Privacy policy

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Article 6(1)(a) GDPR. In doing so, we store your IP address as registered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any potential misuse of your email address at a later date. The data collected by us during newsletter registration will be used strictly for the stated purpose.

You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending an appropriate message to the controller mentioned at the outset. After successful unsubscription, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to further data use which is permitted by law and which we inform you about in this declaration.

6.2 Klaviyo

The dispatch of our email newsletters and other advertising email communications is carried out by the following provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA

On the basis of our legitimate interest in effective and user-friendly email marketing, we pass on the data you provided during registration to this provider in accordance with Article 6(1)(f) GDPR so that it can handle the mail dispatch on our behalf.

Subject to your express consent in accordance with Article 6(1)(a) GDPR, the provider additionally carries out a statistical evaluation of the success of mail campaigns using web beacons or counting pixels in the sent emails, which can measure open rates and specific interactions with the newsletter content. End device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but is not combined with other data sets.

You can revoke your consent to mail tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider which protects the data of our website visitors and prohibits passing it on to third parties.

For data transfers to the USA, the provider has committed to the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

6.3 SMS Marketing

On our website you have the option to register for the dispatch of SMS notifications about current offers, campaigns and information about orders you have placed.

Your mobile phone number is mandatory for sending SMS notifications. The provision of further data is voluntary and will be used to be able to address you personally.

The so-called double opt-in procedure is used to send SMS messages, which ensures that advertising SMS messages are only sent to you once you have explicitly confirmed your consent to receive SMS messages by clicking on a verification link sent to your specified mobile phone number.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Article 6(1)(a) GDPR. When registering for SMS dispatch, the date and time of registration are also stored in order to be able to trace any potential misuse of your mobile phone number at a later date. The data collected during registration will be used exclusively for the purpose of advertising contact via SMS messages.

You can unsubscribe from the SMS dispatch at any time by sending an appropriate message to the controller mentioned at the outset, thereby revoking your given consent with effect for the future. After successful unsubscription, your mobile phone number will be immediately deleted from the distribution list, unless you have expressly consented to further use of your data or we reserve the right to further data use which is permitted by law and which we inform you about in this declaration.

6.4 Product Availability Notification by Email

For temporarily unavailable items, you can register to receive product availability notifications by email. In this case, we will send you a one-off message by email about the availability of the item you have selected. The only mandatory specification for sending this notification is your email address. The provision of further data is voluntary and will be used if necessary to address you personally. We use the so-called double opt-in procedure for mail dispatch, which ensures that you only receive a notification once you have explicitly confirmed your consent to this by clicking on a verification link sent to your specified email address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Article 6(1)(a) GDPR. In doing so, we store your IP address as registered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any potential misuse of your email address at a later date. The data collected by us during registration for our product availability email notification service will be used strictly for the stated purpose.

You can unsubscribe from the availability notifications at any time by sending an appropriate message to the controller mentioned at the outset. After successful unsubscription, your email address will be immediately deleted from our distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to further data use which is permitted by law and which we inform you about in this declaration.

6.5 Shopping Cart Reminders by Email

In the event that you abandon your purchase with us before completing the order, you have the option to be reminded once by email of the contents of your virtual shopping cart.

The only mandatory specification for sending this reminder is your email address. The provision of further data is voluntary and will be used if necessary to address you personally. We use the so-called double opt-in procedure for mail dispatch, which ensures that you only receive a notification once you have explicitly confirmed your consent to this by clicking on a verification link sent to your specified email address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Article 6(1)(a) GDPR for the dispatch of a shopping cart reminder. In doing so, we store your IP address as registered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any potential misuse of your email address at a later date. The data collected by us during registration for our email notification service will be used strictly for the stated purpose.

You can unsubscribe from shopping cart reminders at any time by sending an appropriate message to the controller mentioned at the outset. After successful unsubscription, your email address will be immediately deleted from our distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to further data use which is permitted by law and which we inform you about in this declaration.

7) Data Processing for Order Fulfilment

7.1 To the extent required for contract processing for delivery and payment purposes, the personal data collected by us will be passed on in accordance with Article 6(1)(b) GDPR to the commissioned transport company and the commissioned financial institution.

If we owe you updates for goods with digital elements or for digital products on the basis of an appropriate contract, we will process the contact data you provided during ordering in order to inform you personally within the scope of our statutory information obligations in accordance with Article 6(1)(c) GDPR. Your contact data will be used strictly for the stated purpose for notifications about updates owed by us and will only be processed by us to the extent necessary for the respective information.

To process your order, we also work with the following service provider(s) who assist us in whole or in part in the performance of concluded contracts. Certain personal data will be transmitted to these service providers as set out in the following information.

7.2 Post & DHL Shipping (official)

To prepare the shipment, we use the services of the following provider: Deutsche Post DHL Research And Innovation GmbH, Kurt-Schumacher-Str. 1, 53113 Bonn
In accordance with Article 6(1)(b) GDPR, we transmit digital shipping labels with your delivery information exclusively for the purpose of processing your online order from our order processing system to the provider, which then sends them to our local printers to enable printing. Data is only passed on to the extent that this is actually necessary for the processing of your order.

7.3 - Anthropic Claude

To provide our services, we use artificial intelligence software from the following provider: Anthropic Ireland Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland

Information you provide within the scope of a contractual relationship may be fed into the provider's software in order to organise, analyse, aggregate, modify, evaluate or process it for the purposes of providing our service.

Information may also be transmitted to: Anthropic PBC, USA

The collection and further processing of this information is strictly limited to the purpose of contract fulfilment. Processing for the purposes of training and further development of the provider's AI language models is expressly prohibited.

Insofar as the processing is the subject of personal data, this takes place on the basis of our legitimate interest in efficiently designing our services and optimally utilising existing resources and technologies in accordance with Article 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider on our part, which ensures the protection of personal data processed by the provider and prohibits unauthorised transmission to third parties.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with European data protection standards.
- OpenAI

To provide our services, we use artificial intelligence software from the following provider: OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland

Information you provide within the scope of a contractual relationship may be fed into the provider's software in order to organise, analyse, aggregate, modify, evaluate or process it for the purposes of providing our service.
Information may also be transmitted to: OpenAI OpCo, LLC, USA

The collection and further processing of this information is strictly limited to the purpose of contract fulfilment. Processing for the purposes of training and further development of the provider's AI language models is expressly prohibited.

Insofar as the processing is the subject of personal data, this takes place on the basis of our legitimate interest in efficiently designing our services and optimally utilising existing resources and technologies in accordance with Article 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider on our part, which ensures the protection of personal data processed by the provider and prohibits unauthorised transmission to third parties.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with European data protection standards.

7.4 Use of Payment Service Providers (Payment Services)

- Apple Pay

If you choose the payment method "Apple Pay" from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment will be processed via the "Apple Pay" function on your device running iOS, watchOS or macOS by debiting a payment card stored with "Apple Pay". Apple Pay uses security functions integrated into your device's hardware and software to protect your transactions. To authorise a payment, you must enter a code previously set by you and verify your identity using the "Face ID" or "Touch ID" function on your device.

For the purposes of payment processing, the information you provided during the order process together with information about your order will be transmitted to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before transmitting the data to the payment service provider of the payment card stored in Apple Pay to carry out the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the original website to confirm successful payment.

Insofar as personal data is processed in the transmissions described, the processing takes place exclusively for the purpose of payment processing in accordance with Article 6(1)(b) GDPR.

Apple retains anonymised transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was successfully completed. Anonymisation ensures that personal reference is completely excluded. Apple uses the anonymised data to improve "Apple Pay" and other Apple products and services.

If you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made via Safari on your Mac, the Mac and the authorisation device communicate via an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you as an individual. You can disable the ability to use Apple Pay on your Mac in the settings of your iPhone. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac".

Further information on data protection for Apple Pay can be found at the following web address: https://support.apple.com/de-de/HT203027
- Google Pay

If you choose the payment method "Google Pay" from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment will be processed via the "Google Pay" application on your mobile device running at least Android 4.4 ("KitKat") and having NFC functionality by debiting a payment card stored with Google Pay or a verified payment system stored there (e.g. PayPal). To authorise a payment via Google Pay of more than €25, your mobile device must first be unlocked using the verification measure you have set up (such as facial recognition, password, fingerprint or pattern).

For the purposes of payment processing, the information you provided during the order process together with information about your order will be transmitted to Google. Google then transmits your payment information stored in Google Pay in the form of a uniquely assigned transaction number to the original website, with which a completed payment is verified. This transaction number contains no information on the actual payment data of your payment method stored in Google Pay, but is created and transmitted as a unique numerical token. In all transactions via Google Pay, Google acts merely as an intermediary for the processing of the payment transaction. The execution of the transaction takes place exclusively in the relationship between the user and the original website by charging the payment method stored with Google Pay.

Insofar as personal data is processed in the transmissions described, the processing takes place exclusively for the purpose of payment processing in accordance with Article 6(1)(b) GDPR.

Google reserves the right to collect, store and evaluate certain transaction-specific information for each transaction made via Google Pay. This includes the date, time and amount of the transaction, merchant location and description, a description of the goods or services purchased provided by the merchant, photos that you have attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction and, if applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively in accordance with Art. 6(1) lit. f GDPR on the basis of the legitimate interest in proper invoicing, verification of transaction data and optimisation and maintenance of the functionality of the Google Pay service.

Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when you use other Google services.

The terms and conditions of Google Pay can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information on data protection for Google Pay can be found at the following web address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- Klarna

One or more online payment methods of the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you select a payment method of the provider in which you make advance payment (such as credit card payment), your payment data provided in the course of the order process (including name, address, bank and payment card information, currency and transaction number) and information about the contents of your order will be passed on to the provider in accordance with Art. 6(1) lit. b GDPR. In this case, your data will only be passed on for the purpose of payment processing with the provider and only to the extent required for this purpose.

If you select a payment method in which the provider makes advance payment (such as purchase on account or instalment purchase or direct debit), you will also be asked to provide certain personal data in the order process (first and last name, street, house number, postal code, town or city, date of birth, email address, telephone number, data relating to an alternative payment method if applicable).

In order to protect our legitimate interest in assessing the creditworthiness of our customers, this data will be passed on to the provider by us in accordance with Art. 6(1) lit. f GDPR for the purpose of a credit check. The provider will check, on the basis of the personal data you have provided and other data (such as shopping basket, invoice amount, order history, payment experience), whether the payment method you have selected can be granted in view of payment and/or receivables default risks.

In addition to provider-internal criteria, identity and creditworthiness information from the following credit agencies may be included in the decision-making process in accordance with Art. 6(1) lit. f GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit information, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of score values includes, among other things but not exclusively, address data.

You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may continue to be entitled to process your personal data to the extent this is necessary for payment processing in accordance with the contract.
- PayPal

One or more online payment methods of the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method of the provider in which you make advance payment, your payment data provided in the course of the order process (including name, address, bank and payment card information, currency and transaction number) and information about the contents of your order will be passed on to the provider in accordance with Art. 6(1) lit. b GDPR. In this case, your data will only be passed on for the purpose of payment processing with the provider and only to the extent required for this purpose.

If you select a payment method in which we make advance payment, you will also be asked to provide certain personal data in the order process (first and last name, street, house number, postal code, town or city, date of birth, email address, telephone number, data relating to an alternative payment method if applicable).

In order to protect our legitimate interest in assessing your creditworthiness in such cases, this data will be passed on to the provider by us in accordance with Art. 6(1) lit. f GDPR for the purpose of a credit check. The provider will check, on the basis of the personal data you have provided and other data (such as shopping basket, invoice amount, order history, payment experience), whether the payment method you have selected can be granted in view of payment and/or receivables default risks.

The credit information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit information, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of score values includes, among other things but not exclusively, address data.

You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may continue to be entitled to process your personal data to the extent this is necessary for payment processing in accordance with the contract.
- PayPal Checkout

This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal's own payment methods and local payment methods from third-party providers.

When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "Pay Later" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") in the course of payment processing. The transfer takes place in accordance with Art. 6(1) lit. b GDPR and only to the extent necessary for payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal or – if offered – "Pay Later" via PayPal – PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6(1) lit. f GDPR on the basis of PayPal's legitimate interest in assessing your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of payment default for the purpose of deciding whether to provide the respective payment method. The credit information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit information, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of score values includes, among other things but not exclusively, address data. You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may continue to be entitled to process your personal data to the extent this is necessary for payment processing in accordance with the contract.

If the PayPal payment method "Purchase on Account" is available and you select it, your payment data will initially be transmitted to PayPal to prepare the payment, whereupon PayPal will forward this data to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") to carry out the payment. The legal basis is Art. 6(1) lit. b GDPR in each case. In this case, RatePay carries out an identity and creditworthiness check in its own name to assess creditworthiness according to the principle already mentioned above and passes your payment data to credit agencies on the basis of its legitimate interest in assessing creditworthiness in accordance with Art. 6(1) lit. f GDPR. A list of the credit agencies that Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/

When using a local third-party provider's payment method, your payment data will initially be transmitted to PayPal to prepare the payment in accordance with Art. 6(1) lit. b GDPR. Depending on your selection of an available local payment method, PayPal will then transmit your payment data to the corresponding provider in accordance with Art. 6(1) lit. b GDPR to carry out the payment:

- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further data protection information, please refer to PayPal's privacy policy: https://www.paypal.com/de/legalhub/paypal/privacy-full
- Shopify Payments

One or more online payment methods of the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

If you select a payment method of the provider in which you make advance payment (such as credit card payment), your payment data provided in the course of the order process (including name, address, bank and payment card information, currency and transaction number) and information about the contents of your order will be passed on to the provider in accordance with Art. 6(1) lit. b GDPR. In this case, your data will only be passed on for the purpose of payment processing with the provider and only to the extent required for this purpose.
- Stripe

One or more online payment methods of the following provider are available on this website: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland

If you select a payment method of the provider in which you make advance payment (such as credit card payment), your payment data provided in the course of the order process (including name, address, bank and payment card information, currency and transaction number) and information about the contents of your order will be passed on to the provider in accordance with Art. 6(1) lit. b GDPR. In this case, your data will only be passed on for the purpose of payment processing with the provider and only to the extent required for this purpose.

If you select a payment method in which the provider makes advance payment (such as purchase on account or instalment purchase or direct debit), you will also be asked to provide certain personal data in the order process (first and last name, street, house number, postal code, town or city, date of birth, email address, telephone number, data relating to an alternative payment method if applicable).

In order to protect our legitimate interest in assessing the creditworthiness of our customers, this data will be passed on to the provider by us in accordance with Art. 6(1) lit. f GDPR for the purpose of a credit check. The provider will check, on the basis of the personal data you have provided and other data (such as shopping basket, invoice amount, order history, payment experience), whether the payment method you have selected can be granted in view of payment and/or receivables default risks.

The credit information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit information, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of score values includes, among other things but not exclusively, address data.

You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may continue to be entitled to process your personal data to the extent this is necessary for payment processing in accordance with the contract.

7.5 Sanctions List Screening

In the course of initiating business relationships and processing orders, we reserve the right to check the personal data provided to us against sanctions lists of the European Union and/or its individual member states and to decide on the basis of the results of this check whether to enter into the business relationship or to execute the order.

This data processing is carried out in accordance with Art. 6(1) lit. c GDPR on the basis of our legal obligation to check and ensure that we do not enter into business relationships with sanctioned natural or legal persons and thus prevent the provision of resources to such persons.

7.6 Electronic Withdrawal Function for Distance Contracts

Consumers who conclude contracts on this website in respect of which a statutory right of withdrawal exists have the option to declare their withdrawal via an electronic withdrawal function in accordance with the applicable withdrawal regulations.

To provide the electronic withdrawal function, we use a solution from the following provider: Martini & Radl OG, Rubensgasse 9/7, 1040 Vienna, Austria.

When using the withdrawal function, in addition to information to identify the contract to be withdrawn, other personal information such as the consumer's first and last name and email address must be provided or confirmed.

This information is initially collected by the provider on the basis of our legitimate interest in a user-friendly, stable and process-optimised solution in accordance with Art. 6(1) lit. f GDPR, then used to confirm receipt of the withdrawal declaration in our name by email, and finally transmitted to us. We subsequently process the transmitted information for the proper handling of the withdrawal in accordance with Art. 6(1) lit. b GDPR and Art. 6(1) lit. c GDPR on the basis of our legal obligation to provide an electronic withdrawal function for paid consumer distance contracts.

The information collected by the provider is routinely deleted after final processing of a withdrawal, unless statutory retention requirements apply.

We have concluded a data processing agreement with the provider that protects the data processed within the framework of the withdrawal function and prohibits unauthorised transmission to third parties.

8) Web Analytics Services

8.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, cookies are set when you visit the website through Google (Universal) Analytics, which are stored as small text blocks on your device and collect certain information. This information includes your IP address, which, however, is shortened by Google to exclude the last digits, to exclude direct personal identification.

The information is transmitted to Google servers and processed there. Transmissions to Google LLC with headquarters in the USA are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activities for us, and to provide further services related to website and internet usage. The IP address transmitted by your browser within the scope of Google Analytics and shortened by Google will not be merged with other data held by Google. Data collected through Google (Universal) Analytics will be stored for a period of two months and then deleted.

All of the processing described above, in particular the setting of cookies on the device you are using, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR.
Without your consent, Google (Universal) Analytics will not be used during your visit to the site. You may revoke your consent at any time with effect for the future. To exercise your right to revoke, please deactivate this service via the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with Google which ensures the protection of your personal data and prohibits unauthorised disclosure to third parties.

Further legal information on Google (Universal) Analytics can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic Features
Google (Universal) Analytics uses the special "demographic features" function and can thereby create statistics that provide information about the age, gender and interests of site visitors. This is done through the analysis of advertising and information from third parties. This allows target audiences for marketing activities to be identified. However, the data collected cannot be attributed to any specific person and will be deleted after storage for a period of two months.

Google Signals
As an extension to Google (Universal) Analytics, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalised ads and linked your devices to your Google account, Google may, subject to your consent to use Google Analytics pursuant to Art. 6(1)(a) GDPR, analyse your usage behaviour across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the "Personalised advertising" function in your Google account settings. Please follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google (Universal) Analytics, the "UserIDs" function may be used on this website. If you have consented to the use of Google (Universal) Analytics pursuant to Art. 6(1)(a) GDPR, have created an account on this website, and log in to that account from different devices, your activities, including conversions, can be analysed across devices.

For data transfers to the USA, the provider has adopted the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.

8.2 Google Analytics 4

This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables analysis of your use of our website.

By default, cookies are set when you visit the website through Google Analytics 4. These are small text files stored on your device that collect certain information. This information includes your IP address, which Google shortens by removing the final digits to exclude direct personal identification.

The information is transmitted to Google's servers and further processed there. This may include transmissions to Google LLC, which is based in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activities for us, and to provide further services related to website and internet usage. The IP address transmitted by your browser within the scope of Google Analytics 4 and shortened by Google will not be merged with other data held by Google. Data collected through Google Analytics 4 will be stored for a period of two months and then deleted.

All of the processing described above, in particular the setting of cookies on the device you are using, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You may revoke your consent at any time with effect for the future. To exercise your right to revoke, please deactivate this service via the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with Google which ensures the protection of your personal data and prohibits unauthorised disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic Features
Google Analytics 4 uses the special "demographic features" function and can thereby create statistics that provide information about the age, gender and interests of site visitors. This is done through the analysis of advertising and information from third parties. This allows target audiences for marketing activities to be identified. However, the data collected cannot be attributed to any specific person and will be deleted after storage for a period of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalised ads and linked your devices to your Google account, Google may, subject to your consent to use Google Analytics pursuant to Art. 6(1)(a) GDPR, analyse your usage behaviour across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the "Personalised advertising" function in your Google account settings. Please follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the "UserIDs" function may be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6(1)(a) GDPR, have created an account on this website, and log in to that account from different devices, your activities, including conversions, can be analysed across devices.

For data transfers to the USA, the provider has adopted the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.

8.3 Lucky Orange

This website uses the web analysis service of the following provider: Lucky Orange LLC, 8665 W 96th St, Suite 100. Overland Park, Kansas, USA

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymised visitor data, including information about the device used such as the IP address and browser information, in order to evaluate it for statistical analyses of usage behaviour on our website and to create pseudonymised usage profiles. For example, the evaluation of movement patterns (so-called heatmaps) is possible, which show the duration of page visits and interactions with page content (e.g. text input, scrolling, clicks and mouse-overs). Pseudonymisation generally excludes direct personal identification. Data collected in this way is not merged with personal data collected by other means.

All of the processing described above, in particular the reading or storage of information on the device you are using, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider which ensures the protection of your personal data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has adopted the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.

8.4 Microsoft Clarity

This website uses the web analysis service of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymised visitor data, including information about the device used such as the IP address and browser information, in order to evaluate it for statistical analyses of usage behaviour on our website and to create pseudonymised usage profiles. For example, the evaluation of movement patterns (so-called heatmaps) is possible, which show the duration of page visits and interactions with page content (e.g. text input, scrolling, clicks and mouse-overs). Pseudonymisation generally excludes direct personal identification. Data collected in this way is not merged with personal data collected by other means.

All of the processing described above, in particular the reading or storage of information on the device you are using, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider which ensures the protection of your personal data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has adopted the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.

8.5 Shopify Analytics

This website uses the web analysis service of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymised visitor data, including information about the device used such as the IP address and browser information, in order to evaluate it for statistical analyses of usage behaviour on our website and to create pseudonymised usage profiles. For example, the evaluation of movement patterns (so-called heatmaps) is possible, which show the duration of page visits and interactions with page content (e.g. text input, scrolling, clicks and mouse-overs). Pseudonymisation generally excludes direct personal identification. Data collected in this way is not merged with personal data collected by other means.

All of the processing described above, in particular the reading or storage of information on the device you are using, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider which protects your personal data and prohibits disclosure to third parties.

In the case of data transfers to Canada, an appropriate level of data protection is ensured by an adequacy decision of the European Commission.

9) Retargeting/Remarketing and Conversion Tracking

9.1 Meta Pixel

Within our online offering, we use the "Meta Pixel" service from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta")

When a user clicks on an advertisement placed by us on Facebook and/or Instagram, the URL of our linked page is extended with a parameter by means of "Meta Pixel". After being redirected, this URL parameter is then entered into the user's browser via a cookie that our linked page itself sets.

This enables Meta to identify visitors to our online offering as a target audience for the display of advertisements (so-called "Ads"). Accordingly, we use the service to display the Facebook and/or Instagram ads we have placed only to those users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products, which are determined on the basis of the websites visited) which we transmit to Meta (so-called "Custom Audiences").

On the other hand, with the "Meta Pixel" it is possible to track whether users are redirected to our website after clicking on an advertisement and what actions they perform there (so-called "conversion tracking").

The data collected is anonymous for us and therefore provides us with no information about the identity of users. However, the data is stored and processed by Meta, which means a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes.

All of the processing described above, in particular the setting of cookies to read information from the device you are using, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider which ensures the protection of your personal data and prohibits unauthorised disclosure to third parties.

The information generated by Meta is generally transmitted to a Meta server and stored there; in this context, transmission to servers of Meta Platforms Inc. in the USA may also occur.

For data transfers to the USA, the provider has committed to the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

9.2 Google Ads Conversion Tracking

This website uses the online advertising programme "Google Ads" and, as part of Google Ads, conversion tracking from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google Adwords). With regard to the data from our advertising campaigns, we can determine how successful the individual advertising measures are. We pursue the aim of displaying advertising to you that is of interest to you, making our website more interesting for you, and achieving a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on a Google Ads advertisement. Cookies are small text files that are stored on your end device. These cookies generally lose their validity after 30 days and do not serve to personally identify you. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the advertisement and was directed to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information obtained by means of the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their advertisement and were redirected to a page marked with a conversion tracking tag. However, they do not receive any information that would allow users to be personally identified.

As part of the use of Google Ads, personal data may be transmitted to the servers of Google LLC in the USA.

For details on the processing triggered by Google Ads Conversion Tracking and Google's handling of website data, please refer to: https://policies.google.com/technologies/partner-sites

All processing described above, in particular the setting of cookies to read information on the end device used, will only be carried out if you have given us your explicit consent in accordance with Article 6 (1) (a) GDPR. You may revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

You can also permanently object to the setting of cookies through Google Ads Conversion Tracking by downloading and installing the Google browser plugin available under the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de

In order to address users whose data we have received in the context of business or business-like relationships with more targeted advertising, we use a customer matching function as part of Google Ads. For this purpose, we transmit one or more files with aggregated customer data (in particular email addresses and telephone numbers) electronically to Google. Google does not receive access to plaintext data, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to assign it to existing Google accounts that the data subjects have created. This enables the delivery of personalised advertising across all Google services linked to the respective Google account.

Customer data is transmitted to Google exclusively if you have given us explicit consent to do so in accordance with Article 6 (1) (a) GDPR. You may revoke this consent at any time with effect for the future. Further information on Google's data protection measures regarding the customer matching function can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Google's privacy policy can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

For data transfers to the USA, the provider has committed to the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

10) Website Functionalities

10.1 Judge.me

Our website contains graphic elements of the following provider to display external customer reviews and/or an externally awarded quality seal: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

When you visit a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers in order to load the elements properly. In doing so, certain browser information, including your IP address, is transmitted to the provider.

If personal data is processed in this process, this is done in accordance with Article 6 (1) (f) GDPR based on our legitimate interest in the optimal marketing of our offer and the attractive design of our website.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

When data is transmitted to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

10.2 Google Web Fonts

This website uses so-called Web Fonts from the following provider for uniform presentation of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you visit a page, your browser loads the required Web Fonts into your browser cache to display text and fonts correctly and establishes a direct connection to the provider's servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.

Data may also be transmitted to: Google LLC, USA

The processing of personal data in the course of contacting the font provider will only be carried out if you have given us your explicit consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the "Cookie Consent Tool" provided on the website. If your browser does not support Web Fonts, a standard font from your computer will be used.

For data transfers to the USA, the provider has committed to the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

Further information on Google's privacy policies can be found here: https://business.safety.google/intl/de/privacy/

10.3 Microsoft Teams

For the conduct of online meetings, video conferences and/or webinars, we use the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA

The provider processes various data, with the scope of data processed depending on which data you provide before or during your participation in an online meeting, video conference or webinar. Your data is processed as a communication participant and stored on the provider's servers. This may include in particular your login data (name, email address, telephone number (optional) and password) and session data (topic, participant IP address, device information, description (optional)).

In addition, image and audio contributions from participants and voice input in chats may be processed.
For the processing of personal data required to fulfil a contract with you (this also applies to processing operations required to carry out pre-contractual measures), Article 6 (1) (b) GDPR serves as the legal basis. Insofar as you have given us consent to process your data, the processing is carried out on the basis of Article 6 (1) (a) GDPR. You can revoke any consent given at any time with effect for the future.
Otherwise, the legal basis for data processing in the course of conducting online meetings, video conferences or webinars is our legitimate interest pursuant to Article 6 (1) (f) GDPR in the effective conduct of the online meeting, webinar or video conference.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has committed to the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

10.4 Shopsync for Shopify

This website uses the Shopify app "Shopsync" from ShopSync LLC, PO Box 252, Jefferson City, TN 37760, USA.
Using ShopSync, the newsletter service "Mailchimp" is synchronised with our Shopify account so that, on the one hand, updates in email lists from Mailchimp (such as a newsletter recipient opting out) are automatically entered into Shopify and, on the other hand, new contact data generated via contracts on Shopify are automatically transferred to Mailchimp's email lists.

In the former case, data processing is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in the effective and system-wide maintenance of files of advertising addressees and the efficient observance of legally significant changes in status.

In the second case, exclusively on the basis of explicit user consent in accordance with Article 6 (1) (a) GDPR, after a contract is concluded on Shopify, your first and last name, address and email address together with transaction-related information (purchase amount, time and date of purchase) are transmitted by ShopSync to Mailchimp for inclusion in the Mailchimp list.

Data transmitted in this way are not stored or retained by ShopSync after synchronisation. All information synchronised between Shopify and Mailchimp is transmitted using SSL (Secure Socket Layer) technology, and all transmitted information remains encrypted during the synchronisation process.

The synchronisation process requires the transmission of information over a secure connection to servers hosted by Amazon Web Services in the USA.

For further data protection information on ShopSync, please visit: https://www.shop-sync.com/privacy-policy

11) Tools and Other Services

11.1 AccountOne

To manage our accounting, we use the service of the cloud-based accounting software of the following provider: AccountOne GmbH, Fördepromenade 4d, 24944 Flensburg, Germany

The provider processes incoming and outgoing invoices and possibly also the bank movements of our company in order to automatically record invoices, match them to transactions and thereby create financial accounting in a semi-automated process.

If personal data is processed in this process, processing is carried out on the basis of our legitimate interest in efficient organisation and documentation of our business operations in accordance with Article 6 (1) (f) GDPR.

11.2 Billbee

To manage our accounting, we use the service of the cloud-based accounting software of the following provider: Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany

The provider processes incoming and outgoing invoices and possibly also the bank movements of our company in order to automatically record invoices, match them to transactions and thereby create financial accounting in a semi-automated process.

If personal data is processed in this process, processing is carried out on the basis of our legitimate interest in efficient organisation and documentation of our business operations in accordance with Article 6 (1) (f) GDPR.

11.3 Cookie Consent Tool

This website uses a so-called "Cookie Consent Tool" to obtain effective user consent for cookies requiring consent and cookie-based applications. The "Cookie Consent Tool" is displayed to users when the page is accessed in the form of an interactive user interface, where consents for specific cookies and/or cookie-based applications can be granted by checking boxes. In this process, all cookies/services requiring consent are only loaded when the user grants corresponding consents by checking boxes. This ensures that such cookies are only set on the user's end device if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this process.

If, in individual cases, personal data is processed for the purpose of storing, assigning or logging cookie settings (such as your IP address), this is done in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in compliant, user-specific and user-friendly consent management for cookies and thus in compliant design of our website.

A further legal basis for processing is Article 6 (1) (c) GDPR. As the responsible party, we are subject to a legal obligation to make the use of technically non-necessary cookies dependent on the respective user's consent.

Where required, we have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

Further information about the operator and the configuration options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

11.4 Judge.me

To verify and publish customer reviews, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

When you submit a review on our website, your first and last name, email address, order date and number as well as product name and international references (GTIN/ISDNF) are collected, transmitted to the provider and evaluated there to decide on the legitimacy of a customer review for a specific order. This processing is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in ensuring the authenticity of customer reviews by verifying transaction-relatedness and preventing review abuse. After the review has been checked and approved, the data is deleted by the provider.

When data is transmitted to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

12) Rights of the Data Subject

12.1 The applicable data protection law grants you the following rights as a data subject (rights to information and intervention) in relation to the controller regarding the processing of your personal data, with reference being made to the legal basis cited for the respective conditions of exercise:

• Right of access pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restrict processing pursuant to Art. 18 GDPR;
• Right to notification pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent given pursuant to Art. 7 para. 3 GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

12.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE SHALL CEASE PROCESSING THE DATA IN QUESTION. FURTHER PROCESSING SHALL HOWEVER BE PERMITTED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSES OF DIRECT MARKETING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE SHALL CEASE PROCESSING THE DATA IN QUESTION FOR DIRECT MARKETING PURPOSES.

13) Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing and – where applicable – additionally by the respective statutory retention period (e.g. commercial and tax law retention periods).

In the case of processing of personal data on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the data in question shall be stored until you revoke your consent.

Where statutory retention periods exist for data processed on the basis of contractual or quasi-contractual obligations pursuant to Art. 6 para. 1 lit. b GDPR, such data shall be routinely deleted after expiry of the retention period, provided that it is no longer required for the fulfilment or initiation of the contract and/or we do not have a legitimate interest in continued storage on our part.

In the case of processing of personal data on the basis of Art. 6 para. 1 lit. f GDPR, such data shall be stored until you exercise your right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

In the case of processing of personal data for the purposes of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, such data shall be stored until you exercise your right to object pursuant to Art. 21 para. 2 GDPR.

Insofar as nothing to the contrary emerges from the other information in this declaration regarding specific processing situations, stored personal data shall otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.