Privacy Policy
Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither required by law nor by contract, nor is it necessary to conclude a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other statement is made regarding the following processing operations.
"Personal data" means all information relating to an identified or identifiable natural person.
Contact
Data Controller
Feel free to contact us. The data controller is: Srinivasan Surya Narayanan, Schulstr. 46, 21224 Rosengarten Germany, 17655004114, info@stilltree.de
Customer Initiating Contact via Email
If you initiate business contact with us via email, we only collect your personal data (name, email address, message text) to the extent you provide it. The data processing is for the purpose of processing and responding to your contact request.
If the contact is for the purpose of carrying out pre-contractual measures (e.g., advice on purchasing interest, creating an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.
If the contact is for other reasons, this data processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to such processing of personal data relating to you based on Art. 6(1)(f) GDPR.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.
Collection and Processing When Using the Contact Form
When using the contact form, we only collect your personal data (name, email address, message text) to the extent you provide it. The data processing is for the purpose of contacting you.
If the contact is for the purpose of carrying out pre-contractual measures (e.g., advice on purchasing interest, creating an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.
If the contact is for other reasons, this data processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to such processing of personal data relating to you based on Art. 6(1)(f) GDPR.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.
Customer Account Orders
Customer Account
When opening a customer account, we collect your personal data to the extent stated therein. The data processing is for the purpose of improving your shopping experience and simplifying order processing. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of processing based on consent prior to revocation. Your customer account will then be deleted.
Reviews Advertising
Data Collection When Submitting a Comment or Review
When commenting on or reviewing an item or post, we only collect your personal data (name, email address, comment text) to the extent you provide it. Processing is for the purpose of enabling a comment/review and displaying comments/reviews.
For the purpose of verifying your review/comment, we also collect the following data: Order number, , , .
By submitting the comment/review, you consent to the processing of the transmitted data. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of processing based on consent prior to revocation. Your personal data will then be deleted.
When your comment/review is published, only the name you provided will be published.
In addition, when submitting the comment/review, your IP address will be stored for the purpose of preventing misuse of the comment or review function and ensuring the security of our information technology systems. By submitting the comment/review, you consent to the processing of the transmitted data. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of processing based on consent prior to revocation. Your IP address will then be deleted.
Use of Judge.me
We use the "Judge.me" review system by Judge.me Ltd (c/o Buckworths 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB; "Judge.me") on our website.
Judge.me enables us to collect customer reviews and display them on our website to give you insight into the quality of our services.
After placing an order, you may receive an invitation from us or Judge.me to leave a review and subsequently leave a review. In this case, the following data may be processed by us or Judge.me, among others: email address, name, phone number, address, information about your device (IP address, information about your web browser and the operating system used), information about the purchased product or service used (order number, product details), the content of your review and the star rating you gave, your product photos or videos (if you have attached them to your product review). This data may also be used for the purpose of verifying your review if necessary.
Judge.me uses technologies such as cookies.
Your data may be transferred outside the EU to the United Kingdom. An adequacy decision by the EU Commission exists for the United Kingdom.
Your data may be transferred to the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Judge.me is not certified under the TADPF. This data transfer is based on special contracts approved for use in the United Kingdom that offer the same level of protection as personal data has in the United Kingdom.
The use of cookies or comparable technologies is based on your consent pursuant to § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is based on Art. 6(1)(a) GDPR with your consent, provided you have expressly agreed to the disclosure of your data and receipt of the review request. You can revoke your consent at any time, without affecting the lawfulness of processing based on consent prior to revocation.
Further information on data protection when using Judge.me can be found at: https://judge.me/privacy.
We use your email address to send information and offers via newsletter, provided you have expressly agreed to it. Data processing is solely for the purpose of promotional communication. For this purpose, we process your email address and, if applicable, other data you have voluntarily provided when signing up for our newsletter.
Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time, without affecting the lawfulness of processing based on consent prior to revocation.
You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address in a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is based on Art. 6(1)(f) GDPR due to our and your legitimate interest in preventing the reuse of your email address for sending our newsletter. You have the right, for reasons arising from your particular situation, to object at any time to such processing of personal data relating to you.
Use of the Email Address for Sending Direct Advertising
We use your email address, which we received in connection with the sale of goods or services, for the electronic transmission of advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to such use. The provision of the email address is necessary to conclude the contract. Failure to provide it will result in no contract being concluded. Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in direct advertising. You can object to such use of your email address at any time by notifying us. The contact details for exercising the objection can be found in the legal notice. You can also use the link provided for this purpose in the promotional email. No other costs than the transmission costs according to the basic tariffs will be incurred for this.
Use of an external inventory management system
We use an inventory management system for contract processing as part of a data processing agreement. For this purpose, the personal data collected during the ordering process is transmitted to
Shopify Inc., 151 O'Connor Street, Ottawa, Ontario K2P 2L8, Canada – cloud-based shop software
.
The processing of your personal data is for the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6(1)(b) GDPR.
Payment Service Provider
Use of PayPal Express
We use the PayPal Express payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing is for the purpose of being able to offer you payment via the PayPal Express payment service. To integrate this payment service, PayPal collects, stores, and analyzes data (e.g., IP address, device type, operating system, browser type, device location) when the website is accessed. Cookies may also be used for this purpose. Cookies enable the recognition of your browser.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data relating to you.
By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy notice at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Use of PayPal Check-Out
We use the PayPal Check-Out payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing is for the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
Cookies may be stored during this process, enabling the recognition of your browser. The data processing carried out thereby is based on Art. 6(1)(f) GDPR based on our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data relating to you.
Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal
For individual payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right, if necessary, to obtain a credit assessment based on mathematical-statistical methods using credit reference agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit reference agency and uses the information received about the statistical probability of a payment default to make a balanced decision on establishing, carrying out, or terminating the contractual relationship. The credit assessment may include probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, and address data, among other things, is used in their calculation. Your legitimate interests will be taken into account in accordance with legal provisions. The data processing is for the purpose of a credit check for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in protection against payment default when PayPal provides the advance payment.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data relating to you based on Art. 6(1)(f) GDPR by notifying PayPal. The provision of the data is required to conclude the contract using your desired payment method. Failure to provide the data will result in the contract not being concluded using your selected payment method.
Third-party providers
When paying using a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6(1)(b) GDPR. To carry out this payment method, the data may then be passed on by PayPal to the respective provider. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Local third-party providers may include, for example:
Invoice payment via PayPal
When paying using the invoice payment method, the data required for payment processing is first transmitted to PayPal. To carry out this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") so that we can fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Ratepay may carry out a credit assessment based on mathematical-statistical methods (probability or score values) using credit reference agencies following the process described above. The data processing is for the purpose of a credit check for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in protection against payment default when Ratepay provides the advance payment. Further information on data protection and which credit reference agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
Further information on data processing when using PayPal can be found in the associated privacy notice at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use of Shopify Payments
We use the "Shopify Payments" payment service provided by Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. In this case, payment processing is carried out by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). The data processing is for the purpose of being able to offer you payment via the Shopify Payments payment service. By selecting and using a corresponding "Shopify Payments" payment method, the data required for payment processing is transmitted to Stripe so that we can fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
Stripe reserves the right, if necessary, to obtain a credit assessment based on mathematical-statistical methods using credit reference agencies. For this purpose, Stripe transmits the personal data required for a credit check to a credit reference agency and uses the information received about the statistical probability of a payment default to make a balanced decision on establishing, carrying out, or terminating the contractual relationship. The credit assessment may include probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, and address data, among other things, is used in their calculation. Your legitimate interests will be taken into account in accordance with legal provisions. The data processing is for the purpose of a credit check for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in protection against payment default when Stripe provides the advance payment.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data relating to you based on Art. 6(1)(f) GDPR by notifying Stripe. The provision of the data is required to conclude the contract using your desired payment method. Failure to provide the data will result in the contract not being concluded using your selected payment method.
Further information on data processing when using the Shopify Payments payment service can be found in the Shopify privacy notice at: https://www.shopify.com/de/legal/datenschutz.
Further information on data processing when payment is processed using the payment service provider Stripe can be found in the Stripe privacy notice at: https://stripe.com/de/privacy.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the user's internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic character string that enables the unique identification of the browser when the website is accessed again.
We use the Cookie Consent Manager CCM19 by Händlerbund Legal GmbH (Kohlgartenstraße 11 - 13, 04315 Leipzig; "CCM19") on our website under a data processing agreement.
The plugin is hosted on consenttool.haendlerbund.de and allows you to grant consent to data processing on the website, in particular the setting of cookies, and to exercise your right of withdrawal for consent already granted. The purpose of the data processing is to obtain and document the necessary consent to data processing and thus comply with legal obligations.
Cookies are used for this purpose. The following information may be collected, stored and, if applicable, transferred to Händlerbund Legal GmbH: randomly assigned ID, consent status, date and time of consent/rejection. The data is stored for 1 year and 1 month and then deleted. This data is not shared with any other third parties.
The data processing is carried out to fulfill a legal obligation on the basis of Art. 6(1)(c) GDPR.
Further information on data protection can be found at: https://www.haendlerbund.de/de/datenschutzerklaerung.
Analysis Advertising tracking
Use of Google Analytics 4
We use the Google Analytics web analysis service by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The purpose of the data processing is to analyze this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide additional services related to website and internet use to the website operator.
The following information may be collected, among other things: IP address, date and time of the page visit, click path, information about the browser and device you use, pages visited, referrer URL (the website through which you accessed our website), location data, purchasing activity. Google may combine your data with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.
The IP address is anonymized by Google before it is transferred to member states of the European Union or other states party to the Agreement on the European Economic Area.
Google uses technologies such as cookies, browser storage, and counting pixels that enable it to analyze your use of the website. The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) sentence 1 of the TDDDG in conjunction with Art. 6(1)(a) GDPR.
Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing based on consent up to the time of withdrawal.
The information generated thereby about your use of this website is generally transferred to a Google server in the USA and stored there. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to complying with European data protection principles.Both Google and US government authorities have access to your data.
Further information on the terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites at https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/.
Use of Shopify Analytics
We use the statistics and analysis functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website under a data processing agreement. Shopify is a company affiliated with Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The purpose of the data processing is to analyze this website and its visitors. Data is stored for marketing and optimization purposes and provided in reports, analyses, and statistics. The following device information, among other things, is collected and processed: information about the web browser, IP address, time zone, and some of the cookies installed on your device. When you navigate the website, information is also collected about the webpages or products viewed, the referrer URL (the website through which you accessed our website), and how you interact with the website. Technologies such as cookies as well as web beacons, tags, and pixels (electronic files used to collect information about how you navigate the website) are used for this purpose.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. There is an adequacy decision by the EU Commission for Canada. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's standard contractual clauses.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) sentence 1 of the TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing based on consent up to the time of withdrawal.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz, information on the data processing agreement at https://www.shopify.com/de/legal/dpa and information on the cookies used at https://www.shopify.com/de/legal/cookies.
We use the Pinterest Tag by Pinterest Europe Limited (Palmerston House, 2nd, Fenian Street, Floor, Dublin 2, Ireland "Pinterest") on our website.
The application is used to target website visitors with interest-based advertising on the social network Pinterest. To this end, Pinterest's conversion tag has been implemented on the website. This tag establishes a direct connection to Pinterest's servers when the website is visited. This transmits to the Pinterest server which of our pages you have visited. Pinterest assigns this information to your personal Pinterest user account if you are logged in to the social network. When you visit Pinterest, personalized, interest-based Pinterest ads will then be displayed to you.
If you reach our website via a Pin on the social network Pinterest, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, contain no personal data, and thus are not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Pinterest and we can recognize that you clicked on the Pin and were redirected to this page. The information obtained with the help of the conversion cookie is used to create conversion statistics and thus optimize our website. The following information, among other things, may be processed: total number of users who clicked on one of our Pins and were redirected to our website, subpages visited on our website (e.g., category or product pages), search queries on our website, your cart contents, completed transactions.
Your data may be transferred to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, viewable at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) sentence 1 of the TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing based on consent up to the time of withdrawal.
Further information on the collection and use of data by Pinterest, about your rights in this regard, and options to protect your privacy can be found in Pinterest's privacy notices at https://policy.pinterest.com/de/privacy-policy.
Plugins and Other Items
Integration of the Händlerbund Member Logo
The Händlerbund member logo (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig) is integrated into our website. When you access our website, information is automatically sent to the Händlerbund e.V. server by the browser used on your device. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without your involvement and stored until it is automatically deleted:
Data Subject Rights and Retention Period
Retention Period
After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, and then, taking into account statutory, in particular tax and commercial law retention periods, and then deleted after the expiry of the period, unless you have agreed to further processing and use.
Rights of the Data Subject
If the statutory requirements are met, you have the following rights under Art. 15 to 20 GDPR: the right to information, rectification, erasure, restriction of processing, and data portability.
In addition, under Art. 21 Para. 1 GDPR, you have the right to object to processing based on Art. 6 Para. 1 f GDPR, as well as to processing for direct marketing purposes.
Right to Complain to the Supervisory Authority
In accordance with Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.
You may file a complaint, among others, with the supervisory authority responsible for us, which you can contact using the following contact details:
State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hannover
Tel.: +49 511 1204500
Fax: +49 511 1204599
E-mail: poststelle@lfd.niedersachsen.de
Right to Object
If the personal data processing listed here is based on our legitimate interest under Art. 6 Para. 1 Letter f GDPR, you have the right, for reasons arising from your particular situation, to object to this processing at any time with effect for the future.
Once an objection has been received, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.
If personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. Once an objection has been received, we will terminate the processing of the data concerned for direct marketing purposes.
Unless otherwise stated below, the provision of your personal data is neither required by law nor by contract, nor is it necessary to conclude a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other statement is made regarding the following processing operations.
"Personal data" means all information relating to an identified or identifiable natural person.
Server Log Files
You can visit our website without providing any information about yourself.
Whenever you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transmitted, and the requesting provider.
Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our offer.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. An adequacy decision by the EU Commission exists for Canada. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our offer.
Contact
Data Controller
Feel free to contact us. The data controller is: Srinivasan Surya Narayanan, Schulstr. 46, 21224 Rosengarten Germany, 17655004114, info@stilltree.de
Customer Initiating Contact via Email
If you initiate business contact with us via email, we only collect your personal data (name, email address, message text) to the extent you provide it. The data processing is for the purpose of processing and responding to your contact request.
If the contact is for the purpose of carrying out pre-contractual measures (e.g., advice on purchasing interest, creating an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.
If the contact is for other reasons, this data processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to such processing of personal data relating to you based on Art. 6(1)(f) GDPR.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.
Collection and Processing When Using the Contact Form
When using the contact form, we only collect your personal data (name, email address, message text) to the extent you provide it. The data processing is for the purpose of contacting you.
If the contact is for the purpose of carrying out pre-contractual measures (e.g., advice on purchasing interest, creating an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.
If the contact is for other reasons, this data processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to such processing of personal data relating to you based on Art. 6(1)(f) GDPR.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.
Customer Account Orders
Customer Account
When opening a customer account, we collect your personal data to the extent stated therein. The data processing is for the purpose of improving your shopping experience and simplifying order processing. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of processing based on consent prior to revocation. Your customer account will then be deleted.
Collection, Processing, and Disclosure of Personal Data for Orders
When placing an order, we only collect and process your personal data to the extent necessary to fulfill and process your order and to handle your requests. The provision of the data is necessary to conclude the contract. Failure to provide it will result in no contract being concluded. Processing is based on Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.
Your data may therefore be disclosed to shipping companies, dropshipping or fulfillment providers, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly comply with statutory requirements. The scope of data transmission is limited to the minimum necessary.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. An adequacy decision by the EU Commission exists for Canada. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.Reviews Advertising
Data Collection When Submitting a Comment or Review
When commenting on or reviewing an item or post, we only collect your personal data (name, email address, comment text) to the extent you provide it. Processing is for the purpose of enabling a comment/review and displaying comments/reviews.
For the purpose of verifying your review/comment, we also collect the following data: Order number, , , .
By submitting the comment/review, you consent to the processing of the transmitted data. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of processing based on consent prior to revocation. Your personal data will then be deleted.
When your comment/review is published, only the name you provided will be published.
In addition, when submitting the comment/review, your IP address will be stored for the purpose of preventing misuse of the comment or review function and ensuring the security of our information technology systems. By submitting the comment/review, you consent to the processing of the transmitted data. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of processing based on consent prior to revocation. Your IP address will then be deleted.
Use of Judge.me
We use the "Judge.me" review system by Judge.me Ltd (c/o Buckworths 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB; "Judge.me") on our website.
Judge.me enables us to collect customer reviews and display them on our website to give you insight into the quality of our services.
After placing an order, you may receive an invitation from us or Judge.me to leave a review and subsequently leave a review. In this case, the following data may be processed by us or Judge.me, among others: email address, name, phone number, address, information about your device (IP address, information about your web browser and the operating system used), information about the purchased product or service used (order number, product details), the content of your review and the star rating you gave, your product photos or videos (if you have attached them to your product review). This data may also be used for the purpose of verifying your review if necessary.
Judge.me uses technologies such as cookies.
Your data may be transferred outside the EU to the United Kingdom. An adequacy decision by the EU Commission exists for the United Kingdom.
Your data may be transferred to the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Judge.me is not certified under the TADPF. This data transfer is based on special contracts approved for use in the United Kingdom that offer the same level of protection as personal data has in the United Kingdom.
The use of cookies or comparable technologies is based on your consent pursuant to § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is based on Art. 6(1)(a) GDPR with your consent, provided you have expressly agreed to the disclosure of your data and receipt of the review request. You can revoke your consent at any time, without affecting the lawfulness of processing based on consent prior to revocation.
Further information on data protection when using Judge.me can be found at: https://judge.me/privacy.
Review Reminder
After placing your order, we would like to ask you to review your purchase with us.
For this purpose, we use your personal data (name, email address, order information) independently of contract fulfillment to send you a review reminder via email after placing an order, provided you have expressly agreed to it.
Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by using the corresponding link in the email or by notifying us, without affecting the lawfulness of processing based on consent prior to revocation.
Use of the Email Address for Sending NewslettersAfter placing your order, we would like to ask you to review your purchase with us.
For this purpose, we use your personal data (name, email address, order information) independently of contract fulfillment to send you a review reminder via email after placing an order, provided you have expressly agreed to it.
Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by using the corresponding link in the email or by notifying us, without affecting the lawfulness of processing based on consent prior to revocation.
We use your email address to send information and offers via newsletter, provided you have expressly agreed to it. Data processing is solely for the purpose of promotional communication. For this purpose, we process your email address and, if applicable, other data you have voluntarily provided when signing up for our newsletter.
Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time, without affecting the lawfulness of processing based on consent prior to revocation.
You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address in a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is based on Art. 6(1)(f) GDPR due to our and your legitimate interest in preventing the reuse of your email address for sending our newsletter. You have the right, for reasons arising from your particular situation, to object at any time to such processing of personal data relating to you.
Use of the Email Address for Sending Direct Advertising
We use your email address, which we received in connection with the sale of goods or services, for the electronic transmission of advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to such use. The provision of the email address is necessary to conclude the contract. Failure to provide it will result in no contract being concluded. Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in direct advertising. You can object to such use of your email address at any time by notifying us. The contact details for exercising the objection can be found in the legal notice. You can also use the link provided for this purpose in the promotional email. No other costs than the transmission costs according to the basic tariffs will be incurred for this.
Use of the Email Address for Availability Notifications
We offer an item availability notification service on our website. If an item is temporarily unavailable, you have the option to enter your email address on the respective item and be informed by us via email when it becomes available, provided you have agreed to it. You will receive a one-time email notification about the availability of the respective item when it becomes available. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time, without affecting the lawfulness of processing based on consent prior to revocation. You can unsubscribe from the availability notification at any time by notifying us. Your email address will then be removed from the mailing list.
Inventory Management We offer an item availability notification service on our website. If an item is temporarily unavailable, you have the option to enter your email address on the respective item and be informed by us via email when it becomes available, provided you have agreed to it. You will receive a one-time email notification about the availability of the respective item when it becomes available. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time, without affecting the lawfulness of processing based on consent prior to revocation. You can unsubscribe from the availability notification at any time by notifying us. Your email address will then be removed from the mailing list.
Use of an external inventory management system
We use an inventory management system for contract processing as part of a data processing agreement. For this purpose, the personal data collected during the ordering process is transmitted to
Shopify Inc., 151 O'Connor Street, Ottawa, Ontario K2P 2L8, Canada – cloud-based shop software
.
The processing of your personal data is for the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6(1)(b) GDPR.
Payment Service Provider
Use of PayPal Express
We use the PayPal Express payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing is for the purpose of being able to offer you payment via the PayPal Express payment service. To integrate this payment service, PayPal collects, stores, and analyzes data (e.g., IP address, device type, operating system, browser type, device location) when the website is accessed. Cookies may also be used for this purpose. Cookies enable the recognition of your browser.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data relating to you.
By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy notice at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Use of PayPal Check-Out
We use the PayPal Check-Out payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing is for the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
Cookies may be stored during this process, enabling the recognition of your browser. The data processing carried out thereby is based on Art. 6(1)(f) GDPR based on our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data relating to you.
Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal
For individual payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right, if necessary, to obtain a credit assessment based on mathematical-statistical methods using credit reference agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit reference agency and uses the information received about the statistical probability of a payment default to make a balanced decision on establishing, carrying out, or terminating the contractual relationship. The credit assessment may include probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, and address data, among other things, is used in their calculation. Your legitimate interests will be taken into account in accordance with legal provisions. The data processing is for the purpose of a credit check for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in protection against payment default when PayPal provides the advance payment.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data relating to you based on Art. 6(1)(f) GDPR by notifying PayPal. The provision of the data is required to conclude the contract using your desired payment method. Failure to provide the data will result in the contract not being concluded using your selected payment method.
Third-party providers
When paying using a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6(1)(b) GDPR. To carry out this payment method, the data may then be passed on by PayPal to the respective provider. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Local third-party providers may include, for example:
- Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
Invoice payment via PayPal
When paying using the invoice payment method, the data required for payment processing is first transmitted to PayPal. To carry out this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") so that we can fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Ratepay may carry out a credit assessment based on mathematical-statistical methods (probability or score values) using credit reference agencies following the process described above. The data processing is for the purpose of a credit check for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in protection against payment default when Ratepay provides the advance payment. Further information on data protection and which credit reference agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
Further information on data processing when using PayPal can be found in the associated privacy notice at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use of Shopify Payments
We use the "Shopify Payments" payment service provided by Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. In this case, payment processing is carried out by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). The data processing is for the purpose of being able to offer you payment via the Shopify Payments payment service. By selecting and using a corresponding "Shopify Payments" payment method, the data required for payment processing is transmitted to Stripe so that we can fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
Stripe reserves the right, if necessary, to obtain a credit assessment based on mathematical-statistical methods using credit reference agencies. For this purpose, Stripe transmits the personal data required for a credit check to a credit reference agency and uses the information received about the statistical probability of a payment default to make a balanced decision on establishing, carrying out, or terminating the contractual relationship. The credit assessment may include probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, and address data, among other things, is used in their calculation. Your legitimate interests will be taken into account in accordance with legal provisions. The data processing is for the purpose of a credit check for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in protection against payment default when Stripe provides the advance payment.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data relating to you based on Art. 6(1)(f) GDPR by notifying Stripe. The provision of the data is required to conclude the contract using your desired payment method. Failure to provide the data will result in the contract not being concluded using your selected payment method.
Further information on data processing when using the Shopify Payments payment service can be found in the Shopify privacy notice at: https://www.shopify.com/de/legal/datenschutz.
Further information on data processing when payment is processed using the payment service provider Stripe can be found in the Stripe privacy notice at: https://stripe.com/de/privacy.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the user's internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic character string that enables the unique identification of the browser when the website is accessed again.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data contained therein. Already stored cookies can be deleted at any time. However, we point out that you may not be able to use all the functions of this website to their full extent.
Under the links below, you can find out how you can manage cookies in the major browsers (including disabling them):
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Technically Necessary Cookies
Unless otherwise stated in the privacy notice below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after changing pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is required that the browser is recognized again after changing pages.
The use of cookies or comparable technologies is based on Section 25(2) TDDDG. The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data relating to you.
Use of the Cookie Consent Manager CCM19We use the Cookie Consent Manager CCM19 by Händlerbund Legal GmbH (Kohlgartenstraße 11 - 13, 04315 Leipzig; "CCM19") on our website under a data processing agreement.
The plugin is hosted on consenttool.haendlerbund.de and allows you to grant consent to data processing on the website, in particular the setting of cookies, and to exercise your right of withdrawal for consent already granted. The purpose of the data processing is to obtain and document the necessary consent to data processing and thus comply with legal obligations.
Cookies are used for this purpose. The following information may be collected, stored and, if applicable, transferred to Händlerbund Legal GmbH: randomly assigned ID, consent status, date and time of consent/rejection. The data is stored for 1 year and 1 month and then deleted. This data is not shared with any other third parties.
The data processing is carried out to fulfill a legal obligation on the basis of Art. 6(1)(c) GDPR.
Further information on data protection can be found at: https://www.haendlerbund.de/de/datenschutzerklaerung.
Analysis Advertising tracking
Use of Google Analytics 4
We use the Google Analytics web analysis service by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The purpose of the data processing is to analyze this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide additional services related to website and internet use to the website operator.
The following information may be collected, among other things: IP address, date and time of the page visit, click path, information about the browser and device you use, pages visited, referrer URL (the website through which you accessed our website), location data, purchasing activity. Google may combine your data with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.
The IP address is anonymized by Google before it is transferred to member states of the European Union or other states party to the Agreement on the European Economic Area.
Google uses technologies such as cookies, browser storage, and counting pixels that enable it to analyze your use of the website. The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) sentence 1 of the TDDDG in conjunction with Art. 6(1)(a) GDPR.
Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing based on consent up to the time of withdrawal.
The information generated thereby about your use of this website is generally transferred to a Google server in the USA and stored there. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to complying with European data protection principles.Both Google and US government authorities have access to your data.
Further information on the terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites at https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/.
Use of Shopify Analytics
We use the statistics and analysis functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website under a data processing agreement. Shopify is a company affiliated with Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The purpose of the data processing is to analyze this website and its visitors. Data is stored for marketing and optimization purposes and provided in reports, analyses, and statistics. The following device information, among other things, is collected and processed: information about the web browser, IP address, time zone, and some of the cookies installed on your device. When you navigate the website, information is also collected about the webpages or products viewed, the referrer URL (the website through which you accessed our website), and how you interact with the website. Technologies such as cookies as well as web beacons, tags, and pixels (electronic files used to collect information about how you navigate the website) are used for this purpose.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. There is an adequacy decision by the EU Commission for Canada. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's standard contractual clauses.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) sentence 1 of the TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing based on consent up to the time of withdrawal.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz, information on the data processing agreement at https://www.shopify.com/de/legal/dpa and information on the cookies used at https://www.shopify.com/de/legal/cookies.
Use of the Meta Pixel
We use the Meta Pixel by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.
Meta and we are jointly responsible for the collection of your data when the service is embedded and the transfer of this data to Meta. This is based on an agreement between us and Meta on the joint processing of personal data, which sets out the respective responsibilities. The agreement can be accessed at https://de-de.facebook.com/de/legal/terms/businesstools. Accordingly, we are responsible in particular for fulfilling the information obligations under Art. 13 and 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Art. 33 and 34 GDPR to the extent that a personal data breach affects our obligations under the joint processing agreement. Meta is responsible for enabling data subjects' rights under Art. 15-20 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and for complying with the obligations under Art. 33 and 34 GDPR to the extent that a personal data breach affects Meta's obligations under the joint processing agreement.
The application is used to target website visitors with interest-based advertising on the social networks Facebook and Instagram. To this end, Meta's remarketing tag has been implemented on the website. This tag establishes a direct connection to Meta's servers when the website is visited. This transmits to the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, personalized, interest-based ads will then be displayed to you.
The application is also used to create conversion statistics. This allows us to learn the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag, as well as what actions are taken on this website after the redirection. However, we do not receive any information that allows users to be personally identified.
Your data may be transferred to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and thus committed to complying with European data protection principles.
Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing based on consent up to the time of withdrawal.
You can deactivate the "Custom Audiences" remarketing function here. Further information on the collection and use of data by Meta, about your rights in this regard, and options to protect your privacy can be found in Meta's privacy notices at https://www.facebook.com/about/privacy/.
You can deactivate the "Custom Audiences" remarketing function here. Further information on the collection and use of data by Meta, about your rights in this regard, and options to protect your privacy can be found in Meta's privacy notices at https://www.facebook.com/about/privacy/.
Use of Google Ads Conversion Tracking
We use the "Google Ads" online advertising program on our website and, within this framework, conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, contain no personal data, and thus are not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Every Google Ads customer receives a different cookie. Thus, there is no possibility that cookies can be tracked across Ads customers' websites.
The information obtained with the help of the conversion cookie is used to create conversion statistics. This allows us to learn the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag. However, we do not receive any information that allows users to be personally identified.
Your data may be transferred to Google LLC's servers in the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to complying with European data protection principles.
We use the "Google Ads" online advertising program on our website and, within this framework, conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, contain no personal data, and thus are not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Every Google Ads customer receives a different cookie. Thus, there is no possibility that cookies can be tracked across Ads customers' websites.
The information obtained with the help of the conversion cookie is used to create conversion statistics. This allows us to learn the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag. However, we do not receive any information that allows users to be personally identified.
Your data may be transferred to Google LLC's servers in the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) sentence 1 of the TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing based on consent up to the time of withdrawal.
Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/ or https://business.safety.google/privacy/
Use of the Pinterest TagFurther information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/ or https://business.safety.google/privacy/
We use the Pinterest Tag by Pinterest Europe Limited (Palmerston House, 2nd, Fenian Street, Floor, Dublin 2, Ireland "Pinterest") on our website.
The application is used to target website visitors with interest-based advertising on the social network Pinterest. To this end, Pinterest's conversion tag has been implemented on the website. This tag establishes a direct connection to Pinterest's servers when the website is visited. This transmits to the Pinterest server which of our pages you have visited. Pinterest assigns this information to your personal Pinterest user account if you are logged in to the social network. When you visit Pinterest, personalized, interest-based Pinterest ads will then be displayed to you.
If you reach our website via a Pin on the social network Pinterest, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, contain no personal data, and thus are not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Pinterest and we can recognize that you clicked on the Pin and were redirected to this page. The information obtained with the help of the conversion cookie is used to create conversion statistics and thus optimize our website. The following information, among other things, may be processed: total number of users who clicked on one of our Pins and were redirected to our website, subpages visited on our website (e.g., category or product pages), search queries on our website, your cart contents, completed transactions.
Your data may be transferred to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, viewable at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) sentence 1 of the TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing based on consent up to the time of withdrawal.
Further information on the collection and use of data by Pinterest, about your rights in this regard, and options to protect your privacy can be found in Pinterest's privacy notices at https://policy.pinterest.com/de/privacy-policy.
Plugins and Other Items
Integration of the Händlerbund Member Logo
The Händlerbund member logo (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig) is integrated into our website. When you access our website, information is automatically sent to the Händlerbund e.V. server by the browser used on your device. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without your involvement and stored until it is automatically deleted:
- IP address of the requesting computer,
- date and time of access,
- name and URL of the file accessed,
- website from which access is made (referrer URL),
- browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
Data Subject Rights and Retention Period
Retention Period
After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, and then, taking into account statutory, in particular tax and commercial law retention periods, and then deleted after the expiry of the period, unless you have agreed to further processing and use.
Rights of the Data Subject
If the statutory requirements are met, you have the following rights under Art. 15 to 20 GDPR: the right to information, rectification, erasure, restriction of processing, and data portability.
In addition, under Art. 21 Para. 1 GDPR, you have the right to object to processing based on Art. 6 Para. 1 f GDPR, as well as to processing for direct marketing purposes.
Right to Complain to the Supervisory Authority
In accordance with Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.
You may file a complaint, among others, with the supervisory authority responsible for us, which you can contact using the following contact details:
State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hannover
Tel.: +49 511 1204500
Fax: +49 511 1204599
E-mail: poststelle@lfd.niedersachsen.de
Right to Object
If the personal data processing listed here is based on our legitimate interest under Art. 6 Para. 1 Letter f GDPR, you have the right, for reasons arising from your particular situation, to object to this processing at any time with effect for the future.
Once an objection has been received, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.
If personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. Once an objection has been received, we will terminate the processing of the data concerned for direct marketing purposes.
