Privacy Policy

Privacy Policy

Data collection and processing

Data collection

Data processing on this website is carried out by the website operator.

You can find the operator's contact details in the legal notice (Imprint) on this website.

Technical data is collected by our IT systems. This includes, for
example, your internet browser, operating system or the time at which
the page was accessed. This data is collected automatically as soon as
you enter our website.

Some of the data is collected to ensure that the website is provided
without errors. Other data may be used to analyse your user behaviour.

You can visit our website without providing any personal information. We
only store non-personal access data, such as the name of your internet
service provider, the page from which you visit us or the name of the
requested file. This data is evaluated exclusively for the purpose of
improving our services and does not allow any conclusions to be drawn
about your identity.

Personal data is only collected if you voluntarily provide it to us when
placing an order, opening a customer account, completing a contact form
or registering for a newsletter. Without your separate consent, we use
the data you provide solely for the purpose of fulfilling and processing
your order.

This is carried out on the basis of Art. 6(1)(b) GDPR, which permits the
processing of data for the performance of a contract or in order to take
steps prior to entering into a contract. We collect, process and use
personal data relating to the use of our websites (usage data) only to
the extent necessary to enable the user to use the service or to bill
for it.

Data storage

The text of your contract will be stored. We will send you the order
details and our General Terms and Conditions by email. You can also view
the General Terms and Conditions at any time here \(link to the terms and conditions\). You can view your previous orders in our customer
login area, provided you have registered an account with us.

Once the contract has been fully processed and payment has been made in
full, your data will be blocked from further use and deleted after the
expiry of the applicable tax and commercial-law retention periods,
unless you have expressly consented to the continued use of your data.
You may delete your customer account at any time, either by sending a
message using the contact option described below or via a function
provided for this purpose in the customer account.

Handling customer and contract data

We only transmit personal data to third parties where this is necessary
for the performance of the contract, for example to companies entrusted
with delivering the goods or to the financial institution responsible
for processing payments. No further transfer of data will take place, or
will take place only if you have expressly consented to such transfer.
Your data will not be disclosed to third parties without your express
consent, for example for advertising purposes.

The legal basis for data processing is Art. 6(1)(b) GDPR, which permits
the processing of data for the performance of a contract or in order to
take steps prior to entering into a contract.

For the purpose of fulfilling the contract, we pass your data on to the
shipping company commissioned with delivery, insofar as this is
necessary for the delivery of ordered goods. Depending on the payment
service provider you select during the ordering process, we pass the
payment data collected for payment processing to the financial
institution commissioned with the payment and, where applicable, to
payment service providers commissioned by us or to the selected payment
service. In some cases, the selected payment service providers also
collect this data themselves if you create an account with them. In this
case, you must log in to the payment service provider using your login
details during the ordering process. The privacy policy of the
respective payment service provider applies in this respect.

Encryption

For security reasons and to protect the transmission of confidential
content, such as orders or enquiries that you send to us as the website
operator, this website uses SSL or TLS encryption. When SSL or TLS
encryption is enabled, the data you transmit to us cannot be read by
third parties.

Encrypted payment transactions on this website

If, after entering into a paid contract, you are required to provide us
with your payment details (e.g. account number for a direct debit
authorisation), this data is required for payment processing.

Payment transactions using common payment methods are carried out
exclusively via an encrypted SSL or TLS connection. When communication
is encrypted, the payment details you transmit to us cannot be read by
third parties.

Cookies

Our websites use cookies in some cases. Cookies do not cause any damage
to your computer and do not contain viruses. Cookies are used to make
our services more user-friendly, effective and secure.

Cookies are small text files that are stored on your computer and saved
by your browser.

Most of the cookies we use are so-called "session cookies". They are
automatically deleted at the end of your visit. Other cookies remain
stored on your device until you delete them. These cookies enable us to
recognise your browser the next time you visit our website.

You can configure your browser so that you are informed when cookies are
set and only allow cookies in individual cases, exclude the acceptance
of cookies in certain cases or in general, and activate the automatic
deletion of cookies when closing the browser. Disabling cookies may
limit the functionality of this website.

Cookies that are necessary to carry out electronic communications or to
provide certain functions requested by you (e.g. shopping cart
functionality) are stored on the basis of Art. 6(1)(f) GDPR. The website
operator has a legitimate interest in storing cookies for the
technically error-free and optimised provision of its services. Where
other cookies (e.g. cookies used to analyse your browsing behaviour) are
stored, these are addressed separately in this Privacy Policy.

Mandatory information and general notices

Information about the controller

The controller is the natural or legal person who, alone or jointly with
others, determines the purposes and means of processing personal data
(e.g. names, email addresses).

The controller responsible for data processing on this website is the
Managing Director (see the legal notice/Imprint).

The competent supervisory authority for data protection for companies
whose administrative headquarters are in the Netherlands is the
Autoriteit
Persoonsgegevens. You
may also contact this authority via the data protection officer of your
federal state. A list of data protection officers and their contact
details can be found
here.

Data Protection Officer

Under the legal provisions applicable to us, we are not required to
appoint a Data Protection Officer and have not appointed one.

Contact form

If you send us enquiries via the contact form, the information you
provide in the enquiry form, including the contact details you enter
there, will be stored by us for the purpose of processing your enquiry
and in case of follow-up questions. We will not share this data without
your consent.

The data entered into the contact form is therefore processed
exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may
withdraw this consent at any time. An informal notification by email is
sufficient. The lawfulness of the data processing carried out prior to
withdrawal remains unaffected by the withdrawal.

The data you enter in the contact form will remain with us until you ask
us to delete it, withdraw your consent to storage, or the purpose for
storing the data no longer applies (e.g. after your enquiry has been
fully processed). Mandatory statutory provisions, in particular
retention periods, remain unaffected.

Registration on this website

You can register on our website to use additional features on the site.
We use the data entered for this purpose only for the use of the
respective offer or service for which you have registered. The mandatory
information requested during registration must be provided in full.
Otherwise, we will reject the registration.

For important changes, for example to the scope of services or
technically necessary changes, we use the email address provided during
registration to inform you.

The data entered during registration is processed on the basis of your
consent (Art. 6(1)(a) GDPR). You may withdraw consent you have given at
any time. An informal notification by email is sufficient. The
lawfulness of data processing already carried out remains unaffected by
the withdrawal.

We store the data collected during registration for as long as you
remain registered on our website and delete it afterwards.

Statutory retention periods remain unaffected.

Comment function on this website

For the comment function on this site, in addition to your comment,
information about the time the comment was created, your email address
and, if you do not post anonymously, the username you selected will be
stored.

Storage of IP address and email address

Our comment function stores the IP and email addresses of users who post
comments. Because we do not review comments on our site before they are
published, we need this data in order to take action against the author
in the event of legal violations such as insults or propaganda.

Subscribing to comments

As a user of the site, you can subscribe to comments after registering.
You will receive a confirmation email to verify that you are the owner
of the email address provided. You can unsubscribe from this function at
any time via a link in the information emails. In this case, the data
entered when subscribing to comments will be deleted; however, if you
have provided this data to us for other purposes and elsewhere
(e.g. newsletter subscription), it will remain with us.

Retention period for comments

Comments and the associated data (e.g. IP address) are stored and remain
on our website until the commented content has been completely deleted
or the comments must be deleted for legal reasons (e.g. offensive
comments).

Legal basis

Comments are stored on the basis of your consent (Art. 6(1)(a) GDPR).
You may withdraw consent you have given at any time. An informal
notification by email is sufficient. The lawfulness of data processing
operations already carried out remains unaffected by the withdrawal.

Withdrawal of consent

Some data processing operations are only possible with your express
consent. You may withdraw consent already given at any time with effect
for the future. An informal notification by email is sufficient. The
lawfulness of data processing carried out prior to withdrawal remains
unaffected by the withdrawal.

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of data protection law, the data subject
has the right to lodge a complaint with the competent supervisory
authority. The supervisory authority responsible for us in matters of
data protection is the Autoriteit
Persoonsgegevens. You
may also contact this authority via the data protection officer of your
federal state. A list of data protection officers and their contact
details can be found
here.

Right to data portability

You have the right to receive data that we process automatically on the
basis of your consent or in performance of a contract, either for
yourself or for a third party, in a commonly used, machine-readable
format. If you request the direct transfer of the data to another
controller, this will only be done to the extent technically feasible.

Access, restriction and deletion

Within the framework of the applicable statutory provisions, you have
the right at any time to obtain free information about your stored
personal data, its origin and recipients and the purpose of data
processing and, where applicable, a right to rectification, restriction
or deletion of this data. For this purpose, as well as for any other
questions relating to personal data, you can contact us at any time
using the address provided in the legal notice (Imprint).

Right to restriction of processing

In accordance with Art. 18 GDPR, you are entitled to request restriction
of the processing of your personal data where you contest the accuracy
of the data; the processing is unlawful but you oppose its deletion; we
no longer need the data but you require it for the establishment,
exercise or defence of legal claims; or you have objected to the
processing pursuant to Art. 21 GDPR.

Payment providers

Depending on the payment service provider you select, we pass the
payment data collected for payment processing to the financial
institution commissioned with the payment and, where applicable, to
payment service providers commissioned by us or to the selected payment
service.

If you select a payment service provider together with the payment
method, after being redirected you will be in the secure online
environment of your chosen financial institution. The secure data
traffic is guaranteed by your financial institution or payment service
provider. We do not learn the content of this data traffic; we are only
informed whether the payment has been successfully processed or the
payment process has been cancelled. The privacy policy of the respective
payment service provider applies in this respect.

This includes, among other things, where offered by our payment service
providers, direct banking, electronic SEPA direct debit, SEPA direct
debit authorisation, credit card payments (including debit cards with
chip technology such as VPay, EPS - MultiSafepay) or bank transfers.

Data processing agreement

We have entered into a data processing agreement with the respective
payment service provider, under which we require the relevant provider
to protect our customers' data and either not disclose it to third
parties or do so only with your express prior consent.

Giropay

On our website, we offer payment via Giropay, among other methods. The
provider of this payment service is Giropay GmbH, An der Welle 4, 60322
Frankfurt am Main, Germany (hereinafter "Giropay").

When you make a payment using Giropay, Giropay collects various
transaction data and forwards it to the bank. In addition to the data
required for payment, Giropay may collect further data as part of
transaction processing, such as the delivery address or individual items
in the shopping cart.

Giropay then authenticates the transaction using the authentication
procedure stored with the bank for this purpose. The payment amount is
then transferred from your account to our account. Neither we nor third
parties have access to your account details.

Details regarding payment with Giropay can be found in Giropay's General
Terms and Conditions and privacy
policy.

The legal basis for transmitting your data is Art. 6(1)(a) GDPR
(consent), Art. 6(1)(b) GDPR (processing for the performance of a
contract) and Art. 6(1)(f) GDPR (safeguarding legitimate interests in
the case of advance performance).

You may withdraw your consent to data processing at any time. Withdrawal
does not affect the validity of data processing operations carried out
in the past.

Mollie

On our website, we offer payment via the payment service provider Mollie
B.V., Keizersgracht 313, 1016 EE Amsterdam (Netherlands), telephone: +49
30 22409020 / email: info@mollie.com, among other methods.

When you make a payment using services offered by Mollie, Mollie
collects various transaction data and forwards it to the bank. In
addition to the data required for payment, Mollie may collect further
data as part of transaction processing, such as addresses or individual
items in the shopping cart.

Mollie then authenticates the transaction using the authentication
procedure stored with the bank for this purpose. Neither we nor third
parties have access to your account details.

Details regarding payment with Mollie can be found in Mollie's General
Terms and Conditions and privacy
policy.

You may withdraw your consent to data processing at any time. Withdrawal
does not affect the validity of data processing operations carried out
in the past.

Sofortüberweisung / SOFORT Banking

On our website, we offer payment via Sofortüberweisung / SOFORT Banking,
among other methods. This payment service was developed by Payment
Network AG and is provided by various providers in different European
countries, including Sofort GmbH, Theresienhöhe 12, 80339 Munich
(hereinafter "Sofort GmbH") and Klarna AB, Sveavägen 46, 111 34
Stockholm, Sweden (hereinafter "Klarna"), with branches in various
European countries.

Using the "Sofortüberweisung" procedure, we receive payment confirmation
in real time and can immediately begin fulfilling our obligations.

If you choose one of the "Sofort" payment methods, you transmit the PIN
and a valid TAN to the payment provider, which it can use to log in to
your online banking account. After logging in, the software
automatically checks your account balance and carries out the transfer
to us using the TAN you provided. It then immediately sends us a
transaction confirmation. After login, your transactions, the credit
limit of your overdraft facility, and the existence and balances of
other accounts are also checked automatically.

In addition to the PIN and TAN, the payment data you enter and personal
data are also transmitted to Sofort GmbH. The personal data includes
your first and last name, address, telephone number(s), email address,
IP address and, where applicable, other data required for payment
processing. The transmission of this data is necessary to establish your
identity beyond doubt and to prevent attempted fraud.

Your data is transmitted to Sofort GmbH on the basis of Art. 6(1)(a)
GDPR (consent) and Art. 6(1)(b) GDPR (processing for the performance of
a contract). You may withdraw your consent to data processing at any
time. Withdrawal does not affect the validity of data processing
operations carried out in the past.

Analytics tools and advertising

Data processing agreements

We have entered into data processing agreements with Google and with the
other providers of web analytics tools used by us and listed below, and
we fully implement the strict requirements of the German data protection
authorities when using analytics tools.

Legal basis

The legal bases for the collection and processing of data are consent
pursuant to Art. 6(1)(a) and Art. 7 GDPR, processing for the performance
of our services and implementation of contractual measures pursuant to
Art. 6(1)(b) GDPR, processing for compliance with our legal obligations
pursuant to Art. 6(1)(c) GDPR, and, for advertising, the safeguarding of
our legitimate interests pursuant to Art. 6(1)(f) GDPR.

Google Analytics

This website uses functions of the Google Analytics web analytics
service. The provider is Google Inc., 1600 Amphitheatre Parkway,
Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files stored
on your computer that enable an analysis of your use of the website. The
information generated by the cookie about your use of this website is
generally transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored on the basis of Art. 6(1)(f) GDPR.
The website operator has a legitimate interest in analysing user
behaviour in order to optimise both its website and its advertising.

IP anonymisation

We have activated the IP anonymisation function on this website. As a
result, your IP address is truncated by Google within Member States of
the European Union or in other states party to the Agreement on the
European Economic Area before being transmitted to the USA. Only in
exceptional cases is the full IP address transmitted to a Google server
in the USA and truncated there. On behalf of the operator of this
website, Google will use this information to evaluate your use of the
website, compile reports on website activity and provide the website
operator with other services relating to website and internet usage. The
IP address transmitted by your browser as part of Google Analytics will
not be merged with other Google data.

Browser plugin

You can prevent cookies from being stored by selecting the appropriate
settings in your browser software; however, please note that in this
case you may not be able to use all functions of this website to their
full extent. You can also prevent the data generated by the cookie
relating to your use of the website (including your IP address) from
being collected by Google and processed by Google by downloading and
installing the browser plugin available via the link below.

Objection to data collection

You can prevent your data from being collected by Google Analytics by
clicking the following link. An opt-out cookie will be set that prevents
your data from being collected during future visits to this website:

Disable Google
Analytics

More information about how Google Analytics handles user data can be
found in Google's Privacy
Policy.

Demographic features in Google Analytics

This website uses the "demographic features" function of Google
Analytics. This enables reports to be generated containing information
about the age, gender and interests of website visitors. This data comes
from Google's interest-based advertising and from visitor data supplied
by third-party providers. This data cannot be attributed to a specific
person. You can disable this function at any time via the advertising
settings in your Google Account or generally prohibit the collection of
your data by Google Analytics as described under "Objection to data
collection".

Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in
conjunction with the cross-device functions of Google AdWords and Google
DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway,
Mountain View, CA 94043, USA.

This function makes it possible to link advertising target groups
created using Google Analytics Remarketing with the cross-device
functions of Google AdWords and Google DoubleClick. In this way,
interest-based, personalised advertising messages tailored to you on one
device (e.g. a mobile phone) based on your previous usage and browsing
behaviour can also be displayed on another of your devices (e.g. a
tablet or PC).

If you have given the appropriate consent, Google links your web and app
browsing history to your Google Account for this purpose. In this way,
the same personalised advertising messages can be displayed on any
device on which you sign in with your Google Account.

To support this function, Google Analytics collects Google-authenticated
user IDs, which are temporarily linked to our Google Analytics data in
order to define and create target groups for cross-device advertising.

You can permanently object to cross-device remarketing/targeting by
disabling personalised advertising in your Google Account
here.

The aggregation of the data collected in your Google Account takes place
exclusively on the basis of your consent, which you can give to or
withdraw from Google (Art. 6(1)(a) GDPR). For data collection processes
that are not aggregated in your Google Account (e.g. because you do not
have a Google Account or have objected to aggregation), the collection
of data is based on Art. 6(1)(f) GDPR. The legitimate interest arises
from the website operator's interest in the anonymised analysis of
website visitors for advertising purposes.

Further information and the applicable privacy provisions can be found
in Google's Privacy Policy.

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising
programme of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA
94043, United States ("Google").

As part of Google AdWords, we use so-called conversion tracking. If you
click on an advertisement placed by Google, a conversion-tracking cookie
is set. Cookies are small text files that the internet browser stores on
the user's computer. These cookies expire after 30 days and are not used
to personally identify users. If the user visits certain pages of this
website while the cookie is still valid, Google and we can recognise
that the user clicked on the advertisement and was redirected to this
page.

Each Google AdWords customer receives a different cookie. The cookies
cannot be tracked across the websites of AdWords customers. The
information obtained using the conversion cookie is used to generate
conversion statistics for AdWords customers who have opted for
conversion tracking. Customers learn the total number of users who
clicked on their advertisement and were redirected to a page containing
a conversion-tracking tag. However, they do not receive any information
that can be used to personally identify users. If you do not wish to
participate in tracking, you can object to this use by disabling the
Google conversion-tracking cookie in your internet browser under user
settings. You will then not be included in the conversion-tracking
statistics.

"Conversion cookies" are stored on the basis of Art. 6(1)(f) GDPR. The
website operator has a legitimate interest in analysing user behaviour
in order to optimise both its website and its advertising.

More information about Google AdWords and Google Conversion Tracking can
be found in Google's privacy provisions.

Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. The
provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA
94043, USA ("Google").

reCAPTCHA is used to check whether data entered on our websites (e.g. in
a contact form) is entered by a human or by an automated program. To do
this, reCAPTCHA analyses the behaviour of the website visitor based on
various characteristics. This analysis begins automatically as soon as
the website visitor enters the website. For the analysis, reCAPTCHA
evaluates various information (e.g. IP address, time spent by the
website visitor on the website or mouse movements made by the user). The
data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors
are not informed that an analysis is taking place.

Data processing is carried out on the basis of Art. 6(1)(f) GDPR. The
website operator has a legitimate interest in protecting its online
services from abusive automated data collection and SPAM. Further
information about this tool can be found at Google reCAPTCHA.

Hotjar

On this website, the Hotjar tool, a web analytics service provided by
Hotjar Ltd., based in Malta, collects and stores data from which user
profiles are created using pseudonyms. These user profiles are used to
analyse visitor behaviour and are evaluated to improve and tailor our
services to users' needs.

Cookies may be used for this purpose. These are small text files stored
locally on the website visitor's device, enabling the visitor to be
recognised when they return to our website.

The pseudonymised user profiles are not merged with personal data
relating to the holder of the pseudonym without separate, express
consent. Further information about data processing can be found in the
provider's Privacy Policy.

If you wish to object to data collection by Hotjar in the future, you
can set an opt-out cookie, which can be found at this link.

Social networks - sharing content via plugins

Facebook plugins (Like & Share button)

Plugins of the Facebook social network, provided by Facebook Inc., 1
Hacker Way, Menlo Park, California 94025, USA, are integrated into our
pages.

You can recognise Facebook plugins by the Facebook logo or the "Like"
button on our site. An overview of Facebook plugins can be found
here.

When you visit our pages, the plugin establishes a direct connection
between your browser and the Facebook server. Facebook thereby receives
the information that you have visited our site using your IP address. If
you click the Facebook "Like" button while logged into your Facebook
account, you can link the content of our pages to your Facebook profile.
This allows Facebook to associate your visit to our pages with your user
account. We would like to point out that, as the provider of these
pages, we have no knowledge of the content of the data transmitted or
how Facebook uses it. Further information can be found in Facebook's Privacy Policy.

If you do not want Facebook to associate your visit to our pages with
your Facebook user account, please log out of your Facebook account.

LinkedIn Plugin

Our website uses functions of the LinkedIn network. The provider is
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Whenever one of our pages containing LinkedIn functions is accessed, a
connection to LinkedIn servers is established. LinkedIn is informed that
you have visited our websites using your IP address.

If you click the LinkedIn "Recommend" button while logged into your
LinkedIn account, LinkedIn can associate your visit to our website with
you and your user account. We would like to point out that, as the
provider of these pages, we have no knowledge of the content of the data
transmitted or how LinkedIn uses it.

Further information can be found in LinkedIn's Privacy Policy.

YouTube

Our website uses plugins from the Google-operated site YouTube. The
operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA
94066, USA.

If you visit one of our pages equipped with a YouTube plugin, a
connection to YouTube's servers is established. The YouTube server is
informed which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to
associate your browsing behaviour directly with your personal profile.
You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of presenting our online services in an
appealing manner. This constitutes a legitimate interest within the
meaning of Art. 6(1)(f) GDPR.

Further information about the handling of user data can be found in
YouTube's Privacy Policy.

Google Maps

This site uses the Google Maps map service via an API. The provider is
Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP
address. This information is generally transmitted to a Google server in
the USA and stored there. The provider of this site has no influence
over this data transmission.

Google Maps is used in the interest of presenting our online services in
an appealing manner and making the locations specified by us on the
website easy to find. This constitutes a legitimate interest within the
meaning of Art. 6(1)(f) GDPR.

More information about how user data is handled can be found in
Google's Privacy Policy.

Contact for data protection

If you have any questions regarding the collection, processing or use of
your personal data, requests for information, rectification, restriction
or deletion of data, or the withdrawal of consent you have given, please
contact us using the contact details provided in the legal notice (Imprint).