Privacy Policy

As the controller within the meaning of data protection provisions, we hereby inform you about the processing of your personal data by us.

I. The definition of personal data and other important terms

In simple terms, personal data is all information relating to you personally as a data subject. Definitions of what "personal data" means and what other terms important for the following data protection information mean can be found in Art. 4 of the GDPR (General Data Protection Regulation).

II. Name and contact details of the controller; contact details of the data protection officer

In simple terms, the controller is the person who, alone or jointly with others, decides on the purposes and means of processing personal data. The name and contact details of the controller (and, if a data protection officer has been appointed, the contact details of the data protection officer) can be found in our provider identification / imprint.

III. Purposes of processing your personal data; legal bases for processing

We process your personal data within the scope of our activities for the purposes listed below, based on the respective legal bases mentioned.

1. For the protection of our legitimate interest in maintaining the proper operation of our website, in providing user-friendly functions, and in analyzing the use of our website, your personal data is processed on the basis of Article 6 (1) (f) GDPR.

2. For the implementation of pre-contractual measures taken at your request, your personal data is processed on the basis of Article 6 (1) (b) GDPR.

3. For the protection of our legitimate interest in responding to inquiries and in carrying out other measures taken at your request, your personal data is processed on the basis of Article 6 (1) (f) GDPR.

4. For the fulfillment of a contract to which you are a party, your personal data is processed on the basis of Article 6 (1) (b) GDPR.

5. For the implementation of measures for advertising purposes, your personal data is processed either on the basis of your consent according to Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (f) GDPR.

6. For the fulfillment of legal obligations to which we are subject, your personal data is processed on the basis of Article 6 (1) (c) GDPR.

7. For the protection of our legitimate interest in enforcing our rights and defending against claims made against us, your personal data is processed on the basis of Article 6 (1) (f) GDPR.
 

Our systems are secured according to the state of the art through technical and organizational measures to protect your personal data from access, alteration or dissemination by unauthorized persons, as well as from loss and destruction.

Information on the processing of your personal data for the individual processing purposes can be found in the corresponding further information within this privacy policy.

IV. Transfer of your personal data to third parties; categories of recipients of your personal data
 

To the extent necessary to achieve the purposes of processing your personal data, we transfer your personal data to third parties within the framework of legal provisions. Detailed information on the transfer of your personal data to third parties for the individual processing purposes can be found in the corresponding further information within this privacy policy. In cases where your personal data is transferred to third parties, the scope of the transferred data is limited to the necessary minimum.

V. Scope of processing your personal data for the individual processing purposes
 

Below, we inform you in detail about the processing of your personal data for the various processing purposes.

Your personal data will be deleted when it is no longer required for processing for the respective processing purpose, unless we are permitted to continue processing the data for another processing purpose within the framework of legal provisions and in accordance with the information in this privacy policy.

1. Use of our website for informational purposes

If you visit our website without submitting information to us, we only process the personal data transmitted by your browser to our server. This includes the following data, which is technically necessary to display our website to you and to ensure stability and security:

• the page you accessed
• date and time of the request
• amount of data transferred
• source or reference from which you accessed the page
• the browser you used
• the operating system you used
• your IP address

 
The processing of your personal data takes place on the basis of Article 6 (1) (f) GDPR to protect our legitimate interest in maintaining the proper operation of our website, in providing user-friendly functions, and in analyzing the use of our website.

Your personal data will be deleted after 6 months, unless it is still required for asserting rights or enforcing claims due to measures against the proper operation of our website. In this case, deletion will take place immediately after the completion of the respective procedure.

You are not obliged to provide your personal data. However, not providing your personal data would mean that you cannot view our website.

2. Processing of inquiries

If you contact us with an inquiry or concern, we process the personal data and information/documents you provide. Regardless of how you submit your inquiry or concern to us, this may include:

• date and time of contact
• name data
• contact details
• data related to inquiry/concern
• submitted information/documents
  
  

The processing of your personal data and the submitted information/documents takes place – depending on the content of your inquiry or concern – on the basis of Article 6 (1) (b) GDPR for the implementation of pre-contractual measures, or on the basis of Article 6 (1) (b) GDPR for the fulfillment of a contract to which you are a party, or on the basis of Article 6 (1) (f) GDPR to protect our legitimate interest in responding to inquiries/concerns and in carrying out other measures in connection with the processing of inquiries/concerns.

To the extent necessary for the processing of your inquiry/concern, we transmit your personal data to third parties within the framework of legal provisions. In cases of transmission of your personal data to third parties, the scope of the transmitted data is limited to the necessary minimum.

Your personal data will be deleted when your inquiry/concern has been clarified, but at the earliest after the expiry of the tax and commercial law retention periods of 6 or 10 years, unless we are permitted to continue processing the data for another processing purpose within the framework of legal provisions and in accordance with the information in this privacy policy.

You are not obliged to provide your personal data. However, not providing your personal data would mean that we cannot process your inquiry or concern.

3. Fulfillment of contracts

If you provide us with personal data for the purpose of concluding a contract or in connection with a contract, we process the data you provide for the execution of the contract. This includes your customer data (e.g., your name and address) and contract data (e.g., information on the contractual products as well as payment and delivery information).

The processing of your personal data takes place on the basis of Article 6 (1) (b) GDPR for the fulfillment of a contract to which you are a party.

To the extent necessary for the fulfillment of the contract with you, we transfer your personal data to third parties within the framework of legal provisions. This transfer is made to the service providers involved in the contract execution. These are the providers of the processing tools we use, the companies commissioned with transport, and the payment service providers commissioned with payment matters.

If you use the payment service provider PayPal for processing payments, we expressly point out that the PayPal privacy policy applies to all PayPal transactions: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

 
In cases where your personal data is transferred to third parties, the scope of the transferred data is limited to the necessary minimum.

 
Your personal data will be deleted after the expiry of the tax and commercial law retention periods of 6 or 10 years, unless we are permitted to continue processing the data for another processing purpose within the framework of legal provisions and in accordance with the information in this privacy policy.

The provision of your personal data is necessary for the conclusion of a contract with us. You are not obliged to provide your personal data. However, not providing your personal data would mean that we cannot conclude a contract with you.

4. Advertising via Newsletter

If you subscribe to our newsletter, we process the email address you provide – and if you provide further personal data, also this data – to send you information about our offers by email. Only the provision of your email address is mandatory. If you voluntarily provide further personal data, we may process this data to address you personally in the newsletter.

If you subscribe to our newsletter, you give consent with the following content: "I agree to be informed by email about interesting offers and therefore consent to the processing of my email address and other personal data provided by me for the purpose of sending the newsletter. I can revoke this consent at any time and without giving reasons, with effect for the future. The legality of the processing carried out until revocation remains unaffected in the event of revocation."

The registration for our newsletter takes place via the so-called double opt-in procedure. This means: After registration, you will first receive an email with a notification about the registration for the newsletter, accompanied by a request to confirm the registration. Your confirmation of registration is necessary to document the required consent to send the newsletter and to be able to identify registrations to third-party email addresses. In connection with newsletter registrations and confirmations, the IP address as well as the date and time are logged to be able to prove the granting of consent in accordance with legal requirements if necessary.

The processing of your personal data takes place on the basis of your corresponding consent given pursuant to Article 6 (1) (a) GDPR.

You can revoke your consent at any time and without giving reasons, with effect for the future. A corresponding notification to the controller, whose contact details you can find in the information about the controller, is sufficient for this purpose. The legality of the processing carried out until revocation remains unaffected in the event of revocation.

If you revoke your consent or unsubscribe from our newsletter, your email address and any other data provided will be deleted immediately, unless we are permitted to continue processing the data for another processing purpose within the framework of legal provisions and in accordance with the information in this privacy policy.
 

At least the provision of your email address is required for receiving our newsletter. You are not obliged to provide your email address. However, not providing your email address would mean that you cannot subscribe to our newsletter.

5. Advertising by post

We may process the personal data you provide, including your first name, last name, and address, for the purpose of sending you information about our offers by post.
 

The processing of your personal data in this respect takes place on the basis of Article 6 (1) (f) GDPR to protect our legitimate interest in carrying out advertising measures by post.

You can object to the processing of your personal data for the purpose of carrying out advertising measures by post at any time. A corresponding notification to the controller, whose contact details you can find in the information about the controller, is sufficient for this purpose.
 

If you object to the processing of your personal data for the purpose of carrying out advertising measures by post, the personal data you have provided, including your first name, last name, and address, will be deleted immediately, unless we are permitted to continue processing the data for another processing purpose within the framework of legal provisions and in accordance with the information in this privacy policy.

You are not obliged to provide your personal data for the purpose of carrying out advertising measures by post. However, not providing your personal data would mean that we cannot send you advertising by post.

6. Fulfillment of legal obligations to which we are subject

Within the scope of the relevant provisions, we process your personal data to fulfill legal obligations to which we are subject.

For the fulfillment of legal obligations to which we are subject, your personal data is processed on the basis of Article 6 (1) (c) GDPR.

To the extent necessary for the fulfillment of legal obligations to which we are subject, we transfer your personal data to third parties within the framework of legal provisions. In cases of transfer of your personal data to third parties, the scope of the transferred data is limited to the necessary minimum.

Your personal data will be deleted when it is no longer needed for the fulfillment of legal obligations to which we are subject, unless we are permitted to continue processing the data for another processing purpose within the framework of legal provisions and in accordance with the information in this privacy policy.

7. Enforcement of our rights and defense against claims made against us
 
We may process your personal data to protect our legitimate interest in enforcing our rights and defending against claims made against us.

In this case, the processing of your personal data takes place on the basis of Article 6 (1) (f) GDPR.

Insofar as this is necessary to protect our legitimate interest, we transmit your personal data to third parties within the framework of legal provisions. This transmission takes place to the involved providers of debt collection services or our lawyers.

In cases of transmission of your personal data to third parties, the scope of the transmitted data is limited to the necessary minimum.

Your personal data will be deleted after the conclusion of the process, but no earlier than after the expiry of the tax and commercial retention periods of 6 and 10 years respectively, unless we are permitted to continue processing the data for another processing purpose within the framework of legal provisions and in accordance with the information in this privacy policy.

7. Use of cookies and other technologies

We may use cookies on our website so that you can use the functions we offer, to analyze the use of the functions we offer and, if necessary, to present advertising that is as needs-based as possible. Below, we inform you about the cookies and other technologies we use.

Cookies are small files that are stored on your device and through which certain information is transmitted to us. The use of cookies serves to enable you to use certain functions and to make our offering more user-friendly overall.

7.1. Technically necessary cookies and technologies:

In some cases, the use of cookies and technologies on our website is technically necessary to provide you with the functions of our service that you desire and to document consents you have given. For this reason, you cannot opt out of the use of the corresponding cookies and technologies. You can prevent the storage of cookies by adjusting your browser software settings accordingly. You can delete stored cookies via the corresponding settings. However, we point out that in this case, you may not be able to fully use all functions of our website.

7.1.1. Consent Tool

We use a so-called consent tool on our website, with which we, in accordance with our data protection obligations pursuant to Art. 5 (2) GDPR in conjunction with Art. 6 (1) lit. c) GDPR, inform about the cookies we use and with which we document whether and to what extent you have consented to the processing of your data.

Controller:

The processing of your personal data is carried out by us as the controller. You can find the name and contact details of the controller (and, if a data protection officer has been appointed, the contact details of the data protection officer) in our provider identification / impressum.

Purposes of processing and legal basis:

Fulfillment of data protection obligations to inform about cookies used and storage/documentation of granted consents according to Art. 5 (2) GDPR in conjunction with Art. 6 (1) lit. c) GDPR

Provider of the consent tool used:

iSenseLabs
https://isenselabs.com/

You can find data protection information of the provider of the consent tool we use here:

https://isenselabs.com/pages/privacypolicy

Name/designation of the cookie:
cookieconsent_status

Cookie duration:

1 year

7.1.2. Technically necessary cookies:

Technically necessary cookies are cookies that are required for you to use the functions of our service that you desire (to place an order). This applies, for example, to the storage of entries in connection with the use of the shopping cart function or the storage of entries after registration in connection with the creation of a customer account. 

Controller:

The processing of your personal data is carried out by us as the controller. You can find the name and contact details of the controller (and, if a data protection officer has been appointed, the contact details of the data protection officer) in our provider identification / impressum. Information on whether the cookies are set by us (first-party cookies) or by a partner company (third-party cookies) can be found in the information on the individual cookies.

Purposes of processing and legal basis:

The processing of your personal data in this respect is carried out on the basis of Article 6 (1) lit. b) GDPR for the performance of pre-contractual measures taken at your request as the data subject or on the basis of Article 6 (1) lit. b) GDPR for the fulfillment of a contract to which you are a party.

7.2. Other cookies and technologies; Right to revoke granted consents

In some cases, the use of cookies and technologies on our website is not strictly necessary to provide you with the functions of our service that you desire. The use of these other cookies and technologies on our website only takes place with your consent (opt-in). To enable you to make an informed decision, we provide you with information about the corresponding cookies and technologies below. You can grant your consent to the use of the corresponding cookies and technologies via the consent tool we use. Granted consents can be revoked at any time and without stating reasons with effect for the future. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation.

Controller:

The processing of your personal data is carried out by us as the controller. You can find the name and contact details of the controller (and, if a data protection officer has been appointed, the contact details of the data protection officer) in our provider identification / impressum. Information on whether the cookies are set by us (first-party cookies) or by a partner company (third-party cookies) can be found in the information on the individual cookies.

Purposes of processing and legal basis:

Insofar as we use other cookies and technologies on our website, they are used to optimize the use of our website (preference cookies), to analyze the use of our website (statistics cookies) and to arrange for advertising that is as needs-based as possible (marketing cookies). The processing of your personal data is carried out in this respect on the basis of the consents granted by you pursuant to Article 6 (1) lit. a) GDPR.

7.2.1. Preference Cookies

7.2.2. Statistics Cookies

7.2.3. Marketing Cookies

VI. Duration for which your personal data is stored or criteria for determining this duration

Your personal data will be deleted when it is no longer required for processing for the respective processing purpose, unless we are permitted to continue processing the data for another processing purpose within the framework of legal requirements and in accordance with the information in this privacy policy. Information on the duration for which your personal data is stored or on the criteria for determining this duration can be found in the information on the processing of your personal data for the individual processing purposes in this privacy policy.

VII. Your rights

1. Overview
 

To ensure fair and transparent processing of personal data, you, as the data subject, have the following rights under data protection regulations:

the right to information according to Article 15 GDPR,

the right to rectification according to Article 16 GDPR,

the right to erasure according to Article 17 GDPR,

the right to restriction of processing according to Article 18 GDPR,

the right to data portability according to Article 20 GDPR

the right to withdraw consent at any time according to Art. 7 para. 3 GDPR,

the right to object to processing according to Article 21 GDPR, about which we inform you separately below

and the right to lodge a complaint with a supervisory authority according to Art. 77 GDPR, about which we inform you separately below.

2. Your right to object to processing

The processing of personal data is lawful if the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child, Art. 6 para. 1 lit. f) GDPR.
 

You, as the data subject, have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. f) GDPR; this also applies to profiling based on these provisions.

If you exercise your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as the data subject, or for the establishment, exercise or defence of legal claims.

If we process your personal data for direct marketing purposes, you as the data subject have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you, as the data subject, object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

3. Your right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you, as the data subject, have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the provisions of the GDPR.
 

VIII. Information on the basis for providing your personal data and possible consequences of non-provision

To the extent necessary to ensure fair and transparent processing, information on the basis for providing your personal data and on possible consequences of non-provision can be found in the information on the processing of your personal data for the individual processing purposes.