Privacy policy

2) Data Collection When Visiting Our Website

2.1 When you use our website purely for informational purposes, that is, if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:

• The website visited

• Date and time at the moment of access

• Amount of data sent in bytes

• Source/reference from which you accessed the page

• Browser used

• Operating system used

• IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser’s address bar.

3) Hosting &amp, Content Delivery Network

3.1 Shopify

For hosting our website and displaying its content, we use the system of the following provider:
Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).

Data is also transmitted to:
Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

All data collected on our website is processed on the provider’s servers. We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

When data is transferred to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission

3.2 Cloudflare

We use a content delivery network provided by the following provider: Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA.

This service allows us to deliver large media files such as graphics, page content, or scripts more quickly via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has adhered to the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.

3.3 Shopify

We use a Content Delivery Network (CDN) provided by the following company:
Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).

Data may also be transmitted to:

• Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

• Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, website content, or scripts more quickly via a network of regionally distributed servers.
Processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

When data is transferred to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

For data transfers to the USA, the recipient is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision of the European Commission.

4) Cookies

To make your visit to our website more attractive and to enable the use of certain functions, we use cookies — small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your device for a longer period and enable us to save your site settings (so-called “persistent cookies”). The duration of storage of persistent cookies can be found in the overview of your web browser’s cookie settings.

If personal data is also processed by individual cookies implemented by us, such processing is carried out either pursuant to Art. 6 (1) lit. b GDPR for the performance of a contract, pursuant to Art. 6 (1) lit. a GDPR if consent has been given, or pursuant to Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or exclude the acceptance of cookies in certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

5.1 Judge.me

For review reminders, we use the services of the following provider:
Judge.me Ltd., c/o Buckworths, 2nd Floor, 1–3 Worship Street, London, England, EC2A 2AB, United Kingdom.

Exclusively on the basis of your express consent pursuant to Art. 6 (1) lit. a GDPR, we transmit your email address and, if applicable, other customer data to the provider so that they can contact you by email with a review reminder.

You may revoke your consent at any time with effect for the future, either towards us or the provider.

We have concluded a data processing agreement with the provider, ensuring the protection of our website visitors’ data and prohibiting unauthorized disclosure to third parties.

For data transfers to the provider’s location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

5.2 WhatsApp Business

You have the option to contact us via the messaging service WhatsApp, provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called “Business Version” of WhatsApp.

If you contact us via WhatsApp in connection with a specific business transaction (for example, an order you have placed), we store and use the mobile number you use on WhatsApp and — if provided — your first and last name in accordance with Art. 6 (1) lit. b GDPR for the purpose of processing and responding to your inquiry. On the same legal basis, we may request additional data from you (such as order number, customer number, address, or email address) via WhatsApp to assign your inquiry to a specific case.

If you use our WhatsApp contact option for general inquiries (for example, about our range of services, availability, or our website), we store and use the mobile number you use on WhatsApp and — if provided — your first and last name pursuant to Art. 6 (1) lit. f GDPR, based on our legitimate interest in providing the requested information efficiently and promptly.

Your data will only be used to respond to your inquiry via WhatsApp. There will be no disclosure to third parties.

Please note that WhatsApp Business gains access to the address book of the mobile device we use for this purpose and automatically transmits stored telephone numbers to a server of the parent company, Meta Platforms Inc., in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book only contains the WhatsApp contact details of users who have already contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact details are stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts upon first use of the app on their device by accepting WhatsApp’s terms of service, pursuant to Art. 6 (1) lit. a GDPR. Consequently, the transmission of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded.

For information on the purpose and scope of data collection and further processing and use of the data by WhatsApp, as well as your related rights and privacy settings, please refer to WhatsApp’s Privacy Policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits disclosure to third parties.

In the context of the processing operations described above, data may be transferred to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.

5.3 As part of contacting us (e.g., via contact form or email), personal data is processed solely for the purpose of handling and responding to your inquiry, and only to the extent necessary for this purpose.

The legal basis for the processing of these data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f GDPR.
If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR.

Your data will be deleted once it can be inferred from the circumstances that the matter in question has been conclusively resolved and provided that no statutory retention obligations apply.

6) Data Processing When Creating a Customer Account

In accordance with Article 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide them to us when opening a customer account. The specific data required for opening the account can be found in the input form on our website.
You may delete your customer account at any time by sending a message to the address of the controller listed above. After deletion of your customer account, your data will be erased, provided that all contracts concluded through it have been fully executed, no statutory retention obligations exist, and there is no legitimate interest on our part in further storage.

7) Use of Customer Data for Direct Advertising

7.1 Subscription to our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Any additional data is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive newsletters once you have expressly confirmed your consent to receive newsletters by activating the verification link sent to the specified email address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1)(a) GDPR. In this context, we store your IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration, in order to trace any possible misuse of your email address at a later date. The data collected during the registration for the newsletter is used strictly for its intended purpose.
You may unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to a further use of your data or we reserve the right to use your data in further ways that are legally permitted and about which we inform you in this statement.

7.2 Shopify Email

The sending of our email newsletters is carried out via the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data provided by you during newsletter registration to this provider in accordance with Art. 6 (1)(f) GDPR, so that it can manage the newsletter dispatch on our behalf.
Subject to your express consent pursuant to Art. 6 (1)(a) GDPR, the provider also carries out statistical performance analyses of newsletter campaigns by means of web beacons or tracking pixels contained in the sent emails, which can measure opening rates and specific interactions with newsletter content. End device information (e.g., time of retrieval, IP address, browser type, and operating system) is also collected and analyzed, but not combined with other data sets.
You may withdraw your consent to newsletter tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider that protects our website visitors' data and prohibits unauthorized sharing with third parties.
In the case of data transfers to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

7.3 Product Availability Notification by Email

For temporarily unavailable items, you can sign up to receive product availability notifications by email. In this case, we will send you a one-time message by email about the availability of the item you have selected. The only required information for sending this notification is your email address. Additional information is voluntary and may be used to address you personally. For sending the notification, we use the double opt-in procedure, which ensures that you only receive a notification once you have expressly confirmed your consent by activating the verification link sent to your provided email address.
By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6 (1)(a) GDPR. In this context, we store your IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration, to be able to trace any possible misuse of your email address at a later date. The data collected during registration for our email notification service for product availability is used strictly for the stated purpose.
You can unsubscribe from availability notifications at any time by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be immediately deleted from our dedicated distribution list unless you have expressly consented to further use of your data or we reserve a data usage that is legally permitted and about which we inform you in this statement.

8) Data Processing for Order Handling

8.1 Insofar&nbsp,as necessary&nbsp,for contract&nbsp,performance for&nbsp,delivery and&nbsp,payment purposes, the personal&nbsp,data collected&nbsp,by us will be&nbsp,passed on to&nbsp,the commissioned&nbsp,transport company&nbsp,and the commissioned&nbsp,credit institution&nbsp,in accordance&nbsp,with Art. 6 (1)(b) GDPR.
If, on the basis&nbsp,of a corresponding&nbsp,contract, we&nbsp,owe updates for&nbsp,goods with digital&nbsp,elements or for&nbsp,digital products, we process the&nbsp,contact data&nbsp,provided by you&nbsp,when placing&nbsp,the order in&nbsp,order to inform&nbsp,you personally&nbsp,within the scope&nbsp,of our statutory&nbsp,information obligations&nbsp,in accordance&nbsp,with Art. 6 (1)(c) GDPR. Your&nbsp,contact data&nbsp,will be used&nbsp,strictly for&nbsp,the purpose of&nbsp,notifications&nbsp,about updates&nbsp,owed by us and&nbsp,will only be&nbsp,processed by&nbsp,us to the extent&nbsp,necessary for&nbsp,the respective&nbsp,information.
To process&nbsp,your order, we&nbsp,also work with&nbsp,the following&nbsp,service provider(s) who support&nbsp,us in whole or&nbsp,in part in the&nbsp,execution of&nbsp,concluded contracts. Certain personal&nbsp,data will be&nbsp,transmitted to&nbsp,these service&nbsp,providers in&nbsp,accordance with&nbsp,the following&nbsp,information.

8.2 Transfer&nbsp,of personal data&nbsp,to shipping service&nbsp,providers

- DPD

We use&nbsp,the following&nbsp,provider as a&nbsp,transport service&nbsp,provider: DPD&nbsp,Deutschland GmbH, Wailandtstraße&nbsp,1, 63741 Aschaffenburg, Germany
We pass on&nbsp,your email address&nbsp,and/or telephone&nbsp,number to the&nbsp,provider prior&nbsp,to delivery of&nbsp,the goods for&nbsp,the purpose of&nbsp,coordinating&nbsp,a delivery date&nbsp,or announcing&nbsp,delivery in accordance&nbsp,with Art. 6 (1)(a) GDPR, provided&nbsp,that you have&nbsp,expressly given&nbsp,your consent&nbsp,for this during&nbsp,the ordering&nbsp,process. Otherwise, we only pass&nbsp,on the name of&nbsp,the recipient&nbsp,and the delivery&nbsp,address to the&nbsp,provider for&nbsp,the purpose of&nbsp,delivery in accordance&nbsp,with Art. 6 (1)(b) GDPR. The&nbsp,data will only&nbsp,be passed on&nbsp,to the extent&nbsp,that this is&nbsp,necessary for&nbsp,the delivery&nbsp,of the goods. In this case, it is not possible&nbsp,to coordinate&nbsp,the delivery&nbsp,date with the&nbsp,provider in advance&nbsp,or to announce&nbsp,delivery.
Consent may be&nbsp,revoked at any&nbsp,time with effect&nbsp,for the future&nbsp,vis-à-vis the&nbsp,controller named&nbsp,above or vis-à-vis the provider.

- Hermes

We use the following provider as a transport service provider: Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg, Germany
We pass on your email address and/or telephone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or announcing delivery in accordance with Art. 6 (1)(a) GDPR, provided that you have expressly given your consent for this during the ordering process. Otherwise, we only pass on the name of the recipient and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 (1)(b) GDPR. The data will only be passed on to the extent that this is necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the provider in advance or to announce delivery.
Consent may be revoked at any time with effect for the future vis-à-vis the controller named above or vis-à-vis the provider.