1.1 General
1.1.1 What are personal data?
Personal data are pieces of information that disclose or can disclose the identity of the user. We adhere to the principle of data minimization. We refrain from collecting personal data as far as possible.
1.2 Handling of personal data
Personal data serve exclusively for the establishment, content design, execution, or handling of the contractual relationship (Art. 6 I sentence 1 b GDPR).
Furthermore, personal data are only processed to the extent that we have obtained your consent for this purpose (Art. 6 I sentence 1 a GDPR) or if it concerns data whose processing is necessary for our legitimate interests, and provided that the balance indicates that there are no overriding interests, fundamental rights, or freedoms on your part (Art. 6 I sentence 1 f GDPR).
We may use processors to process your personal data, but in principle, we do not disclose personal data to third parties.
Only for the fulfillment of the contract, data will be passed on to the shipping company commissioned with the delivery, if this is necessary for the delivery of ordered goods. For payment processing, the payment data required for this purpose will be passed on to the credit institution and, if necessary, the commissioned and chosen payment service provider.
The processing of your personal data takes place exclusively within the EU, unless otherwise stated below.
1.3 Usage data
When visiting the website, general technical information is collected. These include the IP address used, time, duration of the visit, browser type, and possibly the source page. This usage data is technically recorded in a log file and can be used and stored for the purpose of statistical analysis of this website. There is no linking of this usage data with your other personal data.
1.4 Registration data
Registration is required for comprehensive use of the functions of our website. The registration data is collected through your corresponding inputs and used for the specific purpose indicated in accordance with your consent (Art. 6 I sentence 1 a GDPR).
1.5 Duration of storage
After the purpose for which the data was collected has ended, we only store your personal data for as long as is necessary due to legal (especially tax) regulations.
2. Your Rights
2.1 Information
You can request information from us about whether we process personal data about you, and if so, you have the right to information about this personal data and the additional information mentioned in Article 15 GDPR.
2.2 Right to Rectification
You have the right to have incorrect personal data concerning you corrected and, in accordance with Article 16 GDPR, to request the completion of incomplete personal data.
2.3 Right to Erasure
You have the right to demand that the personal data concerning you be deleted immediately. We are obliged to delete this immediately, especially if one of the following reasons applies:
- Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
- You withdraw your consent, which the processing of your data was based on, and there is no other legal basis for the processing.
- Your data has been processed unlawfully.
The right to erasure does not exist to the extent that your personal data is necessary for the assertion, exercise, or defense of legal claims.
2.4 Right to Restriction of Processing
You have the right to request us to restrict the processing of your personal data when:
- You dispute the accuracy of the data and we therefore verify the accuracy.
- The processing is unlawful, and you oppose the erasure and instead request the restriction of use.
- We no longer need the data, but you need it to assert, exercise, or defend legal claims.
- You have objected to the processing of your data, and it is not yet clear whether our legitimate reasons outweigh yours.
2.5 Right to Data Portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent or a contract and the processing is carried out by us using automated methods.
2.6 Right of Withdrawal
To the extent that the processing of your personal data is based on consent, you have the right to revoke this consent at any time.
2.7 General and Right to Lodge a Complaint
Exercising your aforementioned rights is generally free of charge for you. You have the right to address complaints directly to the supervisory authority responsible for us, the state data protection officer.
3. Data Security
3.1 Data Security
All data on our website is secured against loss, destruction, access, alteration, and dissemination by technical and organizational measures.
3.2 Sessions and Cookies
To operate the website, we may use cookies or server-side sessions to store data. Cookies are files that are stored by a website on your hard drive to automatically recognize this computer on your next visit to the website and thus adapt the use of the website to you. Some of the cookies used are deleted after the end of the browser session. These are called session cookies. Other cookies remain on your device and enable the recognition of the browser on a later visit to our website (persistent cookies). You can configure your browser to inform you about the setting of cookies and to decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Please note that you may not be able to use some functions of this website if cookies are disabled. We ensure that no personal data is taken from sessions or cookies and that cookies are only used if technically necessary for the website. Thus, the balancing test shows that there are no overriding interests on your part (Art. 6 I p. 1 f GDPR).
4. Newsletter
If you subscribe to our newsletter, we will use the data required for this or separately provided by you to regularly send you our email newsletter. Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to us via the contact options provided in the legal notice or via the link provided in the newsletter.
5. Presence on Social Media Platforms
We use the following social media platforms for company representation and communication (explicit reference is made to the linked privacy policies and opt-out options below).
Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA)
Privacy Policy and Opt-Out: http://instagram.com/about/legal/privacy/
YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
Privacy Policy: http://www.youtube.com/t/privacy/
These social media platforms may process personal data outside the EU. We refer to the above privacy policies of the social media platforms. The respective social media platforms may create usage profiles from your usage behavior and the resulting interests and actions on your part, and store cookies on your computer containing your usage behavior. If you have an account on the respective social media platform and are logged in, your usage behavior may even be stored across devices. Your usage profile can be used, for example, to place advertisements that presumably correspond to your interests.
We process the personal data exclusively for communication with you via the social media platform of your choice and for optimizing our online presence, ensuring that no interests on your part outweigh this legitimate interest of ours (Art. 6 I p. 1 f GDPR). If you have already given effective consent to the respective operator of the social media platform for the corresponding data processing, the processing of your personal data also takes place on the basis of this consent (Art. 6 I p. 1 a GDPR).
6. Third-Party Services
6.1 Google Analytics
This website uses Google Analytics, a web analysis service provided by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), and collects and stores data via this web analysis service from which usage profiles are created using pseudonyms. The usage profiles created in this way serve to evaluate visitor behavior in order to tailor and improve the offer presented on this website to meet demand. Google Analytics uses so-called "cookies," small text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. The usage profiles created under a pseudonym will not be merged with personal data about the user without the explicit and separately declared consent of the user. Thus, the balancing test shows that there are no overriding interests on your part (Art. 6 I p. 1 f GDPR). You can prevent the storage of cookies by adjusting your browser software accordingly; however, please note that if you do this, you may not be able to use all the features of this website to their full extent. You can also prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plug-in available under the following link (http://tools.google.com/dlpage/gaoptout?hl=de). You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Deactivate Google Analytics. You can view Google's privacy policy at http://www.google.de/intl/de/policies/privacy/. For more information on terms of use and data protection, please visit http://www.google.com/analytics/terms/de.html or http://www.google.com/intl/de/analytics/privacyoverview.html. We would like to point out that Google Analytics has been expanded on this website with the code "anonymizeIp" to ensure anonymized collection of IP addresses (so-called IP masking).
6.2 Use of Google Maps
This website uses Google Maps, a map service provided by Google, operated by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). When using Google Maps, data about the use of the Maps functions by visitors to the websites is also collected, processed, and used. Here, there are no user interests that outweigh this technical necessity of integrating the interactive map material (Art. 6 I p. 1 f GDPR). You can view Google's privacy policy at http://www.google.de/intl/de/policies/privacy/. You can view the additional terms of use for Google Maps at http://www.google.com/intl/de_de/help/terms_maps.html.
6.4 Google Web Fonts
We use so-called web fonts from Google to display a uniform font on our website. These are automatically stored in your browser cache when you visit one of our pages to enable the desired display. If your browser does not support the web fonts used, a default font of your computer may be used. Here, there are no user interests that outweigh this technical necessity (Art. 6 I p. 1 f GDPR). You can view Google's privacy policy here: https://www.google.com/policies/privacy/. For more information about Google Web Fonts, visit https://developers.google.com/fonts/faq.
6.6 Social Media Links
We have our own social media pages on third-party providers accessible via links from this website. By using the links, you will be directed to the respective Internet pages of the third-party providers (e.g., Facebook, Twitter, Google+). To avoid unnecessary data transmission, we recommend logging out of the respective third-party provider before using the link, so that usage profiles by the third-party provider may not be created simply by using the link.
7. Contact
By using our website, you agree to these privacy policies. If you have any questions, please contact us.