Privacy policy
Privacy Policy
1. Information on the collection of personal data and contact details of the controller
2. Data collection when visiting our website
3. Contacting us
4. Cookies
5. Data processing for order processing
6. Data processing when opening a customer account and for contract processing
7. Use of your data for direct marketing
8. Use of social media: video
9. Online marketing
10. Web analytics services
11. Retargeting / remarketing / referral advertising
12. Use of a live chat system
13. Tools and other services
14. Rights of the data subject
15. Duration of storage of personal data
16. Use of the withdrawal button
1. Information on the collection of personal data and contact details of the controller
1.1. Thank you for visiting our website. Below we inform you about how we handle your personal data when you use our website. Personal data is any data by which you can be personally identified.
1.2. The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
WeĂźling & Budde Rasenspecht GbR / Christian WeĂźling & Melanie Budde-WeĂźling
Hafenstr. 9-13
49565 Bramsche
Germany
Phone: +49 5461 9080211
E-mail: shop@rasenspecht.de
1.3. To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL or TLS) via HTTPS.
1.4. Hosting and shop system
Our online shop is operated on the Shopify platform. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Shopify provides us with the technical infrastructure for operating the online shop (hosting, shop system, checkout, customer accounts, order management and e-mail delivery). All personal data you provide when visiting our online shop, placing an order, opening a customer account or contacting us is processed and stored on Shopify's servers.
The legal basis is Art. 6 (1) (b) GDPR insofar as the processing serves the performance of a contract or pre-contractual measures, and otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in the secure, stable and efficient operation of our online shop. Shopify acts as our processor pursuant to Art. 28 GDPR; we have concluded a corresponding agreement with Shopify.
In the course of providing its services, your data may be transferred to Shopify Inc. in Canada and to other Shopify service providers in third countries, in particular the USA. For Canada, an adequacy decision of the EU Commission exists. For transfers to other third countries, Shopify relies on the EU Commission's standard contractual clauses or, where available, on certification under the "EU-U.S. Data Privacy Framework".
Further information on data protection at Shopify can be found here:
https://www.shopify.com/legal/privacy
2. Data collection when visiting our website
Each time our website is accessed, our system automatically collects data and information transmitted by your browser to our server (so-called "server log files"). The following data, which is technically necessary for us, is collected:
The legal basis for processing is Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and maintaining the functionality of our website. The data is not passed on or used in any other way. The temporary storage of the IP address by the system is necessary to deliver the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
We reserve the right to check the server log files subsequently if there are specific indications of unlawful use. The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collected to provide the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the users' IP addresses are deleted or altered so that the accessing client can no longer be identified. The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, there is no possibility for the user to object.
3. Contacting us
If you contact us via the contact form, the data entered in the input mask will be transmitted to us and stored. The data collected can be seen in the respective input mask. When contacting us by e-mail, only the data you enter there will be transmitted to us.
The data is used exclusively to process the conversation and your request. If the user has given consent, the legal basis for processing the data is Art. 6 (1) (a) GDPR. The legal basis for processing data transmitted when sending an e-mail is Art. 6 (1) (f) GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected and provided that no statutory retention obligations prevent this. For personal data from the input mask of the contact form and data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation has ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The user may withdraw consent to the processing of personal data at any time. If the user contacts us by e-mail, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
3.1. WhatsApp Business
Visitors to our website can communicate with us via WhatsApp (a service of Meta Inc., 1 Hacker Way, Menlo Park, CA 94025, USA).
We use the so-called "Business version" of WhatsApp. If you contact us via WhatsApp in connection with a specific contract, we store and use the mobile phone number you use on WhatsApp and, if published and/or transmitted, your first and last name (Art. 6 (1) (b) GDPR) for the purpose of processing your request.
You may be asked to provide further data if this is necessary to process your request (Art. 6 (1) (b) GDPR).
If WhatsApp Business is used for general enquiries not relating to a specific contract, we store and use the mobile phone number you use on WhatsApp and, if published and/or provided, your first and last name (pursuant to Art. 6 (1) (f) GDPR) for the purpose of processing your request.
Our legitimate interest lies in answering the questions of our customers or prospective customers promptly.
The data is not passed on to third parties.
WhatsApp Business has access to the address book of the mobile device used for this purpose. Phone numbers stored there are automatically transferred to a Facebook server in the USA.
The mobile device we use for WhatsApp Business only contains the WhatsApp contact details of users who have already contacted us via WhatsApp.
For data transfers from the European Economic Area to the USA, WhatsApp relies on the EU Commission's standard contractual clauses. For further details on how WhatsApp handles data, please refer to WhatsApp's privacy notice:
https://www.whatsapp.com/legal/?eea=1#privacy-policy
4. Cookies
Our website uses cookies.
Cookies are text files that are stored on the user's device. When a user visits a website, a cookie may be stored on the user's operating system. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. The purposes mentioned also constitute our legitimate interest in processing personal data pursuant to Art. 6 (1) (f) GDPR.
In addition, our website may use cookies that enable an analysis of users' browsing behaviour (so-called third-party cookies). You can find more information on the scope, purpose, legal basis and options to object in the respective sections of this privacy policy.
As a user, you have full control over the use of cookies. By changing the settings in your web browser, you can deactivate, restrict or delete the transmission of cookies. If you deactivate cookies for our website, it may no longer be possible to use all functions of the website to their full extent.
Help with the settings can be found in the help menu of your browser or at the following links:
Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
Chrome: https://support.google.com/chrome/answer/95647
Safari: https://support.apple.com/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Some of the cookies used are deleted when you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.
5. Data processing for order processing
5.1. If you wish to order from our online shop, it is necessary for the conclusion of the contract that you provide the personal data we need to process your order. We process the data you provide in order to handle your order.
In some cases, we work with external service providers to process your order. For this purpose, we have to pass on the necessary personal data.
If we commission transport companies to deliver your goods, we pass on the data required for delivery to the respective transport company. To process payments, we pass on your data to the commissioned credit institution to the extent necessary. If we use payment service providers, you will also be informed about this below.
The legal basis for passing on your data is Art. 6 (1) (b) GDPR.
5.2. Transfer of your personal data to shipping service providers
- DHL
If the goods are delivered to you by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-StraĂźe 20, 53113 Bonn, Germany), we only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery and to the extent necessary pursuant to Art. 6 (1) (b) GDPR. Only if you have given your express consent during the ordering process will we pass on your e-mail address to DHL prior to delivery pursuant to Art. 6 (1) (a) GDPR for the purpose of arranging a delivery date or announcing the delivery. You can withdraw your consent at any time with effect for the future vis-Ă -vis the controller named above or vis-Ă -vis DHL.
- DPD
If the goods are delivered to you by the transport service provider DPD (DPD Deutschland GmbH, WailandtstraĂźe 1, 63741 Aschaffenburg, Germany), we only pass on the name of the recipient and the delivery address to DPD for the purpose of delivery and to the extent necessary pursuant to Art. 6 (1) (b) GDPR. Only if you have given your express consent during the ordering process will we pass on your e-mail address to DPD prior to delivery pursuant to Art. 6 (1) (a) GDPR for the purpose of arranging a delivery date or announcing the delivery. You can withdraw your consent at any time with effect for the future vis-Ă -vis the controller named above or vis-Ă -vis DPD.
- GLS
If the goods are delivered to you by the transport service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-StraĂźe 1-7, 36286 Neuenstein, Germany), we only pass on the name of the recipient and the delivery address to GLS for the purpose of delivery and to the extent necessary pursuant to Art. 6 (1) (b) GDPR. Only if you have given your express consent during the ordering process will we pass on your e-mail address to GLS prior to delivery pursuant to Art. 6 (1) (a) GDPR for the purpose of arranging a delivery date or announcing the delivery. You can withdraw your consent at any time with effect for the future vis-Ă -vis the controller named above or vis-Ă -vis GLS.
- UPS
If the goods are delivered to you by the transport service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany), we only pass on the name of the recipient and the delivery address to UPS for the purpose of delivery and to the extent necessary pursuant to Art. 6 (1) (b) GDPR. Only if you have given your express consent during the ordering process will we pass on your e-mail address to UPS prior to delivery pursuant to Art. 6 (1) (a) GDPR for the purpose of arranging a delivery date or announcing the delivery. You can withdraw your consent at any time with effect for the future vis-à -vis the controller named above or vis-à -vis UPS.
- Freight forwarders
Goods that cannot be shipped as parcels due to their size or weight (e.g. palletised goods) are delivered by freight forwarding companies. In this case, we pass on the name of the recipient, the delivery address and your telephone number to the commissioned freight forwarder for the purpose of delivery and to the extent necessary pursuant to Art. 6 (1) (b) GDPR, so that it can arrange a delivery date with you. We will inform you on request which freight forwarder has been commissioned in the individual case.
5.3. Use of payment service providers
5.4. Apple Pay
If you choose the payment method "Apple Pay" (a service of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland), payment is processed via the "Apple Pay" function of your device running iOS, watchOS or macOS by debiting a payment card stored in "Apple Pay".
Your transaction is protected by the security features of your device's hardware and software. To authorise a payment, it must be released by entering a code and verifying it via the "Face ID" or "Touch ID" function of your device.
The information you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form for the purpose of payment processing. Apple then encrypts this data again and transmits it to the payment service provider of the payment card stored in Apple Pay to execute the payment. The encryption ensures that only the website on which the order was placed can access the payment data.
After payment, Apple sends the device account number and a transaction-specific, dynamic security code to the shop website to confirm the payment.
Personal data may be processed in the course of these operations. In this case, processing takes place for the purpose of payment processing pursuant to Art. 6 (1) (b) GDPR.
When using Apple Pay on your iPhone or Apple Watch to complete a purchase made via Safari on your Mac, the Mac and the authorising device communicate via an encrypted channel on Apple's servers. Apple may process or store data in the process, but in a format that does not allow you to be identified.
Information on data protection at Apple Pay is available here:
https://support.apple.com/en-us/HT203027
5.5. Bancontact
When paying via "Bancontact" through PayPal Checkout, payment is processed by the payment service provider PayPal (Europe) S.Ă r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). Further information on PayPal Checkout can be found in the corresponding section below.
5.6. BLIK
When paying via "BLIK" through PayPal Checkout, payment is processed by the payment service provider PayPal (Europe) S.Ă r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). Further information on PayPal Checkout can be found in the corresponding section below.
5.7. Google Pay
If you choose the payment method "Google Pay" (a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google")), payment processing is arranged via the "Google Pay" application on your mobile device running Android (at least 4.4 "KitKat") with NFC functionality. Payment is made using one of the payment cards stored in Google Pay or a payment system verified there (e.g. PayPal). To authorise a payment of more than EUR 25 via Google Pay, you must first unlock your mobile device.
The information you provide when ordering is passed on to Google for the purpose of payment processing. Google generates a one-time transaction number that is transmitted to the ordering website to verify the payment. This transaction number is merely a numerical token that contains no information about your data. The actual transaction is carried out between the user and the ordering website by debiting the payment method stored in Google Pay. Personal data may be processed in the course of these operations. In this case, processing takes place for the purpose of payment processing pursuant to Art. 6 (1) (b) GDPR.
The Google Pay terms of use can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=en
Further information on data protection at Google Pay can be found at:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en
Further information on data protection at Google can be found here: https://business.safety.google/privacy/
- iDEAL
When paying via "iDEAL" through PayPal Checkout, payment is processed by the payment service provider PayPal (Europe) S.Ă r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). When paying via "iDEAL" through Shopify Payments, payment is processed as described in the section on Shopify Payments. Further information on PayPal Checkout can be found in the corresponding section below.
- Klarna
If you choose a Klarna payment method (e.g. invoice, instalments or instant bank transfer), payment is processed by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden ("Klarna"). Klarna payment methods are offered in our online shop via Shopify Payments.
For this purpose, we transmit the data you provided during the ordering process (name, address, e-mail address, telephone number, date of birth if applicable) and information about your order (cart contents, invoice amount, currency) to Klarna pursuant to Art. 6 (1) (b) GDPR, insofar as this is necessary for payment processing.
For payment methods where Klarna makes an advance payment (invoice or instalments), Klarna carries out an identity and credit check on its own responsibility and may transmit data to credit agencies for this purpose. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in determining your ability to pay. The credit report may contain probability values (score values) based on a scientifically recognised mathematical-statistical procedure.
Further information on data processing by Klarna can be found in Klarna's privacy notice:
https://www.klarna.com/international/privacy-policy/
5.8. MyBank
When paying via "MyBank" through PayPal Checkout, payment is processed by the payment service provider PayPal (Europe) S.Ă r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). Further information on PayPal Checkout can be found in the corresponding section below.
- PayPal
If you choose the payment method PayPal, credit card via PayPal, direct debit via PayPal or, if offered, "purchase on account" or "instalment payment" via PayPal, payment is processed by PayPal (Europe) S.Ă r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal").
We pass on your personal data to PayPal to the extent necessary pursuant to Art. 6 (1) (b) GDPR. For the payment methods credit card via PayPal, direct debit via PayPal or, if offered, "purchase on account" or "instalment payment" via PayPal, PayPal reserves the right to carry out a credit check.
For this purpose, your payment data may be passed on to credit agencies pursuant to Art. 6 (1) (f) GDPR based on PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check with regard to the statistical probability of default for the purpose of deciding whether to provide the respective payment method.
The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values.
Further data collected by PayPal can be found in PayPal's privacy statement: https://www.paypal.com/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
5.9. PayPal Checkout
We use PayPal Checkout on this website (PayPal (Europe) S.Ă r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, "PayPal").
PayPal Checkout is an online payment solution from PayPal that supports both PayPal payment methods and local payment methods of third-party providers.
If you select (where offered) the payment methods PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, we pass on your necessary payment data to PayPal for the purpose of payment processing. The transfer is permitted pursuant to Art. 6 (1) (b) GDPR.
For the payment methods credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, PayPal may pass on your necessary payment data to credit agencies. The processing is based on Art. 6 (1) (f) GDPR. PayPal has a legitimate interest in determining your ability to pay. You can object to this processing of your data at any time by sending a message to PayPal; further processing of your personal data by PayPal may still be permitted if it is necessary for contractual payment processing.
If you select PayPal purchase on account, we first transmit your payment data to PayPal pursuant to Art. 6 (1) (b) GDPR. PayPal then forwards your data to Ratepay GmbH, Ritterstr. 12-14, 10969 Berlin, Germany, to execute the payment. Ratepay then carries out an identity and credit check in its own name. The legal basis is Art. 6 (1) (f) GDPR, the legitimate interest in determining your ability to pay. For this purpose, Ratepay passes on your payment data to credit agencies pursuant to Art. 6 (1) (f) GDPR.
Ratepay may access the following credit agencies: https://www.ratepay.com/legal-payment-creditagencies/
If you choose a payment method of a local third-party provider, we first pass on your payment data to PayPal pursuant to Art. 6 (1) (b) GDPR. PayPal then passes on your payment data to the provider you have selected to execute the payment (Art. 6 (1) (b) GDPR):
- iDEAL (Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany)
- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
- Bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria)
- BLIK (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
Further information can be found in PayPal's privacy statement:
https://www.paypal.com/webapps/mpp/ua/privacy-full
5.10. Riverty
When paying with a Riverty payment method (Riverty GmbH, GĂĽtersloher Str. 123, DE-33415 Verl, Germany, "Riverty"), we transmit your data (content of your order, name, address, date of birth if applicable, e-mail address, bank and payment card information if applicable, currency and transaction number) as well as information on the items you have ordered to Riverty.
The transfer is based on Art. 6 (1) (b) GDPR for the purpose of payment processing and only to the extent necessary for this purpose.
For payment methods where we make an advance performance (purchase on account, instalments or direct debit), we pass on your data to Riverty for the purpose of a credit check pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest lies in determining your ability to pay.
On this basis, Riverty may carry out a credit check and decide whether the Riverty payment method is available for your order.
For decision-making, Riverty may also use identity and credit information from the following credit agency pursuant to Art. 6 (1) (f) GDPR:
- Infoscore Consumer Data GmbH, RheinstraĂźe 99, 76532 Baden-Baden, Germany
The credit report may contain probability values (so-called score values). Insofar as score values influence the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values.
You have the right to object to this processing of your data, which you can communicate to us or to Riverty. In this case, however, the requested payment method can no longer be granted.
Further information on data processing by Riverty can be found here:
http://documents.riverty.com/privacy_statement/checkout/en_de/
- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2, Ireland. If you choose a payment method offered via Shopify Payments (e.g. credit card, Apple Pay, Google Pay, Shop Pay, EPS, iDEAL or Twint), payment is processed via the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to which we pass on the information you provided during the ordering process together with information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency and transaction number) pursuant to Art. 6 (1) (b) GDPR. Your data is passed on exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. Further information on data protection at Shopify Payments can be found at:
https://www.shopify.com/legal/privacy
Information on data protection at Stripe Payments Europe Ltd. can be found here:
https://stripe.com/privacy
6. Data processing when opening a customer account and for contract processing
When you open a customer account with us, personal data is collected and processed pursuant to Art. 6 (1) (b) GDPR. The scope of the data can be seen in the input form. The data you enter is stored and used by us for contract processing.
You can delete your customer account at any time. This can be done by sending a message to the address of the controller or, if offered, directly in the customer account. In this case, we will block your data in view of tax and commercial retention periods and delete it after these periods have expired, unless you have consented to further storage or a legally permitted further use of the data on our part applies.
7. Use of your data for direct marketing
Newsletter
On our website, you have the option of subscribing to a free newsletter. When you register for the newsletter, the data from the input mask is transmitted to us. The only mandatory information is your e-mail address. If you provide further voluntary information, it will only be used for personal salutation.
The legal basis for processing your data after registering for the newsletter is Art. 6 (1) (a) GDPR if the user has given consent. We obtain this consent by sending you a confirmation e-mail after registration containing a confirmation link. By clicking this link, you consent to receiving the newsletter.
When you submit the newsletter registration, we store your IP address as well as the date and time of registration. This storage serves to trace any possible misuse of your e-mail address.
We use the data collected when registering for the newsletter exclusively for the purpose of sending the newsletter.
We use Shopify's e-mail marketing function to send the newsletter (Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). Your e-mail address and any further voluntary information are stored on Shopify's servers for this purpose. Shopify may also evaluate whether a newsletter was opened and which links were clicked in order to improve delivery. Shopify acts as our processor pursuant to Art. 28 GDPR; the information in section 1.4 applies to transfers to third countries.
You can cancel your newsletter subscription at any time. For this purpose, each newsletter contains a corresponding link. This also allows you to withdraw your consent to the storage of personal data collected during the registration process.
8. Use of social media: video
Use of YouTube videos
On this website, we use the YouTube embedding function to display and play videos from the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the extended data protection mode, which, according to the provider, only initiates storage of user information when the video(s) are played. When you start playing embedded YouTube videos, YouTube uses cookies to collect information about your user behaviour. According to YouTube, these serve, among other things, to record video statistics, improve user-friendliness and prevent abusive practices. If you are logged in to Google, your data will be assigned directly to your account.
If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.
Such evaluation takes place in particular pursuant to Art. 6 (1) (a) GDPR on the basis of your express consent.
You have the right to object to the creation of these user profiles, which you must exercise vis-Ă -vis YouTube. Regardless of whether the embedded videos are played, a connection to the Google network "DoubleClick" is established each time this website is accessed, which may trigger further data processing operations beyond our control.
Data may also be transferred to the servers of Google LLC in the USA. Further information on data protection at YouTube can be found in the provider's privacy policy:
https://policies.google.com/privacy?hl=en
Settings for personalised advertising can be made at:
https://adssettings.google.com/authenticated
Google LLC, based in the USA, is certified under the "EU-U.S. Data Privacy Framework", which ensures compliance with the level of data protection applicable in the EU.
Details can be found here:
https://privacy.google.com/businesses/gdprcontrollerterms/
9. Online marketing
Use of Google Ads conversion tracking
This website uses the online advertising programme "Google Ads" and, within the framework of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
We use advertising materials to advertise our offers on external websites. Our interest lies in displaying advertising that is of interest to you and in achieving a fair calculation of advertising costs. The legal basis is Art. 6 (1) (a) GDPR, namely your express consent.
Google Ads uses cookies for conversion tracking, which are set when you click on an ad placed by Google.
These cookies usually lose their validity after 30 days and are not used for personal identification. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across the websites of Ads customers.
The information obtained in this way is used to create conversion statistics for Ads customers on the total number of users who clicked on their ad and were forwarded to a page with a conversion tracking tag.
You cannot be personally identified in this way.
If you wish to prevent tracking, you can deactivate the Google conversion tracking cookie in your browser under user settings.
Google LLC, based in the USA, is certified under the "EU-U.S. Data Privacy Framework", which ensures compliance with the level of data protection applicable in the EU. Further information on Google's data protection provisions can be found at:
https://policies.google.com/privacy
You can permanently deactivate the conversion cookies by adjusting your browser settings accordingly or by downloading and installing the browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin
In this case, certain functions of this website may not be available or only to a limited extent.
Further information on data protection at Google can be found here:
https://business.safety.google/privacy/
10. Web analytics services
10.1. Google Analytics 4
We use Google Analytics 4 on our website, a web analytics service of Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) ("GA4").
Google Analytics uses "cookies". These are small text files that are stored on your device and enable an analysis of your use of the website. The information generated in this way about your use of this website (including the shortened IP address) is transmitted to a Google server and stored and further processed there, whereby a transfer to the USA is possible. IP addresses are anonymised by default. For IPv4 addresses, the last octet is set to zero, and for IPv6 addresses the last 80 bits are set to zero, thus "anonymising" them. A transfer to servers of Google LLC based in the USA cannot be ruled out.
During your website visit, GA4 records your user behaviour in the form of "events", such as: page views, first visit to the website, start of the session, your "click path", interaction with the website, scrolls, clicks on external links, internal search queries, interaction with videos, file downloads, ads seen/clicked, language settings. GA4 also records your approximate location (region), your IP address (in anonymised form), technical information about your browser and the devices you use (e.g. language settings, screen resolution), your internet provider and the referrer URL (via which website/advertising material you came to this website).
On our behalf, Google uses this information to evaluate your use of the website, to compile reports on website activity and to provide us with further services related to website and internet use. Your anonymised IP address collected in this context is not merged with other Google data.
The data collected in this context is stored for fourteen months.
The legal basis for the data processing described here and for the setting of cookies is your express consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw this consent at any time with effect for the future, for example by deactivating this Google service in the cookie consent tool in which you gave your consent.
Without your consent, Google Analytics 4 will not be used during your visit. To exercise your right of withdrawal, please deactivate this service via the "cookie consent tool" provided on the website.
Google LLC, based in the USA, is certified under the "EU-U.S. Data Privacy Framework", which ensures compliance with the level of data protection applicable in the EU.
We have also concluded a data processing agreement with Google.
Further information on data protection in Google Analytics 4 can be found at:
https://policies.google.com/technologies/partner-sites
and
https://policies.google.com/privacy
Demographic characteristics
The "demographic characteristics" function of GA4 can create statistics allowing statements about the age, gender and interests of site visitors. For this purpose, advertising and information from third-party providers are analysed and target groups for specific marketing activities are identified. However, no personal assignment of data takes place. The data is deleted after fourteen months.
User IDs
If we use the extended function "User IDs", your activities (including conversions) can be analysed across devices. In this case, the analysis is not pseudonymous. This is possible if you have given your consent to the use of Google Analytics 4 pursuant to Art. 6 (1) (a) GDPR, have set up an account on this website and log in to this account on different devices.
Google Signals
If we use the "Google Signals" extension, we can have cross-device reports on your usage behaviour prepared. However, we only receive statistics and no personal data. This analysis is only possible if you have activated personalised ads in your Google account and linked your devices to a Google account. Your consent to the use of Google Analytics pursuant to Art. 6 (1) (a) GDPR must also be given.
Cross-device analysis can be prevented by deactivating the "personalised advertising" function in your Google account.
Further information on Google Signals can be found here: https://support.google.com/analytics/answer/7532985
Further information on data protection at Google can be found here:
https://business.safety.google/privacy/
10.2. Shopify Analytics
We use Shopify's web analytics service (Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland).
For the statistical analysis of user behaviour for optimisation and marketing purposes, Shopify collects, evaluates and stores pseudonymised visitor data, from which pseudonymised usage profiles can be created and evaluated. Shopify uses cookies to recognise the browser and thus enable more accurate determination of statistical data. Your IP address is also collected, but pseudonymised immediately after collection and before storage, so that no personal reference is possible.
The legal basis is Art. 6 (1) (a) GDPR, namely your express consent, which you give via our cookie consent tool and can withdraw there at any time with effect for the future.
Shopify does not link your IP address with other Shopify data.
To object to the collection of data, the creation of pseudonymised user profiles and the setting of cookies in the future, you can generally deactivate the use of cookies on your computer by setting your web browser so that no more cookies can be stored on your computer in the future or cookies already stored are deleted. However, deactivating all cookies may mean that some functions on our website can no longer be used in full.
Shopify's privacy policy can also be found at:
https://www.shopify.com/legal/privacy
11. Retargeting / remarketing / referral advertising
Meta Custom Audiences via the pixel method
On this website, we use the "Meta Pixel" of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta"). With your express consent, this allows the behaviour of users to be tracked after they have seen or clicked on a Facebook ad. This procedure serves to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help to optimise future advertising measures. The data collected is anonymous to us, so we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with Facebook's data policy (https://www.facebook.com/about/privacy/).
You can allow Meta and its partners to place ads on and off Facebook. A cookie may be stored on your device for these purposes. These processing operations take place exclusively when express consent is given pursuant to Art. 6 (1) (a) GDPR. Consent to the use of the Meta Pixel may only be given by users who are older than 13 years. If you are younger, please ask your parent or guardian for permission. You can deactivate the use of cookies on your computer by adjusting your browser settings accordingly. However, this may mean that some functions on our website can no longer be used in full. You can also deactivate the use of cookies by third-party providers such as Meta on the following website of the Digital Advertising Alliance: http://www.aboutads.info/choices/
Meta Platforms Inc. is certified under the "EU-U.S. Data Privacy Framework", which ensures compliance with the level of data protection applicable in the EU.
Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum
12. Use of a live chat system
Shopify Chat
On this website, we use the live chat system of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
Anonymised data is collected and stored for the purpose of web analysis and to operate the live chat system for answering live support requests. Usage profiles can be created from this anonymised data under a pseudonym. Cookies may also be used for this purpose. These cookies enable the web browser to be recognised. Insofar as the information collected in this way has a personal reference, the legal basis for processing is Art. 6 (1) (f) GDPR.
Our legitimate interest lies in effective customer support and the statistical analysis of user behaviour for optimisation purposes. Without the consent of the data subject, the data will not be used to personally identify the visitor to this website. The data will not be merged with personal data about the bearer of the pseudonym.
You can prevent the storage of cookies by setting your web browser so that no more cookies can be stored on your computer in the future or cookies already stored are deleted. However, this may mean that some functions on our website can no longer be performed.
You can object to the collection and storage of data for the purpose of creating a pseudonymised usage profile at any time with effect for the future. Please send your objection informally by e-mail to the e-mail address stated at the beginning of this privacy policy.
Further information on data processing at Shopify can be found in Shopify's privacy policy:
https://www.shopify.com/legal/privacy
13. Tools and other services
13.1. Google Maps
We use "Google Maps" (API) of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Google Maps is used to display interactive maps and to create directions. By using Google Maps, information about your use of this website, including your IP address and the (start) address entered in the route planner function, may be transmitted to Google. When you access a page of our website that contains Google Maps, your browser establishes a direct connection with Google's servers. The map content is transmitted by Google directly to your browser and integrated into the website. We therefore have no influence on the scope of the data collected by Google in this way. To our knowledge, this includes at least the following data:
• Date and time of the visit to the relevant website,
• Internet address or URL of the website accessed,
• IP address, (start) address entered as part of route planning.
We have no influence on the further processing and use of the data by Google and can therefore accept no responsibility for it. If you are logged in to Google, your data will be assigned directly to your Google account. If you do not want this, you must log out of Google. Google stores your data (also for users who are not logged in) as usage profiles and evaluates them. Such evaluation takes place pursuant to Art. 6 (1) (a) GDPR on the basis of your express consent.
If you do not want Google to collect, process or use data about you via our website, you can also deactivate JavaScript in your browser settings. In this case, however, you will not be able to use the map display. The purpose and scope of data collection and the further processing and use of the data by Google, as well as your rights and setting options to protect your privacy, can be found in Google's privacy notice (https://policies.google.com/privacy).
Google's terms of use can be found here:
https://policies.google.com/terms
The terms of use for Google Maps can be found here:
https://www.google.com/help/terms_maps.html
Google LLC, based in the USA, is certified under the "EU-U.S. Data Privacy Framework", which ensures compliance with the level of data protection applicable in the EU.
Further information on data protection at Google can be found here: https://business.safety.google/privacy/
13.2. Google reCAPTCHA
We use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") pursuant to Art. 6 (1) (f) GDPR based on our legitimate interest in preventing misuse and spam.
reCAPTCHA is a function designed to ensure that an entry is made by a natural person.
When using reCAPTCHA, personal data (e.g. IP address, mouse movements, length of stay, and other data required for analysis if applicable) is transmitted to Google and processed there on our behalf. Google acts as a processor pursuant to Art. 28 GDPR in this respect. We have concluded a corresponding data processing agreement with Google.
When using Google reCAPTCHA, your personal data may also be transferred to the servers of Google LLC in the USA.
Google LLC, based in the USA, is certified under the "EU-U.S. Data Privacy Framework", which ensures compliance with the level of data protection applicable in the EU. Further information on Google's data protection provisions can be found at:
https://policies.google.com/privacy
13.3. Google Web Fonts
To display fonts uniformly, we use so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
When you access our website, your browser loads the required web fonts into the browser cache.
For this purpose, your browser must connect to Google's servers, which transmits your IP address to Google. Your personal data may also be transferred to the servers of Google LLC in the USA.
The legal basis is Art. 6 (1) (a) GDPR, namely your express consent.
If your browser does not support web fonts or you refuse their use, a standard font from your computer will be used.
Details on Google Web Fonts can be found here:
https://developers.google.com/fonts/faq
Google LLC, based in the USA, is certified under the "EU-U.S. Data Privacy Framework", which ensures compliance with the level of data protection applicable in the EU. Further information on Google's data protection provisions can be found at:
https://policies.google.com/privacy
Further information on data protection at Google can be found here:
https://business.safety.google/privacy/
13.4. Affiliate programme (UpPromote)
We operate an affiliate programme through which partners (e.g. influencers or website operators) promote our products and receive a commission for referred orders. For this purpose, we use the Shopify app "UpPromote" by Secomapp, based in Hanoi, Vietnam.
If you reach our website or order via an affiliate link or an affiliate discount code, this is recorded in order to assign the order to the respective partner and to settle the commission. For this purpose, a cookie may be stored on your device that records the origin of your visit. In particular, the affiliate link or discount code used, the time of the visit, the order number and the order value are processed. Your contact details are not passed on to the partner.
The legal basis for setting the tracking cookie is your express consent pursuant to Art. 6 (1) (a) GDPR, which you give via our cookie consent tool and can withdraw there at any time with effect for the future. Processing for settlement with the partner after an order is based on our legitimate interest in correct commission settlement pursuant to Art. 6 (1) (f) GDPR.
Secomapp acts as our processor. As the provider is based outside the EU, data is transferred on the basis of the EU Commission's standard contractual clauses.
13.5. Loyalty programme (Smile.io)
We offer a loyalty and rewards programme in which you can collect points for purchases and certain actions and redeem them for benefits. For this purpose, we use the Shopify app "Smile.io" by Smile.io, 305 King Street West, Suite 200, Kitchener, Ontario N2G 1B9, Canada.
If you participate in the loyalty programme, in particular your name, e-mail address, customer number, date of birth (if provided), IP address, points balance, orders and redeemed rewards are processed. The legal basis is Art. 6 (1) (b) GDPR, as the processing is necessary for participation in the loyalty programme. Insofar as cookies that are not technically necessary are used to display the loyalty programme on our website, this only takes place with your consent pursuant to Art. 6 (1) (a) GDPR via our cookie consent tool.
Smile.io acts as our processor. For Canada, an adequacy decision of the EU Commission exists. Further information can be found here: https://help.smile.io/en/articles/4036238-smile-privacy
13.6. Display of estimated delivery dates (Delm)
To show you an estimated delivery date on the product pages, we use the Shopify app "Delm" by Delm, WolfgangstraĂźe 11, 73479 Ellwangen (Jagst), Germany. The app calculates the delivery date based on our product and shipping data and does not access your customer data. When the display is loaded, your IP address is transmitted to the provider's server for technical reasons. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in providing you with accurate information on delivery times before you order.
13.7. Back-in-stock notifications and pre-orders (STOQ)
If an item is temporarily unavailable, you can be notified as soon as it is available again, or pre-order it. For this purpose, we use the Shopify app "STOQ" by Artos Software, 1111B S Governors Ave STE 3617, Dover, DE 19904, USA. We process your e-mail address, your name if applicable and the requested item exclusively for the purpose of the notification or processing the pre-order. The legal basis for the notification is your consent pursuant to Art. 6 (1) (a) GDPR, which you can withdraw at any time with effect for the future, e.g. by e-mail to the address stated above; for pre-orders, the legal basis is Art. 6 (1) (b) GDPR. The data is deleted after the notification has been sent or after your withdrawal.
Artos Software acts as our processor. As the provider is based in the USA, data is transferred on the basis of the EU Commission's standard contractual clauses.
14. Rights of the data subject
14.1. Applicable data protection law grants you comprehensive rights vis-Ă -vis the controller with regard to the processing of your personal data (rights of information and intervention), about which we inform you below:
- Right of access pursuant to Art. 15 GDPR:
You can request confirmation from the controller as to whether personal data concerning you is being processed. In addition, you have a right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage and the existence of further rights such as rectification of data or the right to lodge a complaint with a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing, as well as your right to be informed about the safeguards pursuant to Art. 46 GDPR when your data is transferred to third countries;
- Right to rectification pursuant to Art. 16 GDPR:
You have the right to immediate rectification of inaccurate data concerning you and/or completion of incomplete data stored by us;
- Right to restriction of processing pursuant to Art. 18 GDPR:
You have the right to request the restriction of processing of your personal data while the accuracy of your data contested by you is being verified, if you reject the erasure of your data due to unlawful processing and instead request the restriction of processing, if you need your data to assert, exercise or defend legal claims after we no longer need this data once the purpose has been achieved, or if you have lodged an objection on grounds relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds prevail;
If the processing of personal data concerning you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the restriction of processing has been imposed, you will be informed by the controller before the restriction is lifted.
- Right to erasure pursuant to Art. 17 GDPR:
You have the right to request the immediate erasure of your personal data if the conditions of Art. 17 (1) GDPR are met. However, this right to erasure does not exist in particular (not exhaustively) if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
- Right to notification pursuant to Art. 19 GDPR:
If you have exercised your right to rectification, erasure or restriction of processing, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure or restriction of processing, unless this proves impossible or involves disproportionate effort. You also have the right to be informed about these recipients.
- Right to data portability pursuant to Art. 20 GDPR:
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller, insofar as this is technically feasible;
- Right to object pursuant to Art. 21 GDPR and right to withdraw consent pursuant to Art. 7 (3) GDPR:
You have the right to object at any time to the processing of personal data concerning you that is based on Art. 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions.
You also have the right to withdraw your consent under data protection law at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent before its withdrawal.
- Right to lodge a complaint pursuant to Art. 77 GDPR:
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
14.2. Right to object
You have the right to object to the processing of your data at any time with effect for the future if we process your data on the basis of our overriding legitimate interest following a balancing of interests.
If you exercise this right to object, we will stop processing your data unless there are demonstrably compelling legitimate grounds for continuing the processing or the further processing serves the establishment, exercise or defence of legal claims.
15. Duration of storage of personal data
The duration of storage of personal data depends on the respective statutory retention periods. After these periods have expired, we routinely delete the data if it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in continued storage.
16. Use of the withdrawal button
As soon as the withdrawal button is used, we process the personal data entered there: name, order data / contract data, communication data (withdrawal statement), time of withdrawal, and user account/IP data if applicable (for the online form). The processing serves to identify your contract and to document your withdrawal. We store the data for documentation purposes for a maximum of 10 years and delete it automatically, provided that no statutory retention obligations prevent deletion. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract) and Art. 6 (1) (c) GDPR (compliance with a legal obligation).
For the online withdrawal function and the processing of returns, we use the Shopify app "easyReturns" by 247APPS, In der Goldgrube 28, 56073 Koblenz, Germany. The data mentioned above is processed by the provider on our behalf. 247APPS acts as our processor pursuant to Art. 28 GDPR.
1. Information on the collection of personal data and contact details of the controller
2. Data collection when visiting our website
3. Contacting us
4. Cookies
5. Data processing for order processing
6. Data processing when opening a customer account and for contract processing
7. Use of your data for direct marketing
8. Use of social media: video
9. Online marketing
10. Web analytics services
11. Retargeting / remarketing / referral advertising
12. Use of a live chat system
13. Tools and other services
14. Rights of the data subject
15. Duration of storage of personal data
16. Use of the withdrawal button
1. Information on the collection of personal data and contact details of the controller
1.1. Thank you for visiting our website. Below we inform you about how we handle your personal data when you use our website. Personal data is any data by which you can be personally identified.
1.2. The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
WeĂźling & Budde Rasenspecht GbR / Christian WeĂźling & Melanie Budde-WeĂźling
Hafenstr. 9-13
49565 Bramsche
Germany
Phone: +49 5461 9080211
E-mail: shop@rasenspecht.de
1.3. To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL or TLS) via HTTPS.
1.4. Hosting and shop system
Our online shop is operated on the Shopify platform. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Shopify provides us with the technical infrastructure for operating the online shop (hosting, shop system, checkout, customer accounts, order management and e-mail delivery). All personal data you provide when visiting our online shop, placing an order, opening a customer account or contacting us is processed and stored on Shopify's servers.
The legal basis is Art. 6 (1) (b) GDPR insofar as the processing serves the performance of a contract or pre-contractual measures, and otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in the secure, stable and efficient operation of our online shop. Shopify acts as our processor pursuant to Art. 28 GDPR; we have concluded a corresponding agreement with Shopify.
In the course of providing its services, your data may be transferred to Shopify Inc. in Canada and to other Shopify service providers in third countries, in particular the USA. For Canada, an adequacy decision of the EU Commission exists. For transfers to other third countries, Shopify relies on the EU Commission's standard contractual clauses or, where available, on certification under the "EU-U.S. Data Privacy Framework".
Further information on data protection at Shopify can be found here:
https://www.shopify.com/legal/privacy
2. Data collection when visiting our website
Each time our website is accessed, our system automatically collects data and information transmitted by your browser to our server (so-called "server log files"). The following data, which is technically necessary for us, is collected:
- The website visited
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you reached the page
- Operating system used
- Browser used
- IP address used (if applicable: in anonymised form)
The legal basis for processing is Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and maintaining the functionality of our website. The data is not passed on or used in any other way. The temporary storage of the IP address by the system is necessary to deliver the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
We reserve the right to check the server log files subsequently if there are specific indications of unlawful use. The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collected to provide the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the users' IP addresses are deleted or altered so that the accessing client can no longer be identified. The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, there is no possibility for the user to object.
3. Contacting us
If you contact us via the contact form, the data entered in the input mask will be transmitted to us and stored. The data collected can be seen in the respective input mask. When contacting us by e-mail, only the data you enter there will be transmitted to us.
The data is used exclusively to process the conversation and your request. If the user has given consent, the legal basis for processing the data is Art. 6 (1) (a) GDPR. The legal basis for processing data transmitted when sending an e-mail is Art. 6 (1) (f) GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected and provided that no statutory retention obligations prevent this. For personal data from the input mask of the contact form and data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation has ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The user may withdraw consent to the processing of personal data at any time. If the user contacts us by e-mail, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
3.1. WhatsApp Business
Visitors to our website can communicate with us via WhatsApp (a service of Meta Inc., 1 Hacker Way, Menlo Park, CA 94025, USA).
We use the so-called "Business version" of WhatsApp. If you contact us via WhatsApp in connection with a specific contract, we store and use the mobile phone number you use on WhatsApp and, if published and/or transmitted, your first and last name (Art. 6 (1) (b) GDPR) for the purpose of processing your request.
You may be asked to provide further data if this is necessary to process your request (Art. 6 (1) (b) GDPR).
If WhatsApp Business is used for general enquiries not relating to a specific contract, we store and use the mobile phone number you use on WhatsApp and, if published and/or provided, your first and last name (pursuant to Art. 6 (1) (f) GDPR) for the purpose of processing your request.
Our legitimate interest lies in answering the questions of our customers or prospective customers promptly.
The data is not passed on to third parties.
WhatsApp Business has access to the address book of the mobile device used for this purpose. Phone numbers stored there are automatically transferred to a Facebook server in the USA.
The mobile device we use for WhatsApp Business only contains the WhatsApp contact details of users who have already contacted us via WhatsApp.
For data transfers from the European Economic Area to the USA, WhatsApp relies on the EU Commission's standard contractual clauses. For further details on how WhatsApp handles data, please refer to WhatsApp's privacy notice:
https://www.whatsapp.com/legal/?eea=1#privacy-policy
4. Cookies
Our website uses cookies.
Cookies are text files that are stored on the user's device. When a user visits a website, a cookie may be stored on the user's operating system. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. The purposes mentioned also constitute our legitimate interest in processing personal data pursuant to Art. 6 (1) (f) GDPR.
In addition, our website may use cookies that enable an analysis of users' browsing behaviour (so-called third-party cookies). You can find more information on the scope, purpose, legal basis and options to object in the respective sections of this privacy policy.
As a user, you have full control over the use of cookies. By changing the settings in your web browser, you can deactivate, restrict or delete the transmission of cookies. If you deactivate cookies for our website, it may no longer be possible to use all functions of the website to their full extent.
Help with the settings can be found in the help menu of your browser or at the following links:
Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
Chrome: https://support.google.com/chrome/answer/95647
Safari: https://support.apple.com/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Some of the cookies used are deleted when you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.
5. Data processing for order processing
5.1. If you wish to order from our online shop, it is necessary for the conclusion of the contract that you provide the personal data we need to process your order. We process the data you provide in order to handle your order.
In some cases, we work with external service providers to process your order. For this purpose, we have to pass on the necessary personal data.
If we commission transport companies to deliver your goods, we pass on the data required for delivery to the respective transport company. To process payments, we pass on your data to the commissioned credit institution to the extent necessary. If we use payment service providers, you will also be informed about this below.
The legal basis for passing on your data is Art. 6 (1) (b) GDPR.
5.2. Transfer of your personal data to shipping service providers
- DHL
If the goods are delivered to you by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-StraĂźe 20, 53113 Bonn, Germany), we only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery and to the extent necessary pursuant to Art. 6 (1) (b) GDPR. Only if you have given your express consent during the ordering process will we pass on your e-mail address to DHL prior to delivery pursuant to Art. 6 (1) (a) GDPR for the purpose of arranging a delivery date or announcing the delivery. You can withdraw your consent at any time with effect for the future vis-Ă -vis the controller named above or vis-Ă -vis DHL.
- DPD
If the goods are delivered to you by the transport service provider DPD (DPD Deutschland GmbH, WailandtstraĂźe 1, 63741 Aschaffenburg, Germany), we only pass on the name of the recipient and the delivery address to DPD for the purpose of delivery and to the extent necessary pursuant to Art. 6 (1) (b) GDPR. Only if you have given your express consent during the ordering process will we pass on your e-mail address to DPD prior to delivery pursuant to Art. 6 (1) (a) GDPR for the purpose of arranging a delivery date or announcing the delivery. You can withdraw your consent at any time with effect for the future vis-Ă -vis the controller named above or vis-Ă -vis DPD.
- GLS
If the goods are delivered to you by the transport service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-StraĂźe 1-7, 36286 Neuenstein, Germany), we only pass on the name of the recipient and the delivery address to GLS for the purpose of delivery and to the extent necessary pursuant to Art. 6 (1) (b) GDPR. Only if you have given your express consent during the ordering process will we pass on your e-mail address to GLS prior to delivery pursuant to Art. 6 (1) (a) GDPR for the purpose of arranging a delivery date or announcing the delivery. You can withdraw your consent at any time with effect for the future vis-Ă -vis the controller named above or vis-Ă -vis GLS.
- UPS
If the goods are delivered to you by the transport service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany), we only pass on the name of the recipient and the delivery address to UPS for the purpose of delivery and to the extent necessary pursuant to Art. 6 (1) (b) GDPR. Only if you have given your express consent during the ordering process will we pass on your e-mail address to UPS prior to delivery pursuant to Art. 6 (1) (a) GDPR for the purpose of arranging a delivery date or announcing the delivery. You can withdraw your consent at any time with effect for the future vis-à -vis the controller named above or vis-à -vis UPS.
- Freight forwarders
Goods that cannot be shipped as parcels due to their size or weight (e.g. palletised goods) are delivered by freight forwarding companies. In this case, we pass on the name of the recipient, the delivery address and your telephone number to the commissioned freight forwarder for the purpose of delivery and to the extent necessary pursuant to Art. 6 (1) (b) GDPR, so that it can arrange a delivery date with you. We will inform you on request which freight forwarder has been commissioned in the individual case.
5.3. Use of payment service providers
5.4. Apple Pay
If you choose the payment method "Apple Pay" (a service of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland), payment is processed via the "Apple Pay" function of your device running iOS, watchOS or macOS by debiting a payment card stored in "Apple Pay".
Your transaction is protected by the security features of your device's hardware and software. To authorise a payment, it must be released by entering a code and verifying it via the "Face ID" or "Touch ID" function of your device.
The information you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form for the purpose of payment processing. Apple then encrypts this data again and transmits it to the payment service provider of the payment card stored in Apple Pay to execute the payment. The encryption ensures that only the website on which the order was placed can access the payment data.
After payment, Apple sends the device account number and a transaction-specific, dynamic security code to the shop website to confirm the payment.
Personal data may be processed in the course of these operations. In this case, processing takes place for the purpose of payment processing pursuant to Art. 6 (1) (b) GDPR.
When using Apple Pay on your iPhone or Apple Watch to complete a purchase made via Safari on your Mac, the Mac and the authorising device communicate via an encrypted channel on Apple's servers. Apple may process or store data in the process, but in a format that does not allow you to be identified.
Information on data protection at Apple Pay is available here:
https://support.apple.com/en-us/HT203027
5.5. Bancontact
When paying via "Bancontact" through PayPal Checkout, payment is processed by the payment service provider PayPal (Europe) S.Ă r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). Further information on PayPal Checkout can be found in the corresponding section below.
5.6. BLIK
When paying via "BLIK" through PayPal Checkout, payment is processed by the payment service provider PayPal (Europe) S.Ă r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). Further information on PayPal Checkout can be found in the corresponding section below.
5.7. Google Pay
If you choose the payment method "Google Pay" (a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google")), payment processing is arranged via the "Google Pay" application on your mobile device running Android (at least 4.4 "KitKat") with NFC functionality. Payment is made using one of the payment cards stored in Google Pay or a payment system verified there (e.g. PayPal). To authorise a payment of more than EUR 25 via Google Pay, you must first unlock your mobile device.
The information you provide when ordering is passed on to Google for the purpose of payment processing. Google generates a one-time transaction number that is transmitted to the ordering website to verify the payment. This transaction number is merely a numerical token that contains no information about your data. The actual transaction is carried out between the user and the ordering website by debiting the payment method stored in Google Pay. Personal data may be processed in the course of these operations. In this case, processing takes place for the purpose of payment processing pursuant to Art. 6 (1) (b) GDPR.
The Google Pay terms of use can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=en
Further information on data protection at Google Pay can be found at:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en
Further information on data protection at Google can be found here: https://business.safety.google/privacy/
- iDEAL
When paying via "iDEAL" through PayPal Checkout, payment is processed by the payment service provider PayPal (Europe) S.Ă r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). When paying via "iDEAL" through Shopify Payments, payment is processed as described in the section on Shopify Payments. Further information on PayPal Checkout can be found in the corresponding section below.
- Klarna
If you choose a Klarna payment method (e.g. invoice, instalments or instant bank transfer), payment is processed by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden ("Klarna"). Klarna payment methods are offered in our online shop via Shopify Payments.
For this purpose, we transmit the data you provided during the ordering process (name, address, e-mail address, telephone number, date of birth if applicable) and information about your order (cart contents, invoice amount, currency) to Klarna pursuant to Art. 6 (1) (b) GDPR, insofar as this is necessary for payment processing.
For payment methods where Klarna makes an advance payment (invoice or instalments), Klarna carries out an identity and credit check on its own responsibility and may transmit data to credit agencies for this purpose. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in determining your ability to pay. The credit report may contain probability values (score values) based on a scientifically recognised mathematical-statistical procedure.
Further information on data processing by Klarna can be found in Klarna's privacy notice:
https://www.klarna.com/international/privacy-policy/
5.8. MyBank
When paying via "MyBank" through PayPal Checkout, payment is processed by the payment service provider PayPal (Europe) S.Ă r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). Further information on PayPal Checkout can be found in the corresponding section below.
- PayPal
If you choose the payment method PayPal, credit card via PayPal, direct debit via PayPal or, if offered, "purchase on account" or "instalment payment" via PayPal, payment is processed by PayPal (Europe) S.Ă r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal").
We pass on your personal data to PayPal to the extent necessary pursuant to Art. 6 (1) (b) GDPR. For the payment methods credit card via PayPal, direct debit via PayPal or, if offered, "purchase on account" or "instalment payment" via PayPal, PayPal reserves the right to carry out a credit check.
For this purpose, your payment data may be passed on to credit agencies pursuant to Art. 6 (1) (f) GDPR based on PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check with regard to the statistical probability of default for the purpose of deciding whether to provide the respective payment method.
The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values.
Further data collected by PayPal can be found in PayPal's privacy statement: https://www.paypal.com/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
5.9. PayPal Checkout
We use PayPal Checkout on this website (PayPal (Europe) S.Ă r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, "PayPal").
PayPal Checkout is an online payment solution from PayPal that supports both PayPal payment methods and local payment methods of third-party providers.
If you select (where offered) the payment methods PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, we pass on your necessary payment data to PayPal for the purpose of payment processing. The transfer is permitted pursuant to Art. 6 (1) (b) GDPR.
For the payment methods credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, PayPal may pass on your necessary payment data to credit agencies. The processing is based on Art. 6 (1) (f) GDPR. PayPal has a legitimate interest in determining your ability to pay. You can object to this processing of your data at any time by sending a message to PayPal; further processing of your personal data by PayPal may still be permitted if it is necessary for contractual payment processing.
If you select PayPal purchase on account, we first transmit your payment data to PayPal pursuant to Art. 6 (1) (b) GDPR. PayPal then forwards your data to Ratepay GmbH, Ritterstr. 12-14, 10969 Berlin, Germany, to execute the payment. Ratepay then carries out an identity and credit check in its own name. The legal basis is Art. 6 (1) (f) GDPR, the legitimate interest in determining your ability to pay. For this purpose, Ratepay passes on your payment data to credit agencies pursuant to Art. 6 (1) (f) GDPR.
Ratepay may access the following credit agencies: https://www.ratepay.com/legal-payment-creditagencies/
If you choose a payment method of a local third-party provider, we first pass on your payment data to PayPal pursuant to Art. 6 (1) (b) GDPR. PayPal then passes on your payment data to the provider you have selected to execute the payment (Art. 6 (1) (b) GDPR):
- iDEAL (Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany)
- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
- Bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria)
- BLIK (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
Further information can be found in PayPal's privacy statement:
https://www.paypal.com/webapps/mpp/ua/privacy-full
5.10. Riverty
When paying with a Riverty payment method (Riverty GmbH, GĂĽtersloher Str. 123, DE-33415 Verl, Germany, "Riverty"), we transmit your data (content of your order, name, address, date of birth if applicable, e-mail address, bank and payment card information if applicable, currency and transaction number) as well as information on the items you have ordered to Riverty.
The transfer is based on Art. 6 (1) (b) GDPR for the purpose of payment processing and only to the extent necessary for this purpose.
For payment methods where we make an advance performance (purchase on account, instalments or direct debit), we pass on your data to Riverty for the purpose of a credit check pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest lies in determining your ability to pay.
On this basis, Riverty may carry out a credit check and decide whether the Riverty payment method is available for your order.
For decision-making, Riverty may also use identity and credit information from the following credit agency pursuant to Art. 6 (1) (f) GDPR:
- Infoscore Consumer Data GmbH, RheinstraĂźe 99, 76532 Baden-Baden, Germany
The credit report may contain probability values (so-called score values). Insofar as score values influence the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values.
You have the right to object to this processing of your data, which you can communicate to us or to Riverty. In this case, however, the requested payment method can no longer be granted.
Further information on data processing by Riverty can be found here:
http://documents.riverty.com/privacy_statement/checkout/en_de/
- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2, Ireland. If you choose a payment method offered via Shopify Payments (e.g. credit card, Apple Pay, Google Pay, Shop Pay, EPS, iDEAL or Twint), payment is processed via the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to which we pass on the information you provided during the ordering process together with information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency and transaction number) pursuant to Art. 6 (1) (b) GDPR. Your data is passed on exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. Further information on data protection at Shopify Payments can be found at:
https://www.shopify.com/legal/privacy
Information on data protection at Stripe Payments Europe Ltd. can be found here:
https://stripe.com/privacy
6. Data processing when opening a customer account and for contract processing
When you open a customer account with us, personal data is collected and processed pursuant to Art. 6 (1) (b) GDPR. The scope of the data can be seen in the input form. The data you enter is stored and used by us for contract processing.
You can delete your customer account at any time. This can be done by sending a message to the address of the controller or, if offered, directly in the customer account. In this case, we will block your data in view of tax and commercial retention periods and delete it after these periods have expired, unless you have consented to further storage or a legally permitted further use of the data on our part applies.
7. Use of your data for direct marketing
Newsletter
On our website, you have the option of subscribing to a free newsletter. When you register for the newsletter, the data from the input mask is transmitted to us. The only mandatory information is your e-mail address. If you provide further voluntary information, it will only be used for personal salutation.
The legal basis for processing your data after registering for the newsletter is Art. 6 (1) (a) GDPR if the user has given consent. We obtain this consent by sending you a confirmation e-mail after registration containing a confirmation link. By clicking this link, you consent to receiving the newsletter.
When you submit the newsletter registration, we store your IP address as well as the date and time of registration. This storage serves to trace any possible misuse of your e-mail address.
We use the data collected when registering for the newsletter exclusively for the purpose of sending the newsletter.
We use Shopify's e-mail marketing function to send the newsletter (Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). Your e-mail address and any further voluntary information are stored on Shopify's servers for this purpose. Shopify may also evaluate whether a newsletter was opened and which links were clicked in order to improve delivery. Shopify acts as our processor pursuant to Art. 28 GDPR; the information in section 1.4 applies to transfers to third countries.
You can cancel your newsletter subscription at any time. For this purpose, each newsletter contains a corresponding link. This also allows you to withdraw your consent to the storage of personal data collected during the registration process.
8. Use of social media: video
Use of YouTube videos
On this website, we use the YouTube embedding function to display and play videos from the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the extended data protection mode, which, according to the provider, only initiates storage of user information when the video(s) are played. When you start playing embedded YouTube videos, YouTube uses cookies to collect information about your user behaviour. According to YouTube, these serve, among other things, to record video statistics, improve user-friendliness and prevent abusive practices. If you are logged in to Google, your data will be assigned directly to your account.
If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.
Such evaluation takes place in particular pursuant to Art. 6 (1) (a) GDPR on the basis of your express consent.
You have the right to object to the creation of these user profiles, which you must exercise vis-Ă -vis YouTube. Regardless of whether the embedded videos are played, a connection to the Google network "DoubleClick" is established each time this website is accessed, which may trigger further data processing operations beyond our control.
Data may also be transferred to the servers of Google LLC in the USA. Further information on data protection at YouTube can be found in the provider's privacy policy:
https://policies.google.com/privacy?hl=en
Settings for personalised advertising can be made at:
https://adssettings.google.com/authenticated
Google LLC, based in the USA, is certified under the "EU-U.S. Data Privacy Framework", which ensures compliance with the level of data protection applicable in the EU.
Details can be found here:
https://privacy.google.com/businesses/gdprcontrollerterms/
9. Online marketing
Use of Google Ads conversion tracking
This website uses the online advertising programme "Google Ads" and, within the framework of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
We use advertising materials to advertise our offers on external websites. Our interest lies in displaying advertising that is of interest to you and in achieving a fair calculation of advertising costs. The legal basis is Art. 6 (1) (a) GDPR, namely your express consent.
Google Ads uses cookies for conversion tracking, which are set when you click on an ad placed by Google.
These cookies usually lose their validity after 30 days and are not used for personal identification. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across the websites of Ads customers.
The information obtained in this way is used to create conversion statistics for Ads customers on the total number of users who clicked on their ad and were forwarded to a page with a conversion tracking tag.
You cannot be personally identified in this way.
If you wish to prevent tracking, you can deactivate the Google conversion tracking cookie in your browser under user settings.
Google LLC, based in the USA, is certified under the "EU-U.S. Data Privacy Framework", which ensures compliance with the level of data protection applicable in the EU. Further information on Google's data protection provisions can be found at:
https://policies.google.com/privacy
You can permanently deactivate the conversion cookies by adjusting your browser settings accordingly or by downloading and installing the browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin
In this case, certain functions of this website may not be available or only to a limited extent.
Further information on data protection at Google can be found here:
https://business.safety.google/privacy/
10. Web analytics services
10.1. Google Analytics 4
We use Google Analytics 4 on our website, a web analytics service of Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) ("GA4").
Google Analytics uses "cookies". These are small text files that are stored on your device and enable an analysis of your use of the website. The information generated in this way about your use of this website (including the shortened IP address) is transmitted to a Google server and stored and further processed there, whereby a transfer to the USA is possible. IP addresses are anonymised by default. For IPv4 addresses, the last octet is set to zero, and for IPv6 addresses the last 80 bits are set to zero, thus "anonymising" them. A transfer to servers of Google LLC based in the USA cannot be ruled out.
During your website visit, GA4 records your user behaviour in the form of "events", such as: page views, first visit to the website, start of the session, your "click path", interaction with the website, scrolls, clicks on external links, internal search queries, interaction with videos, file downloads, ads seen/clicked, language settings. GA4 also records your approximate location (region), your IP address (in anonymised form), technical information about your browser and the devices you use (e.g. language settings, screen resolution), your internet provider and the referrer URL (via which website/advertising material you came to this website).
On our behalf, Google uses this information to evaluate your use of the website, to compile reports on website activity and to provide us with further services related to website and internet use. Your anonymised IP address collected in this context is not merged with other Google data.
The data collected in this context is stored for fourteen months.
The legal basis for the data processing described here and for the setting of cookies is your express consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw this consent at any time with effect for the future, for example by deactivating this Google service in the cookie consent tool in which you gave your consent.
Without your consent, Google Analytics 4 will not be used during your visit. To exercise your right of withdrawal, please deactivate this service via the "cookie consent tool" provided on the website.
Google LLC, based in the USA, is certified under the "EU-U.S. Data Privacy Framework", which ensures compliance with the level of data protection applicable in the EU.
We have also concluded a data processing agreement with Google.
Further information on data protection in Google Analytics 4 can be found at:
https://policies.google.com/technologies/partner-sites
and
https://policies.google.com/privacy
Demographic characteristics
The "demographic characteristics" function of GA4 can create statistics allowing statements about the age, gender and interests of site visitors. For this purpose, advertising and information from third-party providers are analysed and target groups for specific marketing activities are identified. However, no personal assignment of data takes place. The data is deleted after fourteen months.
User IDs
If we use the extended function "User IDs", your activities (including conversions) can be analysed across devices. In this case, the analysis is not pseudonymous. This is possible if you have given your consent to the use of Google Analytics 4 pursuant to Art. 6 (1) (a) GDPR, have set up an account on this website and log in to this account on different devices.
Google Signals
If we use the "Google Signals" extension, we can have cross-device reports on your usage behaviour prepared. However, we only receive statistics and no personal data. This analysis is only possible if you have activated personalised ads in your Google account and linked your devices to a Google account. Your consent to the use of Google Analytics pursuant to Art. 6 (1) (a) GDPR must also be given.
Cross-device analysis can be prevented by deactivating the "personalised advertising" function in your Google account.
Further information on Google Signals can be found here: https://support.google.com/analytics/answer/7532985
Further information on data protection at Google can be found here:
https://business.safety.google/privacy/
10.2. Shopify Analytics
We use Shopify's web analytics service (Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland).
For the statistical analysis of user behaviour for optimisation and marketing purposes, Shopify collects, evaluates and stores pseudonymised visitor data, from which pseudonymised usage profiles can be created and evaluated. Shopify uses cookies to recognise the browser and thus enable more accurate determination of statistical data. Your IP address is also collected, but pseudonymised immediately after collection and before storage, so that no personal reference is possible.
The legal basis is Art. 6 (1) (a) GDPR, namely your express consent, which you give via our cookie consent tool and can withdraw there at any time with effect for the future.
Shopify does not link your IP address with other Shopify data.
To object to the collection of data, the creation of pseudonymised user profiles and the setting of cookies in the future, you can generally deactivate the use of cookies on your computer by setting your web browser so that no more cookies can be stored on your computer in the future or cookies already stored are deleted. However, deactivating all cookies may mean that some functions on our website can no longer be used in full.
Shopify's privacy policy can also be found at:
https://www.shopify.com/legal/privacy
11. Retargeting / remarketing / referral advertising
Meta Custom Audiences via the pixel method
On this website, we use the "Meta Pixel" of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta"). With your express consent, this allows the behaviour of users to be tracked after they have seen or clicked on a Facebook ad. This procedure serves to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help to optimise future advertising measures. The data collected is anonymous to us, so we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with Facebook's data policy (https://www.facebook.com/about/privacy/).
You can allow Meta and its partners to place ads on and off Facebook. A cookie may be stored on your device for these purposes. These processing operations take place exclusively when express consent is given pursuant to Art. 6 (1) (a) GDPR. Consent to the use of the Meta Pixel may only be given by users who are older than 13 years. If you are younger, please ask your parent or guardian for permission. You can deactivate the use of cookies on your computer by adjusting your browser settings accordingly. However, this may mean that some functions on our website can no longer be used in full. You can also deactivate the use of cookies by third-party providers such as Meta on the following website of the Digital Advertising Alliance: http://www.aboutads.info/choices/
Meta Platforms Inc. is certified under the "EU-U.S. Data Privacy Framework", which ensures compliance with the level of data protection applicable in the EU.
Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum
12. Use of a live chat system
Shopify Chat
On this website, we use the live chat system of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
Anonymised data is collected and stored for the purpose of web analysis and to operate the live chat system for answering live support requests. Usage profiles can be created from this anonymised data under a pseudonym. Cookies may also be used for this purpose. These cookies enable the web browser to be recognised. Insofar as the information collected in this way has a personal reference, the legal basis for processing is Art. 6 (1) (f) GDPR.
Our legitimate interest lies in effective customer support and the statistical analysis of user behaviour for optimisation purposes. Without the consent of the data subject, the data will not be used to personally identify the visitor to this website. The data will not be merged with personal data about the bearer of the pseudonym.
You can prevent the storage of cookies by setting your web browser so that no more cookies can be stored on your computer in the future or cookies already stored are deleted. However, this may mean that some functions on our website can no longer be performed.
You can object to the collection and storage of data for the purpose of creating a pseudonymised usage profile at any time with effect for the future. Please send your objection informally by e-mail to the e-mail address stated at the beginning of this privacy policy.
Further information on data processing at Shopify can be found in Shopify's privacy policy:
https://www.shopify.com/legal/privacy
13. Tools and other services
13.1. Google Maps
We use "Google Maps" (API) of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Google Maps is used to display interactive maps and to create directions. By using Google Maps, information about your use of this website, including your IP address and the (start) address entered in the route planner function, may be transmitted to Google. When you access a page of our website that contains Google Maps, your browser establishes a direct connection with Google's servers. The map content is transmitted by Google directly to your browser and integrated into the website. We therefore have no influence on the scope of the data collected by Google in this way. To our knowledge, this includes at least the following data:
• Date and time of the visit to the relevant website,
• Internet address or URL of the website accessed,
• IP address, (start) address entered as part of route planning.
We have no influence on the further processing and use of the data by Google and can therefore accept no responsibility for it. If you are logged in to Google, your data will be assigned directly to your Google account. If you do not want this, you must log out of Google. Google stores your data (also for users who are not logged in) as usage profiles and evaluates them. Such evaluation takes place pursuant to Art. 6 (1) (a) GDPR on the basis of your express consent.
If you do not want Google to collect, process or use data about you via our website, you can also deactivate JavaScript in your browser settings. In this case, however, you will not be able to use the map display. The purpose and scope of data collection and the further processing and use of the data by Google, as well as your rights and setting options to protect your privacy, can be found in Google's privacy notice (https://policies.google.com/privacy).
Google's terms of use can be found here:
https://policies.google.com/terms
The terms of use for Google Maps can be found here:
https://www.google.com/help/terms_maps.html
Google LLC, based in the USA, is certified under the "EU-U.S. Data Privacy Framework", which ensures compliance with the level of data protection applicable in the EU.
Further information on data protection at Google can be found here: https://business.safety.google/privacy/
13.2. Google reCAPTCHA
We use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") pursuant to Art. 6 (1) (f) GDPR based on our legitimate interest in preventing misuse and spam.
reCAPTCHA is a function designed to ensure that an entry is made by a natural person.
When using reCAPTCHA, personal data (e.g. IP address, mouse movements, length of stay, and other data required for analysis if applicable) is transmitted to Google and processed there on our behalf. Google acts as a processor pursuant to Art. 28 GDPR in this respect. We have concluded a corresponding data processing agreement with Google.
When using Google reCAPTCHA, your personal data may also be transferred to the servers of Google LLC in the USA.
Google LLC, based in the USA, is certified under the "EU-U.S. Data Privacy Framework", which ensures compliance with the level of data protection applicable in the EU. Further information on Google's data protection provisions can be found at:
https://policies.google.com/privacy
13.3. Google Web Fonts
To display fonts uniformly, we use so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
When you access our website, your browser loads the required web fonts into the browser cache.
For this purpose, your browser must connect to Google's servers, which transmits your IP address to Google. Your personal data may also be transferred to the servers of Google LLC in the USA.
The legal basis is Art. 6 (1) (a) GDPR, namely your express consent.
If your browser does not support web fonts or you refuse their use, a standard font from your computer will be used.
Details on Google Web Fonts can be found here:
https://developers.google.com/fonts/faq
Google LLC, based in the USA, is certified under the "EU-U.S. Data Privacy Framework", which ensures compliance with the level of data protection applicable in the EU. Further information on Google's data protection provisions can be found at:
https://policies.google.com/privacy
Further information on data protection at Google can be found here:
https://business.safety.google/privacy/
13.4. Affiliate programme (UpPromote)
We operate an affiliate programme through which partners (e.g. influencers or website operators) promote our products and receive a commission for referred orders. For this purpose, we use the Shopify app "UpPromote" by Secomapp, based in Hanoi, Vietnam.
If you reach our website or order via an affiliate link or an affiliate discount code, this is recorded in order to assign the order to the respective partner and to settle the commission. For this purpose, a cookie may be stored on your device that records the origin of your visit. In particular, the affiliate link or discount code used, the time of the visit, the order number and the order value are processed. Your contact details are not passed on to the partner.
The legal basis for setting the tracking cookie is your express consent pursuant to Art. 6 (1) (a) GDPR, which you give via our cookie consent tool and can withdraw there at any time with effect for the future. Processing for settlement with the partner after an order is based on our legitimate interest in correct commission settlement pursuant to Art. 6 (1) (f) GDPR.
Secomapp acts as our processor. As the provider is based outside the EU, data is transferred on the basis of the EU Commission's standard contractual clauses.
13.5. Loyalty programme (Smile.io)
We offer a loyalty and rewards programme in which you can collect points for purchases and certain actions and redeem them for benefits. For this purpose, we use the Shopify app "Smile.io" by Smile.io, 305 King Street West, Suite 200, Kitchener, Ontario N2G 1B9, Canada.
If you participate in the loyalty programme, in particular your name, e-mail address, customer number, date of birth (if provided), IP address, points balance, orders and redeemed rewards are processed. The legal basis is Art. 6 (1) (b) GDPR, as the processing is necessary for participation in the loyalty programme. Insofar as cookies that are not technically necessary are used to display the loyalty programme on our website, this only takes place with your consent pursuant to Art. 6 (1) (a) GDPR via our cookie consent tool.
Smile.io acts as our processor. For Canada, an adequacy decision of the EU Commission exists. Further information can be found here: https://help.smile.io/en/articles/4036238-smile-privacy
13.6. Display of estimated delivery dates (Delm)
To show you an estimated delivery date on the product pages, we use the Shopify app "Delm" by Delm, WolfgangstraĂźe 11, 73479 Ellwangen (Jagst), Germany. The app calculates the delivery date based on our product and shipping data and does not access your customer data. When the display is loaded, your IP address is transmitted to the provider's server for technical reasons. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in providing you with accurate information on delivery times before you order.
13.7. Back-in-stock notifications and pre-orders (STOQ)
If an item is temporarily unavailable, you can be notified as soon as it is available again, or pre-order it. For this purpose, we use the Shopify app "STOQ" by Artos Software, 1111B S Governors Ave STE 3617, Dover, DE 19904, USA. We process your e-mail address, your name if applicable and the requested item exclusively for the purpose of the notification or processing the pre-order. The legal basis for the notification is your consent pursuant to Art. 6 (1) (a) GDPR, which you can withdraw at any time with effect for the future, e.g. by e-mail to the address stated above; for pre-orders, the legal basis is Art. 6 (1) (b) GDPR. The data is deleted after the notification has been sent or after your withdrawal.
Artos Software acts as our processor. As the provider is based in the USA, data is transferred on the basis of the EU Commission's standard contractual clauses.
14. Rights of the data subject
14.1. Applicable data protection law grants you comprehensive rights vis-Ă -vis the controller with regard to the processing of your personal data (rights of information and intervention), about which we inform you below:
- Right of access pursuant to Art. 15 GDPR:
You can request confirmation from the controller as to whether personal data concerning you is being processed. In addition, you have a right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage and the existence of further rights such as rectification of data or the right to lodge a complaint with a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing, as well as your right to be informed about the safeguards pursuant to Art. 46 GDPR when your data is transferred to third countries;
- Right to rectification pursuant to Art. 16 GDPR:
You have the right to immediate rectification of inaccurate data concerning you and/or completion of incomplete data stored by us;
- Right to restriction of processing pursuant to Art. 18 GDPR:
You have the right to request the restriction of processing of your personal data while the accuracy of your data contested by you is being verified, if you reject the erasure of your data due to unlawful processing and instead request the restriction of processing, if you need your data to assert, exercise or defend legal claims after we no longer need this data once the purpose has been achieved, or if you have lodged an objection on grounds relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds prevail;
If the processing of personal data concerning you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the restriction of processing has been imposed, you will be informed by the controller before the restriction is lifted.
- Right to erasure pursuant to Art. 17 GDPR:
You have the right to request the immediate erasure of your personal data if the conditions of Art. 17 (1) GDPR are met. However, this right to erasure does not exist in particular (not exhaustively) if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
- Right to notification pursuant to Art. 19 GDPR:
If you have exercised your right to rectification, erasure or restriction of processing, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure or restriction of processing, unless this proves impossible or involves disproportionate effort. You also have the right to be informed about these recipients.
- Right to data portability pursuant to Art. 20 GDPR:
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller, insofar as this is technically feasible;
- Right to object pursuant to Art. 21 GDPR and right to withdraw consent pursuant to Art. 7 (3) GDPR:
You have the right to object at any time to the processing of personal data concerning you that is based on Art. 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions.
You also have the right to withdraw your consent under data protection law at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent before its withdrawal.
- Right to lodge a complaint pursuant to Art. 77 GDPR:
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
14.2. Right to object
You have the right to object to the processing of your data at any time with effect for the future if we process your data on the basis of our overriding legitimate interest following a balancing of interests.
If you exercise this right to object, we will stop processing your data unless there are demonstrably compelling legitimate grounds for continuing the processing or the further processing serves the establishment, exercise or defence of legal claims.
15. Duration of storage of personal data
The duration of storage of personal data depends on the respective statutory retention periods. After these periods have expired, we routinely delete the data if it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in continued storage.
16. Use of the withdrawal button
As soon as the withdrawal button is used, we process the personal data entered there: name, order data / contract data, communication data (withdrawal statement), time of withdrawal, and user account/IP data if applicable (for the online form). The processing serves to identify your contract and to document your withdrawal. We store the data for documentation purposes for a maximum of 10 years and delete it automatically, provided that no statutory retention obligations prevent deletion. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract) and Art. 6 (1) (c) GDPR (compliance with a legal obligation).
For the online withdrawal function and the processing of returns, we use the Shopify app "easyReturns" by 247APPS, In der Goldgrube 28, 56073 Koblenz, Germany. The data mentioned above is processed by the provider on our behalf. 247APPS acts as our processor pursuant to Art. 28 GDPR.