Privacy notices

  1. General
    Unless otherwise stated below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Non-provision has no consequences. This only applies if no other information is given in the subsequent processing operations.

“Personal data” means any information relating to an identified or identifiable natural person.

1.2 Server log files

You can visit our website without giving any personal information.

Every time you access our website, usage data is transmitted to us or our web host / IT service provider by your Internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page called up, the date and time of the call, the IP address, the amount of data transferred, and the requesting provider. The processing takes place on the basis of Art. 6 Para. 1 lit. f DSGVO from our overriding legitimate interest in ensuring trouble-free operation of our website and improving our offer.

Your data may be transferred to third countries outside the European Union for which the EU Commission has issued an adequacy decision. If there is no adequacy decision by the EU Commission, such as for transfers to the USA, the data transfers are based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, available at: https://ec.europa.eu/info/law/law-topic/data-protection/international- dimension-data- protection/standard-contractual-clauses-scc_de

1.3 Data processing in third countries
If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA)) or the processing within the framework of the use of third-party services or the disclosure or transmission of data to other persons, bodies or companies takes place, this is only done in accordance with the legal requirements.

Subject to express consent or contractually or legally required transmission, we only process or have the data processed in third countries with a recognized level of data protection, based on special guarantees, such as contractual obligations through so-called standard protection clauses of the EU Commission, the existence of certifications or binding internal data protection regulations (Art. 44 to 49 GDPR, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de ).

The USA is rated by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal redress.

usage data
When visiting the website, general technical information is collected. These are the IP address used, time, duration of the visit, browser type, and, if applicable, the originating site. For technical reasons, this usage data is registered in a log file and can be used and stored for the purpose of statistical analysis of this website. This usage data is not linked to your other personal data.

Duration of storage
After the end of the purpose for which the data was collected, we only store your personal data for as long as this is required by law (in particular tax law) regulations.

Rights of the data subject

If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, to correction, to deletion, to restriction of processing, to data portability.

In addition, according to Art. 21 para. 1 GDPR, you have the right to object to the processing based on Art. 6 para. 1 f GDPR and against processing for the purpose of direct advertising.

Right of appeal to the supervisory authority

According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that your personal data is not being processed lawfully.

Right to object

Are the personal data processing listed here based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time for reasons that arise from your particular situation with effect for the future.

After the objection has been made, the processing of the data concerned will be terminated unless we can compellingly protect it

demonstrate grounds for processing that outweigh your interests, rights and freedoms, or if the processing of

Asserting, exercising or defending legal claims.

If personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. After the objection has been raised, we will stop processing the data concerned for the purpose of direct advertising.


2. Customer Account Orders

Customer Account

When you open a customer account, we collect your personal data to the extent specified there. The purpose of data processing is to improve your shopping experience and to simplify order processing. The processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent up to the revocation. Your customer account will then be deleted.

Collection, processing and disclosure of personal data when placing orders

When you place an order, we only collect and process your personal data to the extent that this is necessary to fulfill and process your order and to process your inquiries. The provision of the data is necessary for the conclusion of the contract. Non-provision means that no contract can be concluded. The processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR and is required to fulfill a contract with you.

Your data will be passed on, for example, to the shipping companies and dropshipping providers, payment service providers, service providers for order processing and IT service providers you have selected. In all cases, we strictly observe the legal requirements. The amount of data transmission is limited to a minimum.

Your data may be transmitted to third countries outside the European Union for which the EU Commission has issued an adequacy decision. If there is no adequacy decision by the EU Commission, such as for transfers to the USA, the data transfers are based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data , available at: https://ec.europa.eu/info/law/law-topic/data-protection/international- dimension-data-protection/standard- contractual -clauses-scc_de



3. Your Rights

information desk
You can request information from us as to whether we process your personal data and, if this is the case, you have a right to information about this personal data and to the further information specified in Art. 15 DSGVO.

Right to Rectification
You have the right to correct incorrect personal data concerning you and, in accordance with Art. 16 GDPR, you can request the completion of incomplete personal data.

Right to Erasure
You have the right to request that the personal data concerning you be deleted immediately. We are obliged to delete them immediately, especially if one of the following reasons applies:

  • Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
  • You revoke your consent on which the processing of your data was based and there is no other legal basis for the processing.
  • Your data has been unlawfully processed.

The right to erasure does not exist if your personal data is required to assert, exercise or defend our legal claims.


Right to restriction of processing
You have the right to request that we restrict the processing of your personal data if

  • you dispute the accuracy of the data and we therefore check the accuracy,
  • the processing is unlawful and you reject the deletion and instead request the restriction of use
  • we no longer need the data, but you need them to assert, exercise or defend legal claims,
  • You have objected to the processing of your data and it has not yet been determined whether our legitimate reasons outweigh your reasons.

Right to data portability
You have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format and you have the right to transmit this data to another person responsible without hindrance from us, provided that the processing is based on consent or a contract and the processing is carried out by us using automated procedures.

Right of withdrawal
If the processing of your personal data is based on consent, you have the right to revoke this consent at any time.

General and right of appeal
The exercise of your above rights is basically free of charge for you. In the event of complaints, you have the right to contact the supervisory authority responsible for us, the state data protection officer.


4. Data Security

Data security
All data on our website is protected against loss, destruction, access, modification and distribution by technical and organizational measures.

sessions and cookies
To operate the website, we can use cookies or server-side sessions in which data can be stored. Cookies are files that are stored on your hard drive by a website in order to automatically recognize this computer the next time you visit the website and thus be able to adapt the use of the website to you. Some of the cookies used are deleted after the end of the browser session. These are so-called session cookies. Other cookies remain on your end device and enable the browser to be recognized when you visit our website later (permanent cookies). You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Please note that you may not be able to use some functions of this website if cookies are deactivated. We ensure that no personal data is taken from sessions or by cookies and that cookies are only used if this is technically necessary for the website. Thus, the consideration shows that there are no overriding interests on your part (Art. 6 I S. 1 f DSGVO).

Use of Borlabs Cookie
We use the consent management tool Borlabs Cookie from the provider Borlabs – Benjamin A. Bornschein on our website
(Georg-Wilhelm-Str. 17, 21107 Hamburg; “Borlabs”).
The tool enables you to give your consent to data processing via the website, in particular the setting of cookies
as well as to make use of your right of withdrawal for consents already given.
The data processing serves the purpose of obtaining and documenting the necessary consent to data processing and thus
to comply with legal obligations.
Cookies may be used. The following information, among others, can be collected: Date and time of the
page view, information about the browser you are using and the device you are using, UID (randomly assigned, anonymous
ID), opt-in and opt-out data. This data is not passed on to third parties.
The data is processed to fulfill a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR.
You can find more information on data protection at Borlabs at: https://de.borlabs.io/borlabs-cookie/

You can change cookie settings here:

Cookieeinstellungen

You can use the links below to find out how to manage cookies in the most important browsers (including
disable) can:
Chrome Browser: https://support.google.com/accounts/answer/61416?hl=en
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-allow-and-reject
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies
If no other information is given below in the data protection declaration, we only use this technically necessary
Cookies for the purpose of making our offer more user-friendly, more effective and more secure. Furthermore, cookies enable
our systems to recognize your browser even after a page change and to offer you services. Some features of our
Website cannot be offered without the use of cookies. For this it is necessary that the browser also after
is recognized when changing sides.
The processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR from our overriding legitimate interest in the
Ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.
You have the right at any time, for reasons that arise from your particular situation, to Art. 6 para. 1 lit. f GDPR
to object to the processing of personal data relating to you.

5. Newsletters
If you register for our newsletter, we will use the data required for this or separately provided by you in order to send you our e-mail newsletter on a regular basis. Unsubscribing from the newsletter is possible at any time and can be done either by sending us a message via the contact options given in the imprint or via the link provided for this purpose in the newsletter.

Your data will be passed on to a service provider for e-mail marketing as part of order processing. One
It will not be passed on to other third parties.

Double opt-in procedure
The registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an e-mail in which you will be asked to confirm your registration. This confirmation is necessary so that nobody can register with someone else’s e-mail address. The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes storing the time of registration and confirmation as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

Notes on legal bases
The newsletter is sent on the basis of the consent of the recipient or, if consent is not required, on the basis of our legitimate interests in direct marketing, if and to the extent that this is permitted by law, e.g. in the case of advertising for existing customers. If we commission a service provider to send emails, this is done on the basis of our legitimate interests. The registration process is recorded on the basis of our legitimate interests to demonstrate that it has been carried out in accordance with the law.

content
Information about us, our products, promotions and sweepstakes and blog posts.

measurement of success
The newsletters contain a so-called “web beacon”, ie a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a shipping service provider, from their server. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of retrieval.

This information is used to technically improve our newsletter based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or the access times. This analysis also includes determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our aim nor, if used, that of the shipping service provider to monitor individual users. Rather, the evaluations serve us to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

The evaluation of the newsletter and the measurement of success are carried out, subject to the express consent of the user, on the basis of our legitimate interests for the purpose of using a user-friendly and secure newsletter system, which serves both our business interests and meets the expectations of the users.

Unfortunately, a separate revocation of the performance measurement is not possible. In this case, the entire newsletter subscription must be canceled or objected to.

  • Types of data processed: Inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), meta/communication data (e.g. device information, IP addresses), usage data (e.g. websites visited, interest in content, access times).
  • Affected persons: communication partners.
  • Purposes of processing: direct marketing (e.g. by e-mail or post).
  • Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a GDPR), legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).
  • Possibility of objection (opt-out): You can cancel the receipt of our newsletter at any time, ie revoke your consent or object to further receipt. You will find a link to cancel the newsletter either at the end of each newsletter or you can use one of the contact options given above, preferably e-mail.

Services used and service providers


6. Comments and Ratings
Comments
When you comment on an article or a contribution, we collect your personal data (name, e-mail address, comment text) only to the extent provided by you. The processing serves the purpose of enabling comments and displaying comments. By submitting the comment, you agree to the processing of the transmitted data. The processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent up to the revocation
will. Your personal data will then be deleted.
When your comment is published, only the name you provide will be published.
In addition, when you submit a comment, your IP address will be saved for the purpose of preventing misuse of the comment function and ensuring the security of our information technology systems. By submitting the comment, you agree to the processing of the transmitted data. The processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the data based on your consent up to
processing that has taken place is affected. Your IP address will then be deleted.

Shop information customer rating
For our website we use the “shopauskunft.de” evaluation tool from Händlerbund Management AG (Torgauer Straße 233 B, 04347 Leipzig; “Shopauskunft”).
After your order, we would like to ask you to rate and comment on your purchase from us. For this purpose, we will send you an e-mail, using the technical system “legally secure evaluation request (RBA)”. In doing so, we process the data relating to your order (order number/invoice number, purchase value and shipping costs) and your e-mail address.
The processing takes place on the basis of Art. 6 Para.1 lit. a DSGVO with your consent, provided that you have expressly consented to the transfer of your data and the receipt of the evaluation request.
You can revoke your consent at any time by using the corresponding link in the e-mail or by notifying us, without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation.
Further information on data protection when using shop information can be found at:
https://www.shopauskunft.de/datenschutz.

Shop information widget
The shop information widget is integrated on our website. This serves the purpose of displaying the number and result of the ratings we have received via shop information and thus advertising.
To display the widget, it is technically necessary for your Internet browser to transmit usage data to the shop information server and to save it in log data (so-called server log files) for 7 days. This stored data includes the name and URL of the retrieved file, date and time of retrieval, the IP address of the requesting computer, website from which access was made
takes place (referrer URL), the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
The processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR from our overriding legitimate interest in advertising our offers by presenting the customer reviews already received. This data is not stored together with other personal data.

7. Plugins and Miscellaneous

Use of Google Tag Manager

We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.

This application manages JavaScript tags and HTML tags used to implement tracking and analysis tools in particular. The data processing serves the purpose of the needs-based design and optimization of our website.

The Google Tag Manager itself does not store cookies, nor is personal data processed as a result. However, it enables the triggering of additional tags that can collect and process personal data. More information on terms of use and data protection can be found here .

Use of Social Plugins

We use social network plug-ins on our website. The integration of social plug-ins and the data processing that takes place in the process serve the purpose of optimizing advertising for our products.

When social plug-ins are integrated, a link is established between your computer and the servers of the social network provider and the plug-in is displayed on the page by notifying your browser, provided you have expressly consented to this. Both your IP address and the information about which of our pages you have visited are transmitted to the provider’s server. This applies regardless of whether you are registered or logged in to the social network. Transmission also takes place for users who are not registered or not logged in. If you are connected to one or more of your social network accounts at the same time, the information collected can also be assigned to your corresponding profiles. When using the plug-in functions (e.g. by pressing the button), this information is also assigned to your user account. You can prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons.

The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 S. 1 TTDSG in conjunction with Art. 6 Para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation.

The social networks named below are integrated into our website using social plug-ins. You can find more detailed information on the scope and purpose of the collection and use of the data as well as on your rights in this regard and options for protecting your privacy in the linked data protection notices of the providers.

Facebook of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)

Meta Platforms Ireland and we are jointly responsible for the collection of your data that takes place when the service is integrated and the transmission of this data to Facebook. This is based on an agreement between us and Meta Platforms Ireland on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at https://www.facebook.com/legal/controller_addendum . According to this, we are particularly responsible for fulfilling the information obligations according to Art. 13, 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service and for complying with the obligations according to Art. 33 , 34 GDPR to the extent that a personal data breach affects our obligations under the Joint Processing Agreement. Meta Platforms Ireland is responsible for enabling the rights of data subjects in accordance with Art. 15 – 20 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the security of the service and the obligations under Art. 33, 34 GDPR, insofar as a violation of personal data protection affects Meta Platforms Ireland’s obligations under the Joint Processing Agreement.

Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum .

You can find more information about the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy in Facebook’s data protection information at https://www.facebook.com/about/privacy/ .

Instagram of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):

https://help.instagram.com/155833707900388

Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transmission takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection /standard-contractual-clauses-scc_en.

Pinterest by Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA)

https://about.pinterest.com/de/privacy-policy

Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. Use of social plug-ins via “Shariff”

We use social network plug-ins on our website. We use the privacy-safe “Shariff” button so that you retain control of your data.

No links to the servers of the social networks will be established and consequently no data will be transmitted without your express consent.

“Shariff” is a development by the specialists at the computer magazine c’t. It enables more privacy on the web and replaces the usual ones Social Network Share Buttons. More information on the Shariff project can be found here https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-with-Privacy-2467514.html.

If you click on the button, a pop-up window appears in which you can log in to the respective provider with your data.

Only after you have actively logged in will a direct connection to the social networks be established.

By logging in, you give your consent to the transfer of your data to the respective social media provider. Here, among other things, both your IP address and information about which of our pages you have visited are transmitted. If you are connected to one or more of your social network accounts at the same time, the information collected will also be assigned to your corresponding profiles. You can only prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons. The social networks named below are integrated using the “Shariff” function.

You can find more detailed information on the scope and purpose of the collection and use of the data as well as on your rights in this regard and options for protecting your privacy in the linked data protection notices of the providers.

Facebook of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland): https://www.facebook.com/policy.php

Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum .

Instagram of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland) https://help.instagram.com/155833707900388 . Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transmission takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection /standard-contractual-clauses-scc_en.

Pinterest by Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA) https://about.pinterest.com/de/privacy-policy

Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA.

Use of YouTube

We use the function for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website. YouTube is a Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”) affiliated company.

The function displays videos stored on YouTube in an iFrame on the website. The option “Extended data protection mode” is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information about it sent to YouTube and stored there. Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transmission takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks .

The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 S. 1 TTDSG in conjunction with Art. 6 Para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation.

You can find more information about the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy in YouTube’s data protection information at https://www.youtube.com/t/privacy .

Using WooCommerce (WordPress)

This website uses WooCommerce, a WordPress shop system operated by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA.

When using this plug-in, data from visitors to the website is also collected, processed and used. No user interests are affected here which outweigh the technical necessity of integrating the shop system (Art. 6 I S. 1 f GDPR). The purpose and scope of the data collection and data use by WooCommerce/WordPress as well as your rights as a customer can be found in the data protection notices of WooCommerce/WordPress. You can find these at:

https://de.wordpress.org/plugins/woocommerce/)

WPML

This website uses the WPML language plugin from OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong to be able to offer a German and English language version of the website. WPML uses cookies to determine the current language of the visitor, the language last visited and the language of the users who have logged in. Information on the cookies used can be found at https://wpml.org/documentation/support/browser-cookies-stored-wpml .

8. Analysis of advertising tracking

Use of Google Analytics

We use the web analytics service Google Analytics from Google Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.

The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The following information, among other things, can be collected: IP address, date and time of the page view, click path, information about the browser you are using and the device you are using (device), pages visited, referrer URL (website via which you visit our website). visited the website), location data, purchase activities. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Google Analytics uses technologies such as cookies, web storage in the browser and tracking pixels, which enable an analysis of your use of the website. The information generated by this about your use of this website is usually transmitted to a Google server in the USA and stored there. There is no adequacy decision by the EU Commission for the USA. The data transmission takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adsprocessorterms/ . Both Google and US government agencies have access to your data. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and any other data that Google has about you.

IP anonymization is activated on this website. As a result, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases.

The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 S. 1 TTDSG in conjunction with Art. 6 Para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation.

You can find more information on terms of use and data protection at https://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/ and at https:/ /policies.google.com/technologies/cookies?hl=de .

Using the Facebook Pixel

We use the “Custom Audiences” remarketing function of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland “Facebook”) on our website.

Meta Platforms Ireland and we are jointly responsible for the collection of your data that takes place when the service is integrated and the transmission of this data to Facebook. This is based on an agreement between us and Meta Platforms Ireland on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at https://www.facebook.com/legal/controller_addendum . According to this, we are particularly responsible for fulfilling the information obligations according to Art. 13, 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service and for complying with the obligations according to Art. 33 , 34 GDPR to the extent that a personal data breach affects our obligations under the Joint Processing Agreement. Meta Platforms Ireland is responsible for enabling the rights of data subjects in accordance with Art. 15 – 20 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the security of the service and the obligations under Art. 33, 34 GDPR, insofar as a violation of the protection of personal data the obligations of

Meta Platforms Ireland under the Joint Processing Agreement.

The purpose of the application is to target visitors to the website with interest-based advertising on the social network Facebook. For this purpose, the Facebook remarketing tag was implemented on the website. This tag is used to establish a direct connection to the Facebook servers when you visit the website. This transmits to the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. If you visit the social network Facebook, you will then be shown personalized, interest-based Facebook ads. Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum .

The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 S. 1 TTDSG in conjunction with Art. 6 Para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation.

You can find more information about the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy in Facebook’s data protection information at https://www.facebook.com/about/privacy/ .


9. Sweepstakes and Contests

We process the personal data of participants in sweepstakes and competitions only in compliance with the relevant data protection regulations, insofar as the processing is contractually required for the provision, implementation and processing of the sweepstakes, the participants have consented to the processing or the processing serves our legitimate interests (e.g. in the security of the competition or the protection of our interests from misuse through the possible collection of IP addresses when submitting competition entries).

If entries by the participants are published as part of the competition (e.g. as part of a voting or presentation of the competition entries or the winners or reporting on the competition), we would like to point out that the names of the participants may also be published in this context. The participants can object to this at any time.

If the competition takes place within an online platform or a social network (e.g. Facebook or Instagram, hereinafter referred to as “online platform”), the usage and data protection provisions of the respective platforms also apply. In these cases, we would like to point out that we are responsible for the information provided by the participants in the context of the competition and that inquiries regarding the competition should be addressed to us.

The participants’ data will be deleted as soon as the sweepstakes or competition has ended and the data is no longer required to inform the winners or because queries about the sweepstakes are to be expected. In principle, the data of the participants will be deleted no later than 6 months after the end of the competition. Winners’ data may be retained for a longer period of time, for example in order to be able to answer questions about the prizes or to be able to fulfill the prizes; in this case, the retention period depends on the type of prize and is, for example, up to three years for items or services in order to be able to process warranty cases, for example. Furthermore, the data of the participants can be stored longer, for example in the form of reporting on the competition in online and offline media.

If data was also collected for other purposes as part of the competition, its processing and storage period are based on the data protection notices for this use (e.g. in the case of registration for the newsletter as part of a competition).

  • Types of data processed: Inventory data (e.g. names, addresses), content data (e.g. text entries, photographs, videos).
  • Affected persons: Sweepstakes and competition participants.
  • Purposes of processing: conducting sweepstakes and competitions.
  • Legal basis: Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR).

10. Rating Platforms

We participate in evaluation processes to evaluate, optimize and advertise our services. If users rate us via the rating platforms or methods involved or give us feedback in any other way, the general terms and conditions of business or terms of use and the data protection notices of the providers also apply. As a rule, the evaluation also requires registration with the respective providers.

In order to ensure that the reviewers have actually used our services, we transmit the data required for this with regard to the customer and the service used to the respective rating platform (including name, e-mail address and order number or article number). This data is only used to verify the authenticity of the user.

Evaluation widget : We integrate so-called “evaluation widgets” into our online offer. A widget is a function and content element integrated into our online offering that displays variable information. It can be displayed, for example, in the form of a seal or comparable element, sometimes also called a “badge”. The corresponding content of the widget is displayed within our online offer, but it is retrieved from the servers of the respective widget provider at that moment. This is the only way to always show the current content, especially the current rating. To do this, a data connection must be established from the website called up within our online offer to the widget provider’s server and the widget provider receives certain technical data (access data, including IP address) that are necessary for the content of the widget to be sent to the browser of the user can be delivered.

Furthermore, the widget provider receives information that users have visited our online offer. This information can be stored in a cookie and used by the widget provider to identify which online offers that participate in the evaluation process have been visited by the user. The information may be stored in a user profile and used for advertising or market research purposes.

  • Types of data processed: contract data (e.g. subject matter of contract, term, customer category), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
  • Affected persons: customers, users (e.g. website visitors, users of online services).
  • Purposes of processing: feedback (e.g. collecting feedback via online form), range measurement (e.g. access statistics, recognition of returning visitors), evaluation of visits, interest-based and behavioral marketing, profiling (creating user profiles).
  • Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a GDPR), legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

10. Contact

Responsible

Contact us if you wish. The contact details of the person responsible for data processing can be found in our imprint.

Customer contact via e-mail

If you initiate business contact with us by e-mail, we will only collect your personal data (name, e-mail address, message text) to the extent you have made them available. The data processing serves to process and answer your contact request.

If the establishment of contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR.

If contact is made for other reasons, this data processing is based on Art. 6 Para. 1 lit. f GDPR from our overriding legitimate interest in processing and answering your request. In this case, you have the right at any time, for reasons that arise from your particular situation, to Art. 6 para. 1 lit. f GDPR based processing of personal data concerning you to object.

We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When you use the contact form, we only collect your personal data (name, e-mail address, message text) to the extent provided by you. The data processing serves the purpose of establishing contact.

If the establishment of contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR.

If contact is made for other reasons, this data processing is based on Art. 6 Para. 1 lit. f GDPR from our overriding legitimate interest in processing and answering your request. In this case, you have the right at any time, for reasons that arise from your particular situation, to Art. 6 para. 1 lit. f GDPR based processing of personal data concerning you to object. We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

11 . payment service provider
Using PayPal
All PayPal transactions are subject to the PayPal Privacy Policy. You can find them
at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Using Stripe
All Stripe transactions are subject to the Stripe Privacy Policy. You can find them
under https://stripe.com/de/privacy

Parts created by: Dr. Thomas Schwenke