1. data protection at a glance
1.1 General information
1.2 Data collection on this website
1.2.1 Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find his contact details in the imprint of this website.
1.2.2 How do we collect your data?
On the one hand, your data is collected when you provide it to us. This can be, for example, data that you enter in a contact form or offer form, or during the ordering process and account creation.
Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter this website.
1.2.3 What do we use your data for?
Some of the data is collected to ensure that the website is provided without error. Other data may be used to analyse your user behaviour.
We process personal data that we need to fulfil our contractual obligations, such as name, address, e-mail address, ordered products, billing and payment data. The collection of this data is necessary for the conclusion of the contract.
The deletion of the data takes place after the expiry of warranty periods and legal retention periods.
The legal basis for the processing of this data is Art. 6 para. 1 p. 1 b) DSGVO, because this data is required so that we can fulfil our contractual obligations towards you.
1.2.4 What rights do you have regarding your data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to demand the correction or deletion of this data. For this purpose as well as for further questions on the subject of data protection, you can contact us at any time at the address given in the imprint. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
1.3 Analysis tools and third-party tools
When visiting this website, your surfing behaviour may be statistically analysed. This is done primarily with cookies and with so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you.
You can object to this analysis or prevent it by not using certain tools. Detailed information on these tools and on your objection options can be found in the following data protection declaration.
2 Hosting and Content Delivery Networks (CDN)
2.1 External hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contractual data, contact details, names, website accesses and other data generated via a website.
The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO).
Our hoster will only process your data insofar as this is necessary for the fulfilment of its service obligations and will follow our instructions with regard to this data.
2.2 Conclusion of a contract on commissioned processing
In order to ensure data protection-compliant processing, we have concluded an order processing contract with our hoster.
3. general information and obligatory information
3.1 Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.
3.2 Information on the responsible body
The responsible party for data processing on this website is:
WhatsApp: +49 16099277619
The responsible body is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses or similar).
3.3 Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke an already given consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
3.4 Right to object to data collection in special cases and to direct advertising (Art. 21 DSGVO)
IF THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 ABS. 1 LIT. E OR F DSGVO, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) DSGVO).
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ARTICLE 21 (2) OF THE GERMAN DATA PROTECTION ACT).
3.5. right of appeal to the competent supervisory authority
In the event of violations of the GDPR, data subjects shall have a right of appeal to a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged violation. The right of appeal is without prejudice to any other administrative or judicial remedy.
3.6 Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
3.7 SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
3.8 Information, deletion and correction
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of data processing and, if necessary, a right to correction or deletion of this data. For this purpose as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.
3.9 Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. To do this, you can contact us at any time at the address given in the imprint. The right to restriction of processing exists in the following cases:
- If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of erasure.
- If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.
- If you have lodged an objection under Article 21(1) DSGVO, a balancing of your interests and ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data may - apart from being stored - only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.
3.10. Objection to advertising e-mails
The use of contact data published within the framework of the imprint obligation for the transmission of advertising and information material not expressly requested is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.
To register for the newsletter (email marketing for news and offers), the data requested in the registration process is required. The registration for the newsletter is logged. After registration you will receive a message on the given email address, in which you are asked to confirm the registration ("double opt-in"). This is necessary to prevent third parties from registering with your email address.
You can revoke your consent to receive the newsletter at any time and thus unsubscribe from the newsletter.
We store the registration data as long as they are needed for sending the newsletter. We store the logging of the registration and the shipping address as long as there was an interest in proving the consent originally given, which is usually the limitation periods for civil claims, thus a maximum of three years.
The legal basis for sending the newsletter is your consent in accordance with Art. 6 Para. 1 S. 1 a) in conjunctionwith Art. 7 DSGVO in conjunction with § 7 Para. 2 No. 3 UWG. The legal basis for logging the registration is our legitimate interest in proving that the mailing was made with your consent.
You can cancel the registration at any time without incurring any costs other than the transmission costs according to the basic rates. A notification in text form to the contact data mentioned under point 1 (e.g. e-mail, fax, letter) is sufficient for this purpose. Of course, you will also find an unsubscribe link in every newsletter.
3.12. Data transfer upon conclusion of a contract
We transmit personal data to third parties only if this is necessary in the context of the contract, for example to the companies entrusted with the delivery of the goods. A further transmission of the data does not take place or only if you have expressly agreed to the transmission. Your data will not be passed onto third parties without your express consent, for example for advertising purposes.
The basis for data processing is Art. 6 Para. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
3.13. User account
You can create a user account on our website . If you wish to do so, we require the personal data requested during login. When you log in later, only your email or user name and the password you have chosen are required.
For the new registration we collect master data (e.g. name, address), communication data (e.g. email address) and payment data (bank details) as well as access data (user name and password).
To ensure your proper registration and to prevent unauthorized logins by third parties, you will receive an activation link by e-mail after your registration to activate your account. Onlyafter successful registration do wepermanentl ystore the data transmitted by you inour system.
Once you have created a user account, you can have it deleted by us at any time without incurring any costs other than the transmission costs according to the basic rates. A notification in text form to the contact data mentioned under point 1 (e.g. e-mail, fax, letter) is sufficient for this purpose. We will then delete your stored personal data, insofar as we do not still need to store them for the processing of orders or due to legal storage obligations.
The legal basis for the processing of this data is your consent inaccordance with Art. 6 Para. 1 S. 1 a) DSGVO.
4. data collection on this website
Our internet pages use so-called "cookies". Cookies are small text files and do not cause any damage to your terminal device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your terminal device until you delete them yourself or until they are automatically deleted by your web browser.
In some cases, cookies from third-party companies may also be stored on your terminal device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behaviour or to display advertising.
Cookies that are necessary to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If a corresponding consent has been requested (e.g. a consent to store cookies), the processing is carried out exclusively on the basis of Art. 6 (1) lit. a DSGVO; the consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.
Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you separately about this within the framework of this data protection declaration and, if necessary, request your consent.
4.1 Contacting us
4.1.1 Inquiry by e-mail, contact form, telephone or fax
If you contact us by e-mail, telephone, contact form or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.
The processing of this data is based on Art. 6 (1) lit. b DSGVO if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 (1) (a) DSGVO) and/or on our legitimate interests (Art. 6 (1) (f) DSGVO), as we have a legitimate interest in the effective processing of the requests addressed to us.
The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions - in particular legal retention periods - remain unaffected.
4.1.2 WhatsApp Business
We offer visitors to our website the possibility to contact us via the messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "business version" of WhatsApp.
If you contact us via WhatsApp on the occasion of a specific transaction (for example, an order placed), we store and use the mobile phone number you use on WhatsApp and - if provided - your first and last name in accordance with Art. 6 (1) lit. b. DSGVO to process and respond to your request. On the basis of the same legal basis, we may ask you to provide further data (order number, customer number, address or email address) via WhatsApp in order to be able to assign your request to a specific process.
If you use our WhatsApp contact for general inquiries (such as about the range of services, availability or our website), we store and use the mobile phone number you use on WhatsApp and - if provided - your first name and surname in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in the efficient and timely provision of the requested information.
Your data will only ever be used to respond to your request via WhatsApp. It will not be passed on to third parties.
Please note that WhatsApp Business receives access to the address book of the mobile device we use for this purpose and automatically transmits phone numbers stored in the address book to a server of the parent company Facebook Inc. in the USA. For the operation of our WhatsApp business account, we use a mobile device in whose address book only the WhatsApp contact data of those users who have also contacted us via WhatsApp are stored.
Facebook Inc. with headquarters in the USA is certified for the us-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.
For the purpose and scope of the data collection and the further processing and use of the data by WhatsApp, as well as your rights in this regard and setting options for protecting your privacy, please refer to the data protection information of WhatsApp: https://www.whatsapp.com/legal/?eea=1#privacy-policy.
4.1.3 Inquiry via offer form in the pop-up of the product pages
We offer visitors to our website the opportunity to contact us via the third-party app "Make an Offer".
If you contact us on the occasion of a specific purchase request, (for example, to request a desired price or offer) via Make an Offer app in the popup, we store and use the data entered by you in the form (name, email) and - if provided - other data in the comments field, in accordance with Art. 6 para. 1 lit. b. DSGVO to process and respond to your request.
5. payment service provider
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") within the framework of the payment processing. The transfer takes place in accordance with Art. 6 Para. 1 lit. b DSGVO and only insofar as this is necessary for the payment processing.
For the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including information on the credit agencies used, please refer to PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
If you choose a Klarna payment service (invoice, instant transfer and installment purchase/financing), the payment will be processed by Klarna Bank AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). In order to enable the processing of the payment, your personal data (first name and surname, street, house number, postcode, town, gender, e-mail address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, article, delivery type) will be passed on to Klarna for the purpose of checking your identity and creditworthiness, provided that you have expressly consented to this in accordance with Art. 6 Para. 1 lit. a DSGVO during the ordering process. You can see which credit agencies your data may be forwarded to here
:https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agenciesDie Creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. The information received about the statistical probability of non-payment is used by Klarna for a weighed decision on the establishment, implementation or termination of the contractual relationship.
You can withdraw your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be entitled to process your personal data to the extent necessary to process payments in accordance with the contract.
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacybzw. for Data Subjects located in Austria
If you select the payment method "Amazon Pay", the payment is processed via the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: "Amazon Payments"), to whom we pass on the information you provided during the ordering process, together with information about your order, in accordance with Art. 6 (1) lit. b DSGVO. The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only insofar as it is necessary for this purpose. You can obtain further information about the data protection provisions of Amazon Payments at the following Internet address: https://pay.amazon.com/de/help/201751600.
5.3 GooglePay (Google Payments)
You can also pay via Google Pay via the shopping cart or the quick checkout on the product page. If you select the payment method "GooglePay", the payment is processed via the payment service provider Google LLC, as well as Google Payment Corp. ("GPC") (hereinafter: "Google Payments"), to whom we pass on the information you provided during the ordering process, together with information about your order, in accordance with Art. 6 (1) lit. b DSGVO. The provider of the service is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Your data will only be passed on for the purpose of payment processing with the payment service provider Google Payments and only insofar as it is necessary for this purpose.
If you choose Google Pay for payment, Google Pay transmits your credit card data encrypted via a virtual card number to LogPay. LogPay does not receive any other personal data. The processing of your payment by LogPay is carried out in accordance with the principles outlined in (1). The legal basis for processing in connection with Google Pay is Art. 6 (1) p. 1 lit. f DSGVO. We have a legitimate interest in offering you extended payment options and outsourcing the processing of payments.
For more information on how Google Pay works and how Google Pay processes data, please visit https://pay.google.com/intl/de_de/about/ and https://payments.google.com/files/privacy/new_privacy/privacyno.
You can also pay via Apple Pay via the shopping cart or the quick checkout on the product page. The provider of the service is Apple Inc, 1 Apple Park Way, Cupertino, CA 95014, USA. When paying via Apple Pay, Apple Pay transmits your credit card data to LogPay in encrypted form via a device account number. LogPay does not receive any other personal data. The processing of your payment by LogPay is carried out in accordance with the principles outlined in (1). The legal basis for processing in connection with Apple Pay is Art. 6 (1) p. 1 lit. f DSGVO. We have a legitimate interest in offering you extended payment options and outsourcing the processing of payments.
For more information about how Apple Pay works and how Apple Pay processes your data, please visit https://support.apple.com/de-de/HT201469 and https://support.apple.com/de-de/HT203027.
6 Social media
6.1 Facebook Plugins (Like & Share Button)
Plugins of the social network Facebook are integrated on this website. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.
You can recognise the Facebook plugins by the Facebook logo or the "Like" button ("Like") on this website. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/?locale=de_DE.
If you do not want Facebook to be able to associate your visit to this website with your Facebook user account, please log out of your Facebook user account.
The use of Facebook plugins is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in ensuring the greatest possible visibility on social media.
6.2 Instagram Plugin
On this website, functions of the service Instagram are integrated. These functions are offered by Mintt Studio via the Instafeed app.
For more information on the functioning of and data processing by Mintt Studio, please visit: https://minttstudio.com/index/?p=policy
If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to this website with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram.
The storage and analysis of the data is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in the greatest possible visibility in social media. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is carried out exclusively on the basis of Art. 6 (1) lit. a DSGVO; the consent can be revoked at any time.
7. analysis tools and advertising
7.1. 1&1 Web Analytics
This website uses the analysis services of 1&1 Web Analytics. The provider is 1&1 IONOS SE, Elgendorfer Straße 57, D - 56410 Montabaur. Within the scope of the analyses with 1&1, among other things, visitor numbers and behaviour (e.g. number of page views, duration of a website visit, bounce rates), visitor sources (i.e. from which page the visitor comes), visitor locations as well as technical data (browser and operating system versions) can be analysed. For this purpose, 1&1 stores the following data in particular:
- Referrer (previously visited website)
- Requested website or file
- browser type and browser version
- Operating system used
- type of device used
- time of access
- IP address in anonymous form (only used to determine the location of the access)
According to 1&1, the data collection is completely anonymised so that it cannot be traced back to individual persons. Cookies are not stored by 1&1-Webanalytics.
The storage and analysis of the data is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in the statistical analysis of user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO; the consent can be revoked at any time.
For further information on data collection and processing by 1&1 Web Analytics, please refer to the following links:
7.2 Order processing
We have concluded an order processing contract with 1&1. This contract is intended to ensure that 1&1 handles your personal data in accordance with data protection regulations.
8 Plugins, tools and links
8.1 Links to other websites
Our online presence contains links to other websites. We have no influence on whether their operators comply with data protection regulations.
8.2 Google Web Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This enables Google to know that your IP address has been used to access this website. The use of Google WebFonts is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the uniform presentation of the typeface on his website. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.
If your browser does not support web fonts, a standard font will be used by your computer.
8.3 Google Maps
This site uses the map service Google Maps via an API. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
In order to use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO.
8.4 Google reCAPTCHA
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to check whether the data input on this website (e.g. in a contact form) is made by a human being or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.
The storage and analysis of the data is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO; the consent can be revoked at any time.
8.5 Google Analytics
Google is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law(https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. In doing so, pseudonymous user profiles of the users can be created from the processed data.
We only use Google Analytics with IP anonymisation activated. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
8.6 Google Ads conversion tracking
This website uses the online advertising program "Google Ads" and within the framework of Google Ads the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the offer of Google Ads to draw attention to our attractive offers with the help of advertising media (so-called Google Adwords) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by Google Ads. Cookies are small text files that are stored on your terminal device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across Google Ads customers' websites. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted in to conversion tracking. Clients will learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users. If you do not wish to participate in the tracking, you can block this use by deactivating the Google conversion tracking cookie via your internet browser under the keyword "user settings". You will then not be included in the conversion tracking statistics. We use Google Ads based on our legitimate interest in targeted advertising pursuant to Art. 6 (1) lit. f DSGVO. In the context of the use of Google Ads, there may also be a transmission of personal data to the servers of Google LLC. in the USA.
In the event that personal data is transferred to Google LLC., which is based in the USA, Google LLC. has certified itself for the us-European data protection agreement "Privacy Shield", which guarantees compliance with the level of data protection applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list.
You can permanently disable cookies for ad preferences by selecting the appropriate settings on your browser software or by downloading and installing the browser plug-in available at the following link
8.7 Google Shopping Reviews
We use "Google Shopping Reviews" on our website. Google Shopping Reviews stores and processes information about your user behavior on our website. For this purpose, Google Shopping Reviews uses, among other things, cookies, i.e. small text files that are stored locally in the cache of your web browser on your terminal device and that enable an analysis of your use of our website.
We use Google Shopping Reviews for marketing and optimization purposes, in particular to analyze the use of our website and to continuously improve individual functions and offers as well as the user experience. Through the statistical evaluation of user behaviour, we can improve our offer and make it more interesting for you as a user. This is also our legitimate interest in the processing of the above data by the third-party provider. The legal basis is Art. 6 para. 1 p. 1 lit. a) DSGVO. Information of the third-party provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information of the third party provider on data protection can be found on the following website .
8.8 Partner logo IDEALO
The logo of our partner idealo (idealo internet GmbH, Ritterstraße 11, 10969 Berlin) is integrated on our website. When you call up our website, your browser automatically transmits information to the idealo server in order to be able to display the logo on our website. This information is temporarily stored in a so-called server log file for 14 days. The following information is collected without your intervention and stored until automatic deletion:
- IP address of the requesting computer,
- Date and time of access,
- name and URL of the accessed file,
- website from which the access was made (referrer URL),
- browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
8.9 Integration of the Trusted Shops Trustbadge
The Trusted Shops Trustbadge is integrated on this website for the purpose of displaying our Trusted Shops seal of approval and any ratings collected, as well as for offering Trusted Shops products to buyers after an order has been placed.
This serves to protect our legitimate interests in an optimal marketing by enabling a safe purchase according to Art. 6 para. 1 p. 1 lit. f DSGVO. The trust badge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is provided by a CDN provider (Content Delivery Network) within the scope of order processing. Trusted Shops GmbH also uses service providers from the USA. An appropriate level of data protection is ensured. For further information on the data protection of Trusted Shops GmbH, please see our data protection declaration.
When the Trustbadge is called up, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. Individual access data are stored in a security database for the analysis of security anomalies. The log files are automatically deleted 90 days after creation at the latest.
Further personal data is transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered to use them. The contractual agreement between you and Trusted Shops applies. For this an automatic collection of personal data from the order data takes place. Whether you as a buyer are already registered for a product use, is checked automatically on the basis a neutral parameter, the email address hashed by cryptological one-way function. The e-mail address is converted into this hash value, which cannot be decrypted by Trusted Shops, before it is transmitted. After checking for a match, the parameter is automatically deleted.
9 Duration of the storage of personal data
The duration of the storage of personal data is measured on the basis of the respective legal basis, the purpose of processing and - if relevant - additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).
When personal data is processed on the basis of explicit consent pursuant to Art. 6 (1) a DSGVO, this data is stored until the person concerned revokes his or her consent.
If there are statutory retention periods for data that is processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 (1) (b) DSGVO, this data will be routinely deleted after expiry of the retention periods, provided that it is no longer required for the performance of the contract or the initiation of the contract and/or there is no legitimate interest on our part in continuing to store it.
When processing personal data on the basis of Art. 6(1)(f) DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21(1) DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct marketing on the basis of Article 6 (1) (f) DSGVO, this data will be stored until the data subject exercises his or her right to object pursuant to Article 21 (2) DSGVO.
Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
Status: June 2021
Based on: https://www.e-recht24.de created and modified.