Privacy Policy
1) Introduction and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data is all data with which you can be personally identified.
1.2 The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is devemed GmbH, Take-Off Gewerbepark 30, 78579 Neuhausen ob Eck, Deutschland, Tel.: 074679491990, E-Mail: info@devemed.de. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Data collection when visiting our website
2.1 If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the site server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
IP address used (if applicable: in anonymised form)
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller). You can recognise an encrypted connection by the character string "https://" and the lock symbol in your browser line.
3) Hosting & Content-Delivery-Network
Bunny
We use a content delivery network from the following provider: BUNNYWAY d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia
This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
4) Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device for longer and enable page settings to be saved (so-called "persistent cookies"). In the latter case, you can find the storage period in the cookie settings overview of your web browser.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be restricted.
5) Making contact
5.1 Brevo
This website uses a live chat system from the following provider: Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany
The processing of personal data transmitted via the chat is carried out either in accordance with Art. 6 para. 1 lit. b GDPR, because it is necessary for the initiation or execution of the contract, or in accordance with Art. 6 para. 1 lit. f GDPR due to our legitimate interest in the effective support of our site visitors.
Subject to conflicting statutory retention periods, your data transmitted in this way will be deleted once the matter in question has been conclusively clarified.
In addition, further information may be collected and analysed using cookies for the purpose of creating pseudonymised user profiles; however, this information is not used to identify you personally and is not merged with other data records. If this information has a personal reference, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation purposes.
The setting of cookies can be prevented by appropriate browser settings. In this case, however, the functionality of our website may be restricted. You can object to the collection and storage of data for the purpose of creating a pseudonymised user profile at any time with effect for the future.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
5.2 Brevo
We use the services of the following provider for review reminders: Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany
We transmit your email address and any other customer data to the provider exclusively on the basis of your express consent in accordance with Art. 6 para. 1 lit. a GDPR so that the provider can contact you by email with a review reminder.
You can revoke your consent to us or the provider at any time with effect for the future.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorised disclosure to third parties.
5.3 ShopVote
We use the services of the following provider for rating reminders: Blickreif GmbH, Schulstraße 46, 80634 Munich, Germany
We transmit your email address and any other customer data to the provider exclusively on the basis of your express consent in accordance with Art. 6 para. 1 lit. a GDPR so that the provider can contact you by email with a review reminder.
You can revoke your consent to us or the provider at any time with effect for the future.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorised disclosure to third parties.
5.4 Calendly
For the provision of an online appointment booking function, we use the services of the following provider: Calendly, LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA.
For the purpose of appointment scheduling, pursuant to Art. 6 para. 1 lit. b GDPR, first and last name as well as email address (and optionally the telephone number if a telephone appointment is requested) are collected and transmitted to the provider based on our legitimate interest in effective customer management and efficient appointment scheduling pursuant to Art. 6 para. 1 lit. f GDPR, and stored there for appointment organization.
After the appointment or at the end of the agreed appointment period, your data will be deleted by the provider.
We have entered into a data processing agreement with the provider, which ensures the protection of data of our site visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision of the European Commission.
5.5 WhatsApp Business
We offer visitors to our website the opportunity to contact us via the messaging service WhatsApp provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
For this purpose, we use the so-called "Business Version" of WhatsApp.
If you contact us via WhatsApp for a specific business matter (such as a placed order), we will store and use the mobile number you use on WhatsApp and, if provided, your first and last name in accordance with Art. 6 para. 1 lit. b. GDPR to process and respond to your inquiry. Based on the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address, or email address) to assign your inquiry to a specific process.
If you use our WhatsApp contact for general inquiries (such as regarding our range of services, availability, or our website), we will store and use the mobile number you use on WhatsApp and, if provided, your first and last name in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the efficient and timely provision of the requested information.
Your data will only be used for responding to your inquiry via WhatsApp and will not be disclosed to third parties.
Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transmits phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device that stores only the WhatsApp contact details of those users who have contacted us via WhatsApp.
This ensures that each person whose WhatsApp contact details are stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts by accepting WhatsApp's terms of use on their device for the first time, in accordance with Art. 6 para. 1 lit. a GDPR. Transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For the purpose and scope of data collection and further processing and use of data by WhatsApp, as well as your related rights and options to protect your privacy, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy
As part of the aforementioned processing, data transfers to servers of Meta Platforms Inc. in the USA may occur.
The provider has joined the EU-US Data Privacy Framework for data transfers to the USA, ensuring compliance with the European data protection level based on an adequacy decision of the European Commission.
5.6 When contacting us (e.g., via contact form or email), personal data will be processed solely for the purpose of processing and responding to your inquiry and only to the extent necessary for this purpose.
The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been finally clarified and provided that there are no legal retention obligations.
6) Data Processing When Opening a Customer Account
In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary when you provide it to us when opening a customer account. You can find out which data is required for opening an account from the input mask of the corresponding form on our website.
Deletion of your customer account is possible at any time and can be done by sending a message to the aforementioned address of the controller. After deletion of your customer account, your data will be deleted if all contracts concluded via it have been completely processed, there are no legal retention periods, and there is no legitimate interest on our part in continuing to store the data.
7) Use of Customer Data for Direct Marketing
7.1 Subscription to Our Email Newsletter
When you subscribe to our email newsletter, we regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. For newsletter dispatch, we use the so-called double opt-in procedure, which ensures that you only receive newsletters after you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In this process, we store the IP address entered by the Internet service provider (ISP) and the date and time of registration to be able to trace any misuse of your email address at a later point in time. The data collected by us during the newsletter registration process is used strictly for the intended purpose.
You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the responsible party mentioned above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is legally permitted and about which we inform you in this statement.
7.2 Sending the Email Newsletter to Existing Customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. For this purpose, we are not required to obtain separate consent from you in accordance with § 7 para. 3 UWG (German law against unfair competition). The data processing is based solely on our legitimate interest in personalized direct marketing pursuant to Art. 6 para. 1 lit. f GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails.
You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by sending a message to the responsible party mentioned at the beginning. You will only incur transmission costs according to the basic rates. Upon receipt of your objection, the use of your email address for advertising purposes will be immediately discontinued.
7.3 Brevo
The dispatch of our email newsletters is carried out via this provider: Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany.
Based on our legitimate interest in effective and user-friendly newsletter marketing, we transfer the data provided by you during newsletter registration in accordance with Art. 6 para. 1 lit. f GDPR to this provider so that they can handle the newsletter dispatch on our behalf.
Subject to your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the provider also conducts a statistical evaluation of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure opening rates and specific interactions with the newsletter content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data sets. You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider to protect the data of our site visitors and prohibit disclosure to third parties.
7.4 WhatsApp Newsletter
When you subscribe to our WhatsApp newsletter, we will regularly send you information about our offers via WhatsApp. The only mandatory information for sending the newsletter is your mobile phone number.
For the newsletter dispatch, you add our provided mobile phone number to the address contacts of your mobile device and send us the message "Start" via WhatsApp. By sending this WhatsApp message, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR for the purpose of newsletter dispatch. We will then add you to our newsletter distribution list.
The data collected from you during newsletter registration will be processed exclusively for the purpose of advertising via the newsletter. You can unsubscribe from the newsletter at any time by sending us the message "Stop" via WhatsApp. After unsubscribing, your mobile phone number will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is legally permitted and about which we inform you in this statement.
Please note that WhatsApp has access to the address book of the mobile device we use for newsletter dispatch and automatically transfers phone numbers stored in the address book to a server of Facebook in the USA.
Therefore, for sending our WhatsApp newsletter, we use a mobile device that stores only the WhatsApp contact details of our newsletter recipients in its address book. This ensures that each person whose WhatsApp contact details are stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts by accepting WhatsApp's terms of use on their device for the first time, in accordance with Art. 6 para. 1 lit. a GDPR. Transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For the purpose and scope of data collection and further processing and use of data by WhatsApp, as well as your related rights and options to protect your privacy, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy
As part of the aforementioned processing, data transfers to servers of Meta Platforms Inc. in the USA may occur.
The provider has joined the EU-US Data Privacy Framework for data transfers to the USA, ensuring compliance with the European data protection level based on an adequacy decision of the European Commission.
7.5 Product Availability Notification via Email
For temporarily unavailable items, you can sign up to receive email notifications about product availability. We will send you a one-time email message about the availability of the selected item. The only mandatory information for sending this notification is your email address. Providing additional data is voluntary and may be used to address you personally. For email dispatch, we use the so-called double opt-in procedure, which ensures that you only receive a notification after you have expressly confirmed your consent by clicking on a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In this process, we store the IP address entered by the Internet service provider (ISP) and the date and time of registration to be able to trace any misuse of your email address at a later point in time. The data collected by us during registration for our email notification service for product availability is used strictly for the intended purpose.
7.6 Shopping Cart Reminders via Email
In the event that you abandon your shopping cart with us before completing the order, you have the option to receive a one-time email reminder about the contents of your virtual shopping cart.
The only mandatory information for sending this reminder is your email address. Providing additional data is voluntary and may be used to address you personally. For email dispatch, we use the so-called double opt-in procedure, which ensures that you only receive a notification after you have expressly confirmed your consent by clicking on a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR for sending a shopping cart reminder. In this process, we store the IP address entered by the Internet service provider (ISP) and the date and time of registration to be able to trace any misuse of your email address at a later point in time. The data collected by us during registration for our email notification service is used strictly for the intended purpose.
You can unsubscribe from shopping cart reminders at any time by sending a corresponding message to the responsible party mentioned above. After unsubscribing, your email address will be immediately deleted from our dedicated distribution list for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is legally permitted and about which we inform you in this statement.
7.7 Advertising via Postal Mail
Based on our legitimate interest in personalized direct marketing, we reserve the right to store your first and last name, your postal address, and - to the extent that we have received this additional information from you in the context of the contractual relationship - your title, academic degree, year of birth, and your professional, sectoral, or business designation in accordance with Art. 6 para. 1 lit. f GDPR and to use them for sending interesting offers and information about our products via postal mail.
You can object to the storage and use of your data for this purpose at any time by notifying us.
8) Data Processing for Order Processing
8.1 To the extent necessary for the processing of contracts for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.
If, based on a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data (name, address, email address) transmitted by you when ordering to inform you personally within the legally prescribed period about upcoming updates via a suitable communication channel (such as postal mail or email) in accordance with our legal obligations under Art. 6 para. 1 lit. c GDPR. Your contact details will be strictly used for notifications about updates owed by us and will be processed by us only to the extent necessary for the respective information.
To process your order, we also cooperate with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.
8.2 To fulfill our contractual obligations to our customers, we cooperate with external shipping partners. We pass on your name as well as your delivery address and, if necessary for delivery, your telephone number exclusively for the purpose of delivering the goods in accordance with Art. 6 para. 1 lit. b GDPR to a shipping partner selected by us.
8.3 Disclosure of Personal Data to Shipping Service Providers
As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
We disclose your email address and/or telephone number in accordance with Art. 6 para. 1 lit. a GDPR before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification to the provider, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we only disclose the recipient's name and delivery address to the provider in accordance with Art. 6 para. 1 lit. b GDPR. The disclosure is only made to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.
The consent can be revoked at any time with effect for the future to the responsible party mentioned above or to the provider.
As a transport service provider, we use the following provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany
We will pass on your e-mail address and/or telephone number to the provider in accordance with Art. 6 para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The information will only be passed on if this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or notification of delivery is not possible.
Consent can be withdrawn at any time with effect for the future from the controller named above or from the provider.
As a transportation service provider, we use the following provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany.
We will forward your email address and/or telephone number to the provider before delivering the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your explicit consent for this during the ordering process in accordance with Art. 6 (1) lit. a GDPR. Otherwise, for the purpose of delivery, we will only provide the name of the recipient and the delivery address to the provider in accordance with Art. 6 (1) lit. b GDPR. Disclosure will only take place to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.
The consent can be revoked at any time with effect for the future to the responsible party mentioned above or to the provider.
8.4 Use of Payment Service Providers
This website offers one or more online payment methods from the following provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
When selecting a payment method from the provider where you make a payment in advance, your payment data provided during the ordering process (including name, address, banking and payment card information, currency, and transaction number) as well as information about the contents of your order will be transmitted to them in accordance with Art. 6 (1) lit. b GDPR. Your data will only be disclosed for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
When selecting a payment method where we make a payment in advance, you will also be prompted during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, if applicable, data about an alternative payment method).
In order to maintain our legitimate interest in determining your creditworthiness in such cases, this data will be forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 (1) lit. f GDPR. Based on the personal data provided by you as well as other data (such as shopping cart, invoice amount, order history, payment experiences), the provider checks whether the payment option selected by you can be granted in terms of payment and/or default risk.
The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, are included in the calculation of the score values.
You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the proper processing of payments.
This website uses PayPal Checkout, an online payment system provided by PayPal, consisting of PayPal's own payment methods and local third-party payment methods.
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "Pay Later" via PayPal, we will transmit your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The disclosure is made in accordance with Art. 6 (1) lit. b GDPR and only to the extent necessary for the payment processing.
For the payment methods credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to conduct a credit check. For this purpose, your payment data may be forwarded to credit agencies based on PayPal's legitimate interest in determining your creditworthiness, in accordance with Art. 6 (1) lit. f GDPR. PayPal uses the result of the credit check regarding the statistical probability of default for the purpose of deciding whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, are included in the calculation of the score values. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the proper processing of payments.
When selecting the PayPal payment method "Invoice Purchase," your payment data will be initially transmitted to PayPal for payment preparation, after which PayPal forwards it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") for payment execution. The legal basis is Art. 6 (1) lit. b GDPR. In this case, RatePay conducts an identity and credit check in its own name to determine creditworthiness, as previously mentioned, and discloses your payment data to credit agencies based on the legitimate interest in determining creditworthiness in accordance with Art. 6 (1) lit. f GDPR. A list of the credit agencies that Ratepay may access can be found here: https://www.ratepay.com/legal-payment-creditagencies/.
When using the payment method of a local third-party provider, your payment data will first be transmitted to PayPal in preparation for the payment, in accordance with Art. 6 (1) lit. b GDPR. Depending on your selection of an available local payment method, PayPal then forwards your payment data for payment execution to the respective provider in accordance with Art. 6 (1) lit. b GDPR:
- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
- iDeal (Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
For further information on data protection, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
8.5 We reserve the right to transfer your data to the debt collection service provider Atlas Inkasso if our payment demand remains unpaid despite prior reminders. In this case, the debt will be collected directly by the debt collection service provider.
The transfer of your data is for the fulfillment of the contract pursuant to Art. 6 (1) sentence 1 lit. b GDPR, as well as for the protection of our predominant legitimate interests in the effective enforcement of our payment claim pursuant to Art. 6 (1) sentence 1 lit. f GDPR, as part of a balancing of interests.
9) Online Marketing
Brevo
Tracker
This website utilizes the software-based marketing service of the following provider, Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, for the provision and synchronization of various customer management services.
The service enables automated processing of feed activities, control of advertising in utilized marketing channels, and analysis of the success of marketing measures, as well as centralized email marketing and contact management.
To fulfill the various functions, cookies are used, which are small text files stored locally in the cache of your web browser on your device, enabling us to analyze your usage of the website. These cookies collect certain information, such as the IP address, location, and time of page access.
All the aforementioned processing, particularly the setting of cookies for reading information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
Other legal bases for data processing carried out within specific service functions (such as the necessity of explicit consent according to Art. 6 (1) lit. a GDPR for sending newsletters) remain unaffected.
We have concluded a data processing agreement with the provider, ensuring the protection of data of our website visitors and prohibiting unauthorized disclosure to third parties.
10) Web Analytics Services
10.1 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows us to analyze your use of our website.
By default, when visiting the website, Google Analytics 4 sets cookies, which are small pieces of text stored on your device, collecting certain information. This information includes your IP address, which is, however, truncated by Google to exclude direct personal identification.
The information is transmitted to and processed on Google's servers. Transfers to Google LLC in the United States are also possible.
Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website usage and internet usage. The truncated IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The data collected during the use of Google Analytics 4 is stored for a period of two months and then deleted.
All the processing described above, especially the setting of cookies on the device used, only occurs if you have given us your explicit consent according to Art. 6 (1) lit. a GDPR.
Without your consent, the use of Google Analytics 4 during your visit to the website will be suspended. You can revoke your consent at any time with future effect. To exercise your right of withdrawal, please disable this service using the "Cookie Consent Tool" provided on the website.
We have entered into a data processing agreement with Google, ensuring the protection of data of our website visitors and prohibiting unauthorized disclosure to third parties.
For further legal information about Google Analytics 4, please visit https://policies.google.com/privacy?hl=en&gl=en and https://policies.google.com/technologies/partner-sites.
Demographic Features
Google Analytics 4 utilizes the special feature "demographic characteristics" and can generate statistics that provide insights into the age, gender, and interests of website visitors. This is done through the analysis of advertising and information from third parties. This enables the identification of target audiences for marketing activities. However, the collected data cannot be attributed to any specific individual and is deleted after being stored for a period of two months.
Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to create cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google, subject to your consent to the use of Google Analytics under Art. 6 (1) lit. a GDPR, can analyze your usage behavior across devices and create database models, including those for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the "Personalized Advertising" feature in your Google account settings. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=en. Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=en.
UserIDs
As an extension to Google Analytics 4, the "UserIDs" feature may be used on this website. If you have consented to the use of Google Analytics 4 under Art. 6 (1) lit. a GDPR, created an account on this website, and logged in on various devices with this account, your activities, including conversions, can be analyzed across devices.
10.2 Google Tag Manager
This website utilizes the "Google Tag Manager," a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google").
The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and allows for calibration, control, and conditional linking through a unified user interface. The Google Tag Manager itself does not store any information on user devices or retrieve such information. Additionally, the service does not conduct independent data analysis. However, when a page is accessed, the Google Tag Manager may transmit your IP address to Google, where it may be stored. Transmission to servers operated by Google LLC in the USA is also possible.
This processing is only carried out if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. Without this consent, the use of Google Tag Manager during your visit to the website will be suspended. You can revoke your consent at any time with future effect. To exercise your right of withdrawal, please disable this service using the "Cookie Consent Tool" provided on the website.
We have entered into a data processing agreement with the provider, ensuring the protection of data of our website visitors and prohibiting unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
11) Retargeting/Remarketing and Conversion Tracking
11.1 Meta Pixel with Enhanced Data Matching
Within our online offering, we use the service "Meta Pixel" in the mode of enhanced data matching provided by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta").
When a user clicks on an advertisement placed by us on Facebook or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel." After redirection, this URL parameter is then stored in the user's browser via a cookie set by our linked page itself. Additionally, this cookie collects specific customer data such as the email address, which we collect on our webpage associated with the Facebook or Instagram ad during activities like purchases, account logins, or registrations (enhanced data matching). The cookie is then read, enabling the transmission of data, including specific customer data, to Meta.
We use "Meta Pixel" with enhanced data matching to make our advertisements (so-called "Ads") on Facebook and/or Instagram more effective and ensure they align with user interests or exhibit certain characteristics (e.g., interests in specific topics or products determined based on visited web pages) that we transmit to Meta (so-called "Custom Audiences").
Furthermore, we analyze the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an ad (conversion). Compared to the standard version of "Meta Pixel," the function of enhanced data matching helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.
All transmitted data is stored and processed by Meta, allowing for association with the respective user profile, and Meta may use the data for its own advertising purposes in accordance with Meta's data usage policies (https://www.facebook.com/about/privacy/). The data may enable Meta and its partners to display ads on and off Facebook.
All the processing described above, especially the setting of cookies for reading information on the device used, will only occur if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with future effect by disabling this service using the "Cookie Consent Tool" provided on the website.
We have entered into a data processing agreement with the provider, ensuring the protection of data of our website visitors and prohibiting unauthorized disclosure to third parties.
The information generated by Meta is usually transmitted to and stored on a server operated by Meta; in this context, there may also be a transfer to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
11.2 Criteo
This website utilizes retargeting technology from the following provider: Criteo SA, 32 Rue Blanche, 75009 Paris, France.
This technology allows us to target visitors to our websites with personalized, interest-based advertising who have already shown interest in our shop and products. The display of advertising material is based on cookie-based analysis of previous and current usage behavior, but no personal data is stored. In cases of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and customize advertising based on the stored information. These cookies are small text files stored on your computer or mobile device. As a result, you will be shown ads that are highly likely to match your product and information interests.
All the processing described above, especially the setting of cookies to read information on the device used, will only occur if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. Without this consent, the use of retargeting technology will be suspended during your visit to the website.
You can revoke your consent at any time with future effect. To exercise your right of withdrawal, please disable this service using the "Cookie Consent Tool" provided on the website.
11.3 Google Ads Remarketing
This website utilizes retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
For this purpose, Google places a cookie in your device's browser, which automatically enables interest-based advertising based on a pseudonymous cookie ID and the pages you have visited. Further data processing only occurs if you have consented to Google that your internet and app browser history is linked to your Google account and that information from your Google account is used to personalize ads that you view on the web. If you are logged into your Google account during your visit to our website in this case, Google uses your data along with Google Analytics data to create and define audience lists for cross-device remarketing. Your personal data may be temporarily linked with Google Analytics data to create audiences. In the context of using Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC. in the USA.
All the processing described above, especially the setting of cookies to read information on the device used, will only occur if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. Without this consent, the use of retargeting technology will be suspended during your visit to the website.
You can revoke your consent at any time with future effect. To exercise your right of withdrawal, please disable this service using the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
11.4 LinkedIn Insight
This website utilizes retargeting technology from the following provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
This technology enables us to target visitors to our website with personalized, interest-based advertising, who have already shown interest in our shop and products. The display of advertising materials is based on cookie-based analysis of previous and current usage behavior, but no personally identifiable information is stored. In cases of retargeting technology, a cookie is stored on your computer or mobile device to capture pseudonymized data about your interests and customize advertising based on the stored information. These cookies are small text files stored on your computer or mobile device. This allows you to see ads that are highly likely to match your product and information interests.
All the processing described above, especially the setting of cookies to read information on the device used, will only occur if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. Without this consent, the use of retargeting technology will be suspended during your visit to the website.
You can revoke your consent at any time with future effect. To exercise your right of withdrawal, please disable this service using the "Cookie Consent Tool" provided on the website.
11.5 LinkedIn Marketing Solutions
This website utilizes retargeting technology from the following provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
This technology enables us to target visitors to our website with personalized, interest-based advertising, who have already shown interest in our shop and products. The display of advertising materials is based on cookie-based analysis of previous and current usage behavior, but no personally identifiable information is stored. In cases of retargeting technology, a cookie is stored on your computer or mobile device to capture pseudonymized data about your interests and customize advertising based on the stored information. These cookies are small text files stored on your computer or mobile device. This allows you to see ads that are highly likely to match your product and information interests.
All the processing described above, especially the setting of cookies to read information on the device used, will only occur if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. Without this consent, the use of retargeting technology will be suspended during your visit to the website.
You can revoke your consent at any time with future effect. To exercise your right of withdrawal, please disable this service using the "Cookie Consent Tool" provided on the website.
11.6 Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and, within Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
We use Google Ads to draw attention to our attractive offers on external websites using advertising materials (so-called Google Adwords). We can determine the success of individual advertising measures based on the data of the advertising campaigns. The aim is to show you advertising that is of interest to you, to make our website more interesting for you, and to achieve a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of Google Ads customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers receive the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users.
As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. in the United States.
Details about the processing triggered by Google Ads Conversion Tracking and Google's handling of website data can be found here: https://policies.google.com/technologies/partner-sites
All the processing described above, especially the setting of cookies to read information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
Furthermore, you can permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=en
To address users who have provided us with data as part of business or business-like relationships in a more targeted advertising manner, we use a customer matching feature within Google Ads. For this purpose, we electronically transmit one or more files containing aggregated customer data (especially email addresses and phone numbers) to Google. Google does not have access to clear data, but encrypts the information in the customer files automatically using a special algorithm during the transmission process. The encrypted information can then only be used by Google to assign it to existing Google accounts that the individuals have set up. This enables personalized advertising to be displayed across all Google services associated with the respective Google account.
The transmission of customer data to Google only takes place if you have given us explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke this consent with us at any time with effect for the future. Further information on Google's privacy measures regarding the customer matching feature can be found here: https://support.google.com/google-ads/answer/6334160?hl=en&ref_topic=10550182
Google's privacy policy can be viewed here: https://www.google.com/policies/privacy/
For data transfers to the USA, the provider has joined the EU-US Privacy Shield, which ensures compliance with the European data protection level based on an adequacy decision of the European Commission.
11.7 Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").
GMP uses cookies to display relevant ads to users, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Through a cookie ID, Google records which ads are displayed in which browser and can prevent them from being shown multiple times. In addition, GMP can track conversions, which are related to ad requests, using cookie IDs. This occurs, for example, when a user views a GMP ad and later visits the advertiser's website using the same browser and makes a purchase through that website. According to Google, GMP cookies do not contain personally identifiable information.
Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server.
We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our knowledge as follows: By integrating GMP, Google receives information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address. As part of the use of GMP, personal data may also be transmitted to the servers of Google LLC. in the USA.
All the processing described above, especially the setting of cookies to read information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Privacy Shield, which ensures compliance with the European data protection level based on an adequacy decision of the European Commission.
You can find the privacy policy of GMP by Google here: https://www.google.com/policies/privacy/
11.8 TikTok
Pixel
This website utilizes the conversion tracking technology of the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
If you have arrived at our website from an advertisement on the provider's domain, the success of the advertisement can be tracked using cookies and/or similar technologies (tracking pixels, web beacons, pings, or HTTP requests).
For this purpose, certain device and browser information, including possibly your IP address, is read via the tracking technology to capture and evaluate predefined user actions by us (such as completed transactions, leads, website search queries, product page views). This allows us to create statistics about user behavior on our website after being redirected from an advertisement, which helps us optimize our offerings.
All the processing described above, especially the setting of cookies to read information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors' data and prohibiting unauthorized disclosure to third parties.
12) Page Functionalities
12.1 Integration of the Instagram feed via Lightwidget
On our website, we utilize the services of Lightwidget, a widget provided by Black Sail Division, Krystian Żwak, Molczyn 17, Leszna Gorna, 43-445 Dziegielow, Poland (www.lightwidget.com), to display preview images of our Instagram profile. Cookies are used for this purpose, which are small text files stored locally in your internet browser's cache.
The widget establishes a connection to servers of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Instagram"), when visitors access our website. As a result, Instagram receives certain browser information, including your IP address. In some cases, transmission to servers of Meta Platforms Inc. based in the USA is also possible.
All the processing described above, especially the setting of cookies to read information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
12.2 Integration of the Instagram feed via SnapWidget
On our website, we use the services of SnapWidget, a widget provided by SnapWidget (Pty) Ltd. based in Johannesburg, South Africa (www.snapwidget.com), to display preview images of our Instagram profile. Cookies are used for this purpose, which are small text files stored locally in your internet browser's cache.
The widget establishes a connection to servers of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Instagram"), when visitors access our website. As a result, Instagram receives certain browser information, including your IP address. In some cases, transmission to servers of Meta Platforms Inc. based in the USA is also possible.
All the processing described above, especially the setting of cookies to read information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
12.3 Facebook Plugins
Our website uses plugins from the social network provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
These plugins enable direct interactions with content on the social network.
To increase the protection of your data when visiting our website, the plugins are initially deactivated using a so-called "2-click" or "Shariff" solution integrated into the page.
This integration ensures that when you visit a page of our website that contains such plugins, no connection is initially made to the provider's servers.
Only when you activate the plugins and thereby give your consent to the data transmission in accordance with Art. 6 Para. 1 lit. a GDPR, does your browser establish a direct connection to the servers of the provider. Regardless of whether you are logged into an existing user profile, certain information about your device (including your IP address), your browser, and your browsing history is transmitted to the provider and may be processed there.
If you are logged into an existing user profile on the provider's social network, information about interactions performed via the plugins may also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, revoking your consent does not affect the data that has already been transferred to the provider.
Data may also be transferred to: Meta Platforms Inc., USA
We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors' data and prohibiting unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Privacy Shield, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.
12.4 Instagram Plugins
Our website uses plugins from the social network provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
These plugins enable direct interactions with content on the social network.
To increase the protection of your data when visiting our website, the plugins are initially deactivated using a so-called "2-click" or "Shariff" solution integrated into the page.
This integration ensures that when you visit a page of our website that contains such plugins, no connection is initially made to the provider's servers.
Only when you activate the plugins and thereby give your consent to the data transmission in accordance with Art. 6 Para. 1 lit. a GDPR, does your browser establish a direct connection to the servers of the provider. Regardless of whether you are logged into an existing user profile, certain information about your device (including your IP address), your browser, and your browsing history is transmitted to the provider and may be processed there.
If you are logged into an existing user profile on the provider's social network, information about interactions performed via the plugins may also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, revoking your consent does not affect the data that has already been transferred to the provider.
Data may also be transferred to: Meta Platforms Inc., USA
We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors' data and prohibiting unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Privacy Shield, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.
12.5 LinkedIn Plugins
Our website uses plugins from the social network provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
These plugins enable direct interactions with content on the social network.
To increase the protection of your data when visiting our website, the plugins are initially deactivated using a so-called "2-click" or "Shariff" solution integrated into the page.
This integration ensures that when you visit a page of our website that contains such plugins, no connection is initially made to the provider's servers.
Only when you activate the plugins and thereby give your consent to the data transmission in accordance with Art. 6 Para. 1 lit. a GDPR, does your browser establish a direct connection to the servers of the provider. Regardless of whether you are logged into an existing user profile, certain information about your device (including your IP address), your browser, and your browsing history is transmitted to the provider and may be processed there.
If you are logged into an existing user profile on the provider's social network, information about interactions performed via the plugins may also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, revoking your consent does not affect the data that has already been transferred to the provider.
Data may also be transferred to: LinkedIn Inc., USA
We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors' data and prohibiting unauthorized disclosure to third parties.
For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
12.6 Vimeo
This website uses plugins to display and play videos provided by the following provider: Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA.
When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of the provider to load the plugin. Certain information, including your IP address, is transmitted to the provider during this process.
If playback of embedded videos is initiated via the plugin, the provider also sets cookies to collect information about user behavior, create playback statistics, and prevent abusive behavior.
If you are logged into a user account with the provider during your visit to our site, your data will be directly associated with your account when you click on a video. If you do not wish this association with your account, you must log out before clicking the playback button.
All of the above-mentioned processing, especially the setting of cookies to read information on the device used, only occurs if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
12.7 RedCircle
This website incorporates functionalities from the following music service provider for playing music tracks: RedCircle Technologies, Inc., 360 Pine St. Suite 700, San Francisco, California 94104, USA.
When visiting this page, a direct connection can be established between your browser and the provider's servers through this integration, even if you do not have an account with the provider or are not logged into one.
As a result, the provider receives information that you have visited our site. The information collected (potentially including your IP address) is transmitted directly from your browser to a server of the provider and stored there. However, this information is not used to personally identify you and is not disclosed to third parties.
If you play a music track using the corresponding function while logged into a user account with the provider, the provider can associate the visit to our site with this account. If you do not wish for this association to occur, you must log out before clicking the playback button.
The data processing described above is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in providing an appealing acoustic design for visiting our website.
You can also object to the loading of the playback functions of the provider and thus to the data processing described above for the future using add-ons for your browser, such as the script blocker "NoScript" (https://noscript.net/).
For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
12.8 SoundCloud
This website incorporates functionalities from the following music service provider for playing music tracks: SoundCloud Global Limited & Co. KG, Rheinsberger Str. 76/77, 10115 Berlin, Germany.
When visiting this page, a direct connection can be established between your browser and the provider's servers through this integration, even if you do not have an account with the provider or are not logged into one.
As a result, the provider receives information that you have visited our site. The information collected (potentially including your IP address) is transmitted directly from your browser to a server of the provider and stored there. However, this information is not used to personally identify you and is not disclosed to third parties.
If you play a music track using the corresponding function while logged into a user account with the provider, the provider can associate the visit to our site with this account. If you do not wish for this association to occur, you must log out before clicking the playback button.
The data processing described above is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in providing an appealing acoustic design for visiting our website.
You can also object to the loading of the playback functions of the provider and thus to the data processing described above for the future using add-ons for your browser, such as the script blocker "NoScript" (https://noscript.net/).
12.9 Spotify
This website incorporates functionalities from the following music service provider for playing music tracks: Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden.
When visiting this page, a direct connection can be established between your browser and the provider's servers through this integration, even if you do not have an account with the provider or are not logged into one.
As a result, the provider receives information that you have visited our site. The information collected (potentially including your IP address) is transmitted directly from your browser to a server of the provider and stored there. However, this information is not used to personally identify you and is not disclosed to third parties.
If you play a music track using the corresponding function while logged into a user account with the provider, the provider can associate the visit to our site with this account. If you do not wish for this association to occur, you must log out before clicking the playback button.
The data processing described above is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in providing an appealing acoustic design for visiting our website.
You can also object to the loading of the playback functions of the provider and thus to the data processing described above for the future using add-ons for your browser, such as the script blocker "NoScript" (https://noscript.net/).
12.10 ShopVote
Graphics
On our website, graphics elements from the following provider are integrated to display external customer reviews and/or an externally awarded quality seal: Blickreif GmbH, Schulstraße 46, 80634 München, Germany.
When you visit a page of our website that contains such graphics elements, your browser establishes a direct connection to the servers of the provider in order to load the elements properly. Certain browser information, including your IP address, is transmitted to the provider.
If personal data is processed in this context, it is done so in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in the optimal marketing of our offers and the appealing design of our website.
12.11 Google Maps API
To enable real-time validation of certain entries in the address form of the order process on our webshop for input errors, we use the services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Data may also be transmitted to: Google LLC., USA.
The provider validates the entered address, verifies the spelling, and supplements any missing data if necessary. In case of non-unique addresses, correct alternative suggestions are displayed. For this purpose, the address data entered by you is transmitted to the provider, stored, and evaluated there.
This processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in accurately capturing the correct address data of the customer to fulfill our contractual delivery obligations conscientiously and to prevent contract execution problems.
The provider processes the affected data separately and does not merge it with other data sets, and deletes it as soon as its status or correctness has been confirmed, but no later than after 30 days.
For data transfers to the USA, the provider has joined the EU-US Privacy Shield framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.
12.12 Google reCAPTCHA
On this website, we utilize the CAPTCHA service provided by the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Data may also be transmitted to: Google LLC, USA. For the visual design of the CAPTCHA window, the provider uses "Google Fonts," which are fonts loaded from the internet by Google. There is no processing of additional information beyond what is already transmitted to Google through the functionality of reCAPTCHA.
The service verifies whether an input is made by a natural person or is being abused by automated machine processing, blocking spam, DDoS attacks, and similar automated malicious access. To ensure that an action is taken by a human rather than an automated bot, the provider collects the IP address of the used device, identification data of the browser and operating system type, as well as the date and duration of the visit, transmitting this data for evaluation to the provider's servers.
The legal basis for this is our legitimate interest in determining individual responsibility on the internet and preventing abuse and spam in accordance with Art. 6 Para. 1 lit. f GDPR.
We have entered into a data processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Privacy Shield framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
12.13 Google Translate
This page utilizes the translation service "Google Translate" provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") via an API integration. In order for the translation of your choice to be displayed automatically in a national language, your browser establishes a connection to Google's servers. Google employs so-called "cookies" for this purpose, which are text files stored on your computer that enable an analysis of your website usage. The information generated by the cookie about your use of this website (including your truncated IP address) is usually transmitted to and stored on a Google server, which may also involve transmission to servers of Google LLC. in the USA.
If personal data is processed, this is done in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in ensuring barrier-free and universal accessibility of our website.
Where legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, disable this service using the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Privacy Shield framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
12.14 Google Customer Reviews (formerly Google Certified Merchant Program)
We collaborate with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program allows us to collect customer reviews from users of our website. After making a purchase on our website, you will be asked if you would like to participate in an email survey by Google.
If you consent in accordance with Art. 6 Para. 1 lit. a GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate the shopping experience on our website. The rating you provide will then be summarized with our other reviews and displayed in our Google Customer Reviews logo as well as in our Merchant Center dashboard. Additionally, your review will be used for Google Seller Ratings. In the course of using Google Customer Reviews, personal data may also be transmitted to servers of Google LLC. in the USA.
You can revoke your consent at any time by sending a message to the data controller responsible for data processing or to Google.
For data transfers to the USA, the provider has joined the EU-US Privacy Shield framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
12.15 Zapier
This website utilizes the services of the following provider for integrating and synchronizing databases and web applications: Zapier Inc., 548 Market St #62411, San Francisco, California 94104, USA.
Through this service, our processing operations are automated, and various workflows are established to efficiently manage and execute internal processes in our processing system. If personal data is processed in this context, it is done so in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in optimizing our internal organization.
We have entered into a data processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Privacy Shield framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
13) Tools and Miscellaneous
Cookie Consent Tool
This website utilizes a "Cookie Consent Tool" to obtain effective user consent for consent-required cookies and cookie-based applications. The "Cookie Consent Tool" is presented to users upon visiting the site in the form of an interactive user interface, allowing users to grant consent for specific cookies and/or cookie-based applications by checking boxes. Through the use of this tool, all consent-required cookies/services are only loaded when the respective user grants consent by checking the appropriate boxes. This ensures that such cookies are only set on the user's device if consent is given.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is not processed in this context.
In cases where the storage, allocation, or logging of cookie settings involves the processing of personal data (such as IP address), this is done in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies, and thus in a legally compliant design of our website.
Another legal basis for processing is also Art. 6 Para. 1 lit. c GDPR. As controllers, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user's consent.
Where necessary, we have entered into a data processing agreement with the provider to ensure the protection of our site visitors' data and to prohibit unauthorized disclosure to third parties.
For further information about the operator and the settings available within the Cookie Consent Tool, please refer directly to the corresponding user interface on our website.
14) Rights of the Data Subject
14.1 The applicable data protection law grants you, as the data subject, the following rights in relation to the processing of your personal data by the controller (rights to information and intervention), with reference to the specified legal basis for the exercise conditions:
- Right to information pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent granted pursuant to Art. 7 Para. 3 GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
14.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING MAY BE RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING PURPOSES AT ANY TIME. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.
15) Duration of Personal Data Storage
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and, if applicable, additionally by the respective statutory retention period (e.g., commercial and tax retention periods).
When processing personal data based on explicit consent pursuant to Art. 6 Para. 1 lit. a GDPR, the data concerned will be stored until you revoke your consent.
If there are statutory retention periods for data processed in the context of contractual or quasi-contractual obligations based on Art. 6 Para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods expire, provided it is no longer necessary for contract fulfillment or initiation and/or we no longer have a legitimate interest in continued storage.
When processing personal data based on Art. 6 Para. 1 lit. f GDPR, this data will be stored until you exercise your right to object under Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.
When processing personal data for the purpose of direct marketing based on Art. 6 Para. 1 lit. f GDPR, this data will be stored until you exercise your right to object under Art. 21 Para. 2 GDPR.
Unless otherwise indicated in the other information provided in this statement about specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.
Status: 08.04.2024, 13:41:44 o'clock