Privacy Policy

1) Information on the Collection of Personal Data and Contact Details of the Data Controller

1.1 We are delighted by your interest in our website and thank you for visiting. Below, we inform you about how your personal data is handled when you use our website. Personal data includes all data by which you can be personally identified.

1.2 The data controller for this website, within the meaning of the General Data Protection Regulation (GDPR), is Shop Name. The data controller is the individual or legal entity that decides, either alone or jointly with others, the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the “https://” string and the padlock symbol in your browser’s address bar.

2) Data Collection When Visiting Our Website

When you use our website purely for informational purposes, i.e., when you do not register or otherwise provide us with information, we collect only the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data that is technically necessary for us to display the website:

• The website visited
• Date and time of access
• Amount of data sent in bytes
• Source/reference from which you arrived at the page
• Browser used
• Operating system used
• IP address used (where applicable: anonymised)

Processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be transmitted or otherwise used. However, we reserve the right to review server log files later if there are concrete indications of illegal use.

3) Cookies

To make visiting our website more attractive and enable the use of certain functions, we use cookies on various pages. These are small text files stored on your device. Some of the cookies we use are deleted after the browser session ends (session cookies). Other cookies remain on your device, allowing us or our partner companies (third-party cookies) to recognise your browser during your next visit (persistent cookies). Persistent cookies are automatically deleted after a specified period, which varies depending on the cookie.

Cookies may collect and process certain user information, such as browser and location data or IP address values. Persistent cookies are automatically deleted after a predefined period. If individual cookies process personal data, processing is carried out in accordance with Article 6(1)(b) GDPR for the performance of the contract or in accordance with Article 6(1)(f) GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective website design.

You can set your browser to notify you about the setting of cookies and decide individually whether to accept them, exclude the acceptance of cookies in specific cases, or in general. Please note that if cookies are not accepted, the functionality of our website may be limited.

4) Contacting Us

When you contact us (e.g., via the contact form or email), personal data is collected. Which data is collected can be seen from the contact form. This data is stored and used solely for the purpose of responding to your request or for establishing contact and the associated technical administration. The legal basis for processing data is our legitimate interest in responding to your request in accordance with Article 6(1)(f) GDPR. Your data will be deleted once your request has been fully processed unless legal retention obligations apply.

5) Data Processing When Opening a Customer Account and for Contract Execution

In accordance with Article 6(1)(b) GDPR, personal data is collected and processed when you provide it to us for the execution of a contract or when opening a customer account. The data collected can be seen from the respective input forms. You can delete your customer account at any time by sending a message to the controller’s address. We store and use the data you provide for contract processing. After the contract is fully executed, your data will be blocked and deleted following the applicable retention periods unless you have expressly consented to further use of your data or we have reserved the right to use your data for legally permitted purposes.

6) Use of Your Data for Direct Advertising

6.1 Email Newsletter Subscription

If you subscribe to our email newsletter, we will regularly send you information about our offers. Mandatory information for sending the newsletter is only your email address. Additional data may be provided voluntarily. To send the newsletter, we use the so-called double opt-in procedure. This means that we will only send you a newsletter via email if you have expressly confirmed that you agree to receive newsletters.

By activating the confirmation link, you consent to the use of your personal data in accordance with Article 6(1)(a) GDPR. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller.

7) Data Processing for Order Handling

We collect and process personal data to the extent necessary for processing orders. We transmit this data to the transport company tasked with delivery and, if applicable, to payment service providers for payment processing. The legal basis for such data transmission is Article 6(1)(b) GDPR.

8) Web Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies that enable analysis of your use of the website. The information generated by the cookies about your use of this website is transmitted to and stored by Google on servers. For further details, refer to Google’s privacy policy.

9) Social Media Plugins

We use social media plugins from providers such as Facebook, Google+, and Instagram to enhance user interaction. To protect your data, these plugins are integrated into the website using the Shariff solution. This ensures that no direct connection to social media servers is established unless you actively click on the respective plugin.

10) Your Rights

As a data subject, you have the right to access your personal data, request its rectification or deletion, restrict its processing, object to its processing, and data portability. You also have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates GDPR regulations.

11) Retention Periods

The retention period for personal data is based on the respective statutory retention period. After the expiry of such periods, the corresponding data is routinely deleted unless it is still required for contract fulfilment or initiation or if we have a legitimate interest in further storage.

 

12) Retargeting/Remarketing/Referral Advertising

Facebook Custom Audiences via the Pixel Process

This website uses the "Facebook Pixel" from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). With explicit consent, user behaviour can be tracked after they have seen or clicked on a Facebook advertisement. This process serves to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and can help optimise future advertising efforts.

The data collected is anonymous to us, meaning it does not allow us to identify users. However, the data is stored and processed by Facebook, enabling a connection to the respective user profile and for Facebook to use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy (https://www.facebook.com/about/privacy/). You can enable Facebook and its partners to display advertisements on and off Facebook. A cookie may also be stored on your device for these purposes.

These processes occur only with explicit consent in accordance with Article 6(1)(a) GDPR. Consent to the use of the Facebook Pixel may only be given by users older than 13 years. If you are younger, please ask your parent or guardian for permission.

Facebook Inc., headquartered in the United States, is certified under the US-European "Privacy Shield" data protection agreement, ensuring compliance with the data protection level applicable in the EU.

To disable the use of cookies on your computer, you can set your internet browser so that no more cookies can be placed on your computer in the future, or cookies already stored can be deleted. However, disabling all cookies may result in some functions on our website no longer being executable. You can also disable the use of cookies by third-party providers such as Facebook on the Digital Advertising Alliance website: https://www.aboutads.info/choices/.

Google AdWords Remarketing

Our website uses the functions of Google AdWords Remarketing, which allows us to advertise this website in Google search results and on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising based on the pages you visit using a pseudonymous cookie ID.

Processing is based on our legitimate interest in the optimal marketing of our website in accordance with Article 6(1)(f) GDPR. Further data processing only takes place if you have consented to Google linking your internet and app browsing history to your Google account and using information from your Google account to personalise ads you see on the web. In this case, if you are logged into Google while visiting our website, Google uses your data along with Google Analytics data to create and define audience lists for cross-device remarketing. To do this, your personal data will be temporarily linked by Google with Google Analytics data to form target groups.

You can permanently deactivate the setting of cookies for advertising preferences by downloading and installing the browser plugin available at the following link: https://www.google.com/settings/ads/onweb/.

Alternatively, you can find out about the setting of cookies and make the necessary settings at the Digital Advertising Alliance website: www.aboutads.info. Finally, you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Refusing cookies may limit the functionality of our website.

Google LLC, headquartered in the United States, is certified under the US-European "Privacy Shield" data protection agreement, ensuring compliance with the data protection level applicable in the EU.

Further information and the data protection regulations regarding advertising and Google can be viewed here: https://www.google.com/policies/technologies/ads/.

13) Rights of the Data Subject

13.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) with respect to the data controller regarding the processing of your personal data, which we inform you about below:

• Right of Access pursuant to Article 15 GDPR: You have the right to obtain information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the origin of your data if it was not collected by us from you, the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing affecting you, and your right to be informed about the guarantees pursuant to Article 46 GDPR when your data is transferred to third countries;
• Right to Rectification pursuant to Article 16 GDPR: You have the right to have incorrect data concerning you corrected without delay and/or to have incomplete data stored by us completed;
• Right to Erasure pursuant to Article 17 GDPR: You have the right to demand the deletion of your personal data if the requirements of Article 17(1) GDPR are met. However, this right does not apply, in particular, if processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims;
• Right to Restriction of Processing pursuant to Article 18 GDPR: You have the right to request the restriction of the processing of your personal data, as long as the accuracy of your data disputed by you is verified, if you refuse the deletion of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you need your data to assert, exercise or defend legal claims, once we no longer need this data after achieving the purpose, or if you have filed an objection based on your particular situation, as long as it is not yet clear whether our legitimate reasons prevail;
• Right to Information pursuant to Article 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing against the data controller, they are obliged to inform all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
• Right to Data Portability pursuant to Article 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request its transfer to another controller, as far as this is technically feasible;
• Right to Withdraw Consent pursuant to Article 7(3) GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned without delay, provided that further processing cannot be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of processing carried out based on consent before its withdrawal;
• Right to Lodge a Complaint pursuant to Article 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the location of the alleged infringement.

13.2 Right to Object

If we process your personal data as part of a balancing of interests based on our overriding legitimate interest, you have the right at any time to object to this processing with effect for the future for reasons arising from your particular situation.

If you exercise your right to object, we will stop processing the data concerned. However, further processing remains reserved if we can demonstrate compelling legitimate grounds for processing that outweigh your interests, fundamental rights and freedoms, or if processing serves to assert, exercise or defend legal claims.

If we process your personal data for direct advertising purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. You can exercise the objection as described above.

If you exercise your right to object, we will stop processing the data concerned for direct advertising purposes.

14) Duration of Storage of Personal Data

The duration of the storage of personal data is determined based on the respective statutory retention period (e.g., commercial and tax retention periods). After the expiry of the deadline, the corresponding data is routinely deleted, provided that it is no longer required for contract fulfilment or initiation and/or we have no legitimate interest in further storage.

 

 

.