1. ACCESS DATA AND HOSTING

You may visit our website without providing any personal information. Each time a webpage is accessed, the web server automatically saves a server log file containing, for example, the name of the requested file, your IP address, the date and time of access, the data volume transferred, and the requesting provider (access data) to document the visit. These access data are analyzed solely to ensure the smooth operation of the site and to improve our services. This is done to safeguard our legitimate interests in an accurate presentation of our offering pursuant to Art. 6 (1) sentence 1 lit. f GDPR. All access data are deleted no later than seven days after your website visit ends.

2. DATA PROCESSING FOR CONTRACT EXECUTION AND CONTACT

 

We collect personal data when you voluntarily provide it to us as part of your order or when contacting us (e.g., via a contact form or email). Required fields are marked as such, as we need this information to process your order or inquiry. Without it, the order cannot be completed, or the inquiry cannot be sent. The specific data collected can be seen in the respective input forms.
We use the data you provide for contract execution and processing your inquiries in accordance with Art. 6 (1) sentence 1 lit. b GDPR. Further information on data processing, including the transfer of data to service providers for order, payment, and shipping processing, is outlined in the sections below. After full contract execution, your data will be restricted for further processing and deleted after the retention periods required under tax and commercial law expire unless you explicitly consent to further use of your data under Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use your data for legally permitted purposes, which we inform you about in this statement.

3. DATA PROCESSING FOR SHIPPING PURPOSES

To fulfill the contract pursuant to Art. 6 (1) sentence 1 lit. b GDPR, we transmit your data to the shipping service provider responsible for delivery, as necessary for delivering the ordered goods.
This also applies to the transfer of data to our manufacturers or wholesalers if they handle shipping for us (drop-shipping). They are considered shipping service providers under this privacy policy.

4. DATA PROCESSING FOR PAYMENT PURPOSES

When processing payments in our online shop, we collaborate with the following partners: technical service providers, financial institutions, and payment service providers.

4.1 DATA PROCESSING FOR TRANSACTION EXECUTION

Depending on the chosen payment method, we transfer the necessary payment transaction data to our technical service providers, contracted financial institutions, or selected payment service providers for payment processing. This is required for contract fulfillment under Art. 6 (1) sentence 1 lit. b GDPR. Payment service providers may collect the necessary payment data themselves, such as on their websites or through technical integration in the order process. Their respective privacy policies apply.
For questions regarding our payment processing partners and the basis of our collaboration, please contact us using the contact information provided in this privacy policy.

4.2 DATA PROCESSING FOR FRAUD PREVENTION AND PAYMENT PROCESS OPTIMIZATION

We may share additional data with our service providers, along with the data necessary for payment processing, to prevent fraud and optimize payment processes (e.g., invoicing, handling disputed payments, supporting accounting). This is done to safeguard our legitimate interests in fraud prevention and efficient payment management pursuant to Art. 6 (1) sentence 1 lit. f GDPR.

4.3 IDENTITY AND CREDIT CHECK WHEN USING KLARNA PAYMENT SERVICES

Klarna Pay Later (purchase on account)If you choose payment services from Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereafter “Klarna”), you consent under Art. 6 (1) sentence 1 lit. a GDPR to the transmission of necessary payment data, including identity and credit checks, to Klarna. Klarna may use credit reference agencies listed in Klarna’s privacy policy [https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_gb/privacy] for identity and credit checks in Germany. Klarna uses the received information on the statistical probability of payment default to make a balanced decision about the establishment, implementation, or termination of the contractual relationship.
You can withdraw your consent at any time by notifying the contact specified in this privacy policy. This may result in the unavailability of certain payment options. You may also revoke your consent to this use of personal data at any time directly with Klarna.

5. EMAIL MARKETING

Email Newsletter Subscription 

If you sign up for our newsletter, we use the data provided or separately communicated by you to regularly send you our email newsletter based on your consent under Art. 6 (1) sentence 1 lit. a GDPR. You can unsubscribe from the newsletter at any time by either contacting us through the methods described below or via the unsubscribe link provided in the newsletter. After unsubscribing, your email address will be removed from the mailing list unless you expressly consent to further use of your data under Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use your data for legally permissible purposes, which we inform you about in this statement.

6. COOKIES AND OTHER TECHNOLOGIES

General InformationTo make visiting our website attractive and enable certain functions, we use technologies, including cookies, on various pages. Cookies are small text files stored on your device. Some cookies are deleted after the browser session ends (session cookies), while others remain on your device and allow us to recognize your browser during your next visit (persistent cookies).

Technologies that are essential for using specific functions of our website (e.g., shopping cart functionality) are used to collect and process your IP address, visit time, device and browser information, and usage information of our website (e.g., shopping cart contents). This is based on our legitimate interest in an optimized presentation of our offering under Art. 6 (1) sentence 1 lit. f GDPR.

You can find your browser’s cookie settings at:

• Microsoft Edge™ [https://support.microsoft.com/en-us/help/4027947/microsoft-edge-delete-cookies]

• Safari™ [https://support.apple.com/en-us/guide/safari/sfri11471/12.0/mac/10.14]

• Chrome™ [https://support.google.com/chrome/answer/95647?hl=en]

• Firefox™ [https://support.mozilla.org/en/products/firefox/protect-your-privacy/cookies]

• Opera™ [https://help.opera.com/en/latest/web-preferences/#cookies]

If you have consented to the use of these technologies under Art. 6 (1) sentence 1 lit. a GDPR, you can withdraw your consent at any time by contacting us using the information provided in this privacy policy.

 

7. SOCIAL MEDIA

Our Online Presence on Facebook and Instagram

If you have provided your consent under Art. 6 (1) sentence 1 lit. a GDPR to the respective social media operator, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presence on the mentioned platforms. Pseudonymized usage profiles may be created using this data to display advertisements that may match your interests, both within and outside the platform. Cookies are usually used for this purpose.

Detailed information on data processing and use by the respective social media operator, contact information, and your rights and settings options to protect your privacy can be found in the linked privacy notices of the providers below. If you need further assistance, you may contact us.

• Facebook: [https://www.facebook.com/about/privacy/]

Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). Information collected by Facebook Ireland regarding your use of our Facebook presence is generally transmitted to and stored on servers operated by Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. For the USA, there is no adequacy decision from the European Commission. Our cooperation is based on the European Commission’s standard contractual clauses. Data processing in connection with visiting a Facebook Fan Page is based on a joint responsibility agreement under Art. 26 GDPR. Further information (including on Insights data) is available here: [https://www.facebook.com/legal/terms/information_about_page_insights_data].

• Instagram: [https://help.instagram.com/519522125107875]

Instagram is offered by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). Information collected by Facebook Ireland regarding your use of our Instagram presence is generally transmitted to and stored on servers operated by Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. For the USA, there is no adequacy decision from the European Commission. Our cooperation is based on the European Commission’s standard contractual clauses. Data processing in connection with visiting an Instagram Fan Page is based on a joint responsibility agreement under Art. 26 GDPR. Further information (including on Insights data) is available here: [https://www.facebook.com/legal/terms/information_about_page_insights_data].

8. CONTACT OPTIONS AND YOUR RIGHTS

Your Rights as a Data Subject

You have the following rights under the GDPR:

• Right to access (Art. 15 GDPR): You have the right to request information about the personal data we process about you, as specified in Art. 15 GDPR.

• Right to rectification (Art. 16 GDPR): You have the right to request immediate correction of incorrect or incomplete personal data stored by us.

• Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data, provided the processing is not necessary for:

• Exercising the right to freedom of expression and information;

• Compliance with a legal obligation;

• Reasons of public interest; or

• The establishment, exercise, or defense of legal claims.

• Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of the processing of your personal data where:

• You contest the accuracy of the data;

• The processing is unlawful, but you oppose its erasure;

• We no longer need the data, but you require it for the establishment, exercise, or defense of legal claims; or

• You have objected to processing under Art. 21 GDPR.

• Right to data portability (Art. 20 GDPR): You have the right to receive your personal data, which you provided to us, in a structured, commonly used, and machine-readable format, or to request its transfer to another controller.

• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority, typically in your habitual residence, place of work, or our company’s location.

Contact for Data Protection Queries

For questions regarding the collection, processing, or use of your personal data, as well as for information, rectification, restriction, or deletion of data, or to revoke consent or object to certain data use, please contact us directly using the details provided in our legal notice.

Right to Object

If we process personal data as explained above to protect our legitimate interests that outweigh your interests in the context of a balancing of interests, you may object to this processing with effect for the future.

If the processing is for direct marketing purposes, you can exercise this right at any time as described above. For processing conducted for other purposes, you may only object on grounds relating to your particular situation.

After exercising your right to object, we will cease processing your personal data for these purposes unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

This does not apply if the processing is for direct marketing purposes. In such cases, we will not process your personal data for this purpose.