Privacy policy

1) Introduction and Contact Details of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how your personal data is handled when you use our website. Personal data means all data that can be used to identify you personally.

1.2 The data controller responsible for processing data on this website within the meaning of the General Data Protection Regulation (GDPR) is petit cochon Manufaktur GmbH, Manfred-von-Richthofen-Str. 15, 12101 Berlin, Germany, Tel.: +493046665691, Email: kontakt@petit-co.com. The data controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we collect only the data that your browser transmits to the page server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Website visited
Date and time of access
Amount of data sent in bytes
Source/referrer from which you accessed the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or otherwise used. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the padlock symbol in your browser’s address bar.

3) Hosting & Content Delivery Network

3.1 Shopify

For hosting our website and displaying its content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider’s servers. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

When data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

3.2 Shopify

We use a content delivery network provided by the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)

Data may also be transferred to:

Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service enables us to deliver large media files, such as graphics, page content, or scripts, more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

When data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

For data transfers to the USA, the data recipient has joined the EU–US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with European data protection standards.

4) Cookies

To make visiting our website attractive and enable the use of certain functions, we use cookies, i.e. small text files stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your device for longer and enable page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage period in your web browser’s cookie settings overview.

If individual cookies used by us also process personal data, processing is carried out pursuant to Art. 6(1)(b) GDPR either to perform the contract, pursuant to Art. 6(1)(a) GDPR where consent has been given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly and effective browsing experience.

You can configure your browser to notify you when cookies are set and decide individually whether to accept them, or to exclude the acceptance of cookies in certain cases or generally.

Please note that rejecting cookies may limit the functionality of our website.

5) Contact

5.1 Judge.me

For review reminders, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

Solely on the basis of your express consent pursuant to Art. 6 para. 1 lit. a GDPR, we transmit your email address and, where applicable, additional customer data to the provider so that it can contact you by email with a reminder to submit a review.

You may withdraw your consent at any time with effect for the future, either from us or from the provider.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Where data is transferred to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

5.2 WhatsApp Business

You have the option of contacting us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called “Business version” of WhatsApp.

If you contact us via WhatsApp in connection with a specific transaction, such as an order you have placed, we store and use the mobile telephone number you use for WhatsApp and, if provided, your first and last name pursuant to Art. 6 para. 1 lit. b GDPR to process and respond to your inquiry. On the same legal basis, we may ask you via WhatsApp to provide additional information, such as your order number, customer number, address, or email address, so that we can assign your inquiry to a specific matter.

If you use our WhatsApp contact for general inquiries, such as questions about our range of services, availability, or website, we store and use the mobile telephone number you use for WhatsApp and, if provided, your first and last name pursuant to Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in providing the requested information efficiently and promptly.

Your data is used solely to respond to your inquiry via WhatsApp. It is not shared with third parties.

Please note that WhatsApp Business accesses the address book of the mobile device we use for this purpose and automatically transfers the telephone numbers stored in the address book to a server of its parent company, Meta Platforms Inc., in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact details of users who have also contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, upon first using the app on their device by accepting WhatsApp's Terms of Service, to the transmission of their WhatsApp telephone number from the address books of their chat contacts pursuant to Art. 6 para. 1 lit. a GDPR. The transmission of data belonging to users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

For information on the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your related rights and settings options for protecting your privacy, please refer to WhatsApp’s privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider that protects our visitors’ data and prohibits disclosure to third parties.

As part of the processing activities mentioned above, data may be transferred to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with European data protection standards.

5.3 When contacting us, for example via the contact form or email, personal data is processed exclusively for the purpose of handling and responding to your request and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted when the circumstances indicate that the matter in question has been conclusively clarified and provided that no statutory retention obligations prevent this.

6) Comment function

As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the commenter name you selected is stored and published on this website. Your IP address is also logged and stored. This IP address is stored for security reasons and in case the person concerned infringes the rights of third parties or posts unlawful content through a submitted comment. We require your email address in order to contact you if a third party objects to your published content as unlawful.

The legal bases for storing your data are Art. 6(1)(b) and (f) GDPR. We reserve the right to delete comments if third parties object to them as unlawful.

7) Data processing when opening a customer account

Pursuant to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. You can see which data is required to open the account in the input form for the relevant form on our website.

You may delete your customer account at any time by sending a message to the above-mentioned address of the data controller. After your customer account is deleted, your data will be deleted provided that all contracts concluded through the account have been fully settled, no statutory retention periods prevent this, and we have no legitimate interest in continuing to store the data.

8) Use of customer data for direct marketing

8.1 Sign-up for our email newsletter

When you subscribe to our email newsletter, we regularly send you information about our offers. The only mandatory information required to send the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. To send the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive newsletters after expressly confirming your consent to receive them by clicking a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. In this process, we store the IP address registered by your Internet service provider (ISP), as well as the date and time of subscription, in order to be able to trace any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used strictly for the specified purpose.

You can unsubscribe from the newsletter at any time using the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data in another way that is legally permitted and about which we inform you in this notice.

8.2 Omnisend

Our email newsletters are sent via this provider: Soundest Ltd., Unit a3, Gateway Tower, 32 Western Gateway, London E16 1YL, England

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we share the data you provided when subscribing to the newsletter with this provider pursuant to Art. 6(1)(f) GDPR, so that the provider can send the newsletter on our behalf.

Subject to your express consent pursuant to Art. 6(1)(a) GDPR, the provider also conducts a statistical analysis of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the newsletter content. Device information (e.g., the time of access, IP address, browser type, and operating system) is also collected and analyzed, but is not combined with other data sets.
You may withdraw your consent to newsletter tracking at any time, with effect for the future.

We have concluded a data processing agreement with the provider that protects our visitors’ data and prohibits disclosure to third parties.

Where data is transferred to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

8.3 Shopify Email

Our email newsletters are sent via this provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

We have concluded a data processing agreement with the provider that protects our visitors’ data and prohibits disclosure to third parties.

When data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

8.4 Product availability notifications by email

You can sign up to receive email availability notifications for items that are temporarily unavailable. We will send you a one-time email notifying you when the selected item becomes available. The only required information for sending this notification is your email address. Providing additional information is voluntary and may be used to address you personally. For sending emails, we use the so-called double opt-in procedure, which ensures that you receive a notification only after you have expressly confirmed your consent by clicking a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. In this process, we store the IP address registered by your Internet service provider (ISP), as well as the date and time of registration, so that any potential misuse of your email address can be traced at a later date. The data we collect when you register for our email product-availability notification service is used strictly for the specified purpose.

You can unsubscribe from availability notifications at any time by sending an appropriate message to the responsible party named above. After unsubscribing, your email address will be deleted immediately from the distribution list set up for this purpose, unless you have expressly consented to further use of your data or we have reserved the right to use your data beyond this scope where legally permitted and have informed you of this in this notice.

8.5 Shopping cart reminders by email

If you abandon your purchase with us before completing your order, you have the option of receiving a one-time email reminder about the contents of your virtual shopping cart.

The only required information for sending this reminder is your email address. Providing additional information is voluntary and may be used to address you personally. For sending emails, we use the so-called double opt-in procedure, which ensures that you receive a notification only after you have expressly confirmed your consent by clicking a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR to send a cart reminder. For this purpose, we store the IP address registered by your Internet service provider (ISP), as well as the date and time of registration, so that we can trace any potential misuse of your email address at a later date. The data we collect when you register for our email notification service is used strictly for the specified purpose.

You may unsubscribe from cart reminders at any time by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be immediately deleted from the distribution list established for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, as permitted by law and as described in this notice.

8.6 Advertising by post
On the basis of our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, postal address and, insofar as we have received these additional details from you in the context of the contractual relationship, your title, academic degree, year of birth, and professional, industry, or business designation in accordance with Art. 6(1)(f) GDPR, and to use them to send you interesting offers and information about our products by post.
You may object to the storage and use of your data for this purpose at any time by contacting us.

9) Data processing for order processing

9.1 Sending image files by email for order processing

On our website, we offer customers the opportunity to commission the personalization of products by sending image files by email. The submitted image is used as a template for personalizing the selected product.

Using the email address provided on the website, the customer can send us one or more image files from the storage of the device being used. We then collect, store, and use the files sent in this way exclusively to create the personalized product as described in the relevant service description on our website. If the image files submitted are forwarded to specialized service providers for the production and processing of the order, you will be explicitly informed of this in the following paragraphs. No further disclosure will take place. If the submitted files or digital designs contain personal data (in particular images of identifiable individuals), all of the processing operations just mentioned will be carried out exclusively for the purpose of processing your online order in accordance with Art. 6(1)(b) GDPR.

After the order has been fully processed, the transmitted image files will be automatically and completely deleted.

9.2 Transmission of image files for order processing via the messaging function

If the customer has the option of ordering product personalization by transmitting image files via the messaging function, the submitted image will be used as a template for personalizing the selected product.

Using the available messaging function, the customer can send one or more image files from the storage of the device being used to us. We then collect, store, and use the files transmitted in this way exclusively to produce the personalized product as described in the respective description of our services.

If the transmitted image files are forwarded to specialized service providers for producing and processing the order, you will be explicitly informed of this in the following paragraphs. No further disclosure will take place. If the transmitted files or digital motifs contain personal data (in particular images of identifiable persons), all of the processing operations just described will be carried out exclusively for the purpose of processing your online order pursuant to Art. 6(1)(b) GDPR.

After the order has been fully processed, the transmitted image files will be automatically and completely deleted.

9.3 To the extent required for contract processing for delivery and payment purposes, the personal data we collect will be passed on pursuant to Art. 6(1)(b) GDPR to the commissioned transport company and the commissioned credit institution.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided when placing your order in order to inform you personally as part of our statutory information obligations pursuant to Art. 6(1)(c) GDPR. Your contact details are used strictly for the purpose of notifying you about updates owed by us and are processed by us for this purpose only to the extent necessary for the respective notification.

To process your order, we also work with the service provider(s) listed below, who support us in whole or in part in carrying out the contracts concluded with you. Certain personal data will be transmitted to these service providers in accordance with the following information.

9.4 EasyDHL

For shipment preparation, we use the services of the following provider: 247APPS UG (limited liability), In der Goldgrube 28, 56073 Koblenz

In accordance with Art. 6 para. 1 lit. b GDPR, we transmit digital shipping labels containing your delivery information exclusively for processing your online order from our order processing system to the provider, which then sends them to our local printers to enable printing. The data is shared only to the extent actually necessary for processing.

9.5 EasyReturns

For registering and organizing returns, we use an application provided by: 247APPS UG (haftungsbeschränkt), In der Goldgrube 28, 56073 Koblenz

Using an input form, customers can access their order by entering their email address and order number, register eligible items for a return, and, by providing their name and address, generate and download a return label directly.

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in efficiently organizing our business operations and customer-friendly contract management.

We have concluded a data processing agreement with the provider that protects our visitors’ data and prohibits disclosure to third parties.

9.6 Disclosure of personal data to shipping service providers

- Deutsche Post

We use the following provider as our transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

In accordance with Art. 6 para. 1 lit. a GDPR, before dispatching the goods we will forward your email address and/or telephone number to the provider for the purpose of coordinating a delivery date or announcing the delivery, provided that you have expressly consented to this during the ordering process. Otherwise, for the purpose of delivery and in accordance with Art. 6 para. 1 lit. b GDPR, we will forward only the recipient’s name and delivery address to the provider. The data will be shared only to the extent necessary for delivering the goods. In this case, it will not be possible to coordinate the delivery date with the provider in advance or announce the delivery.

Consent may be revoked at any time with effect for the future by contacting the controller identified above or the provider.
- DHL

We use the following provider as our transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

Consent may be revoked at any time with effect for the future by contacting the controller identified above or the provider.

9.7 Use of payment service providers (payment services)

- Apple Pay

If you choose the payment method “Apple Pay” provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing will take place via the “Apple Pay” function on your device running iOS, watchOS, or macOS by charging a payment card stored in “Apple Pay.” Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. Authorizing a payment therefore requires entering a code previously set by you and verification using the “Face ID” or “Touch ID” function of your device.

For payment processing, the information you provided during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before transmitting it to the payment service provider for the payment card stored in Apple Pay to process the payment. The encryption ensures that only the website where the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm that the payment was successful.

If personal data is processed as part of the transfers described, it is processed exclusively for the purpose of payment processing in accordance with Article 6(1)(b) GDPR.

Apple retains anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was completed successfully. Anonymization completely excludes any link to an individual. Apple uses the anonymized data to improve “Apple Pay” and other Apple products and services.

If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made through Safari on your Mac, the Mac and the authorization device communicate via an encrypted channel on Apple’s servers. Apple does not process or store any of this information in a format that could identify you. You can disable the option to use Apple Pay on your Mac in your iPhone settings. Go to “Wallet & Apple Pay” and disable “Allow Payments on Mac.”

Further information on data protection with Apple Pay can be found at the following web address: https://support.apple.com/de-de/HT203027
- Google Pay

If you choose the “Google Pay” payment method provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), payment processing takes place through the “Google Pay” application on your mobile device running at least Android 4.4 (“KitKat”) and equipped with NFC functionality, by charging a payment card stored in Google Pay or a payment system verified there (e.g., PayPal). To authorize a payment via Google Pay exceeding €25, you must first unlock your mobile device using the configured verification method (such as facial recognition, a password, fingerprint, or pattern).

For payment processing purposes, the information you provide during the ordering process, together with information about your order, is transmitted to Google. Google then transmits your payment information stored in Google Pay to the originating website in the form of a one-time transaction number, which is used to verify that payment has been made. This transaction number contains no information about the actual payment details of the payment methods stored in your Google Pay account; instead, it is created and transmitted as a one-time numeric token. For all transactions via Google Pay, Google acts solely as an intermediary for processing the payment. The transaction is carried out exclusively between the user and the originating website by charging the payment method stored in Google Pay.

If personal data is processed as part of the transfers described, it is processed exclusively for the purpose of payment processing in accordance with Article 6(1)(b) GDPR.

Google reserves the right to collect, store, and analyze certain transaction-specific information for every transaction made via Google Pay. This includes the date, time, and amount of the transaction, the merchant's location and description, a description of the purchased goods or services provided by the merchant, photos you have attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction, and, where applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively in accordance with Article 6(1)(f) GDPR, based on the legitimate interest in proper accounting, verifying transaction data, and optimizing and maintaining the functionality of the Google Pay service.

Google also reserves the right to combine the transaction data processed with other information collected and stored by Google when using other Google services.

The Google Pay Terms of Use can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information about data protection with Google Pay can be found at the following web address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- Klarna

One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you select a payment method offered by the provider that requires you to pay in advance (such as payment by credit card), your payment data provided during the ordering process (including your name, address, bank and payment card information, currency, and transaction number) as well as information about the contents of your order will be disclosed to the provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data will be disclosed exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

When you select a payment method where the provider pays in advance (such as purchase on invoice or in installments, or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, where applicable, details of an alternative payment method).

To safeguard our legitimate interest in determining our customers' ability to pay, we will forward this data to the provider for the purpose of a credit assessment in accordance with Art. 6(1)(f) GDPR. Based on the personal data you provide and other data (such as shopping cart contents, invoice amount, order history, and payment history), the provider checks whether the payment option you selected can be granted with regard to the risks of payment default and/or non-collection of claims.

For the decision as part of the application review, identity and creditworthiness information from the following credit agencies may also be taken into account in addition to the provider's internal criteria in accordance with Art. 6(1)(f) GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). Where score values are included in the results of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data.

You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may nevertheless remain entitled to process your personal data if this is necessary to process the payment in accordance with the contract.
- PayPal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

When you select a payment method provided by the provider for which you make an advance payment, the payment data you provide during the ordering process (including your name, address, bank and payment card information, currency, and transaction number), as well as information about the contents of your order, will be disclosed to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data will be disclosed exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

When you select a payment method for which we make an advance payment, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, where applicable, details of an alternative payment method).

In such cases, in order to safeguard our legitimate interest in determining your ability to pay, we will forward this data to the provider for the purpose of a credit assessment in accordance with Art. 6(1)(f) GDPR. Based on the personal data you provide and other data (such as shopping cart contents, invoice amount, order history, and payment history), the provider checks whether the payment option you selected can be granted with regard to the risks of payment default and/or non-collection of claims.

This website uses PayPal Checkout, an online payment system from PayPal consisting of PayPal’s own payment methods and local payment methods from third-party providers.

When paying via PayPal, by credit card via PayPal, by direct debit via PayPal, or—if offered—via “Pay Later” via PayPal, we will forward your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) as part of the payment processing. The data is transferred pursuant to Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary to process the payment.

For the payment methods credit card via PayPal, direct debit via PayPal, or—if offered—“Pay Later” via PayPal, PayPal reserves the right to obtain a credit report. For this purpose, your payment data may be forwarded to credit agencies pursuant to Art. 6 para. 1 lit. f GDPR, based on PayPal’s legitimate interest in determining your ability to pay. PayPal uses the result of the credit check regarding the statistical probability of payment default to decide whether to provide the respective payment method. The credit report may contain probability values (known as score values). Where score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but is not limited to, address data. You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may nevertheless remain entitled to process your personal data if this is necessary to process the payment in accordance with the contract.

If the PayPal payment method “Pay Later by Invoice” is available and selected, your payment data will initially be transmitted to PayPal to prepare the payment, whereupon PayPal will forward it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin (“Ratepay”) to process the payment. The legal basis in each case is Art. 6 para. 1 lit. b GDPR. In this case, Ratepay conducts an identity and creditworthiness check in its own name to determine your ability to pay, in accordance with the principle already described above, and forwards your payment data to credit agencies based on its legitimate interest in determining your ability to pay pursuant to Art. 6 para. 1 lit. f GDPR. A list of the credit agencies Ratepay may consult can be found here: https://www.ratepay.com/legal-payment-creditagencies/

When using the payment method of a local third-party provider, your payment data will initially be forwarded to PayPal to prepare the payment in accordance with Art. 6 para. 1 lit. b GDPR. Depending on your selection of an available local payment method, PayPal will then transmit your payment data to the respective provider to process the payment in accordance with Art. 6 para. 1 lit. b GDPR:

- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further information on data protection, please refer to PayPal's privacy policy: https://www.paypal.com/de/legalhub/paypal/privacy-full
- Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

9.8 Electronic withdrawal function for distance contracts

Consumers who conclude contracts on this website for which a statutory right of withdrawal exists have the option of declaring their withdrawal via an electronic withdrawal function in accordance with the applicable withdrawal provisions.

To provide the electronic withdrawal function, we use a solution from the following provider: Visionz GmbH, Richthofenstr. 29, 31137 Hildesheim, Germany.

When using the withdrawal function, in addition to information identifying the contract to be withdrawn, other personal information such as the consumer's first and last name and email address must be provided or confirmed.

This information is initially collected by the provider on the basis of our legitimate interest in a user-friendly, stable, and process-optimized solution pursuant to Art. 6(1)(f) GDPR, then used to confirm receipt of the withdrawal declaration by email on our behalf, and finally transmitted to us. We subsequently process the transmitted information to properly process the withdrawal pursuant to Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR, on the basis of our legal obligation to provide an electronic withdrawal function for consumer distance contracts subject to payment.

The information collected by the provider is routinely deleted after a withdrawal has been fully processed, unless statutory retention obligations prevent this.

We have concluded a data processing agreement with the provider that protects the data processed as part of the withdrawal function and prohibits unauthorized disclosure to third parties.

10) Online Marketing

Google AdSense

This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies, text files that are stored on your computer and enable an analysis of your use of the website. In addition, Google AdSense also uses so-called "web beacons" (small invisible graphics) to collect information. Their use can record, collect, and evaluate simple actions such as visitor traffic on the website. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is generally transmitted to a Google server and stored there. This may also involve transmission to the servers of Google LLC. in the USA.

Google uses the information obtained in this way to analyze your usage behavior with regard to AdSense advertisements. The IP address transmitted by your browser as part of Google AdSense is not merged with other data held by Google. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process this data on Google's behalf.
All processing described above, in particular the reading of information from the device used via cookies and/or web beacons, is carried out only if you have given us your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR. Without this consent, Google AdSense will not be used during your visit to the website.

You may withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

For data transfers to the USA, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

11) Web analytics services

11.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables analysis of your use of our website.

By default, Google (Universal) Analytics sets cookies when you visit the website. These are small text files stored on your device that collect certain information. This information also includes your IP address, although Google truncates the last digits to prevent direct identification of individuals.

The information is transferred to Google servers and further processed there. This may also involve transfers to Google LLC, based in the United States.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet use. The truncated IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. The data collected as part of the use of Google (Universal) Analytics is stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the device used, takes place only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR.
Without your consent, Google (Universal) Analytics will not be used during your visit to the website. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

Further legal information on Google (Universal) Analytics can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and under https://policies.google.com/technologies/partner-sites

Demographics
Google (Universal) Analytics uses the special “demographics” feature to compile statistics about the age, gender, and interests of visitors to the website. This is done by analyzing advertising and information from third parties. This makes it possible to identify target groups for marketing activities. However, the data collected cannot be attributed to any specific person and is deleted after being stored for a period of two months.

Google Signals
As an extension of Google (Universal) Analytics, this website may use Google Signals to create cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including models for cross-device conversions. We do not receive personal data from Google, only statistics. If you want to stop cross-device analysis, you can disable the "Personalized advertising" feature in your Google account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension of Google (Universal) Analytics, this website may use the "UserIDs" feature. If you have consented to the use of Google (Universal) Analytics pursuant to Art. 6(1)(a) GDPR, created an account on this website, and sign in to that account on different devices, your activities, including conversions, may be analyzed across devices.

11.2 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables analysis of your use of our website.

By default, Google Analytics 4 sets cookies when you visit the website. These are small text files stored on your device that collect certain information. This information also includes your IP address, although Google truncates the final digits to prevent direct identification of individuals.

The information is transferred to Google servers and further processed there. This may also involve transfers to Google LLC, based in the United States.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet use. The truncated IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. Data collected through the use of Google Analytics 4 is stored for two months and then deleted.

All processing described above, in particular the setting of cookies on the device used, takes place only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

Further legal information about Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de, and at https://policies.google.com/technologies/partner-sites

Demographics
Google Analytics 4 uses the special “demographics” feature and can use it to generate statistics providing information about the age, gender, and interests of site visitors. This is done by analyzing advertising and information from third parties. This makes it possible to identify target groups for marketing activities. However, the collected data cannot be attributed to any specific person and is deleted after being stored for a period of two months.

Google Signals
As an extension of Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google Account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including those relating to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the “Personalized advertising” function in your Google Account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the “UserIDs” function may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR, have created an account on this website, and log in to this account on various devices, your activities, including conversions, may be analyzed across devices.

11.3 Google Tag Manager

This website uses “Google Tag Manager”, a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).

Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analytics services, and for calibrating, controlling, and making them conditional through a unified user interface. Google Tag Manager itself does not store or read any information on users’ devices. Nor does the service perform any independent data analyses. However, when a page is accessed, Google Tag Manager transmits your IP address to Google, where it may be stored. It is also possible that the data may be transmitted to servers of Google LLC. in the USA.

This processing is only carried out if you have given us your explicit consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Google Tag Manager will not be used during your visit to the website. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further legal information about Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de

11.4 Lucky Orange

This website uses the web analytics service of the following provider: Lucky Orange LLC, 8665 W 96th St, Suite 100. Overland Park, Kansas, USA

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used, such as the IP address and browser information, in order to evaluate it for statistical analyses of user behavior on our website and create pseudonymized usage profiles. This also makes it possible to analyze movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g., text input, scrolling, clicks, and mouse-overs). Pseudonymization generally rules out direct identification of individuals. The data is not combined with other personally identifiable data collected by other means.

All processing described above, in particular the reading or storage of information on the device used, is carried out only if you have expressly consented to this in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

11.5 PayPal Marketing Solutions

This website uses the web analytics service of the following provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

11.6 Shopify Analytics

This website uses the web analytics service of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used, such as the IP address and browser information, in order to evaluate it for statistical analyses of user behavior on our website and create pseudonymized usage profiles. Pseudonymization generally rules out direct identification of individuals. The data is not combined with other personally identifiable data collected by other means.

We have concluded a data processing agreement with the provider that protects our visitors’ data and prohibits disclosure to third parties.

When data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

12) Retargeting/Remarketing and conversion tracking

12.1 Google Ads Remarketing

This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

For this purpose, Google places a cookie in your device’s browser that automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. The information collected in this process generally also includes your IP address.

Any further processing of data takes place only if you have consented to Google linking your internet and app browsing history with your Google account and using information from your Google account to personalize the ads you view on the web. If you are logged in to Google while visiting our website in this case, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to create audiences. As part of using Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC. in the USA.

All processing described above, in particular the setting of cookies to read information on the device being used, is carried out only if you have expressly consented to this in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, retargeting technology will not be used during your visit to the website.

You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website.

Details about the processing initiated by Google and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

Further information about Google’s data protection provisions can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

12.2 Google Ads Conversion Tracking

This website uses the online advertising program “Google Ads” and, as part of Google Ads, conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google Ads). In connection with the data from the advertising campaigns, we can determine how successful the individual advertising measures are. Our aim is to display advertising that is of interest to you, make our website more appealing to you, and ensure fair calculation of the resulting advertising costs.

The conversion-tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages of this website while the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of Google Ads customers. The information collected using the conversion cookie, which includes your IP address, is used to compile conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion-tracking tag. However, they do not receive any information that can be used to personally identify users. As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.

Details of the processing activities initiated by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

All processing activities described above, in particular the setting of cookies to read information on the device used, are carried out only if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in available at the following link from Google:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have disabled the use of cookies.
Google's privacy policies can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

13) Page functionalities

13.1 Facebook Plugins

Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins enable direct interactions with content on the social network.

To enhance the protection of your data when visiting our website, the plugins are initially integrated into the page in a deactivated state using a so-called “2-click” or “Shariff” solution.

This integration ensures that no connection to the provider’s servers is established when you access a page on our website containing such plugins.

If you are logged into an existing user profile on the provider’s social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You can withdraw your consent at any time by clicking the activated plugin again to deactivate it. However, withdrawing your consent does not affect data that has already been transferred to the provider.

Data may also be transferred to: Meta Platforms Inc., USA

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

13.2 Instagram Plugins

Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins enable direct interactions with content on the social network.

To enhance the protection of your data when visiting our website, the plugins are initially integrated into the page in a deactivated state using a so-called “2-click” or “Shariff” solution.

This integration ensures that no connection to the provider’s servers is established when you access a page on our website containing such plugins.

Only when you activate the plugins and thereby consent to the transfer of data pursuant to Art. 6(1)(a) GDPR does your browser establish a direct connection to the provider’s servers. In this process, regardless of whether you are logged into an existing user profile, certain information about the device you are using (including your IP address), your browser, and your browsing history is transmitted to the provider and, where applicable, further processed there.

If you are logged into an existing user profile on the provider’s social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You can withdraw your consent at any time by clicking the activated plugin again to deactivate it. However, withdrawing your consent does not affect data that has already been transferred to the provider.

Data may also be transferred to: Meta Platforms Inc., USA

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

13.3 Pinterest Plugins

Our website uses plugins from the social network of the following provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland

These plugins enable direct interactions with content on the social network.

To enhance the protection of your data when visiting our website, the plugins are initially integrated into the page in a deactivated state using a so-called “2-click” or “Shariff” solution.

This integration ensures that no connection to the provider’s servers is established when you access a page on our website containing such plugins.

Data may also be transferred to: Pinterest Inc., USA

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on the European Commission’s Standard Contractual Clauses, which are intended to ensure compliance with European data protection standards.

13.4 YouTube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transferred to: Google LLC., USA

When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers at the latest when video playback begins in order to load the content. Certain information, including your IP address, is transmitted to the provider in this process.

When playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent misuse.

If you are logged into a user account with the provider during your visit to the website, your data will be assigned directly to your account when you click on a video. If you do not wish this assignment to your account, you must log out before pressing the play button.

All of the aforementioned processing activities, in particular the setting of cookies to read information from the end device used, are carried out only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service via the “Cookie Consent Tool” provided on the website.

13.5 Judge.me

Our website incorporates graphic elements from the following provider to display external customer reviews and/or an externally awarded seal of quality: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

When you access a page on our website that contains such graphic elements, your browser establishes a direct connection to the provider’s servers in order to load the elements properly. Certain browser information, including your IP address, is transmitted to the provider in this process.

If personal data is processed in this context, this is done pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in optimally marketing our services and designing our website attractively.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Where data is transferred to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

13.6 Google Maps

This website uses an online map service provided by: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service for displaying interactive maps, including maps of geographic areas, to present geographical information visually. Using this service shows you our location and makes it easier to plan a route to us.

When you access the subpages into which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google’s servers and stored there; this may also involve transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account that you are logged into or whether a user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not want this association with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them.

The collection, storage, and analysis are carried out pursuant to Art. 6 (1) (f) GDPR on the basis of Google’s legitimate interest in displaying personalized advertising, conducting market research, and/or designing Google websites according to users’ needs. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google. If you do not agree to the future transmission of your data to Google when using Google Maps, you can also completely deactivate Google Maps by disabling JavaScript in your browser. Google Maps, and therefore the map display on this website, can then no longer be used.

Where legally required, we have obtained your consent to the processing of your data described above pursuant to Art. 6 (1) (a) GDPR. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the procedure for submitting an objection described above.

Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/

13.7 Google Web Fonts

To ensure consistent font display, this website uses so-called web fonts from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you access a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly and establishes a direct connection to the provider’s servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.

Data may also be transmitted to: Google LLC, USA

Personal data is processed in the course of establishing a connection with the provider of the fonts only if you have given us your express consent to do so in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service via the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a standard font from your computer is used.

Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/

13.8 - Google reCAPTCHA

On this website, we use the CAPTCHA service provided by: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA.

For the visual design of the CAPTCHA window, the provider uses “Google Fonts,” i.e. fonts loaded from the internet by Google. No additional information beyond that mentioned above, which is already transmitted to Google through the functionality of reCAPTCHA, is processed in this context.

The service checks whether an input is made by a natural person or abusively through machine-based and automated processing, and blocks spam, DDoS attacks, and similar automated malicious access attempts. To ensure that an action is performed by a human and not an automated bot, the provider collects the IP address of the device used, identifying data about the browser and operating system type used, as well as the date and duration of the visit, and transmits this data to the provider’s servers for analysis. Cookies may be used for this purpose, i.e. small text files stored in the browser of the device used.

If the processing described above is carried out on the basis of cookies, these are only set if you have given us your express consent to do so in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in determining individual personal responsibility on the internet and preventing misuse and spam in accordance with Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

13.9 Google Customer Reviews (formerly Google Certified Merchant Program)

We work with Google as part of the “Google Customer Reviews” program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program gives us the opportunity to obtain customer reviews from users of our website. In this context, after using our services, you will be asked on our website whether you would like to participate in a Google email survey.

If you give your consent pursuant to Art. 6(1)(a) GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchasing experience on our website. The review you submit will subsequently be combined with our other reviews and displayed in our Google Customer Reviews logo and our Merchant Center dashboard. Your review will also be used for Google Seller Ratings. As part of using Google Customer Reviews, personal data may also be transmitted to the servers of Google LLC in the USA.

You can revoke your consent at any time by sending a message to the data controller or to Google.

Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/

13.10 Microsoft Forms

For conducting surveys or using online forms, we use the services of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

The provider enables us to create and evaluate surveys and online forms. In addition to the personal data you enter into the forms, information about your operating system, browser, the date and time of your visit, the referrer URL, and your IP address is also collected, transmitted to the provider, and stored on the provider’s servers.

The information you enter into the forms is stored with password protection to ensure that access by third parties is excluded and that only we can evaluate the data for the purpose specified in the respective form.

When processing personal data required to fulfill a contract with you (this also applies to processing operations required to carry out pre-contractual measures), Art. 6(1)(b) GDPR serves as the legal basis. If you have given us consent to process your data, the processing is based on Art. 6(1)(a) GDPR. Consent that has been given may be revoked at any time with effect for the future.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

14) Tools and Other Services

14.1 DATEV

To handle our accounting, we use the cloud-based accounting software service provided by: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany

The provider processes incoming and outgoing invoices and, where applicable, our company’s bank transactions in order to record invoices automatically, match them with the transactions, and use them to prepare the financial accounts in a partially automated process.

If personal data is also processed in this context, the processing is carried out on the basis of our legitimate interest in the efficient organization and documentation of our business processes pursuant to Art. 6(1)(f) GDPR.

14.2 ETL PISA

To handle our accounting, we use the cloud-based accounting software service provided by: ETL Service GmbH, Mauerstraße 86-88, 10117 Berlin, Germany

14.3 Cookie Consent Tool

This website uses a so-called “Cookie Consent Tool” to obtain effective user consent for cookies and cookie-based applications that require consent. The “Cookie Consent Tool” is displayed to users when they access the website in the form of an interactive user interface, where they can grant consent to specific cookies and/or cookie-based applications by checking a box. Through the use of the tool, all cookies/services requiring consent are loaded only if the respective user has granted the corresponding consent by checking a box. This ensures that such cookies are set on the user’s respective device only if consent has been granted.

The tool uses technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed in this context.

In individual cases, if the processing of personal data (such as the IP address) is nevertheless required for the purpose of storing, assigning, or logging cookie settings, this processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and, consequently, in ensuring that our website is designed in accordance with the law.

Another legal basis for processing is Art. 6(1)(c) GDPR. As controllers, we are legally required to make the use of technically unnecessary cookies dependent on the respective user’s consent.

Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further information about the operator and the settings available for the cookie consent tool can be found directly in the corresponding user interface on our website.

14.4 Judge.me

For verifying and publishing customer reviews, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

If you submit a review on our website, your first and last name, email address, order date and number, as well as the name and international references (GTIN/ISDNF), will be collected, transmitted to the provider, and evaluated there to determine whether a customer review for a specific order is legitimate. This processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in ensuring the authenticity of customer reviews by verifying their connection to a transaction and preventing review fraud. Once the review has been checked and approved, the data will be deleted by the provider.

Where data is transferred to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

15) Data Subject Rights

15.1 The applicable data protection law grants you the following data subject rights against the controller with regard to the processing of your personal data (rights of access and intervention), whereby the relevant legal basis referred to above applies to the respective exercise requirements:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to be informed pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent given pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

15.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA TO CONDUCT DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

16) Duration of storage of personal data

The duration of storage of personal data is determined by the applicable legal basis, the purpose of the processing and—where applicable—in addition by the respective statutory retention period (e.g., commercial and tax law retention periods).

When personal data is processed on the basis of explicit consent pursuant to Article 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.

If statutory retention periods exist for data processed in the context of contractual or contract-like obligations on the basis of Article 6(1)(b) GDPR, this data will routinely be deleted after the retention periods have expired, provided that it is no longer required for the performance of the contract or the initiation of a contract and/or we no longer have a legitimate interest in retaining it.

When personal data is processed on the basis of Article 6(1)(f) GDPR, this data will be stored until you exercise your right to object under Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

When personal data is processed for the purpose of direct marketing on the basis of Article 6(1)(f) GDPR, this data will be stored until you exercise your right to object under Article 21(2) GDPR.

Unless otherwise indicated by the other information in this statement regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

As of: 04.08.2026, 04:16:24

Name
E-Mail
Bestellnummer
Alternative E-Mail
Grund (freiwillig)
Zurückzugebende Artikel

Item added to your cart

Privacy policy

1) Introduction and Contact Details of the Data Controller

2) Data Collection When Visiting Our Website

3) Hosting & Content Delivery Network

4) Cookies

5) Contact

6) Comment function

7) Data processing when opening a customer account

8) Use of customer data for direct marketing

9) Data processing for order processing

10) Online Marketing

11) Web analytics services

12) Retargeting/Remarketing and conversion tracking

13) Page functionalities

14) Tools and Other Services

15) Data Subject Rights

16) Duration of storage of personal data

Country/region

Language