Datenschutzerklärung
Privacy Policy
1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data refers to all data that can personally identify you.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Olivia Morasch, Weingartenstraße 1, 5201 Seekirchen. The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.
2) Data Collection When Visiting Our Website
When using our website purely for informational purposes, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Used browser
- Used operating system
- Used IP address (if applicable: in anonymized form)
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.
3) Hosting
Hosting by Shopify We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for hosting and displaying the online shop based on processing on our behalf. All data collected on our website is processed on Shopify's servers. In the context of the aforementioned services provided by Shopify, data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. Further information on Shopify's data protection can be found at: Shopify Privacy Policy. Further processing on servers other than the aforementioned by Shopify only takes place within the framework communicated below.
4) Cookies
To make the visit to our website attractive and to enable the use of certain functions, we use cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after closing your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies to recognize your browser on your next visit (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values individually. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. The storage period of the respective cookie can be found in the overview of the cookie settings of your web browser.
Partially, cookies are used to simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If individual cookies implemented by us also process personal data, processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.
Please note that you can set your browser to inform you about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for the respective browsers under the following links:
- Internet Explorer: Delete and manage cookies
- Firefox: Cookies - Information that websites store on your computer
- Chrome: Clear, enable, and manage cookies in Chrome
- Safari: Manage cookies and website data in Safari
- Opera: Cookies and site data
Please note that the functionality of our website may be restricted if cookies are not accepted.
5) Contacting Us
When contacting us (e.g., via contact form or email), personal data is collected. The data collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after the final processing of your request, provided there are no statutory retention obligations to the contrary.
6) Data Processing When Opening a Customer Account and for Contract Processing
According to Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us to execute a contract or open a customer account. The data collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the controller. We store and use the data you provide to process the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked regarding tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or a legally permitted further data use has been reserved by our site.
7) Use of Single Sign-On Procedures
Login With Amazon On our website, you can register or log in to create a customer account using the "Login with Amazon" service of Amazon EU S.a.r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg ("Amazon") as part of the so-called single sign-on technology. You can recognize the Amazon login function on our website by the button "Login with Amazon" or "Sign in with Amazon".
When you call up a page on our website that contains an Amazon login function, your browser establishes a direct connection to Amazon's servers. The content of the login button is transmitted directly to your browser by Amazon and integrated into the page. Through this integration, Amazon receives the information that your browser has called up the corresponding page of our web presence, even if you do not have an Amazon profile or are not logged in to Amazon at the time. This information (including your IP address) is transmitted directly from your browser to an Amazon server and stored there. These data processing operations are carried out in accordance with Art. 6 para. 1 lit. f GDPR based on Amazon's legitimate interest in displaying personalized advertising based on browsing behavior.
Using the Amazon login button on our website, you also have the option of logging in or registering on our website using your Amazon user data. Only if you give your express consent to the exchange of data with Amazon before the login process, based on a corresponding notice, will we receive from Amazon, depending on your personally made data protection settings at Amazon, the general and publicly accessible information stored in their profile. This information includes the user ID, name, address, email address, age, and gender.
The data transmitted by Amazon will be stored and processed by us to create a user account with the necessary data (salutation, first name, last name, address data, country, email address, date of birth) if these have been released by you at Amazon. Conversely, based on your consent, data (e.g., information on your browsing or purchasing behavior) can be transferred by us to your Amazon profile.
You can revoke the given consent at any time by sending a message to the controller named at the beginning of this privacy policy.
For the purpose and scope of data collection and the further processing and use of data by Amazon, as well as your rights and settings options for protecting your privacy, please refer to Amazon's privacy notices: Amazon Privacy Notice
If you do not want Amazon to associate the data collected through our web presence directly with your Amazon profile, you must log out of Amazon before visiting our website.
8) Use of Customer Data for Direct Advertising
8.1 Registration for our Email Newsletter If you sign up for our email newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of further data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter if you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm that you wish to receive future newsletters by clicking on an appropriate link.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you register for the newsletter, we store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration to trace any possible misuse of your email address at a later date. The data collected by us when registering for the newsletter will be used exclusively for advertising purposes via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the responsible party mentioned above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use data beyond that which is permitted by law and about which we inform you in this statement.
8.2 Email Notification of Product Availability If our online shop offers the possibility to inform you by email about the availability of selected, temporarily unavailable items, you can sign up for our email notification service for product availability. If you sign up for our email notification service, we will send you a one-time email notification about the availability of the item you have selected. The only mandatory information for sending this notification is your email address. The provision of further data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending this notification. This means that we will only send you a corresponding notification if you have expressly confirmed that you consent to receiving such a message. We will then send you a confirmation email asking you to confirm that you wish to receive such a notification by clicking on an appropriate link.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you sign up for our email notification service, we store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration to trace any possible misuse of your email address at a later date. The data collected by us when registering for the email notification service will be used exclusively to inform you about the availability of a specific item in our online shop. You can unsubscribe from the email notification service at any time by sending a message to the responsible party mentioned above. After unsubscribing, your email address will be immediately deleted from our notification list unless you have expressly consented to further use of your data or we reserve the right to use data beyond that which is permitted by law and about which we inform you in this statement.
9) Data Processing for Order Handling
9.1 Transmission of Image Files for Order Processing by Email On our website, we offer customers the option to commission the personalization of products by submitting image files via email. The submitted image motif is used as a template for the personalization of the selected product. The customer can send one or more image files from the storage of the used device to us via the email address provided on the website. We collect, store, and use the files submitted in this way exclusively for the production of the personalized product according to the respective service description on our website. If the submitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed about this in the following sections. No further transfer takes place. If the submitted files or digital motifs contain personal data (especially images of identifiable persons), all the named processing operations are carried out exclusively for processing your online order in accordance with Art. 6 para. 1 lit. b GDPR. After the final processing of the order, the submitted image files will be automatically and completely deleted.
9.2 Use of Service Providers for Order Processing To process your order, we work together with the following service providers who support us wholly or partially in the execution of concluded contracts. Certain personal data will be transmitted to these service providers according to the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of contract processing, provided this is necessary for the delivery of the goods. Your payment data will be passed on to the commissioned credit institution as part of payment processing, provided this is necessary for payment processing. If payment service providers are used, we explicitly inform you about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.
9.3 Cooperation with External Shipping Partners To fulfill our contractual obligations towards our customers, we work together with external shipping partners. We provide your name and delivery address and, if necessary for the delivery, your telephone number, exclusively for the purpose of delivering goods Art. 6 para. 1 lit. b GDPR to a shipping partner selected by us.
9.4 Use of Special Service Providers for Order Processing and Handling
- Oberlo Order processing is carried out via the dropshipping tool "Oberlo," a service of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Name, address, and, if applicable, other personal data are transmitted to the respective shipping partner/supplier for the purpose of delivering goods via Oberlo on our behalf according to Art. 6 para. 1 lit. b GDPR. The transfer of your data only takes place as far as it is necessary for processing the order. We have concluded an order processing contract with Oberlo, in which we oblige Oberlo to protect the data of our customers and not to pass it on to third parties. This contract can be viewed at the following internet address: Oberlo Data Processing Addendum
9.5 Use of Payment Service Providers (Payment Services)
-
Amazon Pay If you select the payment method "Amazon Pay," the payment processing is carried out via the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg ("Amazon Payments"), to whom we transmit your information provided during the order process together with the information about your order in accordance with Art. 6 para. 1 lit. b GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent that it is necessary for this. Further information on Amazon Payments' data protection regulations can be found at: Amazon Pay Help
-
Apple Pay If you choose the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing will be carried out via the "Apple Pay" function of your iOS, watchOS, or macOS-operated device by charging a payment card stored with Apple Pay. Apple Pay uses security features integrated into your device's hardware and software to protect your transactions. To authorize a payment, you need to enter a code previously set by you and verify it using the "Face ID" or "Touch ID" feature of your device. For payment processing, your information provided during the order process, along with information about your order, will be transmitted to Apple in encrypted form. Apple re-encrypts this data with a developer-specific key before transmitting the data for payment to the payment service provider of the payment card stored with Apple Pay. This encryption ensures that only the website where the purchase was made can access the payment data. After the payment is made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm the payment's success. If personal data is processed during the described transmissions, the processing is carried out exclusively for payment processing purposes in accordance with Art. 6 para. 1 lit. b GDPR. Apple stores anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was successfully completed. By anonymizing the data, it is ensured that there is no personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services. If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made through Safari on the Mac, the Mac and the authorization device communicate via an encrypted channel on Apple servers. Apple does not process or store any of this information in a format that could identify you. You can disable the ability to use Apple Pay on your Mac in the settings of your iPhone. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac." Further information on Apple Pay privacy can be found at: Apple Pay Privacy
-
Billpay When selecting the payment methods "Direct Debit (Lastschrift)" and/or "Invoice" and/or "Installment Purchase" via Billpay, you will be asked to provide your personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and for direct debit, the specified account details) during the ordering process. To safeguard our legitimate interest in determining the solvency of our customers, we transmit this data to Billpay GmbH, Zinnowitzer Str. 1, 10115 Berlin ("Billpay") for a credit check in accordance with Art. 6 para. 1 lit. f GDPR. Billpay checks, based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment experiences), whether the payment option you selected can be granted with regard to payment and/or default risks. For the decision within the scope of the application review, identity and creditworthiness information from the following credit agencies can also be included according to Art. 6 para. 1 lit. f GDPR:
- CRIF Bürgel GmbH, Radlkoferstraße 2, 81373 Munich, Tel.: +49 (0)89 508073-0, Fax: -31
- Creditreform Boniversum GmbH, Hellersbergstraße 11, D-41460 Neuss, Tel.: +49 (0)2131-109-501, Fax: -557
- infoscore Consumer Data GmbH (arvato), Rheinstraße 99, D-76532 Baden-Baden, Tel.: +49 (0)7221-5040-1000, Fax: -1001
- CRIF Bürgel GmbH, Friesenweg 4, House 12, 22763 Hamburg, Tel.: +49 (0)40-89803-0, Fax: -419
- SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Tel.: +49 (0)611-9278-0, Fax: -109
- Regis24 GmbH, Zehdenicker Str. 21, D-10119 Berlin, Tel.: +49 (0)30-44350240
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values. To verify identity, your personal data will be transmitted to one of the above credit agencies according to Art. 6 para. 1 lit. f GDPR. The credit agency will then inform the degree of agreement of the stored personal data with the data provided by you as a percentage and, if applicable, indicate a past card-based verification conducted by the credit agency. Billpay can thus determine based on the transmitted match rates whether a person is stored in the database of the credit agency at the specified address. Further information on Billpay's privacy policy can be found at: Billpay Privacy
You can object to this processing of your data at any time by sending a message to the data controller or Billpay. However, Billpay may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
-
Google Pay If you choose the "Google Pay" payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment processing is carried out via the "Google Pay" application on your Android 4.4 ("KitKat") or higher device with an NFC function by charging a payment card stored with Google Pay or a verified payment system (e.g., PayPal). For authorizing a payment over 25 Euros via Google Pay, you must unlock your mobile device through the set verification measure (e.g., facial recognition, password, fingerprint, or pattern). For payment processing, your information provided during the order process and information about your order is transmitted to Google. Google then transfers your stored payment information in Google Pay in the form of a unique transaction number to the originating website, verifying the payment's success. This transaction number does not contain any real payment data of your stored payment methods with Google Pay but is created and transferred as a unique numerical token. For all transactions via Google Pay, Google acts merely as an intermediary for processing the payment transaction. The execution of the transaction is carried out exclusively in the relationship between the user and the originating website by charging the stored payment method with Google Pay. If personal data is processed during the described transmissions, processing is carried out exclusively for payment processing purposes according to Art. 6 para. 1 lit. b GDPR. Google reserves the right to collect, store, and evaluate specific transaction-related information for each Google Pay transaction. This includes the transaction's date, time, and amount, merchant location and description, merchant-provided description of the purchased goods or services, photos attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the used payment method, your description for the reason for the transaction, and, if applicable, the offer associated with the transaction. According to Google, this processing is carried out solely according to Art. 6 para. 1 lit. f GDPR based on the legitimate interest in proper billing, verification of transaction data, and optimization and functional maintenance of the Google Pay service. Google also reserves the right to merge processed transaction data with other information collected and stored by Google through the use of other Google services. The Google Pay terms of use can be found here: Google Pay Terms of Service Further information on Google Pay privacy can be found at: Google Pay Privacy Notice
-
giropay When paying via "giropay," payment processing is carried out through giropay GmbH, An der Welle 4, 60322 Frankfurt/Main, to whom we transfer your information provided during the order process and information about your order according to Art. 6 para. 1 lit. b GDPR. The transfer of your data takes place exclusively for the purpose of payment processing and only to the extent necessary for this. Further information on giropay's privacy policy can be found at: giropay Privacy Policy
-
ipayment If the payment method(s) "Direct Debit via ipayment" and/or "Credit Card via ipayment" is/are offered, we transfer your personal data according to Art. 6 para. 1 lit. b GDPR to the 1&1 Internet AG, Elgendorfer Str. 57, 56410 Montabaur (hereinafter "1&1") for payment processing to the extent necessary. Further information on the handling of personal data by 1&1 can be found in the 1&1 Privacy Policy: 1&1 Privacy Policy
-
Klarna If you select a Klarna payment service, payment processing is carried out via Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). To enable payment processing, your personal data (first and last name, street, house number, postal code, city, gender, email address, telephone number, and IP address) and data related to your order (e.g., invoice amount, items, delivery method) will be transmitted to Klarna for identity and credit check purposes, provided you have expressly consented to this during the order process according to Art. 6 para. 1 lit. a GDPR. Which credit agencies your data may be forwarded to can be found here: Klarna Credit Rating Agencies The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data is included in the calculation of the score values, among other things. Klarna uses the received information about the statistical probability of a payment default for a balanced decision on the establishment, execution, or termination of the contractual relationship. You can revoke your consent at any time by sending a message to the data controller or Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for the contractual payment processing. Your personal information is handled according to the applicable data protection regulations and as stated in Klarna's privacy policy for affected individuals based in Germany: Klarna Privacy Policy DE or for affected individuals based in Austria: Klarna Privacy Policy AT
-
Paypal If you pay via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal, we will transfer your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal") as part of the payment processing. The transfer is made according to Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be transferred to credit agencies according to Art. 6 para. 1 lit. f GDPR based on PayPal's legitimate interest in determining your solvency. The result of the credit check regarding the statistical probability of payment default is used by PayPal for deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data is included in the calculation of the score values, among other things. Further information on PayPal's privacy policy can be found at: PayPal Privacy Policy You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment processing.
-
Shopify Payments We use the payment service provider "Shopify Payments," 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered via the payment service provider Shopify Payments, payment processing is carried out via the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we transfer your information provided during the order process along with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency, and transaction number) according to Art. 6 para. 1 lit. b GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this. Further information on Shopify Payments' privacy policy can be found at: Shopify Payments Privacy Policy. Data protection information for Stripe Payments Europe Ltd. can be found here: Stripe Privacy Policy
-
SOFORT If you choose the "SOFORT" payment method, payment processing is carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we transfer your information provided during the order process along with the information about your order according to Art. 6 para. 1 lit. b GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this. Further information on SOFORT's privacy policy can be found at: SOFORT Privacy Policy.
10) Online Marketing
10.1 Facebook Pixel for Creating Custom Audiences (without Cookie Consent Tool) Within our online offering, the so-called "Facebook Pixel" of the social network Facebook is used, operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). If a user clicks on an advertisement placed by us on Facebook, Facebook Pixel adds an additional parameter to the URL of our linked page. Provided our site allows data sharing with Facebook via Pixel, this URL parameter is written into the user's browser via a cookie set by our linked page itself. This cookie is then read by Facebook Pixel and enables data to be forwarded to Facebook. Using the Facebook Pixel, Facebook is firstly able to identify visitors to our online offering as a target group for displaying advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel to display the Facebook Ads we place only to Facebook users who have shown interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products, determined based on the visited websites) that we transmit to Facebook (so-called "Custom Audiences"). By using the Facebook Pixel, we also want to ensure that our Facebook Ads correspond to the potential interests of the users and are not annoying. This way, we can further evaluate the effectiveness of Facebook advertisements for statistical and market research purposes by understanding whether users were redirected to our website after clicking on a Facebook ad (so-called "Conversion"). The collected data is anonymous to us, so it does not offer us any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes according to the Facebook Data Usage Policy (Facebook Privacy Policy). The data can allow Facebook and its partners to place ads on and outside of Facebook. The data processing associated with the use of the Facebook Pixel is based on our predominant legitimate interest in the analysis, optimization, and economic operation of our online offering and our advertising measures according to Art. 6 para. 1 lit. f GDPR. The information generated by Facebook is usually transferred to a server of Facebook and stored there; it may also be transferred to the servers of Facebook Inc. in the USA. To object to the collection by the Facebook Pixel and the use of your data to display Facebook Ads overall, you can set an opt-out cookie by clicking on the following link, which deactivates Facebook Pixel tracking: Disable Facebook Pixel This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you need to click the above link again. If legally required, we have obtained your consent for the above-described processing of your data according to Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time with future effect. To exercise your revocation, please follow the described possibility of making an objection.
10.2 Google AdSense This website uses Google AdSense, a web advertising service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses cookies, which are text files stored on your computer, that allow an analysis of your use of the website. Google AdSense also uses so-called web beacons (small invisible graphics) to collect information. Through the use of web beacons, simple actions such as visitor traffic on the website can be recorded, collected, and evaluated. The information generated by the cookie and/or web beacon about your use of this website (including your IP address) is generally transmitted to and stored on a Google server. This may also involve transmission to the servers of Google LLC. in the USA. Google uses the obtained information to evaluate your usage behavior regarding the AdSense ads. The IP address transmitted by your browser in the context of Google AdSense will not be merged with other data from Google. The information collected by Google may be transferred to third parties if required by law or if third parties process this data on behalf of Google. The described data processing is carried out according to Art. 6 para. 1 lit. f GDPR for targeted advertising addressed to the user by advertising third parties whose advertisements are displayed based on the evaluated user behavior on this website. This processing also serves our financial interest in exploiting the economic potential of our internet presence by displaying personalized third-party advertising content for a fee. Further information on Google's privacy policy can be found at: Google Privacy Policy You can permanently disable cookies for advertising preferences by preventing them through your browser settings or by downloading and installing the browser plug-in available at the following link: Google Ad Preferences Please note that certain features of this website may not be available or may be limited if you disable the use of cookies. If legally required, we have obtained your consent for the above-described processing of your data according to Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time with future effect. To exercise your revocation, please follow the described possibility of making an objection.
10.3 Use of Google Ads Conversion-Tracking This website uses the online advertising program "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the offer of Google Ads to draw attention to our attractive offers with the help of advertising materials (so-called Google Adwords) on external websites. We can determine the success of individual advertising measures about the data of the advertising campaigns. Our aim is to display advertising that is of interest to you, make our website more interesting for you, and achieve a fair calculation of advertising costs. The cookie for conversion tracking is set when a user clicks on an ad placed by Google Ads. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and do not serve personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot thus be tracked across the websites of Google Ads customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users. If you do not want to participate in tracking, you can object to this usage by deactivating the Google conversion tracking cookie through your internet browser under user settings. You will then not be included in the conversion tracking statistics. We use Google Ads based on our legitimate interest in targeted advertising according to Art. 6 para. 1 lit. f GDPR. As part of the use of Google Ads, personal data may also be transferred to the servers of Google LLC. in the USA. Further information on Google's privacy policy can be found at: Google Privacy Policy You can permanently object to the setting of cookies for advertising preferences by adjusting your browser software accordingly or by downloading and installing the browser plug-in available at the following link: Google Ad Preferences Plugin Please note that certain features of this website may not be available or may be limited if you disable the use of cookies. If legally required, we have obtained your consent for the above-described processing of your data according to Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time with future effect. To exercise your revocation, please follow the described possibility of making an objection.
10.4 Google Marketing Platform This website uses the online marketing tool Google Marketing Platform operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP"). GMP uses cookies to display relevant ads to users, improve campaign performance reports, or prevent users from seeing the same ads multiple times. Google uses a cookie ID to track which ads are displayed in which browser, preventing them from being displayed multiple times. Processing is based on our legitimate interest in the optimal marketing of our website according to Art. 6 para. 1 lit. f GDPR. Moreover, GMP can use cookie IDs to track conversions related to ad requests. This occurs, for example, when a user sees a GMP ad and later visits the advertiser's website with the same browser and makes a purchase. According to Google, GMP cookies do not contain personally identifiable information. Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the extent and further use of data collected by Google through this tool and therefore inform you according to our knowledge: Through the integration of GMP, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or are not logged in, there is a possibility that the provider will learn and store your IP address. As part of the use of GMP, personal data may also be transferred to the servers of Google LLC. in the USA. If you wish to object to participating in this tracking process, you can deactivate the cookie for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com (see https://www.google.de/settings/ads), whereby this setting will be deleted when you delete your cookies. Alternatively, you can obtain information about setting cookies and make your desired settings at the Digital Advertising Alliance website (www.aboutads.info). Finally, you can set your browser to inform you about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited. Further information on the privacy policy of GMP by Google can be found at: Google Privacy Policy If legally required, we have obtained your consent for the above-described processing of your data according to Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time with future effect. To exercise your revocation, please follow the described possibility of making an objection.
11) Tools and Miscellaneous
11.1 Google reCAPTCHA We also use the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") on this website. This function primarily serves to distinguish whether an input is made by a natural person or abusively by automated and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in determining individual responsibility on the internet and avoiding misuse and spam. As part of the use of Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC. in the USA. Further information on Google reCAPTCHA and Google's privacy policy can be found at: Google Privacy Policy If legally required, we have obtained your consent for the above-described processing of your data according to Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time with future effect. To exercise your revocation, please follow the described possibility of making an objection.
11.2 Google Customer Reviews (formerly Google Certified Shops Program) We work with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This program gives us the opportunity to collect customer reviews from users of our website. After a purchase on our website, you will be asked whether you want to participate in an email survey from Google. If you give your consent according to Art. 6 para. 1 lit. a GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your shopping experience on our website. The review submitted by you will then be combined with our other reviews and displayed in our Google Customer Reviews logo and our Merchant Center dashboard. Your review will also be used for Google seller ratings. As part of the use of Google Customer Reviews, personal data may also be transmitted to the servers of Google LLC. in the USA. You can revoke your consent at any time by sending a message to the data controller or Google. Further information on Google’s privacy policy in connection with the Google Customer Reviews program can be found at: Google Customer Reviews Support Further information on Google seller ratings privacy policy can be found at: Google Ads Seller Ratings Help
12) Rights of the Data Subject
12.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) concerning the data controller regarding the processing of your personal data, which we inform you about below:
Right of access according to Art. 15 GDPR: In particular, you have the right to obtain information about your personal data processed by us, the processing purposes, the categories of processed personal data, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if they were not collected by us from you, the existence of automated decision-making, including profiling and, if applicable, meaningful information about the logic involved and the scope and intended impact of such processing concerning you, as well as your right to be informed about the guarantees according to Art. 46 GDPR when your data are transferred to third countries;
Right to rectification according to Art. 16 GDPR: You have the right to demand the immediate correction of incorrect data concerning you and/or the completion of your incomplete data stored by us;
Right to erasure according to Art. 17 GDPR: You have the right to request the erasure of your personal data under the conditions of Art. 17 para. 1 GDPR. This right does not apply, in particular, if processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims;
Right to restriction of processing according to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data disputed by you is verified if you refuse the deletion of your data due to unauthorized data processing and instead request the restriction of the processing of your data, if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved, or if you have objected for reasons of your special situation, as long as it has not yet been determined whether our legitimate reasons prevail;
Right to information according to Art. 19 GDPR: If you have asserted the right to rectification, erasure, or restriction of processing against the controller, they are obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or deletion of data or restriction of processing unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
Right to data portability according to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common, and machine-readable format or to request the transmission to another controller, as far as this is technically feasible;
Right to withdraw consent given according to Art. 7 para. 3 GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the case of withdrawal, we will delete the data concerned without delay, provided that further processing cannot be based on a legal basis for consent-free processing. The withdrawal of consent does not affect the lawfulness of processing based on consent before the withdrawal;
Right to lodge a complaint according to Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the member state of your residence, workplace, or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.
12.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST IN A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR SPECIAL SITUATION WITH EFFECT FOR THE FUTURE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH ADVERTISING PURPOSES. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT ADVERTISING PURPOSES.
13) Duration of Storage of Personal Data
The duration of the storage of personal data is based on the respective legal basis, the processing purpose, and – if applicable – additionally on the respective statutory retention period (e.g., commercial and tax retention periods).
When processing personal data based on an explicit consent according to Art. 6 para. 1 lit. a GDPR, these data are stored until the data subject withdraws their consent.
If statutory retention periods exist for data processed within the framework of legal or similar obligations based on Art. 6 para. 1 lit. b GDPR, these data will be routinely deleted after the retention periods expire, provided they are no longer required for contract fulfillment or contract initiation and/or if we have no legitimate interest in further storage.
When processing personal data based on Art. 6 para. 1 lit. f GDPR, these data are stored until the data subject exercises their right to object according to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights, and freedoms of the data subject or the processing serves to assert, exercise, or defend legal claims.
When processing personal data for direct marketing purposes based on Art. 6 para. 1 lit. f GDPR, these data are stored until the data subject exercises their right to object according to Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.
