Privacy

The person responsible within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Maxim + Jürgen Galsterer
Martin-Luther-Straße 14
D-71636 Ludwigsburg

Your rights as a data subject

You have the following rights towards us in relation to your personal data:

  • You can request confirmation from us as to whether we are processing personal data about you and, if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 DSGVO.
  • According to Art. 16 DSGVO, you have the right to immediately request the correction of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data
  • You have the right to demand that we delete your personal data immediately, provided that one of the reasons listed in Art. 17 DSGVO applies
  • You have the right to request the restriction of processing if one of the conditions listed in Art. 18 DSGVO is met
  • As far as the requirements of Art. 20 DSGVO are met, you have the right to request data transfer.
  • According to Art. 21 DSGVO, you have the right to object to processing, which is based on Art. 6 Para. 1 S. 1 lit. Processing is then based on Art. 6 Paragraph 1 Sentence 1 lit.
  • Insofar as we process your data on the basis of a consent that you have given us, you can revoke this consent at any time. The revocation does not affect the legality of the processing carried out on the basis of the consent up to the revocation, i.e. the revocation affects the permissibility of the processing of your personal data only after it has been explained to us.
  • You also have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of your personal data violates the DSGVO (Art. 77 DSGVO). You can assert this right with a supervisory authority in the member state of your place of residence, your place of work or the place of the alleged violation. You can find an overview of the supervisory authorities in Germany here: https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html

Collecting general information when visiting our website

Nature and purpose of processing

When you access our website, that is, if you do not register or otherwise provide information, it will automatically collect information from a general nature. This information (server log file) includes, for example, the type of web browser, the domain name of your Internet service provider, your IP address and the like.

They are processed in particular for the following purposes:

  • Ensure a hassle-free connection to the site,
  • Ensuring a smooth use of our website,
  • Evaluation of system security and stability as well as
  • for further administrative purposes.

We do not use your information to draw conclusions about you. Statistically evaluated by us to optimize our website and the underlying technology.

Legal Base

Processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO based on our legitimate interest in improving the stability and functionality of our website.

Recipient

Recipients of the data may be technical service providers who act as processors for the maintenance and maintenance of our website.

Storage Duration

The data will be deleted as soon as it is no longer necessary for the purpose of the survey. This is basically the case for the data used to serve the web page when that particular session is over.

Provision required or required

The provision of the aforementioned personal data is not legally nor contractually required. Without the IP address, however, the service and functionality of our website is not guaranteed. Additionally, individual services may not be available or limited. For this reason, a contradiction is excluded.

Cookies

Nature and purpose of processing

Like many other websites, we also use so-called "cookies". Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.

This will give us certain data, such as IP address, browser used and operating system.

Cookies can not be used to launch programs or to transfer viruses to a computer. Based on the information contained in cookies, we can facilitate navigation and enable the correct display of our websites.

In no event will the data we collect be shared with third parties or, without your consent, linked to your personal information.

Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time through the settings of your browser. Please use the help functions of your internet browser to find out how to change these settings. Please note that some features of our website may not work if you have disabled the use of cookies.

Storage duration and used cookies

If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

Cookie Name Time Description
wordpress_logged_in_ [session id] Session Detects if and with which session ID the user has logged in
wordpress_sec_ [session id] Session Detects if and with which session ID the user has logged in
cookie_notice_accepted 30 days Detects if the cookie notice has been accepted.
woocommerce_cart_hash Session Helps WooCommerce determine when its content / data changes.
woocommerce_items_in_cart Session Helps WooCommerce determine when its content / data changes.
wp_woocommerce_session _ 2 days Contains a unique code for each customer to know where the shopping cart data in the database is for each customer.
woocommerce_recently_viewed Session Enables the Recently Viewed Products widget.
store_notice [notice id] Session Allows customers to close the shop notice.
_ga 2 years Used to differentiate users.
_gid 24 hours Used to differentiate users.
_gat 1 minute Used to throttle the request rate. If Google Analytics is provided through Google Tag Manager, that cookie will be renamed to _dc_gtm_<property-id>.
AMP_TOKEN 30 seconds to 1 year Contains a token that can be used to get a client ID from the AMP Client ID service. Other possible values ​​are Opt-out, Inflight Request, or an error retrieving a client ID from the AMP Client ID service.
_gac_<property-id> 90 days Contains campaign-related information for the user. If you've linked your Google Analytics and Google Ads accounts, this cookie will be read by Google Ads website conversion tags unless you sign out. Learn more.
ga-disable-<property-id> Does not fall Detects if Google Analytics tracking was disabled via opt-out link

Insofar as these cookies may (also) concern personal data, we will inform you about this in the following sections.

You can use your browser settings to delete individual cookies or the entire cookie portfolio. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you will find the necessary information under the following links:

Revoke cookie consent

You can revoke your consent to the use of cookies by clicking on the button below and reset it to the original state. You then have the option to select a new cookie consent.

Revoke consent

Registration on our website

Nature and purpose of processing

When registering for the use of our personalized services, some personal information will be collected, such as name, address, contact and communication information (e.g., telephone number and e-mail address). If you are registered with us, you can access contents and services that we only offer to registered users. Registered users also have the option of changing or deleting the data specified during registration at any time. Of course, we also provide you with information about the personal data we hold about you at any time.

Legal basis

The processing of the data entered during registration takes place on the basis of the user's consent (Article 6 (1) (a) DSGVO).

If the registration serves the fulfillment of a contract of which the data subject is a party or the implementation of pre-contractual measures, an additional legal basis for the processing of the data is Art. 6 para. 1 lit. b DSGVO.

Recipient

The recipient of the data may be a technical service provider who acts as a processor for the operation and maintenance of our website.

Storage Duration

In this context, data will only be processed as long as the corresponding consent has been obtained. Thereafter, they will be deleted, as far as no legal storage requirements preclude. To contact us in this regard, please use the contact details given at the end of this Privacy Policy.

Provision required or required

Your personal information is provided voluntarily, solely on the basis of your consent. Without the provision of your personal data, we can not grant you access to our content and services.

Comments

Nature and purpose of processing

If users leave comments on our site, they will also save the time of their creation and the username previously chosen by the site visitor. This is for our security, as we may be prosecuted for any illegal content on our website, even if it was created by users.

Legal basis

The processing of the data entered as a comment takes place on the basis of a legitimate interest (Article 6 (1) (f) DSGVO).

By providing the comment function we want to allow you an easy interaction. Your details will be stored for the purpose of processing the request and for possible follow-up questions.

Recipient

Recipients of the data may be processors.

Storage Duration

The data will be deleted as soon as it is no longer necessary for the purpose of the survey. This is basically the case when the communication with the user has been completed and the company can see from the circumstances that the matter in question has been finally clarified.

Provision required or required

The provision of your personal data is voluntary. Without the provision of your personal data, we can not grant you access to our comment function.

Contact

Nature and purpose of processing

The data you enter will be stored for the purpose of individual communication with you. This requires a valid e-mail address and your name. This serves to assign the request and the subsequent answering of the same. The specification of additional data is optional.

Legal basis

The processing of the data entered into the contact form is based on a legitimate interest (Article 6 (1) (f) DSGVO).

By providing the contact form, we would like to make it easy for you to contact us. Your details will be stored for the purpose of processing the request and for possible follow-up questions.

If you contact us to request an offer, the processing of the data entered in the contact form for the implementation of pre-contractual measures (Article 6 (1) (b) DSGVO) will be carried out.

Recipient

Recipients of the data may be processors.

Storage Duration

Data will be deleted no later than 6 months after processing the request.

If there is a contractual relationship, we are subject to the statutory retention periods according to HGB and delete your data after these deadlines.

Provision required or required

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, your e-mail address and the reason for the request.

Inquiry by phone

Type and purpose of processing

As part of our website, it is possible to contact us by phone. In the course of this, personal data is transmitted to us and processed. These are in particular:

  • First name, last name
  • Telephone number
  • Customer number
  • Payment data
  • Contract data
  • Reason for your Call

Legal basis

Due to the express request of the user via telephone and / or the request for a telephone call back, the legal basis for the processing of the data is Art. 6 Para. 1 lit. f) DSGVO. If the establishment of contact by phone is also aimed at concluding and / or executing a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b) DSGVO.

Recipient

Recipients of the data may be processors.

Storage Duration

The data are stored for the duration of the purpose for which they were collected and deleted as soon as they are no longer required or are not subject to any further statutory retention requirements (e.g. 10 years according to AO, 6 years according to HGB).

Provision mandatory or required

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, email address and the reason for the request.

Handling of applicant data

As part of our website, we offer you the opportunity to apply to us (e.g. online contact form, by post or via email). In the following, we would like to inform you about the scope, use and general purpose of the data collected in the context of your application. The collection, processing and use of your data takes place both in accordance with the applicable data protection law and all other statutory provisions. Your data will be treated as strictly confidential.

Scope and purpose of the data collection

As far as it is necessary for a decision, we process your personal data as part of our application process. Such personal data are e.g. your application documents, your contact or communication data or also notes in the context of job interviews.

Legal basis

The legal basis for data collection is §26 BDSG (initiation of an employment relationship) in conjunction with either Art. 6 Para. 1 lit b) DSGVO (implementation of pre-contractual measures) or Art. 6 Para. 1 lit. a) DSGVO (consent to the processing of personal data Data). You can withdraw your consent at any time. All personal data that we aggregate will only be passed on to persons who are involved in processing your application. In the event of a successful application, we will save the data you have transmitted on the basis of Section 26 BDSG and Art. 6 Paragraph 1 lit.

Storage Duration

In the event that you reject a job offer, withdraw your application or we are unable to make you a job offer, we reserve the right to store the data you have provided for up to 6 months after the application process has ended. The legal basis for this is Article 6 (1) (f) DSGVO. The storage serves in particular for evidence purposes in the event of a legal dispute. All personal data / application documents are then digitally deleted and physically destroyed. If the storage of your data is still necessary after the 6 month period has expired (e.g. due to an impending legal dispute), we will only delete your data when the purpose for continuous storage no longer applies. In addition, extended storage can take place if statutory storage requirements exclude deletion or if you have given your consent in accordance with Art. 6 Para. 1 lit. a) DSGVO.

Admission to the applicant pool

In the event that we cannot make you a job offer, there is the possibility of including you in our applicant pool. For this purpose, all your documents, data and information from the application will be transferred to the applicant pool and you may be contacted by us about suitable vacancies.

You will be included in the previously mentioned pool of applicants exclusively on the basis of your previously given consent in accordance with Article 6 (1) (a) DSGVO. Such consent is voluntary and has no connection to the current application process. You can withdraw your consent at any time. If there are no statutory retention requirements, your data will be irrevocably deleted. Applicant pool data will be irrevocably deleted no later than two years after consent has been given.

Embedded YouTube videos

Nature and purpose of processing

We embed YouTube videos on some of our websites. The respective plug-ins are operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereafter "YouTube"). When you visit a page with the YouTube plug-in, it will connect to YouTube's servers. It tells YouTube which pages you visit. If you are logged in to your YouTube account, YouTube may personally associate your browsing behavior with you. This can be prevented by logging out of your YouTube account beforehand.

When a YouTube video is launched, the provider uses cookies that collect information about user behavior.

For more information on the purpose and scope of your data collection and its processing by YouTube, please refer to the provider's privacy policy, where you will also find more information about your rights and preferences for privacy (https://policies.google.com/privacy). Google processes your data in the US and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework

Legal basis

Legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Article 6 (1) a DSGVO).

Recipient

YouTube will automatically trigger a connection to Google.

Storage duration and revocation of consent

Anyone who has disabled the storage of cookies for the Google Ad program will not have to expect such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser.

For more information about "YouTube" privacy, please visit the provider's privacy policy at: https://www.google.com/intl/en/policies/privacy/

Third country transfer

Google processes your data in the USA. Your personal data will be passed on to the US servers of the respective companies. We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to disclose personal data to security authorities without you as the person concerned being able to take legal action against this. It cannot therefore be ruled out that US authorities (e.g. secret services) process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities.

Provision required or required

Your personal information is provided voluntarily, solely on the basis of your consent. Unless you prevent access, this may result in functional restrictions on the website.

Use of Google Analytics

Nature and purpose of processing

This website uses Google Analytics, a web analytics service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA (hereafter: "Google"). Google Analytics uses so-called "cookies", ie text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these websites, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.

The purposes of data processing are the evaluation of the use of the website and the compilation of reports on activities on the website. On the basis of the use of the website and the Internet, further connected services should be provided.

Legal basis

The processing of the data is based on the consent of the user (Article 6 (1) (a) DSGVO).

Recipient

Recipient of the data is Google as a processor. For this we have with Google completed the corresponding order processing contract.

Storage Duration

The data will be deleted as soon as they are no longer necessary for our recording purposes.

Third country transfer

Google processes your data in the USA. Your personal data will be passed on to the US servers of the respective companies. We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to disclose personal data to security authorities without you as the person concerned being able to take legal action against this. It cannot therefore be ruled out that US authorities (e.g. secret services) process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities.

Provision required or required

Your personal information is provided voluntarily, solely on the basis of your consent. Unless you prevent access, this may result in functional restrictions on the website.

Withdrawal of consent

You can prevent the storage of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to use all the functions of this website in full. You may also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading the browser plug-in available under the following link and install: Browser Add On to disable Google Analytics.

Additionally or as an alternative to the browser add-on, you can prevent Google Analytics tracking on our pages by setting click this link. An opt-out cookie will be installed on your device. This will prevent Google Analytics from collecting this website and browser in the future, as long as the cookie remains installed in your browser.

Profiling

With the help of the tracking tool Google Analytics the behavior of the visitors of the website can be evaluated and the interests analyzed. For this we create a pseudonymous user profile.

Use of Google Fonts

Type and purpose of processing

In the context of this website, the "Google Fonts" directory has been used to achieve a uniform presentation. The provider is Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, Ireland.

You can find more information about Google Fonts at: https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy

Legal basis

The legal basis for the integration of Google Fonts and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a DSGVO).

Recipient

The integration of Google Fonts takes place locally on this website so that a direct connection to the Google servers is prevented.

Storage period

We do not collect any personal data through the integration of Google Fonts.

Provision mandatory or required

The provision of personal data is neither legally nor contractually required. However, it may not be possible to display the content correctly using standard fonts.

Use of Google Maps

Nature and purpose of processing

On this website we use the offer of Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereafter "Google"). This allows us to show you interactive maps directly in the website and allow you to conveniently use the map feature.

For more information about Google's data processing, please see the Google Privacy Notice. There you can also change your personal privacy settings in the privacy center.

For detailed instructions on managing your own data related to Google products, click here.

Legal basis

Legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Article 6 (1) (a) DSGVO).

Recipient

By visiting this website, Google receives information that you have accessed the corresponding subpage of our website. This is done regardless of whether Google provides an account that you are logged in to, or if there is no user account. When you're logged in to Google, your data will be assigned directly to your account.

If you do not want to have your profile mapped to Google, you'll need to log out of Google before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and / or tailor-made website design. Such an evaluation is carried out in particular (even for non-logged in users) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the formation of these user profiles, and you must contact Google to exercise them.

Storage Duration

We do not collect personally identifiable information through the inclusion of Google Maps.

Third country transfer

Google processes your data in the USA. Your personal data will be passed on to the US servers of the respective companies. We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to disclose personal data to security authorities without you as the person concerned being able to take legal action against this. It cannot therefore be ruled out that US authorities (e.g. secret services) process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to check whether data is entered on this website (e.g. in a contact form) by a person or by an automated program. For this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, length of stay of the website visitor on the website or mouse movements made by the user). The data collected during the analysis are forwarded to Google.

The reCAPTCHA analyzes run completely in the background. Website visitors are not informed that an analysis is taking place.

The data are stored and analyzed on the basis of Art. 6 Para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting his web offers from abusive automated spying and from SPAM. If a corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO; the consent can be revoked at any time.

Vimeo

We use "Vimeo" on our website to display videos. This is a service of Vimeo, LL C, 555 West 18th Street, New York, New York 10011, USA, hereinafter referred to as "Vimeo".

In some cases, user data is processed on Vimeo servers in the USA. By being certified under the EU-US Privacy Shield ("EU-US Privacy Shield") However, Vimeo guarantees that the data protection regulations of the EU are also observed when processing data in the USA.

The legal basis is Article 6 (1) (f) GDPR. Our legitimate interest lies in improving the quality of our website.

If you visit a page of our website in which a video is embedded, a connection to the Vimeo servers in the USA will be established to display the video. For technical reasons, it is necessary for Vimeo to process your IP address. In addition, the date and time of the visit to our website are also recorded.

If you are logged in to Vimeo at the same time as you visit one of our websites in which a Vimeo video is embedded, Vimeo may assign the information collected in this way to your personal user account there. If you want to prevent this, you must either log out of Vimeo before visiting our website or configure your Vimeo user account accordingly.

For the purpose of functionality and usage analysis, Vimeo uses the web analysis service Google Analytics. Google Analytics stores cookies on your device via your internet browser and sends information about the use of our website, in which a Vimeo video is embedded, to Google. It cannot be ruled out that Google will process this information in the USA.

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your Internet browser. You can find details on this under “Cookies” above.

The legal basis is Article 6 (1) (f) GDPR. Our legitimate interest lies in improving the quality of our website and in Vimeo's legitimate interest in statistically analyzing user behavior for optimization and marketing purposes.

Vimeo provides more information at https://vimeo.com/privacy.

Online Marketing and Affiliate Programs

Affiliate links/advertising links

The links marked with an asterisk are so-called affiliate links. If you click on an affiliate link and complete a purchase on the linked platform within a certain period of time, we receive a commission from the online shop or provider concerned. The purchase price remains unchanged.

Amazon Affiliate Program

The site operators participate in the Amazon EU partner program. Amazon advertisements and links to the Amazon.de website are integrated on our pages, from which we can earn money through reimbursement of advertising costs. The plugin AAWP (aawp.de) is used and therefore neither cookies from Amazon are set on this website nor is your IP address transmitted to Amazon.

By clicking on Amazon affiliate links/advertising links, you will be taken to Amazon, where Amazon's terms and conditions and data processing guidelines apply. Amazon uses cookies or comparable recognition technologies (e.g. device fingerprinting) in its own shop in order to be able to trace the origin of the orders. This allows Amazon to recognize that you have clicked the partner link on this website.

For more information on how Amazon uses data, see the Amazon Privacy Policy.

Other affiliate programs / advertisers

Other partner programs and advertising customers are used, but they do not set any cookies here on the website and there is also no IP transmission to these providers. If you click on affiliate links/advertising links, you will be taken to the respective providers, where the terms and conditions and data processing guidelines of the respective providers apply.

Transfer of data to third parties to fulfill the contract

Passing on to shipping service providers in general and banks

For payment transactions and, if necessary, for the delivery of goods, we pass on the necessary minimum amount of personal data to service providers (third parties), insofar as this is necessary for the execution of the contract.

If we pass on your data to a shipping service provider (such as DHL, DPD, UPS Hermes or GLS), the legal basis for this is Article 6 Paragraph 1 Letter b of the General Data Protection Regulation (GDPR), which gives us the Processing of the data is made possible if this is necessary for the performance of a contract with you or for the implementation of a pre-contractual measure.

If we pass on your payment data to the commissioned bank, the legal basis for this is Article 6 Paragraph 1 Letter b of the General Data Protection Regulation (GDPR), which enables us to process the data if this is necessary for the fulfillment of a contract with you or to carry out a pre-contractual measure.

Passing on email address and/or telephone number to shipping service providers

On our website you have the choice to agree to the transfer of your email address and/or telephone number in order to enable the selected shipping service provider to announce the delivery or to coordinate it with you. Below we will inform you about which data is passed on to which shipping service provider and on what legal basis this is done:

DHL

If your goods are delivered by the shipping service provider DHL and you have expressly consented to your email address being passed on during the ordering process, this will be sent to DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn) for notification of delivery or coordination of the delivery date. The legal basis for data processing is Article 6 Paragraph 1 Letter a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have consented to the processing. If you do not agree to the forwarding of the email address, it is not possible for DHL to announce the delivery or coordinate the delivery date.

Given consent to the use of data can be revoked at any time for the future. To do this, please contact the person responsible for data processing (this is named at the beginning of this data protection declaration) or the shipping service provider directly.

Customers who want DHL to deliver outside of Germany must provide an email address.

DPD

If your goods are delivered by the shipping service provider DPD and you have expressly consented to your email address and/or telephone number being passed on during the ordering process, this will be sent to DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg) to announce the delivery or coordination of the delivery date. The legal basis for data processing is Article 6 Paragraph 1 Letter a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have consented to the processing. If you do not agree to the forwarding of the email address, it is not possible for DPD to announce the delivery or coordinate the delivery date.

Given consent to the use of data can be revoked at any time for the future. To do this, please contact the person responsible for data processing (this is named at the beginning of this data protection declaration) or the shipping service provider directly.

GLS

If your goods are delivered by the shipping service provider GLS and you have expressly consented to the transfer of your email address during the ordering process, it will be sent to GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Strasse 1 - 7, 36286 Neuenstein) to announce the delivery or to coordinate the delivery date. The legal basis for data processing is Article 6 Paragraph 1 Letter a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have consented to the processing. If you do not agree to the forwarding of the email address, it is not possible for GLS to announce the delivery or coordinate the delivery date.

Given consent to the use of data can be revoked at any time for the future. To do this, please contact the person responsible for data processing (this is named at the beginning of this data protection declaration) or the shipping service provider directly.

Hermes shipping

If your goods are delivered by the shipping service provider Hermes and you have expressly consented to your email address being passed on during the ordering process, this will be sent to Hermes (Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg) to announce the delivery or Coordination of the delivery date forwarded. The legal basis for data processing is Article 6 Paragraph 1 Letter a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have consented to the processing. If you do not agree to the forwarding of the email address, it is not possible for Hermes to announce the delivery or coordinate the delivery date.

Given consent to the use of data can be revoked at any time for the future. To do this, please contact the person responsible for data processing (this is named at the beginning of this data protection declaration) or the shipping service provider directly.

UPS

If your goods are delivered by the shipping service provider UPS and you have expressly consented to the transfer of your email address during the ordering process, it will be sent to UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss) passed on to announce the delivery or to coordinate the delivery date. The legal basis for data processing is Article 6 Paragraph 1 Letter a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have consented to the processing. If you do not agree to the forwarding of the email address, it is not possible for UPS to announce the delivery or coordinate the delivery date.

Given consent to the use of data can be revoked at any time for the future. To do this, please contact the person responsible for data processing (this is named at the beginning of this data protection declaration) or the shipping service provider directly.

Payment service providers

You can choose from various payment service providers on our website. In the following we will inform you about which data is passed on and the legal basis for this:

PayPal/PayPal Plus

If you choose this payment service provider, the data required for payment will be passed on to PayPal (PayPal Europe, S.à.rl. et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg). The legal basis for this is Article 6(1)(a) of the General Data Protection Regulation (GDPR), which enables us to process the data if you have consented to the processing and Article 6(1)(b) of the General Data Protection Regulation (DSGVO), which enables us to process the data if this is necessary to fulfill a contract with you or to carry out a pre-contractual measure. You have the right to revoke your declaration of consent at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.

If you choose the PayPal Plus payment methods by "credit card", "invoice", "direct debit" or "PayPal installment payment", PayPal reserves the right to obtain credit information about you. A credit report can contain scoring values ​​(=probability values). The so-called scoring values ​​are based on a scientifically recognized mathematical-statistical process. Your address data is also (but not exclusively) included in the calculation of the score values.

The legal basis for data processing is Article 6 (1) (f) of the General Data Protection Regulation (GDPR), which enables data to be processed in the event of a legitimate interest. In this case, the legitimate interest is to determine your identity or solvency.

You can object to the processing of your personal data at any time. However, PayPal may still be entitled to process, use and transmit the personal data if this is necessary for contractual payment processing by PayPal, is required by law or is required by a court or an authority.

If you want to object to the use of your data or want to notify us of changes to the stored data, you can contact PayPal directly. You can also find more information about PayPal's data protection regulations at the following Internet address: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

GiroPay

On our website we offer payment via "GiroPay". The provider of this payment service is giropay GmbH, An der Welle 4, 60322 Frankfurt / Main, Germany (hereinafter “GiroPay”).

If you make the payment using GiroPay, giropay collects various transaction data and forwards it to the bank with which you are registered with GiroPay. In addition to the data required for payment, GiroPay may collect additional data as part of the transaction processing, such as delivery address or individual items in the shopping cart.

GiroPay then authenticates the transaction using the authentication procedure stored at the bank for this purpose. The payment amount will then be transferred from your account to our account. Neither we nor third parties have access to your account details.

Details on payment with GiroPay can be found in the terms and conditions and data protection provisions of giropay at: https://www.giropay.de/rechtliches/datenschutzerklaerung

Sofortüberweisung

On this website it is possible to process payments using the "Sofortüberweisung" service. The provider is Sofort GmbH, based at Theresienhöhe 12, 80339 Munich.

If you have opted for the "Sofortüberweisung" payment service when processing the payment, Sofort GmbH will send us a real-time confirmation of payment and we will then be able to begin fulfilling our obligations without delay.

When making use of an "immediate transfer", you must transmit the PIN and a valid TAN to Sofort GmbH so that Sofort GmbH can check your account balance after successfully logging in and then carry out the transfer using the transmitted TAN. Furthermore, Sofort GmbH automatically checks your sales, the amount of the overdraft facility and the existence of other accounts and their stocks. Finally, we receive a transaction confirmation from Sofort GmbH.

In addition to PIN and TAN, personal data is also transferred to us to validate your identity and to prevent attempted fraud. This includes your first and last name, address, telephone number, email address or IP address.

Further details can be found in the data protection declaration of Sofort GmbH, which can be accessed under the following link: https://www.sofort.de/datenschutz.html

Data is transmitted to Klarna on the basis of Art. 6 Paragraph 1 lit. a) DSGVO and Art. 6 Paragraph 1 lit. b) DSGVO.

You have the option to withdraw your consent to data processing at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

SSL encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http: //" to "https: //" and by the lock symbol in your browser line.

If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

Change to our privacy policy

We reserve the right to amend this privacy policy to always comply with the current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. Your new visit will be subject to the new privacy policy.

Last update: October 1st 2022