Privacy policy
PRIVACY POLICY
- INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE RESPONSIBLE PARTY
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is any data that can be used to personally identify you.
1.2 The responsible party for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is:
Derya Bulut, Elzer Straße 99, 31137 Hildesheim, Germany
The entity responsible for processing personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party). You can recognize a secure connection by the string "https://" and the lock symbol in your browser's address bar.
- DATA COLLECTION WHEN VISITING OUR WEBSITE
When you merely use our website for informational purposes, meaning you do not register or provide us with any other information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data that is technically necessary for us to display the website to you:
- The website visited
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you accessed the page
- Browser used
- Operating system used
- IP address used (possibly in anonymized form)
The processing takes place in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
- HOSTING & CONTENT DELIVERY NETWORK
Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify") for hosting and displaying the online shop based on processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned services of Shopify, data may also be transmitted in the context of further processing on behalf to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. In the case of data transmission to Shopify Inc. in Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission. Further information on Shopify's data protection can be found at the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than those mentioned above from Shopify will only take place within the framework specified below.
- COOKIES
To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device longer and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find out the storage duration from the overview of cookie settings in your web browser.
If individual cookies we use also process personal data, the processing takes place in accordance with Art. 6 (1) lit. b GDPR either for the performance of the contract, in accordance with Art. 6 (1) lit. a GDPR in the case of granted consent, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the optimal functionality of the website and a user-friendly and effective design of the page visit.
You can configure your browser to inform you about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for certain cases or generally.
Please note that if you do not accept cookies, the functionality of our website may be limited.
- CONTACTING US
In the context of contacting us (e.g., via contact form or email), personal data will be processed exclusively for the purpose of processing and responding to your inquiry and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in answering your inquiry in accordance with Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted when it is evident from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
- USE OF CUSTOMER DATA FOR DIRECT ADVERTISING
6.1 Subscription to our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you will only receive the newsletter after you have explicitly confirmed your consent to receive the newsletter by clicking on a verification link sent to the provided email address.
By activating the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6 (1) lit. a GDPR. In this process, we store the IP address registered by the Internet Service Provider (ISP) as well as the date and time of the registration to trace any possible misuse of your email address at a later date. The data collected during your registration for the newsletter will be used strictly for the intended purpose. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be deleted from our newsletter distribution list immediately unless you have expressly agreed to further use of your data or we reserve further data use that is legally permitted and about which we inform you in this declaration.
6.2 - Newsletter Dispatch via Klaviyo
The sending of our email newsletters is carried out by the technical service provider "Klaviyo," 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 (1) lit. f GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. Please note that your data is usually transferred to a server of Klaviyo in the USA and stored there.
Klaviyo uses this information to send newsletters on our behalf. Klaviyo does not use our newsletter recipients' data to contact them directly or to pass it on to third parties.
To protect your data in the USA, we have concluded a data processing agreement ("Data-Processing-Agreement") with Klaviyo, in which Klaviyo commits to protecting our users' data, processing it on our behalf in accordance with its data protection provisions, and in particular not passing it on to third parties.
You can view Klaviyo's data protection provisions here: https://www.klaviyo.com/privacy
- DATA PROCESSING FOR ORDER PROCESSING
7.1 As far as necessary for contract processing for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transportation company and the commissioned credit institution in accordance with Art. 6 (1) lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact details you provided when ordering (name, address, email address) to inform you personally about upcoming updates within the legally stipulated period in accordance with our statutory information obligations pursuant to Art. 6 (1) lit. c GDPR via suitable communication channels (e.g., by post or email). Your contact details will only be used for notifications about updates we owe and will be processed only to the extent necessary for the respective notification.
To process your order, we also work with the following service provider(s) who assist us entirely or partially in fulfilling contracts. Certain personal data will be transmitted to these service providers according to the following information.
7.2 To fulfill our contractual obligations to our customers, we collaborate with external shipping partners. We provide your name and delivery address and, if necessary for delivery, your telephone number exclusively for the purpose of delivering the goods in accordance with Art. 6 (1) lit. b GDPR to a shipping partner we have selected.
7.3 Use of Payment Service Providers
- Apple Pay
If you choose the payment method "Apple Pay" from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing occurs through the "Apple Pay" function of your device running iOS, watchOS, or macOS, by charging a payment card registered with "Apple Pay." Apple Pay uses security features integrated into your device's hardware and software to protect your transactions. To authorize a payment, you must enter a previously set code and verify it using the "Face ID" or "Touch ID" feature of your device.
For payment processing, the information you provide during the ordering process, along with the information about your order, will be transferred in encrypted form to Apple. Apple then re-encrypts this data with a developer-specific key before passing it to the payment service provider of the payment card registered with Apple Pay. The encryption ensures that only the website through which the purchase was made can access the payment data. Once the payment is made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm the payment success.
If personal data is processed in the described transmissions, the processing occurs solely for the purpose of payment processing in accordance with Art. 6 (1) lit. b GDPR.
Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was completed successfully. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made through Safari on your Mac, the Mac and the authorization device communicate via an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that could identify you. You can disable the option to use Apple Pay on your Mac in your iPhone settings by going to "Wallet & Apple Pay" and turning off "Allow payments on Mac."
For further information on data protection regarding Apple Pay, please visit: https://support.apple.com/de-de/HT203027
- Klarna
When you choose a Klarna payment service, payment processing occurs through Klarna Bank AB (publ), https://www.klarna.com/de/, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). To enable payment processing, your personal data (first and last name, street, house number, postal code, city, gender, email address, telephone number, and IP address, possibly additionally your date of birth and bank details) as well as data related to the order (e.g., invoice amount, items, delivery method) will be passed on to Klarna for identity and credit checks, provided you have expressly consented to this in accordance with Art. 6 (1) lit. a GDPR during the ordering process. You can view which credit agencies your data may be passed on to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, are included in the calculation of score values. Klarna uses the obtained information about the statistical probability of payment default for a balanced decision on the establishment, execution, or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the responsible party for data processing or to Klarna. However, Klarna may still have the right to process your personal data if this is necessary for contract-compliant payment processing.
Your personal data will be treated in accordance with applicable data protection laws and in accordance with Klarna's privacy policy for individuals based in Germany: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy or for individuals based in Austria: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.
- PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") in the context of payment processing. This transfer takes place in accordance with Art. 6 (1) lit. b GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) lit. f GDPR based on PayPal's legitimate interest in assessing your creditworthiness. The result of the credit check regarding the statistical likelihood of payment default is used by PayPal to decide on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, are included in the calculation of score values. For more data protection information, including information about the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still have the right to process your personal data if this is necessary for contract-compliant payment processing.
- PayPal Checkout
This website uses PayPal Checkout, an online payment system from PayPal that consists of PayPal's own payment methods and local payment methods from third parties.
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or - if offered - "pay later" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") in the context of payment processing. This transfer takes place in accordance with Art. 6 (1) lit. b GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or - if offered - "pay later" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) lit. f GDPR based on PayPal's legitimate interest in assessing your creditworthiness. The result of the credit check regarding the statistical likelihood of payment default is used by PayPal to decide on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, are included in the calculation of score values. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still have the right to process your personal data if this is necessary for contract-compliant payment processing.
When choosing the PayPal payment method "purchase on account," your payment data is initially transmitted to PayPal to prepare the payment, after which PayPal forwards it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") to process the payment. The legal basis is respectively Art. 6 (1) lit. b GDPR. In this case, RatePay conducts an identity and credit check in its own name to assess your creditworthiness according to the principles already mentioned above and passes your payment data on to credit agencies based on the legitimate interest in assessing your creditworthiness in accordance with Art. 6 (1) lit. f GDPR. A list of credit agencies that Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/.
When using the payment method of a local third party, your payment data is first passed on to PayPal in accordance with Art. 6 (1) lit. b GDPR for payment preparation. Depending on your selection of an available local payment method, PayPal then forwards your payment data to the corresponding provider for processing in accordance with Art. 6 (1) lit. b GDPR:
- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
- iDeal (Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
For further data protection information, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
- RETARGETING/REMARKETING/REFERRAL ADVERTISING
Google Ads Remarketing
If you choose the payment method "Apple Pay" from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing occurs through the "Apple Pay" function of your device running iOS, watchOS, or macOS, by charging a payment card registered with "Apple Pay." Apple Pay uses security features integrated into your device's hardware and software to protect your transactions. To authorize a payment, you must enter a previously set code and verify it using the "Face ID" or "Touch ID" feature of your device.
For payment processing, the information you provide during the ordering process, along with the information about your order, will be transferred in encrypted form to Apple. Apple then re-encrypts this data with a developer-specific key before passing it to the payment service provider of the payment card registered with Apple Pay. The encryption ensures that only the website through which the purchase was made can access the payment data. Once the payment is made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm the payment success.
If personal data is processed in the described transmissions, the processing occurs solely for the purpose of payment processing in accordance with Art. 6 (1) lit. b GDPR.
Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was completed successfully. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made through Safari on your Mac, the Mac and the authorization device communicate via an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that could identify you. You can disable the option to use Apple Pay on your Mac in your iPhone settings by going to "Wallet & Apple Pay" and turning off "Allow payments on Mac."
For further information on data protection regarding Apple Pay, please visit: https://support.apple.com/de-de/HT203027
- Klarna
When you choose a Klarna payment service, payment processing occurs through Klarna Bank AB (publ), https://www.klarna.com/de/, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). To enable payment processing, your personal data (first and last name, street, house number, postal code, city, gender, email address, telephone number, and IP address, possibly additionally your date of birth and bank details) as well as data related to the order (e.g., invoice amount, items, delivery method) will be passed on to Klarna for identity and credit checks, provided you have expressly consented to this in accordance with Art. 6 (1) lit. a GDPR during the ordering process. You can view which credit agencies your data may be passed on to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, are included in the calculation of score values. Klarna uses the obtained information about the statistical probability of payment default for a balanced decision on the establishment, execution, or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the responsible party for data processing or to Klarna. However, Klarna may still have the right to process your personal data if this is necessary for contract-compliant payment processing.
Your personal data will be treated in accordance with applicable data protection laws and in accordance with Klarna's privacy policy for individuals based in Germany: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy or for individuals based in Austria: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.
- PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") in the context of payment processing. This transfer takes place in accordance with Art. 6 (1) lit. b GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) lit. f GDPR based on PayPal's legitimate interest in assessing your creditworthiness. The result of the credit check regarding the statistical likelihood of payment default is used by PayPal to decide on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, are included in the calculation of score values. For more data protection information, including information about the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still have the right to process your personal data if this is necessary for contract-compliant payment processing.
- PayPal Checkout
This website uses PayPal Checkout, an online payment system from PayPal that consists of PayPal's own payment methods and local payment methods from third parties.
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or - if offered - "pay later" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") in the context of payment processing. This transfer takes place in accordance with Art. 6 (1) lit. b GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or - if offered - "pay later" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) lit. f GDPR based on PayPal's legitimate interest in assessing your creditworthiness. The result of the credit check regarding the statistical likelihood of payment default is used by PayPal to decide on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, are included in the calculation of score values. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still have the right to process your personal data if this is necessary for contract-compliant payment processing.
When choosing the PayPal payment method "purchase on account," your payment data is initially transmitted to PayPal to prepare the payment, after which PayPal forwards it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") to process the payment. The legal basis is respectively Art. 6 (1) lit. b GDPR. In this case, RatePay conducts an identity and credit check in its own name to assess your creditworthiness according to the principles already mentioned above and passes your payment data on to credit agencies based on the legitimate interest in assessing your creditworthiness in accordance with Art. 6 (1) lit. f GDPR. A list of credit agencies that Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/.
When using the payment method of a local third party, your payment data is first passed on to PayPal in accordance with Art. 6 (1) lit. b GDPR for payment preparation. Depending on your selection of an available local payment method, PayPal then forwards your payment data to the corresponding provider for processing in accordance with Art. 6 (1) lit. b GDPR:
- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
- iDeal (Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
For further data protection information, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
- RETARGETING/REMARKETING/REFERRAL ADVERTISING
Google Ads Remarketing
If you choose the payment method "Apple Pay" from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing occurs through the "Apple Pay" function of your device running iOS, watchOS, or macOS, by charging a payment card registered with "Apple Pay." Apple Pay uses security features integrated into your device's hardware and software to protect your transactions. To authorize a payment, you must enter a previously set code and verify it using the "Face ID" or "Touch ID" feature of your device.
For payment processing, the information you provide during the ordering process, along with the information about your order, will be transferred in encrypted form to Apple. Apple then re-encrypts this data with a developer-specific key before passing it to the payment service provider of the payment card registered with Apple Pay. The encryption ensures that only the website through which the purchase was made can access the payment data. Once the payment is made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm the payment success.
If personal data is processed in the described transmissions, the processing occurs solely for the purpose of payment processing in accordance with Art. 6 (1) lit. b GDPR.
Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was completed successfully. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made through Safari on your Mac, the Mac and the authorization device communicate via an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that could identify you. You can disable the option to use Apple Pay on your Mac in your iPhone settings by going to "Wallet & Apple Pay" and turning off "Allow payments on Mac."
For further information on data protection regarding Apple Pay, please visit: https://support.apple.com/de-de/HT203027
- Klarna
When you choose a Klarna payment service, payment processing occurs through Klarna Bank AB (publ), https://www.klarna.com/de/, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). To enable payment processing, your personal data (first and last name, street, house number, postal code, city, gender, email address, telephone number, and IP address, possibly additionally your date of birth and bank details) as well as data related to the order (e.g., invoice amount, items, delivery method) will be passed on to Klarna for identity and credit checks, provided you have expressly consented to this in accordance with Art. 6 (1) lit. a GDPR during the ordering process. You can view which credit agencies your data may be passed on to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, are included in the calculation of score values. Klarna uses the obtained information about the statistical probability of payment default for a balanced decision on the establishment, execution, or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the responsible party for data processing or to Klarna. However, Klarna may still have the right to process your personal data if this is necessary for contract-compliant payment processing.
Your personal data will be treated in accordance with applicable data protection laws and in accordance with Klarna's privacy policy for individuals based in Germany: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy or for individuals based in Austria: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.
- PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") in the context of payment processing. This transfer takes place in accordance with Art. 6 (1) lit. b GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) lit. f GDPR based on PayPal's legitimate interest in assessing your creditworthiness. The result of the credit check regarding the statistical likelihood of payment default is used by PayPal to decide on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, are included in the calculation of score values. For more data protection information, including information about the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still have the right to process your personal data if this is necessary for contract-compliant payment processing.
- PayPal Checkout
This website uses PayPal Checkout, an online payment system from PayPal that consists of PayPal's own payment methods and local payment methods from third parties.
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or - if offered - "pay later" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") in the context of payment processing. This transfer takes place in accordance with Art. 6 (1) lit. b GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or - if offered - "pay later" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) lit. f GDPR based on PayPal's legitimate interest in assessing your creditworthiness. The result of the credit check regarding the statistical likelihood of payment default is used by PayPal to decide on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, are included in the calculation of score values. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still have the right to process your personal data if this is necessary for contract-compliant payment processing.
When choosing the PayPal payment method "purchase on account," your payment data is initially transmitted to PayPal to prepare the payment, after which PayPal forwards it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") to process the payment. The legal basis is respectively Art. 6 (1) lit. b GDPR. In this case, RatePay conducts an identity and credit check in its own name to assess your creditworthiness according to the principles already mentioned above and passes your payment data on to credit agencies based on the legitimate interest in assessing your creditworthiness in accordance with Art. 6 (1) lit. f GDPR. A list of credit agencies that Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/.
When using the payment method of a local third party, your payment data is first passed on to PayPal in accordance with Art. 6 (1) lit. b GDPR for payment preparation. Depending on your selection of an available local payment method, PayPal then forwards your payment data to the corresponding provider for processing in accordance with Art. 6 (1) lit. b GDPR:
- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
- iDeal (Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
For further data protection information, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
- RETARGETING/REMARKETING/REFERRAL ADVERTISING
Google Ads Remarketing
Our website uses the features of Google Ads Remarketing, whereby we advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google places a cookie in your browser, which enables interest-based advertising automatically via a pseudonymous cookie ID based on the pages you have visited. Further data processing only takes place if you have consented to Google linking your internet and app browsing history with your Google account and using information from your Google account to personalize ads you view on the web. If you are logged into Google while visiting our website, Google uses your data in conjunction with Google Analytics data to create and define target audience lists for cross-device remarketing. In the context of using Google Ads Remarketing, there may also be a transmission of personal data to Google LLC's servers in the USA.
For details about the processing initiated by Google Ads Remarketing and how Google handles data from websites, please visit: https://policies.google.com/technologies/partner-sites
You can permanently object to the placement of cookies by Google Ads Remarketing by downloading and installing the browser plug-in available at the following link: https://support.google.com/ads/answer/7395996?
Further information and privacy policies regarding advertising and Google can be found here: https://www.google.com/policies/technologies/ads/
All the processes described above, especially the setting of cookies to read information on the used device, will only take place if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.
Pinterest Retargeting Pixel
This website integrates a pixel (Pinterest Tag) from Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”). Using the pixel, information about the surfing behavior of website visitors is collected, stored, and evaluated in pseudonymized form. This information can be associated with the individual user using other information that Pinterest has stored about the user, for example, due to owning an account on the social network “Pinterest.” Pinterest analyzes the surfing behavior using an algorithm and can then display targeted product recommendations as personalized advertisements on the user's Pinterest account. Pinterest may also combine the information collected via the pixel with other information obtained through other websites and/or in connection with the use of the social network “Pinterest,” thereby creating pseudonymized usage profiles. Under no circumstances can the collected information be used to personally identify visitors to this website.
All the processes described above, especially the setting of cookies to read information on the used device, will only take place if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.
Pinterest Tag Conversion Tracking
This website uses the conversion tracking technology “Pinterest Tag” from Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”).
If you reach our website via a pin on Pinterest, a cookie will be set on your device, which interacts with a "tag" implemented in the form of JavaScript code from Pinterest. Cookies are small text files that are stored on your device. These cookies expire after 180 days and do not serve for personal identification.
If the user is redirected from a pin on Pinterest to pages of this website and the cookie has not yet expired, the tag captures certain predefined user actions and can trace them (e.g., completed transactions, leads, search queries on the website, views of product pages). When such an action occurs, your browser sends an HTTP request via the Pinterest Tag from the cookie to the server of Pinterest, transmitting specific information about the action (including the type of action, time, browser type of the device).
This transmission enables Pinterest to create statistics about user behavior on our website after being redirected from a Pinterest pin, which helps us optimize our offerings.
However, we do not receive any information that would allow us to personally identify users.
All the processes described above, especially the setting of cookies to read information on the used device, will only take place if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with TikTok for the use of the TikTok Pixel, obliging TikTok to protect the data of our website visitors and not to pass it on to third parties. TikTok generally transmits the collected information outside the European Economic Area and relies on so-called standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.
- RIGHTS OF THE DATA SUBJECT
9.1 The applicable data protection law grants you the following rights regarding the processing of your personal data with respect to the responsible party (information and intervention rights), whereby the respective prerequisites for exercise refer to the mentioned legal basis:
- Right of access in accordance with Art. 15 GDPR;
- Right to rectification in accordance with Art. 16 GDPR;
- Right to erasure in accordance with Art. 17 GDPR;
- Right to restriction of processing in accordance with Art. 18 GDPR;
- Right to notification in accordance with Art. 19 GDPR;
- Right to data portability in accordance with Art. 20 GDPR;
- Right to withdraw consent granted in accordance with Art. 7 (3) GDPR;
- Right to lodge a complaint in accordance with Art. 77 GDPR.
9.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE PERSONAL DATA CONCERNED. FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING PURPOSES. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE PERSONAL DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
- DURATION OF STORAGE OF PERSONAL DATA
The duration of the storage of personal data is based on the respective legal basis, the purpose of processing, and, if applicable, additionally based on the respective statutory retention period (e.g., commercial and tax retention periods).
In the case of processing personal data based on explicit consent in accordance with Art. 6 (1) lit. a GDPR, this data will be stored until the data subject revokes their consent.
If statutory retention periods exist for data processed on the basis of contractual or contractual-like obligations under Art. 6 (1) lit. b GDPR, this data will be routinely deleted after the retention periods expire, provided that it is no longer necessary for contract fulfillment or contract initiation and/or we have no legitimate interest in further storage.
In the case of processing personal data based on Art. 6 (1) lit. f GDPR, this data will be stored until the data subject exercises their right to object under Art. 21 (1) GDPR unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defense of legal claims.
In the case of processing personal data for the purpose of direct advertising based on Art. 6 (1) lit. f GDPR, this data will be stored until the data subject exercises their right to object under Art. 21 (2) GDPR.
Unless otherwise specified in the other information in this declaration regarding specific processing situations, stored personal data will also be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.