Privacy Policy

Privacy policy

Unless otherwise stated below, the provision of your personal information is neither required by law nor by contract, nor required to conclude a contract. You are not required to provide the data. A non-provisioning has no consequences. This applies only insofar as no other indication is given in the subsequent processing operations.
“Personal data” is all information that relates to an identified or identifiable natural person.

Server log files

You can visit our website without giving any personal information.
Every time you access our website, usage data are transmitted to us or our web host / IT service provider via your Internet browser and stored in log data (so-called server log files). These stored data include, for example, the name of the page called, the date and time of the call, the IP address, the amount of data transferred, and the requesting provider. The processing takes place on the basis of Art. 6 para. 1 lit. f DSGVO from our predominant legitimate interest in ensuring trouble-free operation of our website as well as improving our offer.

Your data may be transferred to third countries outside the European Union for which an adequacy decision has been made by the EU Commission. Unless there is an adequacy decision by the EU Commission, e.g. for transfers to the USA, the data transfers are based on standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-dataprotection/standard-contractual-clauses-scc_de

Contact

Responsible
Contact us on request. The contact details of the person responsible for data processing can be found in our imprint.

Unsolicited contact of the customer by email
If you initiate business contact with us via e-mail, we will only collect your personal data (name, e-mail address, message text) to the extent that you have provided. The data processing serves to process and answer your contact request.
If the establishment of contact serves to carry out pre-contractual measures (e.g. advice on purchase interests, preparation of offers) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR based on our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to do so at any time in accordance with Art. 6 Para. 1 lit. to object to processing based on the GDPR relating to your personal data.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form
When you use the contact form, we only collect your personal data (name, e-mail address, message text) to the extent provided by you. The data processing serves the purpose of establishing contact. If the establishment of contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Article 6 Paragraph 1 lit. b GDPR.
If contact is made for other reasons, this data processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR based on our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to do so at any time in accordance with Art. 6 Para. 1 lit. to object to processing based on the GDPR relating to your personal data.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Customer account orders

Account
When opening a customer account, we collect your personal data in the scope indicated there. The purpose of data processing is to improve your shopping experience and simplify order processing. The processing takes place on the basis of Art. 6 para. 1 lit. a DSGVO with your consent. You may revoke your consent at any time by notifying us without affecting the legality of the processing based on the consent to revocation. Your customer account will be deleted afterwards.

Collection, processing and transfer of personal data during orders
When ordering, we collect and process your personal data only to the extent necessary for the fulfillment and processing of your order and to process your requests. The provision of the data is required for the conclusion of the contract. Non-provisioning means that no contract can be concluded. The processing takes place on the basis of Art. 6 para. 1 lit. b DSGVO and is required to fulfill a contract with you.
For example, your data may be forwarded to your chosen shipping companies and dropshipping providers, payment service providers, order processing service providers and IT service providers. In all cases we strictly observe the legal requirements. The amount of data transmission is limited to a minimum.

Your data may be transmitted to third countries outside the European Union for which an adequacy decision has been made by the EU Commission. Unless there is an adequacy decision by the EU Commission, e.g. for transfers to the USA, the data transfers are based on standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standardcontractual-clauses-scc_de

Advertising

Using the e-mail address to receive newsletters

a. Type and scope of data processing

You can subscribe to a free newsletter on our website. In order to be able to send you the newsletter regularly, we need the following information from you: E-mail address

When sending our newsletter, we work together with the service provider Klaviyo (125 Summer St, Floor 6, Boston, MA 02111, USA), who processes your data on our behalf and ensures that the e-mails are sent properly. Any further transfer of your data to third parties does not take place in connection with the newsletter dispatch.

In this context, personal data may be transferred to countries outside the EU/EEA, in particular to the USA. In order to be able to guarantee adequate protection of your personal data in the event of the transfer of personal data to such so-called third countries, we have concluded so-called EU-US standard contractual clauses with Klaviyo. The USA is rated by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. Due to the lack of an adequacy decision and without suitable guarantees, there is a particular risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal redress. In addition, we are in constant contact with the service provider to ensure the protection of your personal data with any additional measures that may be required.

Further information on data protection can be found on the service provider's website: https://www.klaviyo.com/privacy

We use the so-called double opt-in procedure to send the newsletter, ie we will only send you the newsletter if you have previously confirmed your registration via the link contained in a confirmation e-mail sent to you for this purpose. We want to ensure that only you as the owner of the email address provided can register for the newsletter. Your confirmation must be made promptly after receipt of the confirmation e-mail, otherwise your newsletter registration will be automatically deleted from our database.

b. legal basis

The data processing described above for the purpose of establishing contact takes place in accordance with Article 6 (1) (a) GDPR on the declaration of consent you have given voluntarily.

c. storage duration

Your e-mail address and optional salutation and name will be saved for as long as you have subscribed to the newsletter. After you unsubscribe from the newsletter, your e-mail address and other data will be deleted. You can unsubscribe from the newsletter by using the unsubscribe link that is included in every newsletter. Further storage can take place in individual cases if this is required by law.

Using the e-mail address for sending direct mail
We use your e-mail address, which we obtained in connection with the sale of a good or service, for the electronic transmission of advertising for own goods or services, which are similar to those, which you already acquired with us, as far as this Use did not contradict. The provision of the e-mail address is required for the conclusion of the contract. Non-provisioning means that no contract can be concluded. The processing takes place on the basis of Art. 6 para. 1 lit. f DSGVO from our predominant legitimate interest in direct mail. You can object to this use of your e-mail address at any time by notifying us. The contact details for exercising the objection can be found in the imprint. You can also use the dedicated link in the promotional e-mail. There are no other costs than the transmission costs according to the basic tariffs.

Shipping service provider merchandise management

Forwarding the e-mail address to shipping companies for information about the shipping status
We will pass on your e-mail address as part of the contract to the transport company, if you have agreed to this explicitly in the ordering process. The purpose of the disclosure is to inform you by e-mail about the delivery status. The processing takes place on the basis of Art. 6 para. 1 lit. a DSGVO with your consent. You may revoke your consent at any time by notifying us or the carrier without affecting the legality of the processing carried out on the basis of the consent to revocation.

Use of an external ERP system
We use a merchandise management system as part of order processing for contract execution. Your personal data collected during the order process will be used for this purpose
godesys AG, Nikolaus-Kopernikus-Strasse 3, 55129 Mainz
transmitted.

payment service

Use of PayPal
All PayPal transactions are subject to the PayPal Privacy Policy. These can be found under https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of personal data when selecting Klarna payment options
In order to be able to offer you Klarna's payment options, we will transmit personal data, such as contact details and order data, to Klarna. Klarna can thus assess whether you can use the payment options offered by Klarna and adapt the payment options to your needs. General information about Klarna is available at: https://www.klarna.com/de/. Your personal details will be processed by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna’s data protection regulations
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy treated.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the Internet browser or the Internet browser on the computer system of a user. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your Internet browser, you can be notified prior to setting cookies and individually decide on the acceptance and prevent the storage of cookies and transmission of the data contained. Already saved cookies can be deleted at any time. We point out, however, that you may not be able to use all the features of this website in full.

You can use the links below to find out how you can manage (including deactivate) cookies in the most important browsers: Chrome: https://support.google.com/accounts/answer/61416?hl=de
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies
Unless otherwise specified below in the data protection declaration, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after you have changed pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser also after
a page change is recognized.

Cookies or comparable technologies are used on the basis of Section 15 (3) sentence 1 TMG. Your personal data is processed on the basis of Art. 6 Para. 1 lit. f GDPR based on our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer. You have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation.

[cs_open_cookie_consent]Open cookie settings[/cs_open_cookie_consent]

advertising tracking

Use of the Facebook Pixel
We use the remarketing function “Custom Audiences” from Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland “Facebook”) on our website.
Facebook Ireland and we are jointly responsible for the collection of your data and the transmission of this data to Facebook when the service is integrated. The basis for this is an agreement between us and Facebook Ireland on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is under https://www.facebook.com/legal/controller_addendum callable. According to this, we are particularly responsible for fulfilling the information obligations in accordance with Art. 13, 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service and for complying with the obligations in accordance with Art. 33 , 34 GDPR to the extent that a personal data breach affects our obligations under the Joint Processing Agreement. Facebook Ireland is responsible for enabling the rights of data subjects in accordance with Art. 15 - 20 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the security of the service and the obligations under Art. 33, 34 GDPR, insofar as a violation of the Protection of Personal Data affects Facebook Ireland's obligations under the Joint Processing Agreement.
The purpose of the application is to target visitors to the website with interest-based advertising on the social network Facebook. For this purpose, the Facebook remarketing tag was implemented on the website. This tag is used to establish a direct connection to the Facebook servers when you visit the website. This transmits to the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. If you visit the social network Facebook, you will then be shown personalized, interest-based Facebook ads. Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum.
Cookies or comparable technologies are used with your consent on the basis of Section 15 (3) sentence 1 TMG in conjunction with Article 6 (1) (a) GDPR. Your personal data will be processed with your consent on the basis of Article 6 Paragraph 1 Letter a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation. You can find more information about the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy in Facebook's data protection information at https://www.facebook.com/about/privacy/.

Use Google Ads Conversion Tracking
We use the online advertising program “Google Ads” on our website and, in this context, conversion tracking (evaluation of visits). Google Conversion Tracking is an analysis service provided by Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the person responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws.
If you click on an advertisement placed by Google, a cookie for the conversion tracking is placed on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the advertisement and were forwarded to this page. Every Google Ads customer receives a different cookie. There is therefore no possibility that cookies can be traced via the websites of Ads customers.
The information obtained using the conversion cookie is used to generate conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified. Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks.
Cookies or comparable technologies are used with your consent on the basis of Section 15 (3) sentence 1 TMG in conjunction with Article 6 (1) (a) GDPR. Your personal data will be processed with your consent on the basis of Article 6 Paragraph 1 Letter a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation. You can find more information and Google's privacy policy at: https://www.google.de/policies/privacy/

Use of Microsoft Advertising
We use Universal Event Tracking (UET) on our website via the Microsoft Advertising service (formerly Bing Ads) from Microsoft Corporation (USA). Microsoft stores a cookie in your browser via UET to enable an analysis of the use of our online offer. The prerequisite for this is that you have reached our website via an advertisement from Microsoft Advertising. In this way, Microsoft and we can recognize that someone has clicked on an ad, was redirected to our online offer and has reached a predetermined target page (so-called conversion measurement). No IP addresses are saved here. No further personal information on the identity of the user is communicated either. Microsoft Advertising is only used with your consent. Article 6 paragraph 1 lit. a GDPR serves as the legal basis. You can revoke your consent at any time in the data protection settings by deactivating conversion tracking. You can find more information about data protection at Microsoft in the
Microsoft's privacy notices https://privacy.microsoft.com/de-de/privacystatement.

Use of Hotjar

We use the analysis tool of Hotjar Ldt on our website. (Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julians STJ1000, Malta; “Hotjar”). The data processing serves the purpose of the needs-based design, optimization and analysis of our website. The tool is used to randomly record the movements of site visitors on the website. This creates a log of mouse movements, scrolling behavior, length of stay and clicks on the website (so-called heat map). Hotjar uses cookies, among other things, for this purpose. Among other things, the following information can be collected: IP address (in anonymous form), information about the device you are using (screen size, devices, unique device identifier), information about the browser you are using, location data (only for the country), preferred language to display the website, operating system used. Detailed information on the cookies used, their function and the storage period can be found here: https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies
User profiles are created from this data under a pseudonym. The data is not used to personally identify the visitor to the website and is not combined with the personal data of the bearer of the pseudonym. Hotjar is contractually prohibited from selling the collected data to other third parties. Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. The data transmission takes place, among other things, on the basis of appropriate protective measures. Hotjar will provide you with further information on the measures taken on request.

Your personal data is processed on the basis of Art. 6 Paragraph 1 lit. You have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation.

To prevent Hotjar from collecting and storing data, you can: https://www.hotjar.com/legal/compliance/opt-out set an opt-out cookie. Opt-out cookies prevent future collection of your data when you visit this website. You must implement the opt-out cookie on all systems and devices used so that this works across devices. If you delete the opt-out cookie, data will be sent to Hotjar again. Further information on data protection when using Hotjar can be found here: https://www.hotjar.com/legal/policies/privacy#enduserenglish

Plug-ins and other

Use of the Google Tag Manager
We use the Google Tag Manager from Google LLC on our website. (1600 Amphitheater Parkway, Mountain View, CA 94043,
UNITED STATES; "Google"). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws.
This application manages JavaScript tags and HTML tags that are used to implement tracking and analysis tools in particular. The data processing serves the purpose of the needs-based design and optimization of our website.
The Google Tag Manager itself does not save cookies nor does it process personal data. However, it enables the triggering of further tags that can collect and process personal data.
You can find more information on terms of use and data protection here .

Affected rights and storage duration

Duration of storage
After completion of the contract, the data is first stored for the duration of the warranty period, then taking into account statutory, especially tax and commercial retention periods and then deleted after the deadline, unless you have consented to the further processing and use.

Rights of the person concerned
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, to correction, to deletion, to restriction of processing, to data portability. In addition, according to Art. 21 Para. 1 GDPR, you have the right to object to the processing based on Art. 6 Para. 1 f GDPR and to processing for the purpose of direct advertising.

Right of appeal to the supervisory authority
In accordance with Art. 77 DSGVO, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.

Right of objection
The personal data processing listed here is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f DSGVO, you have the right for reasons that arise from your particular situation, at any time to object to these processing with effect for the future.
Following an objection, processing of the data in question will cease unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing is for the purposes of asserting, exercising or defending legal claims.

If the personal data processing for purposes of direct mail, you can object to this processing at any time by notifying us. After the objection, we will stop the processing of the data concerned for the purpose of direct mailing.

last update: 11.01.2023