Privacy and Data Protection

In view of possible translation errors, the German legal texts apply.

Privacy Policy

Privacy Policy and Information on Any Consents Granted by You

As the responsible party in accordance with data protection regulations, we hereby inform you about the processing of your personal data by us.

I. The Concept of Personal Data and Other Key Terms

In simple terms, personal data refers to all information that relates to you as an individual. Definitions of the term "personal data" and other key terms relevant to the following data protection information can be found in Article 4 of the GDPR (General Data Protection Regulation).

II. Name and Contact Details of the Controller; Contact Details of the Data Protection Officer

In simple terms, the controller is the person who, alone or jointly with others, decides on the purposes and means of processing personal data. You can find the name and contact details of the controller (and, if a data protection officer has been appointed, the contact details of the data protection officer) in our provider identification / imprint.

III. Purposes of Processing Your Personal Data; Legal Bases for Processing

We process your personal data in the course of our activities for the purposes listed below, in accordance with the respective legal bases mentioned.

  1. To carry out pre-contractual measures initiated by your request, we process your personal data based on the consent you provided under Article 6(1)(a) of the GDPR or based on Article 6(1)(b) of the GDPR.

  2. To safeguard our legitimate interests in responding to inquiries and conducting other actions initiated by your request, we process your personal data based on the consent you provided under Article 6(1)(a) of the GDPR or based on Article 6(1)(f) of the GDPR.

  3. For the performance of a contract to which you are a party, we process your personal data based on the consent you provided under Article 6(1)(a) of the GDPR or based on Article 6(1)(b) of the GDPR.

  4. For conducting marketing activities, we process your personal data based on the consent you provided under Article 6(1)(a) of the GDPR or based on Article 6(1)(f) of the GDPR.

  5. To safeguard our legitimate interests in maintaining the proper operation of our website, providing user-friendly functions, and analyzing the use of our website, we process your personal data based on Article 6(1)(f) of the GDPR.

  6. To safeguard our legitimate interests in enforcing our rights and defending against claims made against us, we process your personal data based on Article 6(1)(f) of the GDPR.

Our systems are secured according to the state of the art through technical and organizational measures to protect your personal data from access, alteration, or distribution by unauthorized persons, as well as from loss and destruction.

You can find information about the processing of your personal data for each processing purpose in the relevant additional information within this privacy policy.

IV. Disclosure of Your Personal Data to Third Parties; Categories of Recipients of Your Personal Data

To achieve the purposes of processing your personal data, we may disclose your personal data to third parties in accordance with legal requirements. Detailed information about the disclosure of your personal data to third parties for each processing purpose can be found in the relevant additional information within this privacy policy. In cases of disclosing your personal data to third parties, the scope of the data disclosed is limited to the necessary minimum.

V. Extent of Processing Your Personal Data for Each Processing Purpose

We will inform you in detail about the processing of your personal data for the various processing purposes.

Your personal data will be deleted when it is no longer needed for the respective processing purpose unless we are allowed to continue processing the data for another purpose within the legal requirements and in accordance with the information in this privacy policy.

  1. Use of our website for informational purposes

If you visit our website without providing us with information, we only process the personal data from you that your browser sends to our server. These are the following data that are technically necessary to display our website and to ensure its stability and security:

  • The page you accessed
  • Date and time of the request
  • Amount of data transmitted
  • Source or reference from which you came to the page
  • Browser used by you
  • Operating system used by you
  • Your IP address

The processing of your personal data is based on Article 6(1)(f) of the GDPR to safeguard our legitimate interest in maintaining the proper operation of our website.

Your personal data will be deleted after 6 months, unless they are still needed for the assertion of rights or the enforcement of claims due to measures against the proper operation of our website. In this case, deletion will take place immediately after the respective procedure is completed.

  1. Processing of inquiries

If you contact us with an inquiry or concern, we will process the personal data and information/documents you provide. Regardless of how you contact us with your inquiry or concern, these may include, if applicable:

  • Date and time of contact
  • Name data
  • Contact information
  • Inquiry/concern data
  • Provided information/documents

The processing of your personal data and the information/documents you provided will, depending on the content of your inquiry or concern, be based on the consent you provided under Article 6(1)(a) of the GDPR for responding to your inquiry, or on Article 6(1)(b) of the GDPR for the performance of pre-contractual measures, or on Article 6(1)(b) of the GDPR for the performance of a contract to which you are a party, or on Article 6(1)(f) of the GDPR to safeguard our legitimate interest in responding to inquiries/concerns and conducting other measures related to the processing of inquiries/concerns.
 

2. Consent

When we provide a contact form and you contact us through this contact form, you give your consent with the following content by sending your message, which you will be separately informed about in the contact form:

"I consent to the processing of my email address and other personal data provided by me for the purpose of responding to my message. I can revoke this consent at any time and without giving reasons with effect for the future. The legality of the processing carried out up to the revocation remains unaffected."

You can revoke your consent at any time and without giving reasons with effect for the future. For this purpose, a corresponding notification to the responsible party, whose contact details you can find in the information about the responsible party, is sufficient. The legality of the processing carried out up to the revocation remains unaffected.

3. Fulfillment of Contracts

If you provide us with personal data for the purpose of concluding a contract or in connection with the creation of a customer account, we process the data you have provided for the execution of the contract. This includes your customer data (e.g., your name and address) and contract data (e.g., information about the contractually agreed products as well as payment and delivery information).

The processing of your personal data is based on Article 6(1)(b) of the General Data Protection Regulation (GDPR) for the performance of a contract of which you are a party.

To the extent necessary for the performance of the contract with you, we will transmit your personal data to third parties in accordance with legal requirements. This transmission is made to service providers involved in the contract processing. These are the providers of processing tools used by us. Furthermore, these are the companies entrusted with the transport. In addition, these are the payment service providers entrusted with payment matters.

If you use the payment service provider PayPal for processing payment transactions, we expressly point out that the PayPal privacy policy applies to all PayPal transactions: Link to PayPal Privacy Policy

In cases of transmitting your personal data to third parties, the scope of the transmitted data is limited to the necessary minimum.

Your personal data will be deleted after the clarification of your request/concern, unless we are allowed to continue processing the data for another processing purpose within the legal requirements and in accordance with the information in this privacy policy.

4. Advertising via Newsletter

If you subscribe to our newsletter, we process the email address you provided to send you information about our offers via email. Providing your email address is mandatory. If you voluntarily provide additional personal data, we may process these data to address you personally in the newsletter.

By subscribing to our newsletter, you give your consent with the following content: "I agree to be informed about interesting offers by email and, therefore, consent to the processing of my email address and other personal data provided by me for the purpose of sending the newsletter. I can revoke this consent at any time and without giving reasons with effect for the future. The legality of the processing carried out up to the revocation remains unaffected."

The registration for our newsletter takes place in the so-called double-opt-in procedure. This means that after registration, you will first receive an email with a notification about the registration for the newsletter, accompanied by a request to confirm the registration. Your confirmation of the registration is required to document the necessary consent for sending the newsletter and to be able to identify registrations with foreign email addresses. In connection with newsletter registrations and confirmations, the IP address, date, and time are logged in order to potentially provide proof of consent in accordance with legal requirements.

The processing of your personal data is based on the consent you have given in accordance with Article 6(1)(a) of the GDPR.

You can revoke your consent at any time and without giving reasons with effect for the future. For this purpose, a corresponding notification to the responsible party, whose contact details you can find in the information about the responsible party, is sufficient. The legality of the processing carried out up to the revocation remains unaffected.

If you revoke your consent or unsubscribe from our newsletter, your email address and any additional data you may have provided will be promptly deleted, unless we are allowed to continue processing the data for another processing purpose within the legal requirements and in accordance with the information in this privacy policy.

5. Advertising via Postal Mail

We process the personal data you provide, such as first and last name and address, if applicable, for sending information about our offers via postal mail.

The processing of your personal data is based on Article 6(1)(f) of the GDPR to protect our legitimate interests in conducting advertising measures via postal mail.

You have the right to object to the processing of your personal data for the purpose of conducting advertising measures via postal mail at any time. For this purpose, a corresponding notification to the responsible party, whose contact details you can find in the information about the responsible party, is sufficient.

If you object to the processing of your personal data for the purpose of conducting advertising measures via postal mail, your personal data, including first and last name and address, will be promptly deleted, unless we are allowed to continue processing the data for another processing purpose within the legal requirements and in accordance with the information in this privacy policy.

6. Use of Cookies

We use so-called cookies in our online presence. These are small files that are stored on your device and transmit certain information to us. The use of cookies serves to enable you to use certain functions and to make our offer more user-friendly overall.

Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session or session cookies). Other cookies remain on your device even after the end of the browser session, i.e., after you close your browser, and allow us or our partner companies (third-party cookies) to recognize you on your next visit to our website (so-called persistent cookies).

Some of the cookies we use are technically necessary to enable you to use certain functions. This is the case, for example, with regard to the storage of inputs related to the use of the shopping cart function. The processing of your personal data is based on Article 6(1)(b) of the GDPR for the performance of pre-contractual measures carried out at your request or on the basis of Article 6(1)(b) of the GDPR for the performance of a contract of which you are a party, or on the basis of Article 6(1)(f) of the GDPR to protect our legitimate interests in providing as user-friendly functions as possible. If we or our partner companies use cookies for the purpose of measuring reach or for marketing purposes, you can find detailed information on this in the corresponding additional information in the context of this privacy policy.

You can prevent the storage of cookies by configuring your browser software accordingly. Please refer to the program help for the browser you are using to find out how to make the corresponding settings. However, we would like to point out that in this case, you may not be able to use all functions of our online presence to their full extent. By way of example, we refer to the information on the following common browsers:
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera: http://help.opera.com/Windows/10.20/de/cookies.html
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Safari: https://support.apple.com/kb/ph21411?locale=de_DE

 

7. Enforcement of Our Rights and Defense Against Claims Directed at Us

If necessary, we process your personal data to protect our legitimate interests in enforcing our rights and defending against claims directed at us.

In this case, the processing of your personal data is based on Article 6(1)(f) of the General Data Protection Regulation (GDPR).

To the extent necessary to protect our legitimate interests, we may transmit your personal data to third parties in accordance with legal requirements. This transmission is made to the involved providers of debt collection services or our lawyers.

In cases of transmitting your personal data to third parties, the scope of the data transferred is limited to the necessary minimum.

Your personal data will be deleted upon the conclusion of the proceedings, but not earlier than the statutory retention periods of 6 or 10 years for tax and commercial purposes, unless we are allowed to continue processing the data for another purpose within the framework of legal requirements and the information in this privacy policy.

VI. Duration for Which Your Personal Data Will Be Stored or Criteria for Determining This Duration

Your personal data will be deleted when they are no longer needed for the respective processing purpose, unless we are allowed to continue processing the data for another purpose within the framework of legal requirements and the information provided in this privacy policy. You can find information about the duration for which your personal data will be stored or the criteria for determining this duration in the information regarding the processing of your personal data for each specific processing purpose in this privacy policy.

VII. Your Rights

1. Overview

To ensure fair and transparent processing of personal data, you, as a data subject, have the following rights in accordance with data protection regulations:

  • The right to information in accordance with Article 15 of the GDPR.
  • The right to rectification in accordance with Article 16 of the GDPR.
  • The right to erasure in accordance with Article 17 of the GDPR.
  • The right to restriction of processing in accordance with Article 18 of the GDPR.
  • The right to data portability in accordance with Article 20 of the GDPR.
  • The right to withdraw consent given at any time in accordance with Article 7(3) of the GDPR.
  • The right to object to processing in accordance with Article 21 of the GDPR, which will be explained separately below.
  • The right to lodge a complaint with the supervisory authority in accordance with Article 77 of the GDPR, which will be explained separately below.

2. Your Right to Object to Processing

The processing of personal data is permissible if processing is necessary for the legitimate interests pursued by the data controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require the protection of personal data, in particular where the data subject is a child, according to Article 6(1)(f) of the GDPR.

As a data subject, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Article 6(1)(f) of the GDPR. This also applies to profiling based on these provisions.

If you exercise your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms as a data subject, or if the processing is for the establishment, exercise, or defense of legal claims.

If we process your personal data for direct marketing purposes, you, as a data subject, have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

3. Your Right to Lodge a Complaint with the Supervisory Authority

As a data subject, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

VIII. Information on the Basis for Providing Your Personal Data

If you wish to conclude a contract with us or make an inquiry to us, providing your personal data is necessary for the conclusion of a contract or for processing your request. You are not obliged to provide your personal data. However, not providing your personal data would result in us not being able to conclude a contract with you or process your inquiry.

Back