1) Information on the Collection of Personal Data and Contact Details of the Controller
We are pleased that you are visiting our website and thank you for your interest. The following provides information on how we handle your personal data when using our website. Personal data is any information that can identify you personally.
The data controller responsible for data processing on this website under the General Data Protection Regulation (GDPR) is Shop Name. The data controller is the natural or legal person who decides, alone or jointly with others, on the purposes and means of processing personal data.
For security reasons and to protect the transmission of personal data and other confidential content (such as orders or inquiries), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” and the lock icon in your browser’s address bar.
When you use our website purely for information purposes (i.e., without registering or providing information), we only collect the data your browser sends to our server (known as “server log files”). This includes:
This data is processed under Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. We do not share this data or use it otherwise. However, we reserve the right to check the server log files later if there are concrete indications of unlawful use.
We use cookies on various pages to make your visit to our website attractive and to enable the use of certain functions. Cookies are small text files stored on your device.
Some cookies (session cookies) are deleted after your browser session ends. Others (persistent cookies) remain on your device and allow us or our partners to recognize your browser upon your next visit.
Cookies may collect data such as browser type, location, or IP address. Persistent cookies are deleted automatically after a set period.
Cookies may be used to store preferences (e.g., shopping cart contents). If cookies collect personal data, processing is done under Art. 6(1)(b) GDPR (contract performance) or Art. 6(1)(f) GDPR (legitimate interest in a user-friendly website).
We may also use third-party cookies from advertising partners. If this occurs, you will be informed separately.
You can set your browser to notify you when cookies are set and decide to allow or reject them. Instructions for managing cookies can be found here:
Note: Disabling cookies may limit website functionality.
When you contact us (e.g., via form or email), we collect your personal data. The data collected depends on the form. Data is stored and used solely for responding to your inquiry and technical administration.
Your data will be deleted once your inquiry is resolved and no legal obligations to retain it exist.
When you open an account or enter into a contract with us, we collect and process your personal data under Art. 6(1)(b) GDPR. The specific data collected is shown in the respective form.
You may request the deletion of your account at any time. Your data will be used for contract processing and, after completion, blocked for further use. It will be deleted after legal retention periods unless you consent to further use or we are legally permitted to do so.
If you subscribe to our email newsletter, we will send you regular updates about our offers. Only your email address is required; other data is optional and used for personalization.
We use the double opt-in method. After you sign up, you’ll receive a confirmation email. Only after clicking the confirmation link will your subscription be active.
Legal basis: Art. 6(1)(a) GDPR – Your consent
We store your IP address and the timestamp of subscription to prevent misuse. You can unsubscribe at any time via a link in the email or by contacting us. Your email address will then be deleted unless you consent to further use or legally allowed use exists.
If you provided your email when purchasing something from us, we may send you emails with offers for similar products. This does not require separate consent.
Legal basis: Art. 6(1)(f) GDPR – Legitimate interest in direct advertising
You can object to this use of your email at any time by contacting us. Only basic transmission costs apply. After your objection, we will stop using your email for advertising.
We share personal data with shipping providers if necessary for delivery. Your payment details are shared with banks or payment service providers as needed to process payments.
Legal basis: Art. 6(1)(b) GDPR – Contract fulfillment
If you choose PayPal (or PayPal credit, direct debit, invoice, or installment payments), your payment data will be shared with:
PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
This is done under Art. 6(1)(b) GDPR and only as needed for payment processing.
PayPal Credit Check
PayPal reserves the right to perform a credit check when you use the following payment methods:
• Credit card via PayPal
• Direct debit via PayPal
• If available: “purchase on account” or “installment plan” via PayPal
To assess your creditworthiness, they may forward your payment details to credit agencies under Article 6(1)(f) GDPR (legitimate interest). PayPal uses the results—such as statistical probability of non-payment, including score values derived from recognized mathematical-statistical methods—to decide whether to offer each payment option. Score values may include address information.
For more details (including which credit agencies are involved and how data is processed), please refer to PayPal’s Privacy Policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this data processing at any time by contacting PayPal. However, PayPal may still process your data if it’s necessary to fulfill the payment contract.
⸻
SOFORT Payment Method
If you choose SOFORT as your payment method, your provided information and order details will be shared with SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany.
SOFORT is part of the Klarna Group (Klarna Bank AB), and data sharing is limited to what’s required for payment processing under Article 6(1)(b) GDPR (contract performance).
For more information about how SOFORT handles your data, see their privacy policy:
https://www.klarna.com/sofort/datenschutz
⸻
8) Follow-up Email for Review Request
Internal review reminder (not via third-party review system)
If you have given explicit consent under Article 6(1)(a) GDPR, we may use your email address to send you a one-time reminder to leave a review for your purchase.
You can withdraw your consent at any time by contacting us.
⸻
9) Use of Social Media Plugins (Shariff Integration)
To protect your privacy, we use the Shariff method to integrate social media buttons (Facebook, Google+, Instagram). These are implemented as simple HTML links—not the usual embedded plugins.
• Clicking a link opens the respective social network in a new browser window, and only then will data be shared with Facebook, Google, or Instagram—if you choose to login and interact.
• These companies (Facebook Inc., Google LLC, Instagram LLC) comply with the EU–U.S. Privacy Shield framework, which ensures a comparable level of data protection in the EU.
For details on data collection, processing, and your rights, please refer to:
• Facebook: facebook.com/policy.php
• Google+: google.com/intl/de/policies/privacy/
• Instagram: help.instagram.com/155833707900388/
⸻
10) Online Marketing
10.1 DoubleClick by Google
We use DoubleClick by Google to manage and optimize ads, track how often ads are shown, and measure conversions. This uses cookies to link ad impressions and clicks with browser sessions. This processing is based on our legitimate interest under Article 6(1)(f) GDPR.
Google does not collect personal data via these cookies. However, connection and usage data may be shared. To opt out of conversion tracking, block cookies from www.googleadservices.com, adjust ad settings at google.de/settings/ads, or use the DAA opt-out tool (aboutads.info). You can also disable cookies in your browser—but note this may limit website functionality.
DoubleClick by Google complies with the Privacy Shield.
Full privacy details are available from Google:
google.de/policies/privacy/
10.2 Google AdWords Conversion Tracking
We also use Google AdWords conversion tracking to assess the effectiveness of our ads.
When you click a Google AdWords ad, a cookie is placed on your device. If the cookie is still valid when you make a purchase, it helps attribute the sale to the ad. The cookie typically expires after 30 days and does not collect personal data. Data is aggregated and anonymous—used only for conversion counts. We process this data under Article 6(1)(f) GDPR for targeted marketing purposes.
To opt out:
• Block conversion tracking cookies in your browser settings
• Use the Google opt-out plugin:
google.com/settings/ads/plugin?hl=de
• Manage cookie acceptance per browser (exceptions may affect site features)
Google is certified under the Privacy Shield.
⸻
11) Web Analytics – Google Universal Analytics
We use Google Analytics (Universal Analytics) to analyze how users interact with our website. It uses cookies to collect data, including an anonymized version of your IP.
IP anonymization (_anonymizeIp()) ensures that full IP addresses are not logged in the EU/EEA. Only in rare cases, shortened IPs may be sent to the U.S. under our legitimate interest (Article 6(1)(f) GDPR) in analyzing usage statistics.
Google Analytics provides anonymized reports and services to us. Your IP is not merged with other Google data.
To opt out:
• Disable cookies in your browser (may affect site features)
• Install Google’s opt-out browser plugin:
tools.google.com/dlpage/gaoptout?hl=de
• For mobile browsers, follow the link on the website to set an opt‑out cookie (valid for that browser and domain)
12) Retargeting / Remarketing / Referral Advertising
Facebook Custom Audiences via Pixel Method
This website uses the “Facebook Pixel” by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).
With your express consent, user behavior can be tracked after users see or click on a Facebook ad. This allows us to evaluate the effectiveness of Facebook ads for statistical and market research purposes and to optimize future ads.
The data collected is anonymous for us—we cannot identify you personally. However, Facebook stores and processes the data, making it possible to link it to a specific user profile. Facebook may use this data in accordance with its data use policy:
https://www.facebook.com/about/privacy/
Facebook and its partners may show you ads on and outside of Facebook. A cookie may also be stored on your device.
This data processing only occurs if you have expressly consented, in accordance with Art. 6(1)(a) GDPR.
Only users aged 13 and older may consent to the use of the Facebook Pixel. If you are younger, please ask your parent or guardian for permission.
Facebook Inc. is certified under the EU–U.S. Privacy Shield, ensuring adequate data protection for data transferred to the U.S.
To disable cookies on your computer, adjust your browser settings to prevent new cookies or delete existing ones. However, this may limit website functionality.
You can also opt out of cookies used by third parties (e.g., Facebook) via this site:
https://www.aboutads.info/choices/
⸻
Google AdWords Remarketing
This website uses Google AdWords Remarketing to advertise in Google search results and on third-party websites.
The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Google sets a cookie in your browser that uses a pseudonymous cookie ID to enable interest-based ads based on the pages you’ve visited. This is based on our legitimate interest in optimal marketing (Art. 6(1)(f) GDPR).
Further data processing occurs only if you have consented to Google linking your browser history to your Google account and using that to personalize ads. If you’re logged into Google while visiting our site, Google may combine your data with Google Analytics to build cross-device remarketing audiences.
You can permanently disable personalized ads via:
• Google’s browser plugin: https://www.google.com/settings/ads/onweb/
• The Digital Advertising Alliance: www.aboutads.info
• Your browser settings (e.g., notify before setting cookies or disable them altogether — but this may limit some website functionality)
Google LLC is also certified under the EU–U.S. Privacy Shield.
For more information about how Google uses your data in advertising:
https://www.google.com/policies/technologies/ads/
⸻
13) Rights of the Data Subject
13.1 You have the following rights under the GDPR:
• Right of Access (Art. 15 GDPR): Learn what data we process about you, why, for how long, to whom it’s disclosed, where we got it from (if not from you), and whether we use automated decision-making or profiling.
• Right to Rectification (Art. 16 GDPR): You can request immediate correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17 GDPR): You can request deletion of your data, unless needed for freedom of expression, legal obligations, public interest, or legal claims.
• Right to Restriction of Processing (Art. 18 GDPR): You can ask us to limit data use under certain conditions (e.g., if data accuracy is disputed or legal claims are pending).
• Right to Notification (Art. 19 GDPR): If your data is corrected, deleted, or restricted, we must inform all recipients unless impossible or overly burdensome.
• Right to Data Portability (Art. 20 GDPR): You may request your data in a common, machine-readable format or have it transferred to another provider.
• Right to Withdraw Consent (Art. 7(3) GDPR): You may revoke any consent at any time with future effect. Processing based on prior consent remains legal until the withdrawal.
• Right to Lodge a Complaint (Art. 77 GDPR): You can complain to a supervisory authority, especially in your place of residence, work, or where a violation occurred.
⸻
13.2 Right to Object
If we process your personal data based on our legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation.
If you object, we will stop processing your data, unless we can demonstrate compelling legitimate grounds that outweigh your rights or the processing serves legal claims.
If your personal data is used for direct marketing, you can object at any time.
In that case, we will stop using your data for marketing.
⸻
14) Data Retention Duration
We store your personal data only for as long as necessary, considering legal retention periods (e.g., commercial and tax laws).
Once these periods expire, we delete your data unless needed for contract performance, pre-contractual measures, or if we have a legitimate interest in continued storage.
