Privacy Policy

PRIVACY POLICY

1. INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

1.1 We are delighted that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data are all data that can be used to personally identify you.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Shop Name. The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses an SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser address bar.

2. DATA COLLECTION WHEN VISITING OUR WEBSITE

When you use our website for informational purposes only, without registering or providing us with other information, we only collect data that your browser sends to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website:

• Our visited website
• Date and time at the time of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Used browser
• Operating system used
• IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6(1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. Data will not be passed on or used otherwise. However, we reserve the right to check the server log files retrospectively if concrete evidence points to unlawful use.

3. COOKIES

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e., after closing your browser (session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified duration, which may vary depending on the cookie.

In part, cookies are used to simplify the ordering process by storing settings (e.g., remembering the content of a virtual shopping cart for a later visit to the website). If personal data are also processed by individual cookies implemented by us, processing is carried out in accordance with Art. 6(1) lit. b GDPR either for the execution of the contract or in accordance with Art. 6(1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

We may work with advertising partners who help us make our internet offering more interesting for you. For this purpose, cookies from partner companies may also be stored on your hard drive during your visit to our website (third-party cookies). If we cooperate with the aforementioned advertising partners, you will be informed individually and separately in the following paragraphs about the use of such cookies and the extent of the respective information collected.

Please note that you can set your browser in a way that you are informed about the setting of cookies and can individually decide on their acceptance or exclude the acceptance of cookies for specific cases or generally. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

• Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
• Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
• Chrome: https://support.google.com/chrome/answer/95647?hl=en
• Safari: https://support.apple.com/kb/PH21411?locale=en_US
• Opera: https://help.opera.com/en/latest/security-and-privacy/

Please note that if you do not accept cookies, the functionality of our website may be restricted.

4. CONTACT

In the context of contacting us (e.g., via contact form or email), personal data is collected. The data collected when using a contact form is apparent from the respective contact form. This data is stored and used solely for the purpose of responding to your request or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6(1) lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6(1) lit. b GDPR. Your data will be deleted after the final processing of your inquiry; this is the case if it can be inferred from the circumstances that the matter in question has been finally clarified and provided that there are no legal retention obligations to the contrary.

5. DATA PROCESSING FOR ORDER PROCESSING AND ACCOUNT OPENING

Pursuant to Art. 6(1) lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. The data collected is apparent from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the controller's address mentioned above. We store and use the data provided by you for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved on our part, about which we will inform you accordingly below.

6. USE OF YOUR DATA FOR DIRECT ADVERTISING

6.1 Signing up for our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The mandatory information required for sending the newsletter is your email address alone. The provision of additional possible data is voluntary and is used to be able to address you personally. For sending the newsletter, we use the double-opt-in procedure. This means that we will only send you an email newsletter if you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation email in which you will be asked to confirm by clicking on an appropriate link that you wish to receive newsletters in the future.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6(1) lit. a GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later time. The data collected by us when registering for the newsletter will be used exclusively for promotional purposes via the newsletter. You can unsubscribe from the newsletter at any time using the provided link in the newsletter or by sending a message to the controller mentioned above. After your cancellation, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

6.2 Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, such as those already purchased, from our range by email. For this purpose, we do not have to obtain separate consent from you. The data processing takes place solely based on our legitimate interest in personalized direct advertising pursuant to Art. 6(1) lit. f GDPR. If you have initially objected to the use of your email address for this purpose, we will not send you an email. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller mentioned at the beginning. For this, you only have to pay transmission costs according to the basic tariffs. After receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.

7. DATA PROCESSING FOR ORDER PROCESSING

7.1 The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. Your payment data will be passed on to the commissioned credit institution as part of the payment processing, if this is necessary for the payment processing. If payment service providers are used, we explicitly inform you about this below. The legal basis for passing on the data is Art. 6(1) lit. b GDPR.

7.2 Use of payment service providers (payment service providers)

• Paypal If you choose the payment method "PayPal," the payment will be processed by the payment service provider PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal"), to whom we pass on your payment data as part of the payment processing. The disclosure is made in accordance with Art. 6(1) lit. b GDPR and only to the extent necessary for the payment processing.

  PayPal reserves the right to carry out a credit check for payment methods such as credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit reporting agencies in accordance with Art. 6(1) lit. f GDPR on the basis of PayPal's legitimate interest in determining your ability to pay. The result of the credit check with respect to the statistical probability of non-payment is used by PayPal for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of score values includes, but is not limited to, address data. For more information on data protection law, including the credit bureaus used, please refer to PayPal's privacy policy: https://www.paypal.com/us/webapps/mpp/ua/privacy-full

  You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

• SOFORT If the payment method "SOFORT" is selected, the payment will be processed by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter referred to as "SOFORT"), to whom we pass on your information provided during the ordering process along with the information about your order in accordance with Art. 6(1) lit. b GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The transfer of your data is exclusively for the purpose of payment processing with the payment service provider SOFORT and only insofar as it is necessary for this purpose. For further information on SOFORT's data protection provisions, please visit the following website: https://www.klarna.com/sofort/datenschutz

8. CONTACT FOR REVIEW REMINDER

Own review reminder (no dispatch by a customer review system)

We use your email address for a one-time reminder to submit a review of your order for the review system we use, provided you have given us your express consent in accordance with Art. 6(1) lit. a GDPR. You can revoke your consent at any time by sending a message to the controller responsible for data processing.

9. USE OF SOCIAL MEDIA: SOCIAL PLUGINS

9.1 Facebook Plugins with Shariff Solution

Special additional customs clearance costs and/or import duties are not included in the price and are the responsibility of the customer.

Our website uses so-called social plugins ("plugins") from the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook").

To increase the protection of your data when visiting our website, these buttons are not fully integrated as plugins but only using an HTML link on the page. This type of integration ensures that when you access a page on our website that contains such buttons, no connection is made to Facebook's servers. If you click on the button, a new browser window opens and calls up the Facebook page, where you can interact with the plugins there (possibly after entering your login data).

Facebook Inc. in the USA is certified for the US-European data protection agreement "Privacy Shield," which ensures compliance with the data protection level applicable in the EU.

For the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights and settings options to protect your privacy, please refer to Facebook's data protection information: https://www.facebook.com/policy.php

9.2 Google+ Plugins as Shariff Solution

Our website uses so-called social plugins ("plugins") from the social network Google+, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

To increase the protection of your data when visiting our website, these buttons are not fully integrated as plugins but only using an HTML link on the page. This type of integration ensures that when you access a page on our website that contains such buttons, no connection is made to Google+'s servers. If you click on the button, a new browser window opens and calls up the Google+ page, where you can interact with the plugins there (possibly after entering your login data).

Google LLC in the USA is certified for the US-European data protection agreement "Privacy Shield," which ensures compliance with the data protection level applicable in the EU.

For the purpose and scope of data collection and the further processing and use of data by Google, as well as your rights and settings options to protect your privacy, please refer to Google's data protection information: https://www.google.com/intl/de/policies/privacy/

9.3 Instagram Plugin as Shariff Solution

Our website uses so-called social plugins ("plugins") from the online service Instagram, which is operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram").

To increase the protection of your data when visiting our website, these buttons are not fully integrated as plugins but only using an HTML link on the page. This type of integration ensures that when you access a page on our website that contains such buttons, no connection is made to Instagram's servers. If you click on the button, a new browser window opens and calls up the Instagram page, where you can interact with the plugins there (possibly after entering your login data).

Instagram LLC in the USA is certified for the US-European data protection agreement "Privacy Shield," which ensures compliance with the data protection level applicable in the EU.

For the purpose and scope of data collection and the further processing and use of data by Instagram, as well as your rights and settings options to protect your privacy, please refer to Instagram's data protection information: https://help.instagram.com/155833707900388/

10) ONLINE MARKETING
10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, operated by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick").

DoubleClick uses cookies to display relevant ads for users, improve campaign performance reports, or prevent a user from seeing the same ads repeatedly. Google captures which ads are displayed in which browser through a cookie ID, preventing multiple displays. Processing is based on our legitimate interest in the optimal marketing of our website according to Art. 6(1)(f) GDPR.

Furthermore, DoubleClick can track conversions with the help of cookie IDs related to ad requests. For instance, if a user sees a DoubleClick ad and later visits the advertiser's website with the same browser to make a purchase, DoubleClick records this as a conversion. According to Google, DoubleClick cookies do not contain personally identifiable information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server. We have no control over the extent and further use of the data collected by Google through the use of this tool and inform you to the best of our knowledge: By integrating DoubleClick, Google receives information that you have accessed the corresponding part of our website or clicked on an ad. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.

If you wish to opt-out of this tracking procedure, you can disable cookies for conversion tracking by adjusting your browser settings to block cookies from the domain www.googleadservices.com, https://www.google.de/settings/ads. This setting will be deleted when you clear your cookies. Alternatively, you can inform yourself and make settings regarding the setting of cookies at the Digital Advertising Alliance website www.aboutads.info. Finally, you can set your browser to notify you about the setting of cookies and individually decide on their acceptance or block the acceptance of cookies for certain cases or in general. The functionality of our website may be restricted if cookies are not accepted.

Google LLC, based in the USA, is certified under the US-European Privacy Shield agreement, ensuring compliance with the level of data protection in the EU.

For more information about the privacy policies of DoubleClick by Google, visit: https://www.google.de/policies/privacy/

10.2 Use of Google AdWords Conversion Tracking

This website uses the online advertising program "Google AdWords" and, as part of Google AdWords, Google LLC.'s conversion tracking, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use Google AdWords to draw attention to our attractive offers with the help of advertising materials (so-called Google AdWords) on external websites. We can determine how successful individual advertising measures are in relation to the data of the advertising campaigns. In doing so, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you, and achieving a fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on an ad served by Google. Cookies are small text files that are stored on your computer. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot, therefore, be tracked through the websites of AdWords customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you do not want to participate in tracking, you can block this usage by disabling the Google conversion tracking cookie in your internet browser settings. You will then not be included in the conversion tracking statistics. We use Google AdWords based on our legitimate interest in targeted advertising according to Art. 6(1)(f) GDPR.

Google LLC, based in the USA, is certified under the US-European Privacy Shield agreement, ensuring compliance with the level of data protection in the EU.

For more information about Google's privacy policies, visit: https://www.google.de/policies/privacy/

You can permanently disable cookies for ad preferences by preventing them from being stored on your computer by adjusting your browser software accordingly or by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be or only partially usable if you have deactivated the use of cookies.

11) WEB ANALYSIS SERVICES Google (Universal) Analytics

• Google Universal Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the truncated IP address) is generally transmitted to a Google server in the USA and stored there. This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures an anonymization of the IP address by shortening it and excludes direct personal reference. By extending, your IP address will be shortened beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.

On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

You can prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent future collection by Google Analytics within this website (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you will need to click this link again): Disable Google Analytics

This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".

More information on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

12) RETARGETING/ REMARKETING/ RECOMMENDATION ADVERTISING

12.1 Facebook Custom Audience via Pixel Method

This website uses the "Facebook Pixel" of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). With explicit consent, user behavior can be tracked after they have seen or clicked on a Facebook ad. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimize future advertising campaigns.

The collected data is anonymous to us and does not allow conclusions about the identity of users. However, Facebook stores and processes the data, enabling a connection to the respective user profile and the use of the data for its advertising purposes, in accordance with Facebook's Data Usage Policy (https://www.facebook.com/about/privacy/).

You can enable Facebook and its partners to display ads on and off Facebook. For these purposes, a cookie may be stored on your computer. These processing operations only take place with explicit consent according to Art. 6(1)(a) GDPR.

Consent for the use of the Facebook Pixel may only be given by users who are older than 13 years. If you are younger, we ask you to seek permission from your legal guardians.

Facebook Inc., based in the USA, is certified under the US-European Privacy Shield agreement, ensuring compliance with the level of data protection in the EU.

To disable the use of cookies on your computer, you can adjust your internet browser settings to prevent cookies from being stored on your computer in the future or to delete already stored cookies. However, disabling all cookies may result in some features on our website not being able to be executed. You can also disable the use of cookies by third-party providers such as Facebook on the following website of the Digital Advertising Alliance: https://www.aboutads.info/choices/

12.2 Google AdWords Remarketing

Our website uses the features of Google AdWords Remarketing, allowing us to advertise for this website in Google search results and on third-party websites. The provider is Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For this purpose, Google sets a cookie in the browser of your device, enabling interest-based advertising based on a pseudonymous cookie ID and the pages you have visited.

Processing is based on our legitimate interest in the optimal marketing of our website according to Art. 6(1)(f) GDPR. Further data processing only takes place if you have consented to Google linking your Internet and app browser history to your Google account and using information from your Google account to personalize ads you view on the web. If you are logged into Google during your visit to our website, Google uses your data along with Google Analytics data to create and define target audience lists for cross-device remarketing.

You can permanently disable the setting of cookies for ad preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/

Alternatively, you can inform yourself about setting cookies and make adjustments on the Digital Advertising Alliance website at www.aboutads.info. Finally, you can set your browser to notify you about the setting of cookies and individually decide on their acceptance or block the acceptance of cookies for specific cases or in general. The functionality of our website may be restricted if cookies are not accepted.

Google LLC, based in the USA, is certified under the US-European Privacy Shield agreement, ensuring compliance with the level of data protection in the EU.

For more information and the privacy policy regarding advertising and Google, you can view it here: https://www.google.com/policies/technologies/ads/

13) RIGHTS OF THE DATA SUBJECT

13.1 The applicable data protection law grants you comprehensive rights regarding the processing of your personal data by the controller, about which we inform you below:

• Right to Information according to Art. 15 GDPR: You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed, information about the processing purposes, the categories of personal data being processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the envisaged storage period, the existence of the right to rectification, erasure, restriction of processing, objection to processing, a complaint to a supervisory authority, the source of your data if not collected by us, the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing, and your right to be informed of the safeguards pursuant to Art. 46 GDPR if your data is transferred to third countries;

• Right to Rectification according to Art. 16 GDPR: You have the right to obtain the rectification of inaccurate data and the completion of incomplete personal data stored by us without undue delay;

• Right to Erasure according to Art. 17 GDPR: You have the right to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;

• Right to Restriction of Processing according to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data if you contest the accuracy of the data, if the processing is unlawful, if we no longer need the data, but you need it for the establishment, exercise or defense of legal claims, or if you have objected to processing pursuant to Art. 21 GDPR;

• Right to Information according to Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients;

• Right to Data Portability according to Art. 20 GDPR: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to request the transmission to another controller, insofar as this is technically feasible;

• Right to Withdraw Consent according to Art. 7(3) GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;

• Right to Lodge a Complaint according to Art. 77 GDPR: If you believe that the processing of personal data concerning you is in violation of the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

13.2 RIGHT TO OBJECT

If we process your personal data within the scope of a legitimate interest, you have the right to object to this processing at any time for reasons arising from your particular situation.

If you exercise your right to object, we will cease processing the data concerned. Further processing is reserved if we can demonstrate compelling legitimate grounds for processing that outweigh your interests, fundamental rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. You can exercise the objection as described above.

If you make use of your right to object, we will cease processing the data concerned for direct marketing purposes.

14) DURATION OF STORAGE OF PERSONAL DATA

The duration of the storage of personal data is determined by the respective statutory retention period (e.g., commercial and tax retention periods). After the expiry of this period, the relevant data will be routinely deleted unless it is still necessary for the initiation or fulfillment of a contract and/or there is still a legitimate interest on our part in continued storage.