Privacy Policy
Privacy Policy
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data by which you can be personally identified. For detailed information on the subject of data protection, please refer to our data protection declaration listed below this text.
Who is responsible for the collection of data on this website?
The responsible office for data processing on this website can be found in the imprint. This office is the first point of contact for data protection issues.
How do we collect your data?
On the one hand, your data is collected when you provide it yourself. This may be data that you enter in a contact form or when ordering a newsletter.
Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g., internet browser, operating system, or time of page view). This data is collected automatically as soon as you enter our website.
Analyzing your data
When visiting our website, your surfing behavior may be statistically evaluated. This is done primarily with cookies and so-called analysis tools. The analysis of your surfing behavior is anonymous and cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. For details, please refer to our privacy policy under the heading "Third-party modules and analysis tools".
What do you we use your data for?
Some of the data is collected to ensure error-free provision of the website.
We use other data to statistically analyze your user behavior on the internet (e.g., via so-called cookies). Such analyses are anonymous and cannot be traced back to your person. You can object to this analysis. For details, please refer to our data protection declaration under the heading "Third-party modules and analysis tools".
What rights do you have concerning your data?
You have the right to obtain information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to demand the correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint for this purpose and for further questions about personal data. Furthermore, you have the right to lodge a complaint with the respective supervisory authority.
Is the transfer of data encrypted?
Yes, this website uses encryption. This is to prevent unauthorized persons from accessing your data.
Privacy Policy
1. General notes and mandatory information
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data are collected. Personal data is data by which you can be personally identified. This privacy policy explains what information we collect and how we use it. It also explains how and for what purpose this is done.
We would like to point out that data transmission on the Internet (e.g., when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.
Responsible body
The responsible body for data processing on this website can be found in the imprint. The responsible body is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, e-mail addresses or similar).
Right to object to the collection of data in specific cases and to direct marketing (Art. 21 GDPR)
If the data processing is carried out based on Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of personal data relating to you at any time for reasons arising from your situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection declaration.
If you object, we will no longer process the personal data concerned, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising, or defending legal claims.
If your personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct advertising.
Revocation of your consent to data processing
Many data processing operations are only possible with your consent. We will explicitly obtain this from you before starting data processing. You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
Right of appeal to the responsible supervisory authority
The website visitor is advised that they have a right of appeal to the competent supervisory authority in the event of violations of data protection law. The competent supervisory authority for data protection issues is the state data protection commissioner of the federal state in which our company has its headquarters. A list of the data protection officers, and their contact details can be found under the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Right to data portability
You have the right to have data that we process, automatically based on your consent or in fulfilment of a contract, handed over to you or to another person responsible in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
SSL and TLS encryption
For security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can identify an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Encrypted payment transactions on this website
After concluding a contract subject to payment, you are contractually obliged to provide us with your payment data (e.g., account number in the case of direct debit authorization). This data is required for the processing of payments. If you do not provide us with this data, we may, if necessary, withdraw from a concluded contract and demand compensation from you.
Payment transactions via the common means of payment (Visa/Mastercard, direct debit) are made exclusively via an encrypted SSL or TLS connection. You can identify an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar.
With encrypted communication, your payment data that you transmit to us cannot be read by third parties.
Disclosure, blocking, deletion
Within the limits of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, a right to correction, blocking or deletion of this data. For this purpose, as well as for further questions about personal data, you can contact us at any time at the address given in the imprint.
Objection to advertising mails
The use of contact data published within the scope of the imprint obligation to send advertising and information material that has not been expressly requested is hereby prohibited. The operators of the website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, e.g., via spam e-mails.
Amendment of this privacy policy
We reserve the right to change this privacy policy at any time in compliance with legal requirements.
2. Data collection on our website
Data collection for reviews / customer images
If you send us a review together with your picture, your first name, your age, and your place of residence (city), we will publish this data on our website with your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time with effect for the future.
Please note that we only publish reviews from persons of legal age (at least 18 years old). Reviews by persons under 18 years of age will not be published and will be deleted immediately. Otherwise, the review data will remain with us until you request us to delete it, revoke your consent or the purpose for storing the data no longer applies. Mandatory legal provisions - in particular, retention periods - remain unaffected.
Cookies
The website partly uses so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our services more user- friendly, effective, and secure. Cookies are small text files that are stored on your computer and stored by your browser.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the use of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.
Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognize your browser during your next visit.
Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g., shopping cart function) are stored based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in storing the cookies for the technically error-free and optimal provision of its services. Insofar as other cookies (e.g., cookies to analyze your surfing behavior) are stored, these are treated separately in this data protection declaration.
Server Log Files
The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
• browser type and browser version
• Operating system used
• referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address
This data will not be merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use. The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free and optimal presentation of its website - for this purpose, the server log files must be collected.
Contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.
The data entered in the contact form is processed exclusively based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The data you entered in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g., after we have completed processing your request). Mandatory legal provisions - in particular, retention periods - remain unaffected.
Olark Live-Chat
If you use the Olark Live Chat on our website, your data from the enquiry form will be stored with us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent. The data you enter will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (for example, after we have completed processing your enquiry).
You can find more information on the handling of user data at olark.com in Olark's privacy policy https://www.olark.com/help/gdpr
Processing of data (customer and contract data)
We collect, process, and use personal data only if they are necessary for the establishment, content, or amendment of the legal relationship (inventory data). This is done based on Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. We collect, process, and use personal data about the use of our Internet pages (usage data) only insofar as this is necessary to enable the user to use the service or to bill the user.
The collected customer data is deleted after completion of the order or termination of the business relationship, but not before expiry of the statutory retention periods.
Data transmission upon conclusion of a contract for online shops, traders, and dispatch of goods
We only transmit personal data to third parties if this is necessary for the processing of the contract; for example, to the companies entrusted with the delivery of the goods or the financial institution entrusted with the processing of payments. Further transmission of data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.
The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
Data transmission upon conclusion of the contract
We only transmit personal data to third parties if this is necessary for the processing of the contract, for example to the credit institution commissioned with the processing of payments.
Further transmission of data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.
The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
3. Third-party modules and analysis tools
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.
You can find more information on how Google Analytics handles user data in Google's privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de
Browser Plugin
You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the collection of your data during future visits to this website: Deactivate Google Analytics
Demographic features on Google Analytics
This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be generated that contain statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item "Objection to data collection".
Order data processing
We have concluded an order data processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
IP-Anonymisierung
We use the function "Activation of IP anonymization" on this website. However, this means that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Legal basis
The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
Facebook-Pixel
For conversion measurement, our website uses the visitor action pixel from Facebook, Facebook Inc. 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").
This allows the behavior of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of the Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.
The data collected is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage policy (https://www.facebook.com/about/privacy/). This enables Facebook to display advertisements on Facebook pages as well as outside of Facebook. This use of data cannot be influenced by us as the site operator.
You can object to this use at any time by clicking on Opt out opt out.
Google Web Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly. For this purpose, the browser you are using must connect to Google's servers. This informs Google that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.
If your browser does not support web fonts, a standard font from your computer will be used.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/
Google Maps
This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
Google Maps is used in the interest of an appealing presentation of our online offers and to make it easy to find the places we indicate on the website. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.
More information on the handling of user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/
Google Analytics Remarketing
Our websites use the functions of Google Analytics Remarketing in combination with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one end device (e.g., mobile phone) can also be displayed on another of your end devices (e.g., tablet or PC).
If you have given your consent, Google will link your web and app browsing history to your Google account for this purpose. In this way, the same personalized advertising messages can be displayed on every device on which you log in with your Google account.
To support this feature, Google Analytics collects Google-authenticated ID's of users, which are temporarily linked to our Google Analytics data to define and create target groups for cross-device ad advertising.
You can permanently object to cross-device remarketing/targeting by deactivating personalized advertising in your Google account; follow this link:
https://www.google.com/settings/ads/onweb/
For more information and the privacy policy, please see Google's privacy policy at:
http://www.google.com/policies/technologies/ads/
The aggregation of the collected data in your Google account data is based solely on your consent, which you can give or revoke at Google (Art. 6 para. 1 lit. a GDPR). In the case of data collection processes that are not merged in your Google Account (e.g., because you do not have a Google Account or have objected to the merging), the collection of data is based on Art. 6 (1) lit. f GDPR. The legitimate interest results from the fact that the website operator has an interest in the anonymized analysis of website visitors for advertising purposes.
Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").
Within the framework of Google AdWords, we use so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the internet browser stores on the user's computer. These cookies lose their validity after 30 days and are not used to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we will be able to recognize that the user clicked on the ad and was redirected to this page.
Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across AdWords customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted into conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you do not wish to participate in the tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.
The storage of "conversion cookies" is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
More information on Google AdSense and Google Conversion Tracking can be found in Google's privacy policy:
http://www.google.de/policies/privacy/
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.
Payment Providers
PayPal
On our website we offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal").
If you select payment via PayPal, the payment data you enter will be transmitted to PayPal.
The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.
KlarnaOn our website we offer payment with the services of Klarna. The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna").
Klarna offers various payment options (e.g., hire purchase). If you choose to pay with Klarna (Klarna checkout solution), Klarna will collect various personal data from you. You can read details about this in Klarna's privacy policy at the following link: https://www.klarna.com/de/datenschutz/.
Klarna uses cookies to optimize the use of the Klarna checkout solution. The optimization of the checkout solution constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. Cookies are small text files that are stored on your end device and do not cause any damage. They remain on your end device until you delete them. Details on the use of Klarna cookies can be found at the following link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.
The transfer of your data to Klarna is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.
SofortüberweisungOn our website we offer payment by "Sofortüberweisung". The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter "Sofort GmbH").
With the help of the "Sofortüberweisung" procedure, we receive a payment confirmation from Sofort GmbH in real time and can immediately begin to fulfil our obligations.
If you have chosen the payment method "Sofortüberweisung", you transmit the PIN and a valid TAN to Sofort GmbH, which can then log into your online banking account. After logging in, Sofort GmbH automatically checks your account balance and carries out the transfer to us using the TAN you have transmitted. It then immediately sends us a transaction confirmation. After logging in, it also automatically checks your turnover, the credit line of the overdraft facility and the existence of other accounts and their balances.
In addition to the PIN and the TAN, the payment data you have entered as well as your personal data are transmitted to Sofort GmbH. Your personal data includes your first and last name, address, telephone number(s), email address, IP address and, if applicable, other data required for payment processing. The transmission of this data is necessary to establish your identity beyond doubt and to prevent fraud attempts.
The transmission of your data to Sofort GmbH is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.
Details on payment with Sofortüberweisung can be found in the following links: https://www.sofort.de/datenschutz.htmland https://www.klarna.com/sofort/.
Latest version as of: April 2018
