Privacy policy

Data protection

We are pleased that you are interested in our online shop. The protection of your privacy is very important to us. Below, we inform you in detail about how we handle your data.

  1. Access data and hosting

You can visit our web pages without providing any information about yourself. Each time a web page is accessed, the web server automatically stores only a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the volume of data transferred and the requesting provider (access data), and which documents the access.

This access data is evaluated exclusively for the purpose of ensuring the trouble-free operation of the site and improving our offering. Pursuant to Art. 6(1)(f) GDPR, this serves to safeguard our legitimate interests in the correct presentation of our offering, which prevail in the context of a balancing of interests. All access data is deleted no later than seven days after the end of your visit to the site.

Hosting services by a third-party provider
As part of processing on our behalf, a third-party provider provides us with the services for hosting and displaying the website. This serves to safeguard our legitimate interests in the correct presentation of our offering, which prevail in the context of a balancing of interests. All data collected in the course of using this website or in the forms provided for this purpose in the online shop, as described below, is processed on its servers. Processing on other servers only takes place within the framework explained here.

This service provider is based in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. On the basis of this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

  1. Data collection and use for contract processing

We collect personal data if you provide it to us in the context of your order or when contacting us (e.g. via the contact form or by e-mail). Mandatory fields are marked as such, because in these cases we necessarily require the data to process the contract or to handle your contact request, and without providing it you cannot complete the order or send the contact request. Which data is collected can be seen from the respective input forms. We use the data you provide pursuant to Art. 6(1)(b) GDPR to process the contract and handle your enquiries. After complete processing of the contract, your data will be restricted from further processing and deleted after expiry of any retention periods under tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to further data use that is permitted by law and about which we inform you in this statement.

  1. Disclosure of data

For the performance of the contract pursuant to Art. 6(1)(b) GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of the goods ordered. Depending on which payment service provider you select in the ordering process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, where applicable, to payment service providers commissioned by us, or to the selected payment service, in order to process payments. In some cases, the selected payment service providers also collect this data themselves, insofar as you create an account with them. In this case, you must log in to the payment service provider with your login details during the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

Disclosure of data to shipping service providers
If you have given us your express consent to this during or after your order, we will, on the basis of this consent and pursuant to Art. 6(1)(a) GDPR, pass on your e-mail address to the selected shipping service provider so that it can contact you before delivery for the purpose of announcing or coordinating the delivery.

Consent can be withdrawn at any time by sending a message via the contact option described below or directly to the shipping service provider at the contact address listed below. After withdrawal, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to further data use that is permitted by law and about which we inform you in this statement.

DHL Paket GmbH
Sträßchensweg 10
53113
Bonn

  1. E-mail newsletter

E-mail advertising with newsletter subscription
If you subscribe to our newsletter, we use the data required for this or separately provided by you in order to send you our e-mail newsletter regularly on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

Unsubscribing from the newsletter is possible at any time and can be done either by sending a message via the contact option described below or via a link provided for this purpose in the newsletter. After you unsubscribe, we will delete your e-mail address, unless you have expressly consented to further use of your data or we reserve the right to further data use that is permitted by law and about which we inform you in this statement.

4.1. Use of the mailing service provider “MailChimp”

Newsletters are sent by means of “MailChimp”, a newsletter mailing platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

The e-mail addresses of our newsletter recipients, as well as their other data described in these notices, are stored on MailChimp’s servers in the USA. MailChimp uses this information to send and evaluate the newsletters on our behalf. Furthermore, according to its own information, MailChimp may use this data to optimise or improve its own services, e.g. for the technical optimisation of the sending and presentation of the newsletters, or for economic purposes in order to determine which countries the recipients come from. However, MailChimp does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.

We rely on the reliability and the IT and data security of MailChimp. MailChimp is certified under the US-EU data protection agreement “Privacy Shield” and thereby undertakes to comply with EU data protection requirements. Furthermore, we have concluded a “Data Processing Agreement” with MailChimp. This is a contract in which MailChimp undertakes to protect our users’ data, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties. Privacy policy: https://mailchimp.com/legal/terms/

  1. Use of data for payment processing

Identity and credit check when selecting Klarna payment services

In order to be able to offer you Klarna’s payment options, we will transmit personal data, such as contact details and order details, to Klarna. This enables Klarna to assess whether you can make use of the payment options offered via Klarna and to adapt the payment options to your needs. General information about Klarna is available here. Your personal details are handled by Klarna in accordance with the applicable data protection provisions and as set out in Klarna’s data protection provisions.


If you choose Klarna’s payment services, we ask for your consent pursuant to Art. 6(1)(a) GDPR allowing us to transmit to Klarna the data necessary for processing the payment and for an identity and credit check. In Germany, the commercial credit agencies named in Klarna’s privacy policy may be used for the identity and credit check.
Klarna uses the information obtained about the statistical probability of a payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship.
You can withdraw your consent at any time by sending a message to the contact details below. As a result, we may no longer be able to offer you certain payment options. You can also withdraw your consent to this use of personal data at any time by notifying Klarna.

Instalment purchase

If you select the payment method “Instalment purchase” and give the consent required for this under data protection law pursuant to Art. 6(1)(a) GDPR, personal data (first name, surname, address, e-mail, telephone number, date of birth, IP address, gender) together with the data required for processing the transaction (item, invoice amount, due dates, total amount, invoice number, taxes, currency, order date and order time) will be transmitted to our partner Klarna GmbH, Theresienhöhe 12, 80339 München, for the purposes of processing this payment method.
To verify the identity and/or creditworthiness of the customer, our partner makes enquiries and obtains information from publicly accessible databases and credit reference agencies. For details of the providers from which information and, where applicable, credit information based on mathematical-statistical methods are obtained, as well as further details on the processing of your data after its transmission to our partner Klarna GmbH, please refer to its privacy policy, which you can find here: https://www.klarna.com/de/datenschutz/
Our partner Klarna GmbH uses the information obtained about the statistical probability of a payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship. You have the option of contacting our partner Klarna GmbH to present your point of view and to contest the decision.
The agreement to the disclosure of data given by way of consent in the ordering process can be withdrawn at any time, even without giving reasons, by notifying us, with effect for the future.

  1. Integration of the Trusted Shops Trustbadge

The Trusted Shops Trustbadge is integrated on this website in order to display our Trusted Shops seal of approval and the reviews collected, and to offer Trusted Shops products to buyers after an order.

This serves to safeguard our legitimate interests in the optimal marketing of our offering, which prevail in the context of a balancing of interests, pursuant to Art. 6(1)(f) GDPR. The Trustbadge and the services advertised with it are offered by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Köln.
When the Trustbadge is accessed, the web server automatically stores a so-called server log file, which contains, for example, your IP address, the date and time of access, the volume of data transferred and the requesting provider (access data), and which documents the access. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your visit to the site.
Further personal data is only transferred to Trusted Shops if you have consented to this, decide to use Trusted Shops products after completing an order or have already registered for their use. In this case, the contractual agreement concluded between you and Trusted Shops applies.

  1. Cookies and web analysis

In order to make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to safeguard our legitimate interests in an optimised presentation of our offering, which prevail in the context of a balancing of interests, pursuant to Art. 6(1)(f) GDPR. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognise your browser on your next visit (persistent cookies). You can find the storage period in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them, or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers at the following links:
Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari™: https://support.apple.com/kb/ph21411?locale=de_DE
Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Firefox™ https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera™ : http://help.opera.com/Windows/10.20/de/cookies.html

If cookies are not accepted, the functionality of our website may be limited.

Use of Google (Universal) Analytics for web analysis
For website analysis, this website uses Google (Universal) Analytics, a web analysis service of Google LLC (www.google.de). This serves to safeguard our legitimate interests in an optimised presentation of our offering, which prevail in the context of a balancing of interests, pursuant to Art. 6(1)(f) GDPR. Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as cookies. The automatically collected information about your use of this website is generally transmitted to a Google server in the USA and stored there. Through the activation of IP anonymisation on this website, the IP address is truncated within the Member States of the European Union or in other Contracting States to the Agreement on the European Economic Area before transmission. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. The anonymised IP address transmitted by your browser in the context of Google Analytics is, as a rule, not merged with other Google data. Once the purpose no longer applies and our use of Google Analytics has ended, the data collected in this context will be deleted.

Google LLC has its headquarters in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. On the basis of this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can prevent the collection by Google of the data generated by the cookie and relating to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plugin, you can click this link to prevent collection by Google Analytics on this website in the future. This places an opt-out cookie on your device. If you delete your cookies, you must click the link again.

  1. Advertising via marketing networks

Google AdSense
Via Google AdSense, our website markets space for advertisements from third-party providers and advertising networks. These advertisements are displayed to you at various places on this website. As part of the integration of Google AdSense, Google’s so-called DoubleClick cookie is set for all visitors to the site.

This enables the display of interest-based advertising through the automatic assignment of a pseudonymous user ID, with the help of which interests are determined on the basis of visits to this and other websites. This serves to safeguard our legitimate interests in the optimal marketing of our website, which prevail in the context of a balancing of interests, pursuant to Art. 6(1)(f) GDPR. Once the purpose no longer applies and our use of Google AdSense has ended, the data collected in this context will be deleted.

Google AdSense is a service offered by Google LLC (www.google.de).
Google LLC has its headquarters in the USA. An adequacy decision of the European Commission exists for this country. It is based on the EU-US Privacy Shield, under which Google LLC is certified. A current certificate can be viewed here: https://www.privacyshield.gov/list

You can deactivate the DoubleClick cookie via this link. In addition, you can obtain information about the setting of cookies from the Digital Advertising Alliance and make settings in this regard.

Google AdWords Remarketing
We use Google Adwords to advertise this website in Google search results and on third-party websites. For this purpose, when you visit our website, Google sets the so-called remarketing cookie, which automatically enables interest-based advertising by means of a pseudonymous CookieID and on the basis of the pages you have visited. This serves to safeguard our legitimate interests in the optimal marketing of our website, which prevail in the context of a balancing of interests, pursuant to Art. 6(1)(f) GDPR. Once the purpose no longer applies and our use of Google AdWords Remarketing has ended, the data collected in this context will be deleted.

Any further data processing only takes place if you have given Google your consent to your web and app browsing history being linked by Google with your Google account and to information from your Google account being used to personalise the advertisements you see on the web. If, in this case, you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data in order to form audiences.

Google AdWords Remarketing is a service offered by Google LLC (www.google.de). Google LLC has its headquarters in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. On the basis of this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can deactivate the remarketing cookie via this link. In addition, you can obtain information about the setting of cookies from the Digital Advertising Alliance and make settings in this regard.

Facebook Pixel, Custom Audiences and Facebook marketing services

On the basis of our legitimate interests in the analysis, optimisation and economic operation of our online offering, and for these purposes, the so-called “Facebook Pixel” of the social network Facebook is used within our online offering; Facebook is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are resident in the EU, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).

Facebook is certified under the Privacy Shield agreement and thereby offers a guarantee that it will comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

With the help of the Facebook Pixel, Facebook is, firstly, able to identify the visitors to our online offering as a target group for the display of advertisements (so-called “Facebook Ads”). Accordingly, we use the Facebook Pixel to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products, determined on the basis of the websites visited) that we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook Pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of users and are not perceived as intrusive. With the help of the Facebook Pixel, we can furthermore track the effectiveness of the Facebook advertisements for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook advertisement (so-called “conversion”).

The processing of the data by Facebook takes place within the framework of Facebook’s Data Policy. Accordingly, general information on the display of Facebook Ads can be found in Facebook’s Data Policy: https://www.facebook.com/policy.php. Specific information and details about the Facebook Pixel and how it works can be found in Facebook’s help section: https://www.facebook.com/business/help/651294705016616.

You can object to the collection by the Facebook Pixel and to the use of your data for the display of Facebook Ads. To set which types of advertisements are shown to you within Facebook, you can visit the page set up by Facebook and follow the instructions there on the settings for usage-based advertising: https://www.facebook.com/settings?tabs=ads. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

You can furthermore object to the use of cookies that serve audience measurement and advertising purposes via the opt-out page of the Network Advertising Initiative (https://optout.networkadvertising.org/) and additionally via the US website (https://www.aboutads.com/choices) or the European website  (https://www.youronlinechoices.com/uk/your-ad-choices/).

  1. Social media plugins

Use of social plugins from Facebook, Instagram
Our website uses so-called social plugins (“plugins”) from social networks.
When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Facebook, Google, Twitter or Instagram. The content of the plugin is transmitted by the respective provider directly to your browser and integrated into the page. Through the integration of the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted by your browser directly to a server of the respective provider (possibly in the USA) and stored there. If you are logged in to one of the services, the providers can directly assign your visit to our website to your profile in the respective social network. If you interact with the plugins, for example by clicking the “Like” or “Share” button, the corresponding information is likewise transmitted directly to a server of the providers and stored there. The information is also published on the social network and displayed to your contacts there. This serves to safeguard our legitimate interests in the optimal marketing of our offering, which prevail in the context of a balancing of interests, pursuant to Art. 6(1)(f) GDPR.
For the purpose and scope of the data collection and the further processing and use of the data by the providers, as well as a contact option and your rights in this regard and the setting options for protecting your privacy, please refer to the providers’ privacy notices.
http://www.facebook.com/policy.php
https://help.instagram.com/155833707900388

If you do not want the social networks to assign the data collected via our website directly to your profile on the respective service, you must log out of the corresponding service before visiting our website. You can also completely prevent the plugins from loading by using add-ons for your browser, e.g. the script blocker “NoScript” (http://noscript.net/).

  1. Sending of review reminders by e-mail

Review reminder by Trusted Shops
If you have given us your express consent to this pursuant to Art. 6(1)(a) GDPR during or after your order, we will transmit your e-mail address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Köln (www.trustedshops.de), so that it can send you a review reminder by e-mail.

This consent can be withdrawn at any time by sending a message via the contact option described below or directly to Trusted Shops.

  1. Third-party services and content

The following section provides an overview of third-party providers and their content, along with links to their privacy policies, which contain further information on the processing of data and, in some cases already mentioned here, options to object:

External fonts from Google, Inc., https://www.google.com/fonts (“Google Fonts”). The Google Fonts are integrated by means of a server request to Google (usually in the USA). Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.

Videos from the “YouTube” platform of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.

External code of the Google search interface (Google AJAX Search API), provided by the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.

Note on Google, Inc.: Google is certified under the Privacy Shield agreement and thereby offers a guarantee that it will comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

The product review system from the provider Yotpo Ltd., David Khakhami 12, Tel Aviv, Israel. Privacy policy: https://www.yotpo.com/privacy-policy/ (Yotpo Ltd. is certified under the EU-US Privacy Shield, https://www.yotpo.com/privacy-shield/)

Our live chat from the provider Tidio Ltd. with its registered office in [220C Blythe Road, W14 0HH, London]. Privacy policy: https://www.tidiochat.com/en/privacy-policy

Orders are processed via the service provider “Billbee” (Billbee GmbH, Paulinenstrasse 54, 32756 Detmold). Name, address and, where applicable, other personal data are passed on to Billbee pursuant to Art. 6(1)(b) GDPR exclusively for the purpose of processing the online order. In this context, your data is passed on only to the extent that this is actually necessary for processing the order. Privacy policy: https://www.billbee.io/datenschutz/

If our customers use third-party payment services (e.g. PayPal or Sofortüberweisung), the terms and conditions and privacy notices of the respective third-party providers apply, which can be accessed within the respective websites or transaction applications.

  1. Contact options and your rights

As a data subject, you have the following rights:

  • pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us, to the extent specified therein;
  • pursuant to Art. 16 GDPR, the right to request without undue delay the rectification of inaccurate personal data, or the completion of personal data, that we store about you;
  • pursuant to Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary
    - for exercising the right of freedom of expression and information;
    - for compliance with a legal obligation;
    - for reasons of public interest; or
    - for the establishment, exercise or defence of legal claims;
  • pursuant to Art. 18 GDPR, the right to request the restriction of processing of your personal data, insofar as
    - you contest the accuracy of the data;
    - the processing is unlawful but you oppose its erasure;
    - we no longer need the data, but you need it for the establishment, exercise or defence of legal claims; or
    - you have objected to the processing pursuant to Art. 21 GDPR;
  • pursuant to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;
  • pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your habitual residence or place of work or of our registered office for this purpose.


If you have questions about the collection, processing or use of your personal data, or regarding requests for information, rectification, blocking or erasure of data, as well as the withdrawal of consents given or objection to a specific use of data, please contact us directly using the contact details in our legal notice.

 

********************************************************************
Right to object
Insofar as we process personal data as explained above in order to safeguard our legitimate interests, which prevail in the context of a balancing of interests, you may object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. Insofar as the processing is carried out for other purposes, you have a right to object only where there are grounds relating to your particular situation.

After you have exercised your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves the establishment, exercise or defence of legal claims.

This does not apply if the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.