Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no other information is provided in the processing activities described below. “Personal data” means any information relating to an identified or identifiable natural person.

Server-Logfiles You can visit our websites without providing any personal information. Each time you access our website, usage data is transmitted to us or our web hosting/IT service provider by your internet browser and stored in log files (so-called server log files). These stored data include, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider. The processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and in improving our services.

Responsible Please contact us if you wish. The controller responsible for data processing is: Tim-Gerrit Bieber, Braunschweiger Straße 22, 38518 Gifhorn, Germany. You can find the contact information in our legal notice (Impressum).

Data processing when using the reporting system pursuant to the TCO Regulation (Regulation (EU) 2021/784) and the Digital Services Act (Regulation (EU) 2022/2065) If you send us information regarding alleged terrorist content or other unlawful content by email, via a contact form, or via other electronic communication channels provided by us, we collect your personal data (email address, name, message text) only to the extent you provide it. The data processing serves the purpose of carrying out a reporting procedure in accordance with the aforementioned regulations. The data processing is carried out to fulfil a legal obligation on the basis of Art. 6(1)(c) GDPR in conjunction with Art. 15 TCO Regulation as well as Art. 6(1)(c) GDPR in conjunction with Arts. 11, 12 and 16 of the Digital Services Act. Your data will then be deleted in compliance with statutory retention periods.

Customer-initiated contact by email If you contact us on your own initiative by email for business purposes, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves to process and respond to your enquiry. If the contact is made for the purpose of carrying out pre-contractual measures (e.g. consultation regarding purchase interest, preparing an offer) or concerns an already concluded contract between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR. If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Art. 6(1)(f) GDPR. We use your email address solely for processing your enquiry. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Customer account When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may revoke your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of the consent before the revocation. Your customer account will then be deleted.

Use of Trustpilot We use the rating system “Trustpilot” by Trustpilot A/S (Pilestræde 58, 1112 Copenhagen, Denmark; “Trustpilot”) on our website. Trustpilot enables us to collect customer reviews and display them on our website in order to give you an insight into the quality of our services. After placing an order, you may receive an invitation from us or Trustpilot to leave a review and may then submit a rating. In doing so, the following data may be processed by us and/or Trustpilot: email address, name, information about your device and location (IP address, browser settings, type of browser used, browser language, time zone), information about your Trustpilot user account (username, photo, preferred language), information about the purchased product or service used (reference or order number, product details), the content of your review and the star rating you assign, your product photos or videos (if you have attached them to your review). These data may also be used for the purpose of verifying your review. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent, provided you have expressly agreed to the transfer of your data and to receiving a review invitation. You may revoke your consent at any time without affecting the lawfulness of the processing carried out prior to revocation. Further information on data protection when using Trustpilot can be found at: https://de.legal.trustpilot.com/for-reviewers/end-user-privacy-terms .

Review reminder After your order, we would like to ask you to review your purchase with us. For this purpose, we use your personal data (name, email address, order information) independent of contract processing to send you a review reminder by email after an order has been placed, provided you have expressly consented to this. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may revoke your consent at any time using the corresponding link in the email or by notifying us, without affecting the lawfulness of the processing carried out before revocation. Use of the email address for sending newsletters We use your email address, independent of contract processing, exclusively for our own advertising purposes for sending newsletters, provided you have expressly agreed to this. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may revoke your consent at any time without affecting the lawfulness of the processing carried out before revocation. You may unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.

Use of payment options We use payment service providers on our website to process payments. This processing is carried out on the basis of Art. 6(1)(b) GDPR.

Cookies may be stored that enable the recognition of your browser. The resulting data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in offering customers various payment methods in a user-friendly manner. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.

We cooperate with the following companies for payment processing:

• Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Irland
• Viafintech, Budapester Straße 50, 10787 Berlin, Germany
• Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm
• PayPal (Europe) S.à.r.l. et Cie, S.C.A, 22-24 Boulevard Royal L-2449, Luxembourg
• Paysafe, 2 Gresham Street, London, England, EC2V 7AD, United Kingdom

Cookies Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables unique identification of the browser when the website is accessed again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the contained data. Cookies that have already been stored can be deleted at any time. However, we would like to point out that, in that case, you may not be able to use all functions of this website to their full extent.

The following links provide information on how to manage (including deactivate) cookies in the most common browsers: Chrome: https://support.google.com/accounts/answer/61416?hl=de

Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies Unless otherwise stated in this privacy policy, we use only technically necessary cookies for the purpose of making our services more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognise your browser even after a page change and to offer you services. Some functions of our website cannot be provided without the use of cookies. For these functions, it is necessary that the browser is recognised even after a page change.

The use of cookies or comparable technologies is based on Section 25(2) TDDDG. The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our services. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.

Use of Google reCAPTCHA We use the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website. The query serves the purpose of distinguishing input by a human from automated, machine processing. Your input is transmitted to Google and reused there. Additionally, the IP address and, where applicable, other data required by Google for the reCAPTCHA service are transmitted to Google. These data are processed by Google within the European Union and may also be transferred to servers of Google LLC in the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and therefore committed to complying with European data protection principles. The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out before the revocation. Further information on Google reCAPTCHA and the corresponding privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.

Use of Cloudflare We use the Cloudflare CDN content delivery network of Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; “Cloudflare”) on our website. This is a network of servers located in various data centres which our web server connects to and through which certain content from our website is delivered. The data processing serves the purpose of optimising the loading times of our website as well as protecting against large-scale attacks by cybercriminals, thereby making our services more user-friendly and secure. The following information may be collected, among others: IP address, system configuration information, information about traffic to and from customer websites (so-called server log files). Your data may be transferred to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflare is certified under the TADPF and therefore committed to complying with European data protection principles. The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Art. 6(1)(f) GDPR. Further information on data protection when using Cloudflare can be found at: https://www.cloudflare.com/de-de/privacypolicy/.

Use of YouTube We use the function for embedding YouTube videos of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The function displays videos stored on YouTube in an iframe on the website. The “enhanced data protection mode” option is activated. As a result, YouTube does not store information about visitors to the website. Only when you watch a video are information and data transmitted to YouTube and stored there. Your data may be transferred to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube is certified under the TADPF and therefore committed to complying with European data protection principles. The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out before the revocation. Further information on the collection and use of data by YouTube and Google, your rights in this regard, and options for protecting your privacy can be found in YouTube’s privacy notice at https://www.youtube.com/t/privacy.

Embedding the Händlerbund member logo The Händlerbund member logo (Händlerbund e.V., Kohlgartenstraße 11–13, 04315 Leipzig) is embedded on our website. When you access our website, the browser used on your device automatically sends information to the server of Händlerbund e.V. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without your intervention and stored until automatic deletion:

• IP address of the requesting computer,
• date and time of access,
• name and URL of the file accessed,
• website from which the access was made (referrer URL),
• browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The temporary storage of the IP address by the system is necessary to enable the delivery of the website. For this purpose, the IP address must remain stored for the duration of the session. Storage in log files is carried out to ensure the functionality of the website. The data also serves to optimise the website and ensure the security of the IT systems. These data are not stored together with other personal data. The legal basis for data processing is Art. 6(1)(f) GDPR.

Rights of data subjects and storage period

Duration of storage

After complete contract fulfilment, the data are first stored for the duration of the warranty period and then, taking into account statutory — in particular tax and commercial — retention periods, stored and then deleted after the expiry of these periods, unless you have consented to further processing and use.

Rights of the data subject

If the statutory requirements are met, you have the following rights pursuant to Arts. 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability. You also have the right to object pursuant to Art. 21(1) GDPR to processing based on Art. 6(1)(f) GDPR, as well as to processing for direct marketing purposes.

Right to lodge a complaint with the supervisory authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is unlawful.

You may lodge a complaint, among others, with the supervisory authority responsible for us, which can be contacted at: Landesbeauftragte für den Datenschutz Niedersachsen Prinzenstraße 5 30159 Hannover Phone: +49 511 1204500 Fax: +49 511 1204599 Email: [email protected]

Right to object

If the personal data processing operations listed here are based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing with effect for the future. After an objection has been made, the processing of the data concerned will be stopped, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defence of legal claims.

Last updated: 19 November 2024