Privacy policy

1) Introduction and Contact Details of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The data controller in charge of data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Halil Ibrahim Gencer, Lindenhorster Straße 79, 44147 Dortmund, Germany, Tel.: +49 (0) 163 1804358, E-Mail: info@monobook.shop. The controller in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection when Visiting our Website

2.1 When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

Our visited website
Date and time at the moment of access
Amount of data sent in bytes
Source/reference from which you came to the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently, if there are any concrete indications of illegal use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

3.1 Shopify

For hosting our website and displaying the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2. Etage, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

In the case of data transfer to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

3.2 Cloudflare

We use a Content Delivery Network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, page content or scripts faster via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 (1) lit. f GDPR. We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

3.3 Shopify

We use a Content Delivery Network from the following provider: Shopify International Limited, Victoria Buildings, 2. Etage, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data may also be transferred to:

Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

In the case of data transfer to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

For data transfers to the USA, the data recipient has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

4) Cookies

In order to make your visit to our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), some of these cookies remain on your end device for a longer period of time and enable the saving of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of the cookie settings of your web browser.

If individual cookies used by us also process personal data, the processing is carried out either in accordance with Art. 6 (1) lit. b GDPR for the performance of the contract, in accordance with Art. 6 (1) lit. a GDPR if consent has been given, or in accordance with Art. 6 (1) lit. f GDPR for safeguarding our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for certain cases or in general.

Please note that if cookies are not accepted, the functionality of our website may be limited.

5) Contacting Us

5.1 Judge.me

For review reminders, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

Exclusively on the basis of your express consent in accordance with Art. 6 (1) lit. a GDPR, we transmit your e-mail address and, if applicable, other customer data to the provider so that they can contact you with a review reminder via e-mail.

You can revoke your consent at any time with effect for the future towards us or the provider.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

In the case of data transfer to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

5.2 WhatsApp Business

You have the option of contacting us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "Business version" of WhatsApp.

If you contact us via WhatsApp regarding a specific transaction (e.g. a placed order), we store and use the mobile phone number you use with WhatsApp and - if provided - your first and last name in accordance with Art. 6 (1) lit. b. GDPR to process and answer your request. Based on the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address or e-mail address) in order to be able to assign your request to a specific process.

If you use our WhatsApp contact for general inquiries (e.g. regarding the range of services, availability or our website), we store and use the mobile phone number you use with WhatsApp and - if provided - your first and last name in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the efficient and timely provision of the desired information.

Your data will only be used to answer your request via WhatsApp. A disclosure to third parties does not take place.

Please note that WhatsApp Business gains access to the address book of the mobile device we use for this purpose and automatically transfers phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book only stores the WhatsApp contact data of those users who have also contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact data is stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6 (1) lit. a GDPR when using the app on their device for the first time by accepting the WhatsApp terms of use. A transmission of data from such users who do not use WhatsApp and/or have not contacted us via WhatsApp is thus excluded.

For the purpose and scope of data collection and the further processing and use of the data by WhatsApp, as well as your related rights and setting options for protecting your privacy, please refer to the privacy policy of WhatsApp: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.

In the context of the aforementioned processing, data may be transferred to servers of Meta Platforms Inc. in the USA.

5.3 In the context of contacting us (e.g. via contact form or e-mail), personal data is processed - exclusively for the purpose of processing and answering your request and only to the extent necessary for this.

The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the facts in question have been finally clarified and provided that there are no statutory retention requirements to the contrary.

6) Data Processing when Opening a Customer Account

In accordance with Art. 6 (1) lit. b GDPR, personal data will continue to be collected and processed to the extent required if you provide it to us when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website.

Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. After the deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been fully processed, there are no statutory retention periods to the contrary and there is no continued legitimate interest on our part in further storage.

7) Use of Customer Data for Direct Marketing

7.1 Subscription to our e-mail newsletter

If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive newsletters if you have expressly confirmed to us your consent to receive the newsletter by clicking on a verification link sent to the specified e-mail address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 (1) lit. a GDPR. Here, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace a possible misuse of your e-mail address at a later point in time. The data collected by us when registering for the newsletter will be used strictly for its intended purpose.

You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named at the beginning. After cancellation, your e-mail address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to a further use of data that is legally permitted and about which we inform you in this declaration.

7.2 Shopify Email

The sending of our e-mail newsletters is carried out via this provider: Shopify International Limited, Victoria Buildings, 2. Etage, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on your data provided during newsletter registration to this provider in accordance with Art. 6 (1) lit. f GDPR so that they can take over the sending of the newsletter on our behalf.

Subject to your express consent in accordance with Art. 6 (1) lit. a GDPR, the provider also carries out a statistical success evaluation of newsletter campaigns using web beacons or tracking pixels in the sent e-mails, which can measure opening rates and specific interactions with the content of the newsletter. In this context, end device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but not merged with other datasets.

You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.

In the case of data transfer to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

7.3 Goods availability notification via e-mail

For temporarily unavailable items, you can register to receive e-mail notifications of goods availability. Here, we send you a one-time message by e-mail about the availability of the item you have selected. The only mandatory information for sending this notification is your e-mail address. The provision of further data is voluntary and may be used to address you personally. For sending the e-mail, we use the so-called double opt-in procedure, which ensures that you only receive a notification if you have expressly confirmed to us your consent to this by clicking on a verification link sent to the specified e-mail address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 (1) lit. a GDPR. Here, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace a possible misuse of your e-mail address at a later point in time. The data collected by us when registering for our e-mail notification service for goods availability will be used strictly for its intended purpose.

You can unsubscribe from the availability notifications at any time by sending a corresponding message to the controller named at the beginning. After cancellation, your e-mail address will be deleted immediately from our distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to a further use of data that is legally permitted and about which we inform you in this declaration.

7.4 Shopping cart reminders via e-mail

If you abandon your purchase with us before completing the order, you have the option of being reminded once by e-mail of the contents of your virtual shopping cart.

The only mandatory information for sending this reminder is your e-mail address. The provision of further data is voluntary and may be used to address you personally. For sending the e-mail, we use the so-called double opt-in procedure, which ensures that you only receive a notification if you have expressly confirmed to us your consent to this by clicking on a verification link sent to the specified e-mail address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 (1) lit. a GDPR for sending a shopping cart reminder. Here, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace a possible misuse of your e-mail address at a later point in time. The data collected by us when registering for our e-mail notification service will be used strictly for its intended purpose.

You can unsubscribe from the shopping cart reminders at any time by sending a corresponding message to the controller named at the beginning. After cancellation, your e-mail address will be deleted immediately from our distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to a further use of data that is legally permitted and about which we inform you in this declaration.

8) Data Processing for Order Handling

8.1 Insofar as necessary for contract processing for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) lit. b GDPR.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact data you provided when ordering in order to inform you personally within the framework of our statutory information obligations in accordance with Art. 6 (1) lit. c GDPR. Your contact data will be used strictly for the intended purpose of communicating about updates owed by us and processed by us for this purpose only to the extent necessary for the respective information.

8.2 Transfer of personal data to shipping service providers

As a transport service provider, we use the following provider: DHL Paket GmbH, Charles-de-Gaulle-Str. 20, 53113 Bonn, Germany

We transmit your e-mail address and/or phone number in accordance with Art. 6 (1) lit. a GDPR to the provider prior to the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent to this during the ordering process. Otherwise, we only transmit the name of the recipient and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 (1) lit. b GDPR. The transfer only takes place to the extent necessary for the delivery of the goods. In this case, a prior coordination of the delivery date with the provider or a delivery notification is not possible.

The consent can be revoked at any time with effect for the future towards the controller designated above or towards the provider.

As a transport service provider, we use the following provider: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany

The consent can be revoked at any time with effect for the future towards the controller designated above or towards the provider.

Hermes

As a transport service provider, we use the following provider: Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg, Germany

The consent can be revoked at any time with effect for the future towards the controller designated above or towards the provider.

8.3 Use of Payment Service Providers (Payment Services)

Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

When selecting a payment method from the provider where you pay in advance (e.g. credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to them in accordance with Art. 6 (1) lit. b GDPR. In this case, the transfer of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

8.4 Electronic cancellation function for distance contracts

Consumers who conclude contracts on this website for which a statutory right of cancellation exists have the option to declare the cancellation via an electronic cancellation function in accordance with the applicable cancellation provisions.

When using the cancellation function, in addition to details identifying the contract to be canceled, further personal information such as the consumer's first and last name and e-mail address must also be provided or confirmed.

The collection of this information and its transmission to us takes place here in accordance with Art. 6 (1) lit. b GDPR and only to the extent necessary for the proper processing of the cancellation. Also on the basis of Art. 6 (1) lit. b GDPR, the provided personal data is used to confirm receipt of the cancellation declaration by e-mail. A further legal basis for the processing is Art. 6 (1) lit. c GDPR. We are legally obliged to provide an electronic cancellation function for consumer distance contracts that are subject to payment.

9) Web Analytics Services

9.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies, which are stored as small text blocks on your end device and collect certain information. The scope of this information also includes your IP address, which, however, is truncated by Google by the last digits to exclude any direct personal reference.

The information is transmitted to Google's servers and further processed there. Transmissions to Google LLC based in the USA are also possible.

Google uses the collected information on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services related to website use and internet use. The IP address transmitted and truncated by your browser within the framework of Google Analytics will not be merged with other Google data. The data collected in the context of the use of Google Analytics 4 is stored for a period of two months and then deleted.

All of the processing operations described above, in particular the setting of cookies on the end device used, only take place if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a GDPR.

Without your consent, the use of Google Analytics 4 will not take place during your site visit. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service via the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with Google, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic Features

Google Analytics 4 uses the special function "demographic features" and can thus generate statistics that make statements about the age, gender and interests of site visitors. This is done by analyzing advertising and information from third-party providers. This allows target groups for marketing activities to be identified. However, the collected data cannot be assigned to a specific person and is deleted after a storage period of two months.

Google Signals

As an extension to Google Analytics 4, Google Signals may be used on this website to have cross-device reports created. If you have activated personalized ads and linked your devices to your Google account, Google can, subject to your consent to the use of Google Analytics in accordance with Art. 6 (1) lit. a GDPR, analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the "Personalized advertising" function in your Google account settings. To do this, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de

Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs

As an extension to Google Analytics 4, the "UserIDs" function can be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 (1) lit. a GDPR, have set up an account on this website and log in to different devices with this account, your activities, including conversions, can be analyzed across devices.

9.2 Shopify Analytics

This website uses the web analytics service of the following provider: Shopify International Limited, Victoria Buildings, 2. Etage, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading end device and browser information), the service collects and stores pseudonymized visitor data, including information on the end device used, such as the IP address and browser information, in order to evaluate them for statistical analyses of usage behavior on our website and to create pseudonymized usage profiles. The pseudonymization generally excludes a direct personal reference. A combination with directly identifying data about you collected in other ways does not take place.

All processing operations described above, in particular the reading or storing of information on the end device used, will only be executed if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.

In the case of data transfer to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

10) Page Functionalities

10.1 Instagram Plugins

Plugins of the social network of the following provider are used on our website: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland

These plugins enable direct interactions with content on the social network.

To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so-called "2-click" or "Shariff" solution.

This integration ensures that when a page of our web presence containing such plugins is accessed, a connection to the provider's servers is not yet established.

Only when you activate the plugins and thereby give your consent to the data transfer in accordance with Art. 6 (1) lit. a GDPR will your browser establish a direct connection to the provider's servers. In this case, regardless of a login to an existing user profile, information about your end device used (including your IP address), your browser and your page history is transmitted to the provider to a certain extent and possibly further processed there.

If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plugins will also be published there and shown to your contacts.

You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data that has already been transmitted to the provider.

Data may also be transferred to: Meta Platforms Inc., USA

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

10.2 X Plugins

Plugins of the social network of the following provider are used on our website: Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland

These plugins enable direct interactions with content on the social network.

To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so-called "2-click" or "Shariff" solution.

This integration ensures that when a page of our web presence containing such plugins is accessed, a connection to the provider's servers is not yet established.

If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plugins will also be published there and shown to your contacts.

Data may also be transferred to: X Corp., USA

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

10.3 Judge.me

Graphic elements of the following provider are integrated on our website to display external customer reviews and/or an externally awarded quality mark: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

When you access a page of our web presence that contains such graphic elements, your browser establishes a direct connection to the provider's servers in order to load the elements properly. In the process, certain browser information, including your IP address, is transmitted to the provider.

Insofar as personal data is also processed in the process, this is done in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the optimal marketing of our offer and the appealing design of our website.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

In the case of data transfer to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

10.4 Google Maps API

In order to enable the real-time checking of certain entries in the address form of the ordering process of our webshop for input errors, we use the services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC., USA

The provider validates the entered address, verifies the spelling and, if necessary, adds missing data. For ambiguous addresses, correct alternative suggestions are displayed. For this purpose, the address data you enter is transmitted to the provider, stored there and evaluated.

This processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the proper recording of the correct address data of the customer for the conscientious fulfillment of our contractual delivery obligations and to prevent contract execution problems.

The provider processes the affected data separately and does not merge it with other data sets, and deletes it as soon as its status or correctness has been confirmed, but at the latest after 30 days.

Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/

10.5 - Google reCAPTCHA

On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA.

For the visual design of the Captcha window, "Google Fonts", i.e. fonts loaded from the Internet by Google, are used by the provider. There is no processing of information other than that mentioned above, which is already transmitted to Google via the functionality of ReCaptcha.

The service checks whether an entry is made by a natural person or abusively by mechanical and automated processing, and blocks spam, DDoS attacks as well as similar automated malicious accesses. In order to ensure that an action is performed by a human and not by an automated bot, the provider collects the IP address of the end device used, recognition data of the browser and operating system type used as well as the date and duration of the visit and transmits this to the provider's servers for evaluation. Cookies, i.e. small text files stored in the browser of the end device, may be used for this purpose.

Insofar as the processing described above is based on cookies, these are only set if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in determining individual personal responsibility on the Internet and preventing abuse and spam in accordance with Art. 6 (1) lit. f GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

10.6 Google Customer Reviews (formerly Google Certified Shops Programme)

We work together with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This program gives us the opportunity to collect customer reviews from users of our website. Here, after using our services on our website, you will be asked if you would like to participate in an e-mail survey from Google.

If you give your consent in accordance with Art. 6 (1) lit. a GDPR, we will transmit your e-mail address to Google. You will receive an e-mail from Google Customer Reviews asking you to rate the purchasing experience on our website. The review you give is then combined with our other reviews and displayed in our Google Customer Reviews logo as well as in our Merchant Center dashboard. In addition, your review will be used for Google Seller Ratings. Within the scope of the use of Google Customer Reviews, a transfer of personal data to the servers of Google LLC. in the USA may also occur.

You can revoke your consent at any time by sending a message to the data controller or to Google.

Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/

11) Tools and Miscellaneous

11.1 Cookie Consent Tool

This website uses a so-called "Cookie Consent Tool" to obtain effective user consent for cookies subject to consent and cookie-based applications. The "Cookie Consent Tool" is displayed to users when they access the page in the form of an interactive user interface, on which consent for certain cookies and/or cookie-based applications can be given by ticking a box. By using the tool, all cookies/services requiring consent are only loaded if the respective user gives the corresponding consent by ticking a box. This ensures that such cookies are only set on the user's respective end device if consent has been granted.

The tool sets technically necessary cookies in order to save your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data (such as the IP address) is nevertheless processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.

A further legal basis for the processing is Art. 6 (1) lit. c GDPR. As controllers, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

Insofar as required, we have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

Further information on the operator and the setting options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

11.2 Judge.me

For the verification and publication of customer reviews, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

If you submit a review on our website, your first and last name, your e-mail address, order date and number as well as name and international references (GTIN/ISDNF) will be collected, transmitted to the provider and evaluated there in order to decide on the legitimacy of a customer review for a specific order. These processing operations are carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in ensuring the authenticity of customer reviews by safeguarding transaction relevance and preventing review abuse. After the review check and approval has been completed, the data is deleted by the provider.

In the case of data transfer to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

12) Rights of the Data Subject

12.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data, whereby reference is made to the cited legal basis for the respective exercise requirements:

Right of access according to Art. 15 GDPR;
Right to rectification according to Art. 16 GDPR;
Right to erasure according to Art. 17 GDPR;
Right to restriction of processing according to Art. 18 GDPR;
Right to notification according to Art. 19 GDPR;
Right to data portability according to Art. 20 GDPR;
Right to revoke granted consents according to Art. 7 (3) GDPR;
Right to lodge a complaint according to Art. 77 GDPR.

12.2 RIGHT TO OBJECT

IF, WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

13) Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of the processing and - if relevant - additionally by the respective statutory retention period (e.g. commercial and tax retention periods).

When processing personal data based on an express consent in accordance with Art. 6 (1) lit. a GDPR, the affected data is stored until you revoke your consent.

If there are statutory retention periods for data that is processed within the framework of contractual or quasi-contractual obligations on the basis of Art. 6 (1) lit. b GDPR, this data will be routinely deleted after the expiration of the retention periods, provided it is no longer required for contract fulfillment or contract initiation and/or there is no continued legitimate interest on our part in further storage.

When processing personal data on the basis of Art. 6 (1) lit. f GDPR, this data is stored until you exercise your right of objection according to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) lit. f GDPR, this data is stored until you exercise your right of objection according to Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Copyright-Hinweis: Diese Datenschutzerklärung wurde von den Fachanwälten der IT-Recht Kanzlei erstellt und ist urheberrechtlich geschützt (https://www.it-recht-kanzlei.de)

Version: 01.10.2026, 18:21:12