Data Protection

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below we provide you with detailed information about how we handle your data.

You can visit our websites without providing any personal information. Each time a website is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of access, amount of data transferred, and the requesting provider (access data) and documents the access.

These access data are evaluated solely for the purpose of ensuring the smooth operation of the site and improving our offer. This serves, according to Art. 6 para. 1 sentence 1 lit. f GDPR, to safeguard our overriding legitimate interests in a correct presentation of our offer within the framework of a balancing of interests. All access data are deleted no later than seven days after the end of your visit to the site.

Hosting services by a third party
As part of processing on our behalf, a third party provides us with services for hosting and displaying the website. This serves to safeguard our overriding legitimate interests in a correct presentation of our offer within the framework of a balancing of interests. All data collected during the use of this website or in designated forms in the online shop as described below are processed on its servers. Processing on other servers only takes place within the scope explained here.

This service provider is located in the USA and is certified under the EU-US Privacy Shield. A current certificate can here be viewed. Due to this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.

We collect personal data when you provide it to us during your order or when contacting us (e.g., via contact form or email). Mandatory fields are marked as such because we need the data in these cases for contract processing or to handle your contact request, and you cannot complete the order or send the contact request without providing them. Which data is collected can be seen from the respective input forms. We use the data you provide according to Art. 6 para. 1 sentence 1 lit. b GDPR for contract processing and handling your inquiries. After the contract has been fully processed, your data will be restricted for further processing and deleted after any applicable tax and commercial retention periods have expired, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.

For contract fulfillment according to Art. 6 para. 1 sentence 1 lit. b GDPR, we forward your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select during the ordering process, we forward the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. The privacy policy of the respective payment service provider applies in this regard.

Data transfer to shipping service providers
If you have given us your explicit consent during or after your order, we will forward your email address to the selected shipping service provider based on this consent according to Art. 6 para. 1 sentence 1 lit. a GDPR, so that they can contact you before delivery for the purpose of delivery notification or coordination.

Consent can be revoked at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.

DHL Paket GmbH
Sträßchensweg 10
53113
Bonn

Email advertising with newsletter registration
When you sign up for our newsletter, we use the data required for this or separately provided by you to regularly send you our email newsletter based on your consent according to Art. 6 para. 1 sentence 1 lit. a GDPR.

Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a designated link in the newsletter. After unsubscribing, we delete your email address unless you have explicitly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.

4.1. Use of the shipping service provider "MailChimp"

The sending of the newsletters is done using "MailChimp", a newsletter sending platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

The email addresses of our newsletter recipients, as well as other data described in these notices, are stored on MailChimp's servers in the USA. MailChimp uses this information to send and evaluate the newsletters on our behalf. Furthermore, according to its own information, MailChimp may use this data to optimize or improve its own services, e.g., for the technical optimization of sending and displaying the newsletters or for economic purposes to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to contact them itself or to pass it on to third parties.

We rely on the reliability and IT as well as data security of MailChimp. MailChimp is certified under the US-EU Data Privacy Framework "Privacy Shield" and thereby commits to comply with EU data protection requirements. Furthermore, we have concluded a "Data-Processing Agreement" with MailChimp. This is a contract in which MailChimp commits to protect the data of our users, to process it on our behalf in accordance with its data protection regulations, and in particular not to pass it on to third parties. Privacy Policy: https://mailchimp.com/legal/terms/

Identity and creditworthiness check when selecting Klarna payment services
If you choose Klarna's payment services, we ask for your consent according to Art. 6 para. 1 sentence 1 lit. a GDPR that we may transmit the data necessary for processing the payment and for identity and creditworthiness checks to Klarna. In Germany, the credit agencies named in Klarna's privacy policy may be used for identity and creditworthiness checks.

The information received about the statistical probability of a payment default is used by Klarna for a balanced decision regarding the establishment, execution, or termination of the contractual relationship.

You can revoke your consent at any time by sending a message to the contact details below. This may result in us no longer being able to offer you certain payment options. You can also revoke your consent to this use of personal data at any time directly with Klarna.

When selecting the payment method "Ratenkauf" and granting the required data protection consent according to Art. 6 para. 1 sentence 1 lit. a GDPR, personal data (first name, last name, address, email, phone number, date of birth, IP address, gender) together with data necessary for transaction processing (item, invoice amount, due dates, total amount, invoice number, taxes, currency, order date and order time) are transmitted for the purpose of processing this payment method to our partner Klarna GmbH, Theresienhöhe 12, 80339 Munich.

To verify the identity or creditworthiness of the customer, our partner conducts queries and information requests with publicly accessible databases as well as credit agencies. The providers from whom information and, if applicable, creditworthiness information based on mathematical-statistical methods are obtained, as well as further details on the processing of your data after transmission to our partner Klarna GmbH, can be found in their privacy policy here: https://www.klarna.com/de/datenschutz/

The information received about the statistical probability of a payment default is used by our partner Klarna GmbH for a balanced decision regarding the establishment, execution, or termination of the contractual relationship. You have the opportunity to present your position and challenge the decision by contacting our partner Klarna GmbH.
The consent given during the ordering process for data transfer can be revoked at any time, also without giving reasons, towards us with effect for the future.

To display our Trusted Shops quality seal and the collected reviews as well as to offer Trusted Shops products to buyers after an order, the Trusted Shops Trustbadge is integrated on this website.

This serves to safeguard our overriding legitimate interests in optimal marketing of our offer within the framework of a balancing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.

When calling up the Trustbadge, the web server automatically saves a so-called server log file, which contains, for example, your IP address, date and time of the call, amount of data transferred, and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your page visit.

Further personal data will only be transferred to Trusted Shops if you have consented to this, decide to use Trusted Shops products after completing an order, or have already registered for use. In this case, the contractual agreement made between you and Trusted Shops applies.

To make visiting our website attractive and to enable the use of certain functions to display suitable products or use for market research, we use so-called cookies on various pages. This serves to safeguard our overriding legitimate interests in an optimized presentation of our offer within the framework of a balancing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser again on your next visit (persistent cookies). You can find the duration of storage in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:
Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari™: https://support.apple.com/kb/ph21411?locale=de_DE
Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Firefox™ https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera™ : http://help.opera.com/Windows/10.20/de/cookies.html

If cookies are not accepted, the functionality of our website may be limited.

Use of Google (Universal) Analytics for web analysis
This website uses Google (Universal) Analytics for website analysis, a web analytics service provided by Google LLC (www.google.de). This serves to safeguard our overriding legitimate interests in an optimized presentation of our offer within the framework of a balancing of interests according to Art. 6 para. 1 sentence 1 lit. f GDPR. Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as cookies. The information automatically collected about your use of this website is usually transmitted to a Google server in the USA and stored there. By activating IP anonymization on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser within the scope of Google Analytics is generally not merged with other data from Google. After the purpose ceases and the use of Google Analytics by us ends, the data collected in this context will be deleted.

Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here . Due to this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.

You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

Alternatively to the browser plugin, you can click this link to prevent data collection by Google Analytics on this website in the future. An opt-out cookie will be placed on your device. If you delete your cookies, you will need to click the link again.

Google AdSense
Our website markets space for ads from third-party providers and advertising networks via Google AdSense. These ads are displayed to you at various places on this website. As part of the integration of Google AdSense, the so-called DoubleClick cookie from Google is set for all site visitors.

This enables the display of interest-based advertising through the automatic assignment of a pseudonymous UserID, which helps determine interests based on visits to this and other websites. This serves to protect our overriding legitimate interests in an optimal marketing of our website within the framework of a balancing of interests according to Art. 6 para. 1 sentence 1 lit. f GDPR. After the purpose ceases and the use of Google AdSense by us ends, the data collected in this context will be deleted.

Google AdSense is an offering of Google LLC (www.google.de).
Google LLC is headquartered in the USA. An adequacy decision by the European Commission exists for this country. This goes back to the EU US Privacy Shield under which Google LLC is certified. A current certificate can be viewed here : https://www.privacyshield.gov/list

You can deactivate the DoubleClick cookie via this link . In addition, you can inform yourself about cookie settings and make adjustments at the Digital Advertising Alliance .

Google AdWords Remarketing
We advertise this website via Google AdWords in Google search results as well as on third-party websites. For this purpose, the so-called remarketing cookie from Google is set when visiting our website, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visited. This serves to safeguard our overriding legitimate interests in optimal marketing of our website within the framework of a balancing of interests according to Art. 6 para. 1 sentence 1 lit. f GDPR. After the purpose ceases and the use of Google AdWords Remarketing by us ends, the data collected in this context will be deleted.

Further data processing only takes place if you have consented to Google linking your web and app browser history with your Google account and using information from your Google account to personalize ads you see on the web. In this case, if you are logged into Google during your visit to our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to form audiences.

Google AdWords Remarketing is an offering of Google LLC (www.google.de). Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here . Due to this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.

You can deactivate the remarketing cookie via this link . In addition, you can find information about cookie settings and make adjustments at the Digital Advertising Alliance .

Facebook, Custom Audiences, and Facebook Marketing Services
Within our online offer, due to our legitimate interests in analyzing, optimizing, and economically operating our online offer, the so-called "Facebook Pixel" of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), is used for these purposes.

Facebook is certified under the Privacy Shield Agreement and thus provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

With the help of the Facebook Pixel, Facebook can determine the visitors of our online offer as a target group for displaying ads (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel to show the Facebook ads we place only to those Facebook users who have shown an interest in our online offer or who have certain characteristics (e.g., interests in specific topics or products determined by the visited websites) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook Pixel, we also want to ensure that our Facebook ads correspond to the potential interests of the users and do not appear intrusive. Furthermore, with the help of the Facebook Pixel, we can track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "Conversion").

The processing of data by Facebook takes place within the framework of Facebook's data use policy. Accordingly, general information about the display of Facebook ads can be found in Facebook's data use policy: https://www.facebook.com/policy.php. Specific information and details about the Facebook Pixel and how it works can be found in Facebook's help section: https://www.facebook.com/business/help/651294705016616.

You can object to the collection by the Facebook Pixel and the use of your data for displaying Facebook ads. To set which types of ads are shown to you within Facebook, you can visit the page set up by Facebook and follow the instructions regarding interest-based advertising settings: https://www.facebook.com/settings?tabs=ads. The settings are platform-independent, i.e., they apply to all devices, such as desktop computers or mobile devices.

You can also object to the use of cookies that serve reach measurement and advertising purposes via the opt-out page of the Network Advertising Initiative (https://optout.networkadvertising.org/) and additionally the US website (https://www.aboutads.com/choices) or the European website (https://www.youronlinechoices.com/uk/your-ad-choices/) object.

Use of social plugins from Facebook, Instagram
Our website uses so-called social plugins ("plugins") from social networks.

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the servers of Facebook, Google, Twitter, or Instagram. The content of the plugin is transmitted directly from the respective provider to your browser and integrated into the page. By embedding the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted directly by your browser to a server of the respective provider (possibly in the USA) and stored there. If you are logged into one of the services, the providers can immediately associate the visit to our website with your profile in the respective social network. If you interact with the plugins, for example by clicking the "Like" or "Share" button, the corresponding information is also transmitted directly to a server of the providers and stored there. The information is also published in the social network and shown to your contacts there. This serves to safeguard our overriding legitimate interests in optimal marketing of our offer within the framework of a balancing of interests according to Art. 6 para. 1 sentence 1 lit. f GDPR.

Please refer to the privacy notices of the providers for the purpose and scope of data collection and the further processing and use of the data by the providers, as well as a contact option and your related rights and settings to protect your privacy.
http://www.facebook.com/policy.php
https://help.instagram.com/155833707900388

If you do not want social networks to immediately associate the data collected through our website with your profile on the respective service, you must log out of the corresponding service before visiting our website. You can also completely prevent the loading of plugins with browser add-ons, e.g., with the script blocker "NoScript" (http://noscript.net/).

Review reminder by Trusted Shops
If you have given us your explicit consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR during or after your order, we will transmit your email address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de), so that they can send you a review reminder by email.

This consent can be revoked at any time by sending a message to the contact option described below or directly to Trusted Shops.

11. Services and content from third parties

The following presentation provides an overview of third-party providers and their content, along with links to their privacy policies, which contain further information on data processing and, in some cases already mentioned here, options to object:

External fonts from Google, Inc., https://www.google.com/fonts ("Google Fonts"). The integration of Google Fonts is done by a server call to Google (usually in the USA). Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

Videos from the platform “YouTube” of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

External code of the Google Search Interface (Google AJAX Search API), provided by the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

Note on Google, Inc.: Google is certified under the Privacy Shield agreement and thus provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

The product review system from the provider Yotpo Ltd., David Khakhami 12, Tel Aviv, Israel. Privacy Policy: https://www.yotpo.com/privacy-policy/ (Yotpo Ltd. is certified under the EU-US Privacy Shield, https://www.yotpo.com/privacy-shield/)

Our live chat from the provider Tidio Ltd. with its registered office in [220C Blythe Road, W14 0HH, London]. Privacy Policy: https://www.tidiochat.com/en/privacy-policy

Order processing is carried out by the service provider "Billbee" (Billbee GmbH, Paulinenstrasse 54, 32756 Detmold). Name, address, and, if applicable, other personal data are passed on to Billbee exclusively for the purpose of processing the online order in accordance with Art. 6 para. 1 lit. b GDPR. Your data is only passed on to the extent that it is actually necessary for processing the order. Privacy Policy: https://www.billbee.io/datenschutz/

If our customers use third-party payment services (e.g. PayPal or Sofortüberweisung), the terms and conditions and privacy notices of the respective third parties apply, which can be accessed within the respective websites or transaction applications.

As an affected person, you have the following rights:

• According to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified there;
• According to Art. 16 GDPR, the right to request the immediate correction of incorrect or completion of your personal data stored with us;
• According to Art. 17 GDPR, the right to request the deletion of your personal data stored with us, unless further processing
  - To exercise the right to freedom of expression and information;
  - To fulfill a legal obligation;
  - For reasons of public interest or
  - For the assertion, exercise, or defense of legal claims
  is necessary;
• According to Art. 18 GDPR, the right to request restriction of the processing of your personal data, insofar as
  - The accuracy of the data is disputed by you;
  - The processing is unlawful, but you refuse its deletion;
  - We no longer need the data, but you require it for the assertion, exercise, or defense of legal claims; or
  - You have objected to the processing pursuant to Art. 21 GDPR;
• According to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request the transfer to another controller;
• According to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

If you have questions about the collection, processing, or use of your personal data, about information, correction, blocking, or deletion of data, as well as revocation of given consents or objection to a specific data use, please contact us directly via the contact details in our imprint.