Privacy Policy

Privacy policy

Thank you for your interest and for visiting our website. The protection of your personal data is of particular concern to us at every stage of our cooperation. We therefore explain below which data from your visit is processed and for what purposes. "Personal data" means any information relating to an identified or identifiable natural person.

Responsible person and contact to the data protection officer

Responsible for data processing is:

SUND Digital GmbH + Co. KG

Victoriaallee 1
22143 Hamburg
Germany
Phone: +49 40 53 80 96-0
Fax: +49 40 53 80 96-2158

E-mail us: info@sund-group.com

You can contact our data protection officer at our postal address with the addition "Data protection officer" or by e-mail at datenschutz@sund.net

Use of Shopify

We use the e-commerce platform Shopify to provide and operate our web store. The provider of Shopify is the Canadian company Shopify, 150 Elgin Street 8th Floor Ottawa, ON K2P 1L4 Canada. Responsible for data subjects in the EU is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, hereinafter "Shopify".

Shopify is the e-commerce software we use to offer and design our online store. All data processing described in the following sections in connection with our online store - in particular the processing of orders, the management of customer accounts, payment processing, shipping, the creation of usage statistics and the measurement of conversions - is technically handled via the Shopify platform; the information on Shopify mentioned in this section applies in addition to this.

When using Shopify, personal data is processed and stored on Shopify servers, including outside the EU/EEA. We have concluded an order processing contract (AVV) with Shopify in accordance with Art. 28 GDPR (https://www.shopify.com/legal/dpa).

Recipients of the data can be, among others:

Shopify Inc, Canada
Shopify Commerce Singapore Pte Ltd, Singapore
Shopify Global Inc, USA
Shopify Payments (USA) Inc.

You can find a complete list of all Shopify subcontractors here: https://help.shopify.com/de/manual/privacy-and-security/privacy/subprocessors

Third country transfer

Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. The EU Commission has issued an adequacy decision for data transfers to Canada. For international transfers to countries that do not guarantee an adequate level of data protection within the meaning of European data protection laws, Shopify also uses the standard contractual clauses of the EU Commission.

For more information on international data transfers through Shopify, please visit:

https://help.shopify.com/de/manual/privacy-and-security/privacy/international-data-transfers/onward-transfers

Further information on data processing by Shopify can also be found at:

https://help.shopify.com/de/manual/privacy-and-security/privacy

https://www.shopify.com/de/legal/datenschutz

General data processing when you visit our website

When using the website for information purposes only, i.e. if you do not provide us with any personal data via our contact form or otherwise transmit information to us, we only collect the data that your browser transmits to our server. The following data is collected:

Customer activity in your store(s), including products viewed and/or added to the shopping cart.
Customer preference signals, including Global Privacy Control ("GPC"), opt-out and opt-in signals.
Customer device data for the device(s) used when visiting your store(s), including IP address, browser and network activity.

This data is technically required to display the website to you and to ensure the security of our website. We evaluate this data exclusively for statistical purposes in order to correct possible technical errors and, if necessary, to identify and ward off attacks and security risks.

The legal basis is Art. 6 para. 1 S 1 lit. f GDPR. As the collection of data for the provision of the website and storage in log files is absolutely necessary for its operation and to protect against misuse, our legitimate interest in data processing prevails at this point. Insofar as access to information stored in the user's terminal equipment is absolutely necessary, the legal basis is also Section 25 (2) No. 2 TDDDG.

Competitions

When you take part in competitions, we collect the data required to carry out the competition. This is usually an individual competition entry (e.g. a comment or a photo), as well as your name and contact details.

Data processing and data transfer may vary depending on the competition. Mandatory information is marked in the forms/conditions of participation. Specific details (e.g. recipients, duration, publications, platform features) are described in the respective conditions of participation.

Participation in the competition and the associated data collection is voluntary; and serves to carry out the competition, determine and notify the winners, dispatch/handover the prize and, if necessary, documentation for verification/compliance reasons.

Depending on the design, we base the processing on Art. 6 para. 1 lit. b GDPR (contractual execution of the competition in accordance with the conditions of participation), on Art. 6 para. 1 lit. a GDPR (consent, e.g. for publication of names/pictures or marketing purposes) and on Art. 6 para. 1 lit. f GDPR (legitimate interest in fair processing, fraud/abuse prevention).

If you have given your consent, you can revoke it at any time with effect for the future.

Where necessary, we transmit data from competition winners to partners such as shipping/logistics companies. If the competition takes place via third-party platforms (e.g. social media), they will also process your data. The data protection notices of the respective providers also apply.

Disclosure of winners (e.g. first name, abbreviated surname, place of residence) or the use of submitted content/photos for marketing purposes will only take place on the basis of your consent and in accordance with the conditions of participation.

The determination of the winners can be technically automated; a legal effect or significant impairment within the S of Art. 22 GDPR is not associated with this.

We store your data for the duration of the competition and processing. After that, it will be deleted or blocked, provided that there are no statutory retention obligations (e.g. commercial/tax law for non-cash prizes) or legitimate interests in providing evidence (usually until the end of the standard limitation periods).

Contact us by e-mail or via our contact form

If you contact us by e-mail on your own initiative, we will only collect your personal data (name, e-mail address, message text) to the extent provided by you. This information is provided on a voluntary basis and is initiated by you in these cases. If this involves information on communication channels (e.g. e-mail address, telephone number), we will use these channels to contact you in accordance with your request. The purpose of data processing is to process and respond to your request.

If the contact is made for the purpose of implementing pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

If contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you based on Art. 6 (1) (f) GDPR.

However, we may not be able to fully process your request.

We delete the data collected in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations.

Customer account - Orders

Customer account

You have the option of registering on our website and creating a customer account. The purpose of data processing is to improve your shopping experience and simplify order processing.

We process the following data from you (mandatory) for registration:

E-mail (user name)

Additional storage is available as an option:

First name
Surname
Address (zip code, town, country) Date of birth
Addition / Company
Telephone
Fax

We use the so-called double opt-in procedure for registration, i.e. your registration is not complete until you confirm your registration by entering a 6-digit verification code, which we will send you by e-mail for this purpose. If you do not confirm this, your registration will be automatically deleted from our database after 1 day. Once you have registered, you will receive personal, password-protected access and will be able to view and manage the data you have stored. Registration is voluntary, but may be a prerequisite for using certain of our services.

We store your data required to fulfill the contract, including details of the payment method if applicable, until you delete your customer account or data stored there or have your account deleted by informing us accordingly, unless statutory retention periods prevent deletion. These may result, for example, from retention periods under tax and commercial law and may be up to 10 years.

The legal basis for this data processing is Art. 6 para. 1 lit. a and b GDPR. You can withdraw your consent at any time with effect for the future and delete your customer account.

Guest orders

If you order in our store as a guest, we only collect and process the personal data required to process and fulfill your order. Data processing in the context of guest orders is carried out in the same way as described in the following section "Data processing for orders".

The legal basis for the processing of your data is Art. 6 para. 1 lit. b GDPR.

Data processing for orders

When you place an online order in our webshop, we collect the data required to conclude the contract. The data is stored for the duration of the contract and thereafter, taking into account the warranty periods and statutory retention periods, in particular under tax and commercial law. These can be up to 10 years.

If we receive your e-mail address as part of your order, we may use it for the purpose of direct advertising. The legal basis is Art. 6 para. 1 lit. f GDPR. You can object to the use of your data for advertising using electronic mail at any time without incurring any costs other than the transmission costs according to the basic rates.

As part of order and payment processing via our website, we use service providers who directly receive your entries and are therefore recipients of your personal data collected in connection with the order process. The legal basis is Art. 6 para. 1 lit. b GDPR. Further information on the service providers involved in the ordering process can be found in the following section: "Data recipients or categories of recipients"

Data recipients or categories of recipients

Shipping service provider - Merchandise management

Forwarding the e-mail address to shipping companies for information on the shipping status

We will pass on your e-mail address to the transport company as part of the contract processing if you have expressly agreed to this during the ordering process. The purpose of forwarding the data is to inform you by e-mail about the shipping status. The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us or the transport company without affecting the lawfulness of processing based on consent before its withdrawal.

Use of an external merchandise management system

We use a merchandise management system for contract processing as part of order processing. For this purpose, your personal data collected as part of the order is sent to

Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany.

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

Pre-order management

To manage pre-orders in our Shopify webshop, we use the integration of the company Vicify, based in Długa 29, 00-238 Warsaw, Poland. Vicify provides us with functionalities for the separate management and processing of pre-orders. For this purpose, Vicify receives read-only data access. Your data therefore remains with us at all times.

Payment service provider - credit information

Use of PayPal Express

We use the PayPal Express payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L, Luxembourg; "PayPal") on our website. The purpose of data processing is to be able to offer you payment via the PayPal Express payment service.

To integrate this payment service, it is necessary for PayPal to collect, store and analyze data (e.g. IP address, device type, operating system, browser type, location of your device) when you visit the website. Cookies may also be used for this purpose. The cookies enable your browser to be recognized.

The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 S 1 TDDDG i.V.m. Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

By selecting and using PayPal Express, the data required for payment processing will be transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

You can find more information on data processing when using the PayPal Express payment service in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS

Use of PayPal Check-Out

We use the PayPal Check-Out payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L, Luxembourg; "PayPal") on our website. The purpose of data processing is to be able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay later" via PayPal, the data required for payment processing will be transmitted to PayPal in order to fulfill the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

Cookies can be stored that enable your browser to be recognized. The resulting data processing takes place on the basis of Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in a customer-oriented offer of different payment methods. You have the right to object to this processing of your personal data at any time on grounds relating to your particular situation.

Credit card via PayPal, direct debit via PayPal & "Pay later" via PayPal

For individual payment methods such as credit card via PayPal, direct debit via PayPal or "Pay later" via PayPal, PayPal reserves the right to obtain credit information on the basis of mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received on the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognized mathematical-statistical procedures and whose calculation includes address data, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in protection against payment default if PayPal makes advance payments.

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide the data means that the contract cannot be concluded with the payment method you have selected.

Third party supplier

When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. To process this payment method, the data may then be forwarded by PayPal to the respective provider. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Local third-party providers may be, for example

Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)

Purchase on account via PayPal

When paying via the payment method purchase on account, the data required for payment processing is first transmitted to PayPal. In order to process this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Ratepay may carry out a credit check on the basis of mathematical-statistical procedures (probability or score values) using credit agencies in accordance with the procedure described above. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in protection against payment default if Ratepay makes advance payments. Further information on data protection and which credit agencies use Ratepay can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

You can find more information on data processing when using PayPal in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Klarna payment options

We use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna") on our website. By selecting and using payment via Klarna, the data required for payment processing will be transmitted to Klarna in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

"Pay Later" (invoice), "Pay Now" (payment by direct debit), "Financing" (installment purchase)

For individual payment methods such as "Pay Later" (invoice), "Pay Now" (payment by direct debit), "Financing" (installment purchase), Klarna reserves the right to obtain credit information on the basis of mathematical-statistical procedures using credit agencies.

For this purpose, Klarna transmits the personal data required for a credit check, such as first and last name, address, gender, e-mail address, IP address and data related to the order, to a credit agency for the purpose of identity and credit checks and uses the information received on the statistical probability of non-payment for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognized mathematical-statistical procedures and whose calculation includes address data, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in protection against payment default if Klarna makes advance payments. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR by notifying Klarna. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide the data means that the contract cannot be concluded with the payment method you have selected.

Further information, in particular which credit agencies Klarna forwards your personal data to, can be found for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/credit_rating_agencies

You can find general information about Klarna for Germany at: https://www.klarna.com/de/ and for Austria at https://www.klarna.com/at/. Your personal data will be treated by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna's privacy policy for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.

Use of e-mail address for sending newsletters

You can subscribe to our e-mail newsletter on our website. We will inform you about our latest news, offers and promotions. If you actively register, the newsletter will be sent on the basis of your consent (Art. 6 para. 1 lit. a GDPR in conjunction with Section 7 para. 2 no. 3 UWG). As part of the newsletter dispatch, your data will also be passed on to our service provider rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg im Breisgau.

We use the double opt-in procedure for registrations. After entering your e-mail address, you will receive a confirmation e-mail. Without confirmation, the registration will be automatically deleted after 3 days. To register for the newsletter, we need your e-mail address and your first name so that we can address you personally. Entering your surname is optional. After confirmation, we will store your e-mail address for the purpose of sending you the newsletter until you unsubscribe. For verification purposes, we log the time of registration and confirmation as well as the IP address used at the time of registration.

We can measure whether a newsletter is opened and which links are clicked in order to optimize content. This is done using tracking pixels embedded in the email and individual IDs. In this context, we collect, for example, the IP address, browser type and device as well as the time. This data can be used to create user profiles under a pseudonym. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG).

You can find more information on data processing by rapidmail GmbH at: https://www.rapidmail.de/hilfe/kategorie/statistiken .

You can revoke your consent at any time with effect for the future. To do so, use the unsubscribe link in every e-mail or contact us using the contact details above.

Cookies

Our website uses cookies. Cookies are data that are stored on your computer by a website you visit and enable your browser to be reassigned. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you make there. This prevents you from having to re-enter required form data each time you use the website, for example. The information stored in cookies can also be used to recognize preferences and target content according to areas of interest.

There are different types of cookies: Session cookies are data sets that are only temporarily stored in the working memory and are deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. With this type of cookie, the information can also be stored in text files on your computer. However, you can also delete these cookies at any time via your browser settings. First-party cookies are set by the website you are currently visiting. Only this website may read information from these cookies. Third-party cookies are set by organizations that do not operate the website you are visiting. These cookies are used by marketing companies, for example.

The cookies used on this website are:

The legal basis for possible processing of personal data using cookies and their storage duration may vary. If you have given us your consent, the legal basis is Art. 6 para. 1 S 1 lit. a GDPR, § 25 para. 1 TDDDG. Insofar as the data processing is based on our overriding legitimate interests / the use of cookies is to be regarded as absolutely necessary, the legal basis is § 25 para. 2 TDDDG, Art. 6 para. 1 lit. c or lit. f GDPR.

You can delete cookies already stored on your device at any time and revoke your consent by clicking on the "Cookie consent" tab below and changing your selection. You also have the option of preventing the storage of cookies via the settings of your internet browser. You can find more information on this in the instructions for your browser. Alternatively, you can also install so-called ad blockers. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

Cookiebot

Cookiebot is a consent management platform that informs you about the use of cookies and fingerprinting technologies on our website and gives you the opportunity to decide whether or not to consent to their use. Cookiebot enables us to obtain and manage user consent.

"Cookiebot" is an offer from Cybot S, Havnegade 39, 1058 Copenhagen, Denmark

If the visitor consents to the use of cookies, the following data is automatically logged:

The IP address of the user in anonymized form (the last three digits are set to '0').
Date and time of approval
User agent of the end user's browser
The URL from which the consent was sent.
The end user's consent status, which serves as proof of consent.
An anonymous, random and encrypted key.

The encrypted key and the consent status are stored on the user's end device using a cookie in order to establish the corresponding consent status on future page views. This cookie is automatically deleted after 12 months.

The legal basis is Art. 6 para. 1 lit. f GDPR, § 25 para. 2 TDDDG. Our legitimate interest as well as the necessity of the use consists in the user-friendliness of the website as well as in the fulfillment of the legal requirements from the GDPR.

You can prevent or end the installation of cookies and their storage and thus the consent status at any time by making the appropriate settings in your browser. You can access the Cookiebot settings by clicking on the "Cookie consent" tab below and changing your selection.

You can find more information about Cookiebot at:

https://www.cookiebot.com/de/privacy-policy/

Reviews - Advertising

Use of Opinew

We use the Opinew tool on this website, a service provided by Shop Circle LTD, Northcliffe House, 29 Farm Street, London, W1J5RL, United Kingdom.

Using Opinew, we can manage product reviews from orders via email, SMS and QR codes, integrate them optimally into the design of our website and automatically display top reviews. For this purpose, the tool accesses your personal data such as name, email address, IP address and order information.

In this context, personal data is transferred to Great Britain. The European Commission has issued an adequacy decision stating that the UK offers a level of data protection equivalent to that of the General Data Protection Regulation.

We have also concluded an order processing contract with the service provider in accordance with Art. 28 Para. 3 GDPR.

The legal basis for data processing is your consent in accordance with Art. 6 Para. 1 S 1 lit. a GDPR, § 25 Para. 1 TDDDG.

You can withdraw your consent to the processing of personal data at any time. Please note that the revocation is only effective for the future.

Further information on the scope of data processing by the provider can be found at: https://www.opinew.com/privacy

Google customer reviews via the "easy Google Customer Reviews" app

We use the "Google Customer Reviews" program on our website to collect and display verified reviews from our customers. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is the provider of the program for users with their habitual residence in the European Economic Area or Switzerland. For the technical integration of the program into our store, we use the "easy Google Customer Reviews" app from the provider Union Works Ltd, 86-90 Paul Street, London, EC2A 4NE, based in the United Kingdom.

Purpose and legal basis of data processing:

After your purchase in our store, you can use an opt-in module to decide whether you would like to give your consent to participate in the program. If you agree to participate in the program, we will send your email address to Google. You will then receive an email from Google asking you to rate your shopping experience on our website. Your survey responses will be aggregated and used to create a retailer rating for our website. This rating appears in search and shopping ads and is displayed on our Google Customer Reviews logo. When using the program via the app, your email address, order and transaction information (e.g. billing country, order number) collected on our website and technical data such as your IP address, browser and device information will be processed.

The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG.

Data transmission and data receiver:

If personal data is also transmitted to Google LLC in the USA, Google relies on certification in accordance with the EU-US Data Privacy Framework (DPF). This framework guarantees an adequate level of data protection in accordance with the requirements of the GDPR. You can find further information on this at https://www.dataprivacyframework.gov/list.

In cases where a data transfer is not covered by an adequacy decision, Google uses EU standard contractual clauses. You can find more information on this in Google's privacy policy: https://policies.google.com/privacy/frameworks.

The data transfer to Union Works Limited is based on an adequacy decision, as the United Kingdom (UK) is recognized as a country with an adequate level of data protection according to a decision of the EU Commission.

Withdrawal of your consent:

You can revoke your consent at any time with effect for the future by sending a message to us or to Google.

Further information on data protection in connection with the Google Customer Reviews program can be found at:

https://policies.google.com/privacy?hl=de

Basics of Google Customer Reviews - Google Merchant Center Help

Information on data processing by Union Works Ltd. can be found at

https://unionworks.co.uk/pages/privacy-policy

Google Customer Reviews app for Shopify | Shopify App Store

Analysis - Advertising tracking

Use of Google Analytics 4

If you have given your consent, Google Analytics 4, a web analytics service provided by Google LLC, is used on this website. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Type and purpose of processing
Google Analytics uses cookies to help the website analyze how users use the site. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

We use Google Signals. This collects additional information in Google Analytics about users who have activated personalized ads (interests and demographic data) and ads can be delivered to these users in cross-device remarketing campaigns.

In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your website visit, your user behavior is recorded in the form of "events". Events can be

Page views
First visit to the website
Start the session
Visited websites
Your "click path", interaction with the website
Scrolls (whenever a user scrolls to the bottom of the page (90%))
Click on external links
internal searches
Interaction with videos
File downloads
viewed / clicked ads
Language setting
Also included:
Your approximate location (region)
Date and time of visit
Your IP address (in abbreviated form)
technical information about your browser and the devices you are using (e.g. language setting, screen resolution)
Your internet provider
the referrer URL (via which website/advertising medium you came to this website)

On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.

Recipients of the data are/may be

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Google LLC, based in California, USA, and any US authorities may have access to the data stored by Google.

Third country transfer
Google LLC is certified according to the EU-US Data Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider.

Storage duration
The data sent by us and linked to cookies is automatically deleted after 14 months. The maximum lifespan of Google Analytics cookies is 2 years. Data whose retention period has been reached is automatically deleted once a month.

Legal basis
The legal basis for this data processing is your consent in accordance with Art. 6 Para. 1 S.1 lit. a GDPR, § 25 Para. 1 TDDDG.

Revocation
You can withdraw your consent at any time with effect for the future by clicking on the "Cookie consent" tab below and changing your selection. This does not affect the lawfulness of the processing carried out on the basis of your consent until you withdraw it.

You can also prevent the storage of cookies from the outset by configuring your browser software accordingly. However, if you configure your browser to reject all cookies, this may limit the functionality of this and other websites. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by clicking

a. Do not give your consent to the setting of cookies or
b. Download and install the browser add-on to deactivate Google Analytics HERE.

You can find more information on the terms of use of Google Analytics and data protection at Google at https://marketingplatform.google.com/about/analytics/terms/de/ and under https://policies.google.com/?hl=de.

YouTube with two-click solution

This website embeds videos from the YouTube website. The operator of the website is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use a two-click solution to protect your personal data. When you access a page in which a YouTube video is embedded, a connection to the YouTube servers is only established when you click on the "Confirm" button. In this case, YouTube will set cookies and use your visit data for its own purposes.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

We also use YouTube in extended data protection mode. According to YouTube, videos that are played in extended data protection mode are not used to personalize browsing on YouTube. Ads that are played in extended data protection mode are also not personalized. No cookies are set in extended data protection mode. Instead, so-called local storage elements are stored in the user's browser, which contain personal data similar to cookies and can be used for recognition. Details on the extended data protection mode can be found here: https://support.google.com/youtube/answer/171780.

After activating a YouTube video, further data processing operations may be triggered over which we have no influence.

The use of Youtube is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 TDDDG. Consent can be revoked at any time.

You can find more information about data protection on YouTube in their privacy policy at: https://policies.google.com/privacy?hl=de.

The company is certified in accordance with the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Matomo

Our website uses the open source web analytics service Matomo, a service provided by InnoCraft Ltd, a company based at 150 Willis St, 6011 Wellington, New Zealand. As InnoCraft is based outside the EU, InnoCraft has appointed a representative in the EU (privacy@innocraft.com). New Zealand has an adequate level of data protection according to the decision of the EU Commission. Matomo uses cookies that make it possible to analyze the use of the website. For this purpose, the usage information collected in the cookie (including your shortened IP address) is transmitted to the Matomo server located in the EU and stored for usage analysis purposes. Matomo does not transmit any data to servers that are outside our control. Your IP address is immediately anonymized during this process so that you as a user are not identifiable to us. The information collected about your use of this website is not passed on to third parties. We use the data collected for statistical analysis of user behavior for the purpose of optimizing the functionality and stability of the website and for marketing purposes. Our interest in and purpose of data processing lies in the optimization of our website, the adaptation of content and the improvement of our offer. The interests of users are adequately protected by anonymization.

We only store the analysis data for as long as the purpose of the data processing requires, but for a maximum of 6 months. You can prevent the setting of (individual or all) cookies by selecting the appropriate settings on your browser, however, if you do this you may not be able to use the full functionality of this website.

The legal basis is your consent in accordance with Art. 6 Para. 1 a GDPR, § 25 Para. 1 TDDDG. You can revoke this at any time via the cookie banner by clicking on the "Cookie consent" tab below and changing your selection.

Use of Shopify statistics

We use the statistics and analysis functions of Shopify International Ltd (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of order processing. Shopify is a company affiliated with Shopify Inc (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).

The purpose of data processing is to analyze this website and its visitors. For this purpose, data is stored for marketing and optimization purposes and provided in reports, analyses and statistics. Among other things, the following device information is collected and processed: Web browser information, IP address, time zone and some of the cookies installed on your device. When you navigate the website, information is also collected about the web pages or products you have accessed, the referrer URL (the website from which you accessed our website) and information about how you interact with the website. Technologies such as cookies, web beacons, tags and pixels (electronic files used to collect information about how you navigate the website) are used for this purpose.

The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 S 1 TDDDG i.V.m. Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time by clicking on the "Cookie consent" tab below and changing your selection.

Use of Google Ads

We use the online advertising program "Google Ads from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. In this context, we use Google Remarketing, conversion tracking (visit action evaluation) and Ads remarketing lists for search ads.

Display and remarketing

The ads are displayed according to search queries on websites in the Google advertising network. The services allow us to combine our ads with specific search terms or to show ads to previous visitors, for example, advertising services that visitors have viewed on our website. This allows us to display interest-based advertising to users of our website on other websites within the Google advertising network (as a "Google ad" as part of Google search or on other websites). The remarketing lists also allow us to customize search ad campaigns for users who have previously visited our website.

Cookies and conversion tracking

An analysis of online user behavior is necessary for interest-based offers. Google uses cookies to carry out this analysis. When you click on an advertisement placed by Google or visit our website, Google places a cookie on your computer. These cookies have a duration of 90 days. Each Google Ads customer receives a different cookie. It is therefore not possible for cookies to be tracked via the websites of Ads customers.

The information collected by the respective cookie is used to target the visitor in a subsequent search query and to generate conversion statistics. With the help of this technology, Google and we receive information that a user has clicked on an ad and has been redirected to our websites. The statistics provided to us by Google include the total number of users who clicked on one of our ads and, if applicable, whether they were redirected to a page on our website with a conversion tag. Based on these statistics, we can see which search terms were clicked on our ad particularly often and which ads lead to the user contacting us via the contact form. However, we do not receive any information with which users can be personally identified.

Your data may be transmitted to the servers of Google LLC in the USA. Google LLC is certified in accordance with the EU-US Data Privacy Framework.

The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 S 1 TDDDG i.V.m. Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time by clicking on the "Cookie consent" tab below and changing your selection.

You can prevent the processing by adjusting the cookie settings of your browser or by calling up the deactivation help of the network advertising initiative.

You can find more information on data protection in the context of Google Ads and Google's privacy policy at

https://policies.google.com/technologies/ads?hl=de

https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de

https://www.google.de/policies/privacy/

Use of Microsoft Advertising

Microsoft Advertising is an online advertising service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. The controller for users in the EU/EEA and Switzerland is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521 Ireland.

We use the Microsoft Advertising service (formerly Bing Ads) to place advertisements via the Microsoft network and the associated search engines (e.g. Bing, Yahoo!, Ecosia etc.).

We also use the associated conversion tracking as part of Microsoft Advertising. The prerequisite for conversion tracking is the implementation of the UET tag (Universal Event Tracking tag), which we have integrated on our website. If you come to our website via an advertisement placed by us, a cookie is set on your computer. In this way, Microsoft and we can recognize that someone has clicked on an ad, has been redirected to our website and has performed a previously determined action on the website (conversion). This data enables us to tailor our website, our advertisements and our offers much better to your needs. We also use remarketing lists for our ads to present interest-based ads to website visitors within the Microsoft advertising network. You can find detailed information on data and cookies at https://help.ads.microsoft.com/#apex/ads/de/53056/2-500.

We use the information obtained exclusively for statistical analysis to optimize our advertising. We are not able to identify the visitor from the data collected. The statistics provided to us by Microsoft include the total number of users who clicked on one of our ads and whether they were redirected to a website with a conversion tag. We also find out whether a certain action specified by us was carried out on the website (e.g. whether and how many registrations were made for an event), which keyword or which ad you used to reach us, what you click on our website, how many people visit our website via Microsoft Advertising and how long you stay on our website.

Microsoft uses the data to optimize its own advertising and other services. If you have a Microsoft account, the data collected can be linked to your account. Microsoft may also recognize and store your IP address. The data collected by UET is stored for 390 days. Microsoft cookies have an expiration date of 13 months.

You have the option of using the display settings https://account.microsoft.com/privacy/ad-settings/signedout?ru=https:%2F%2Faccount.microsoft.com%2Fprivacy%2Fad-settings to select the types of Microsoft ads or disable interest-based ads on Microsoft.

The legal basis for the described data processing is your consent, Art. 6 para. 1 S 1 lit. a GDPR § 25 para. 1 TTDSG. Once you have given your consent, you can revoke it at any time with effect for the future by clicking on the "Cookie consent" tab below and changing your selection.

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA may also be the recipient of the data used in the context of Microsoft Advertising. For data transfers to the USA, Microsoft has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

You can find more information on data protection in the context of Microsoft Advertising at: https://www.microsoft.com/de-de/privacy/privacystatement

Plug-ins and other

Using the Google Tag Manager

For reasons of transparency, we would like to point out that we use the Google Tag Manager service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The provider of the service for users in the EU, the EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

The Google Tag Manager makes it easier for us to integrate, centrally manage and time our tags. Tags are script codes or code sections that can trigger different functionalities, such as measuring the success of our advertisements (Google Ads). The Google Tag Manager itself does not collect any personal data, but may transmit the IP address to Google.

The legal basis for this data processing is your consent in accordance with Section 25 (1) TDDDG. You have the option of revoking your consent with effect for the future by clicking on the "Cookie consent" tab below and changing your selection. The legality of the data processing until the revocation remains unaffected.

When Google stores personal data, this data is stored on Google servers. The storage period for the data processed by the individual tracking tools can be found in our individual data protection notices for the individual tools.

For more information on Google Tag Manager, see: https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/.

Use hCaptcha

We use the hCaptcha service on our website to protect our online offers from misuse, in particular from automated programs ("bots") and spam. The provider is Intuition Machines Inc, 1065 SW 8th St #704, Miami, FL 33130, USA.

We use hCaptcha to ensure the security and functionality of our website and to prevent misuse. hCaptcha checks whether access is made by a natural person or an automated program. For this purpose, a check element (e.g. image puzzle) may be displayed to you or an analysis may take place in the background. In particular, the following data is processed:

IP address
Browser and device information (e.g. operating system, language, screen resolution)
Date and time of access, referrer URL
Mouse movements, clicks, scrolling behavior and, if applicable, the solutions to the hCaptcha tasks

hCaptcha uses cookies or similar technologies that store a unique identifier for each user and enable recognition across different websites with hCaptcha.

The legal basis is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Insofar as information is stored on or read from your end device, the legal basis is § 25 para. 2 no. 2 TDDDG).

As part of hCaptcha, data is transmitted to Intuition Machines Inc. in the USA. For the USA, there is an adequacy decision by the EU Commission based on the EU-US Data Privacy Framework (DPF); Intuition Machines Inc. is certified in accordance with the DPF.

Use of the "Essential Sticky Add to Cart" function (Shopify app)

In our online store, we use the so-called "Sticky Add to Cart" function, which is provided via an app integrated into Shopify. Depending on the product page currently being viewed, this function permanently displays a button for adding the respective product to the shopping cart, making the ordering process easier.

The Sticky Add to Cart app for Shopify improves the user experience by creating a persistent, customizable bar that follows the user's scroll and remains visible and accessible at all times. This allows customers to easily add items to the cart or purchase directly, no matter where they are on the page. This feature helps to increase conversion rates and simplify the checkout process.

The following data in particular is processed when using this function:

Information about pages viewed and products viewed
Content and status of your shopping cart (e.g. items added, quantity, subtotal)
Interaction data with the button (e.g. clicks, times, end device used and browser type, each in anonymized or abbreviated form)

Pure shopping cart interactions, such as the addition of product or variant IDs, are not considered personal data, provided that no additional assignment to the user is made, for example through further identification features.

Technical information that is generated as part of the delivery of online content is generally not processed as personal data, as IP addresses, for example, are not stored permanently.

This data is processed to carry out pre-contractual measures and to fulfill the purchase contract (Art. 6 para. 1 lit. b GDPR) and on the basis of our legitimate interest in a user-friendly and sales-promoting design of our online store (Art. 6 para. 1 S 1 lit. f GDPR).

Insofar as cookies or similar technologies are used for the provision of the "Sticky Add to Cart" function, which are absolutely necessary for technical operation, their use is only carried out with a legal basis (Art. 6 para. 1 lit. f GDPR in conjunction with § 25 TDDDG).

The "Sticky Add to Cart" function is provided via a third-party app in the Shopify App Store. The provider of this app processes the aforementioned data partly on our behalf as a processor in accordance with Art. 28 GDPR and receives access to the store and usage data stored in Shopify, insofar as this is necessary to provide and optimize the function. Further information on data processing by Shopify itself can be found in the "Use of the Shopify platform" section of this privacy policy.

The personal data processed in connection with the "Sticky Add to Cart" function is only stored for as long as is necessary to provide the function. The data is then deleted or anonymized.

Use of the "EU withdrawal button" (Shopify app)

In our online store, we use the "EU Withdrawal Button" app integrated into Shopify. This function integrates the legally required EU withdrawal button directly into our store and allows customers to exercise their right of withdrawal at any time. No customer account is required to use the EU withdrawal button. A confirmation e-mail will be sent automatically after the withdrawal has been sent.

The following data in particular is processed when using this function:

Personal data: First name, surname, customer ID
Contact details: E-mail address, delivery and billing address
Order data Order number, order date, revoked items, number of items, purchase price, revocation date, items, delivery conditions
Communication data: Content from the withdrawal form (e.g. reason for withdrawal, messages from free text fields))
Usage data: IP address, timestamp (date and time of button use), user agent and technical identifiers to secure the form

The processing is carried out to fulfill our legal obligations in connection with the electronic revocation function for distance selling contracts (Art. 6 para. 1 lit. c GDPR) and on the basis of our legitimate interest in a user-friendly and transparent processing of revocations (Art. 6 para. 1 lit. f GDPR). Insofar as access to information stored in the user's terminal equipment is absolutely necessary for the function, this is done on the basis of Section 25 (2) No. 2 TDDDG.

The "EU Revocation Button" function is provided via a third-party app from 401layers UG (haftungsbeschränkt) in the Shopify App Store, which acts as a processor for us in accordance with Art. 28 GDPR. Further information on data processing by Shopify itself can be found in the section "Use of the Shopify platform" of this privacy policy.

The data collected via the "EU revocation button" function will be deleted by the provider after 6 months. We only store the data collected in connection with the EU revocation button for as long as is necessary to process the revocation, to fulfill statutory retention and verification obligations (in particular commercial and tax law requirements) and to assert, exercise or defend legal claims.

Duration of storage:

Rights of the data subject

General rights

If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability.

If processing is based on your consent, you have the right to withdraw this consent with effect for the future.

Data processing rights according to legitimate interest

In accordance with Art. 21 para. 1 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 para. 1 e GDPR (data processing in the public interest) or on Art. 6 para. 1 f GDPR (data processing to protect a legitimate interest); this also applies to profiling based on this provision. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Direct advertising rights

If we process your personal data for direct marketing purposes, you have the right under Art. 21 (2) GDPR to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes

Right of appeal to the supervisory authority

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that your personal data is being processed unlawfully.

You can lodge a complaint with the supervisory authority responsible for us, which you can reach using the following contact details:

Hamburg Commissioner for Data Protection and Freedom of Information

Ludwig-Erhard-Str 22, 7th floor

20459 Hamburg

Phone: +49 40 428544040

Fax: +49 40 428544000

E-mail us: mailbox@datenschutz.hamburg.de

Last update: 27.05.2026

Cart (0)