOSTING

You can visit our web pages without providing any personal information. Every time a web page is accessed, the webserver only automatically saves what is known as a server log file which contains information such as the name of the requested file, your IP address, the date and time of access, the data quantity transferred and the provider making the enquiry (access data), and which documents the access event.

These access data are analysed exclusively for the purpose of ensuring trouble-free operation of the site and for improving our offer. In terms of Art. 6(1) point (f) GDPR and in the context of the weighing of interests, this serves the purpose of safeguarding our overriding legitimate interests in a correct presentation of our offer. All access data are erased at the latest by fourteen days after the end or your visit to our website.

Hosting services by a third-party supplier

A third-party supplier performs processing on our behalf in the context of providing us with services for hosting and presenting our website. In the context of the weighing of interests, this serves the purpose of safeguarding our overriding legitimate interests in a correct presentation of our offer. All data collected in the context of using this website or in online shop forms provided for this purpose such as those described below are processed on their servers. Processing on other servers takes place only in the framework explained here.

This service provider is located in a country of the European Union or the European Economic Area

2. DATA ACQUISITION AND USAGE FOR CONTRACT HANDLING AND FOR OPENING A CUSTOMER ACCOUNT

We gather personal data when you disclose these to us of your own free will in the context of your order, when you initiate contact with us (e.g. by email or using the contact form) or when you open a customer account. Required fields are marked as such because in these cases, these data are essential for contract handling or for processing your contact with us or are necessary for opening the customer account and without providing them, you would be unable to complete your order and/or the opening of the account or would be unable to send your contact request. The data collected is evident on the respective input forms. We use the data you provide in accordance with Art. 6(1) point (b) GDPR for contract handling and processing your enquiries. After processing of your contract is completed or your customer account is deleted, the further processing of your data is restricted and they are erased after expiration of the tax and commercial law retention periods unless you have expressly consented to the continued use of your data or we have reserved the right to use these data in a manner which goes beyond the aforementioned and which is statutorily permitted and concerning which we inform you in the following. Deletion of your customer account is possible at any time and can be accomplished either by sending a message to the contact described below or by using a function provided for this purpose in the customer account.

3. DATA TRANSFER

For the purpose of contract fulfilment in accordance with Art. 6(1) point (b) GDPR, we pass your data to the shipping company engaged to make the delivery to the extent required for the delivery of the ordered goods. Depending on the payment service provider you have chosen in the ordering process, we pass the payment information collected for the purpose of payment processing to the credit institution engaged to make the payment and, if necessary, to payment service providers we have engaged or to the selected payment service. In some cases, the selected payment service provider also collects this data themselves if you create an account there. In this case, you must log in with the payment service provider using your access information in the context of the order process. In this context, the data privacy statement of the respective payment service provider applies.

4. EMAIL NEWSLETTER

Email advertising with subscription to the newsletter

When you subscribe to our newsletter, we use the data required for this purpose or data you provide separately in order to send you our email newsletter regularly based on the consent you have given in accordance with Art. 6(1) point (a) GDPR.

It is possible to unsubscribe from the newsletter at any time and this can accomplished either by sending a message to the contact described below or by using a link provided for this purpose in the newsletter. After unsubscribing, we erase your email address unless you have expressly consented to the continued use of your data or we have reserved the right to use these data in a manner which goes beyond the aforementioned and which is statutorily permitted and concerning which we inform you in this statement.

The newsletter is sent out by a service provider engaged by us to whom we pass your email address in the context of processing for this purpose.

This service provider is located in a country of the European Union or the European Economic Area

5. INTEGRATION OF THE TRUSTED SHOPS TRUSTBADGE

This website incorporates the Trusted Shops Trustbadge for the display of our Trusted Shops Seal of Approval and the collected ratings as well as to offer the Trusted Shops products for buyers after an order.

In the context of the weighing of interests, this serves the purpose of safeguarding our overriding legitimate interests in optimal marketing of our offer in accordance with Art. 6(1) point (f) GDPR. The trustbadge and the services advertised along with it are an offer made by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Köln.

When the trustbadge is accessed, the webserver automatically saves what is known as a server log file which contains information such as your IP address, the date and time of access, the data quantity transferred and the provider making the enquiry (access data), and which documents the access event. These access data are not evaluated and are overwritten at the latest seven days after the end of your visit to the web page.

Further personal data are only transferred to Trusted Shops inasmuch as you have granted your consent to this, you have decided to use Trusted Shops products after completing an order or you have already registered for use. In this case, the contractual agreement between you and Trusted Shops applies.

6. COOKIES AND WEB ANALYSIS

We use what are known as cookies on different pages in order to make your visit to our website attractive and to enable the use of certain functions, to display appropriate products or for market research purposes. In the context of the weighing of interests, this serves the purpose of safeguarding our overriding legitimate interests in an optimized display of our offer in accordance with Art. 6(1) point (f) GDPR. Cookies are small text files which are automatically saved on your end device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after your browser is closed (so-called session cookies). Other cookies remain on your end device and make it possible for us recognize your browser again the next time you visit (persistent cookies). You can find the duration of storage in the overview of the cookie settings in your web browser. You can set your browser in such a way that you are informed about the setting of cookies and can decide on an individual basis whether to accept these or you can reject cookies in certain cases or you can reject them generally. Each browser is different in terms of how the cookie settings are managed. This is described in the help menu of every browser and explains to you how you can change your cookie settings. This can be found for the respective browser using the following links:

 

This website uses Google (Universal) Analytics, a web analysis service of Google LLC (www.google.com) for web analysis purposes. In the context of the weighing of interests, this serves the purpose of safeguarding our overriding legitimate interests in an optimized display of our offer in accordance with Art. 6(1) point (f) GDPR. Google (Universal) Analytics uses methods which make it possible to analyse your use of the website, such as “cookies”. The information collected automatically about your use of this website is typically transferred to a Google server in the USA and is saved there. Through the activation of the IP anonymization on this web page, the IP address is truncated before transfer within the member states of the European Union or to other states party to the agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and is there truncated. The anonymised IP address transmitted from your browser in the context of Google Analytics is, as a matter of principle, not merged with other Google data. After the purpose has ceased to apply and we have terminated the use of Google Analytics, the data collected in this regard are erased.

Google LLC has headquarters in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. On the basis of this agreement between the USA and the European Commission, the latter has specified a suitable level of data protection for companies certified under the Privacy Shield.

You can prevent the transfer to Google of the data which the cookie generates related to your use of the website (incl. your IP address) as well as the processing of these data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en

Information concerning the purpose and extent of data collection and the further processing of data by AddThis can be found in the data privacy policy of AddThis: http://www.addthis.com/privacy/privacy-policy

7. SOCIAL MEDIA PLUG-INS

The use of social plug-ins subject to the use of the Shariff solution.

Social buttons from social networks are used on our website.

In the context of the weighing of interests, this serves the purpose of safeguarding our overriding legitimate interests in optimal marketing of our offer in accordance with Art. 6(1) point (f) GDPR. In order to increase the level of data protection during your visit to our website, these buttons are not integrated as unrestricted plug-ins, but rather only using an HTML link in the page. This integration ensures that when a page of our website is opened which contains such buttons, no connection to the servers of the offerer of the respective social network is established yet.

When you click on one of the buttons, a new window opens in your browser and calls up the page of the respective service provider on which you can click the Like or Share button, for example (possibly after entering your login data).

Information concerning the purpose and extent of data collection and the further processing and use of data by the provider on their pages as well as a contact option and your rights in this regard and setting options for the protection of your privacy can be found in the data privacy policy of the provider.

 

YouTube video plug-ins

The content of third-party providers is integrated in this website. This content is provided by Google LLC (“Provider”). YouTube is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

For the YouTube videos integrated on our website, the enhanced data protection setting has been activated. This means that no information on website visitors is collected and stored by YouTube, except if the visitor plays the video. In the context of the weighing of interests, this integration of the videos serves the purpose of safeguarding our overriding legitimate interests in optimal marketing of our offer in accordance with Art. 6(1) point (f) GDPR.

Information concerning the purpose and extent of data collection and the further processing and usage of data by the provider as well as your rights in this regard and setting options for the protection of your privacy can be found in the data privacy policy of Google http://www.google.com/intl/en/+/policy/+1button.html .

Vimeo video plug-ins

The content of third-party providers is integrated in this website. This content is provided by Vimeo LLC (“Provider”). In the context of the weighing of interests, this integration of the videos serves the purpose of safeguarding our overriding legitimate interests in optimal marketing of our offer in accordance with Art. 6(1) point (f) GDPR.

Vimeo is operated by Vimeo LLC, 555 West 18th Street, New York 10011, USA (“Vimeo”).

For the Vimeo videos integrated on our website, the Google Analytics tracking tool is integrated automatically. We have no influence over the tracking settings or the analysis results collected thereby and we cannot access them. In addition, web beacons are set for the website visitors through the embedding of Vimeo videos.

Information concerning the purpose and extent of data collection and the further processing and usage of data by the provider as well as your rights in this regard and setting options for the protection of your privacy can be found in the Vimeo Privacy Policy

8. SENDING OF RATING REMINDERS VIA EMAIL

Rating reminder from Trusted Shops

If, in accordance with Art. 6(1) point (a) GDPR you have expressly given us your consent to do so during or after ordering, we will send your email address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de) so that they can send you a rating reminder via email.

This consent can be revoked at any time by sending a message to the contact described below or directly to Trusted Shops.

9. CONTACT OPTIONS AND YOUR RIGHTS

As a data subject, you have the following rights:

In accordance with Art. 15 GDPR, the right to demand information to the extent described there concerning the personal data on you that we process;

In accordance with Art. 16 GDPR, the right to demand the prompt rectification of incorrect personal data or the completion of incomplete personal data that we have stored;

In accordance with Art. 17 GDPR, the right to demand the erasure of your personal data that we have stored provided that the further processing is not required

  • for the exercise of the right of free expression and information;
  • for the fulfilment of a legal obligation;
  • for reasons of public interest, or
  • for the assertion, exercise or defence of legal claims;

 

In accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data inasmuch as

  • the correctness of the data is contested by you;
  • the processing is unlawful, but you reject their erasure;
  • we no longer need the data, but you need them for the assertion, exercise or defence of legal claims, or
  • you have objected to the processing in accordance with Art. 21 GDPR;

 

In accordance with Art. 20 GDPR, the right to receive your personal data which you have provided to us in a structured, common and machine-readable format or to demand the transfer to another data controller;

In accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. Generally, you can contact the supervisory authority of your customary place of residence or your workplace or of the headquarters of our company.

In the event of questions concerning the acquisition, processing or use of your personal data, for information, corrections, freezing or deletion of data as well as the revocation of consent that has been granted or an objection to certain data uses, please contact us directly via the contact information provided in our legal notice.


Right of objection

Inasmuch as we process personal data as explained above for the purpose of safeguarding our overriding legitimate interests in the context of the weighing of interests, you can object to this processing effective for the future. If the processing serves the purpose of direct marketing, you can exercise this right at any time as described above. Inasmuch as the processing takes place for other purposes, you are only entitled to the right of objection for reasons which arise from your specific situation.

After exercising your right of objection, we will not process your personal data further for these purposes unless we can prove compelling reasons for processing which are worthy of protection and which outweigh your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims.

This does not apply if the processing is carried out for the purposes of direct marketing. Then we will no longer process your personal data for this purpose.