Buy now, pay later

&

free delivery

within

Flag of Germany

Privacy Policy

General Information

Unless otherwise stated below, the provision of your personal data is neither legally or contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This only applies if no other information is given in the following processing operations.

“Personal data” means any information relating to an identified or identifiable natural person.

Controller and Contact Details

The controller for data processing is: Actiforce Europe GmbH, Rudolf-Diesel-Str. 29-31, 31582 Nienburg Germany, Phone: +49 5021 88 77 50, E-Mail: kontakt@actiforce.com

Server Log Files (Website Operation)

You can visit our websites without providing any personal information. When you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.

The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our offerings.

Your data may be transmitted to third countries outside the European Union for which an adequacy decision of the EU Commission exists.

Contact and Communication

Customer Initiated Contact via Email

If you proactively contact us in a business context via email, we only collect your personal data (name, email address, message text) to the extent provided by you. The data processing serves the purpose of processing and responding to your contact request.

Legal basis: Art. 6 (1) lit. b GDPR (pre-contractual/contractual measures) or Art. 6 (1) lit. f GDPR (legitimate interest in other inquiries). You have the right to object under Art. 21 (1) GDPR.

Collection and Processing when using the Contact Form

When using the contact form, we only collect your personal data (name, email address, message text) to the extent provided by you. The data processing serves the purpose of contacting you.

Legal basis: Art. 6 (1) lit. b GDPR (pre-contractual/contractual measures) or Art. 6 (1) lit. f GDPR (legitimate interest in other inquiries). You have the right to object under Art. 21 (1) GDPR.

Data Processing when using Whistleblower Software

We use the software from Whistleblower Software ApS, Kannikegade 4, 1, DK-8000 Aarhus C, Denmark (“Whistleblower Software”) as an internal reporting office for receiving reports pursuant to the German Whistleblower Protection Act (HinSchG) within the scope of contract processing. We only collect the personal data provided by you (name, electronic contact details, message text, information about violations within the meaning of Section 3 (3) HinSchG, information about the identity of persons protected under the HinSchG).

Purpose: Fulfillment of the tasks, duties, and rights of the internal reporting office assigned to it by the HinSchG.

Legal basis: Art. 6 (1) lit. c GDPR in conjunction with Section 10 HinSchG (Fulfillment of a legal obligation).

Deletion period: 3 years after the conclusion of the procedure within the meaning of Section 18 HinSchG.

Details: Whistleblower Software Privacy Policy

Applications via Email and Form

For applications via email or the application form, we collect your contact details, qualifications, and performance-specific evidence to the extent provided by you. The provision of data is necessary to carry out the application process.

Purpose: Contacting you and deciding on the establishment of an employment relationship.

Legal basis: Art. 6 (1) lit. b GDPR in conjunction with Section 26 (1) BDSG (pre-contractual measures). For consent to inclusion in the applicant pool: Art. 6 (1) lit. a GDPR (Consent).

Special categories of data (Art. 9 (1) GDPR, e.g., severe disability) are processed on the basis of Art. 9 (2) lit. b. GDPR.

Deletion period: At the latest after six months, unless consent is given for further processing or an employment relationship follows.

Customer Account and Order Processing

Customer Account

The creation of a customer account serves to improve your shopping experience and simplify order processing. Processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. Your customer account will be deleted upon withdrawal of consent.

Collection, Processing, and Transfer of Personal Data during Orders

When placing an order, we collect and process your personal data only to the extent necessary for the fulfillment and processing of your order and the processing of your inquiries. The provision of data is required for the conclusion of the contract.

Legal basis: Art. 6 (1) lit. b GDPR (Fulfillment of a contract with you).

Data is transferred to: shipping companies, dropshipping/fulfillment providers, payment service providers, order processing service providers, and IT service providers. The scope of data transmission is limited to a minimum.

Third Country Transfer Note: Your data may be transmitted to third countries outside the European Union for which an adequacy decision of the EU Commission exists.

Reviews, Newsletter, and Tracking

Data Collection when writing a Comment or Review

We collect your personal data (name, email address, comment text) only to the extent provided by you, for the purpose of enabling and displaying comments/reviews. The order number is collected for verification.

Legal basis: Art. 6 (1) lit. a GDPR (Consent). Your IP address is also stored for misuse prevention (also based on your **consent**).

Use of Email Address for Newsletter Subscription

We use your email address to send information and offers via newsletter, provided you have **expressly consented**.

Legal basis: Art. 6 (1) lit. a GDPR (Consent). You can unsubscribe at any time. Storage in a blacklist is based on Art. 6 (1) lit. f GDPR (legitimate interest).

Use of Mailchimp (Newsletter Dispatch)

Newsletter dispatch is carried out using Mailchimp (Rocket Science Group LLC, USA). Data is transmitted for dispatch and statistical evaluation.

Third Country Transfer: Your data is usually transferred to servers of Mailchimp in the USA. Mailchimp is not certified under the TADPF. The transfer is based on Standard Contractual Clauses.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in a targeted newsletter system). You have the right to object.

Use of Email Address for Availability Notifications

You receive a one-time notification via email upon availability, provided you have consented.

Legal basis: Art. 6 (1) lit. a GDPR (Consent). Can be withdrawn at any time.

Use of WeTransfer

We use WeTransfer B.V. (Netherlands) to transfer files up to 2 GB upon your request. Data is transmitted to WeTransfer, potentially to servers in the USA (not TADPF certified; transfer based on Standard Contractual Clauses).

Legal basis: Art. 6 (1) lit. a GDPR (Consent). Can be withdrawn at any time.

Shipping and Payment Service Providers

Transfer of Email Address to Shipping Companies for Shipping Status Information

We share your email address with the transport company if you have **expressly consented** during the ordering process.

Legal basis: Art. 6 (1) lit. a GDPR (Consent). Can be withdrawn at any time.

Use of PayPal, PayPal Plus, PayPal Express & PayPal Check-Out

Payment is processed via PayPal (Luxembourg).

Legal basis: Art. 6 (1) lit. b GDPR (Contract Fulfillment).

Credit Check Note (for certain payment methods): The credit check is for protection against default. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest). You have the right to object.

Use of Payment Service Providers Stripe and Link

Payment is processed via Stripe Payments Europe Ltd. (Ireland).

Legal basis: Art. 6 (1) lit. b GDPR (Contract Fulfillment).

Credit Check Note (Stripe): For contract initiation. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest). You have the right to object.

Link Note: Use of cookies/technologies is based on your consent (Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR). Processing for contract fulfillment is based on Art. 6 (1) lit. b GDPR.

Note Third Party (e.g., Apple Pay, Google Pay) and Invoice Purchase via PayPal (Ratepay): Data transfer is based on Art. 6 (1) lit. b GDPR (Contract Fulfillment).

Cookies and Consent Management

Cookies

Cookies are small text files stored in the browser. You have full control over their use (deletion/rejection via browser settings). Instructions for deactivation are provided for major browsers.

Technically Necessary Cookies

Serve the optimal functionality, user-friendliness, and security of the website.

Legal basis: Use of technologies based on Section 25 (2) TDDDG. Processing based on Art. 6 (1) lit. f GDPR (legitimate interest). You have the right to object.

Use of Borlabs Cookie

We use the Borlabs Cookie consent management tool to obtain and document consents.

Legal basis: Art. 6 (1) lit. c GDPR (Fulfillment of a legal obligation).

Analytics, Ad Tracking, and External Services

Use of Google Analytics 4

For website analysis and marketing. Your IP address is shortened beforehand. Function uses cookies/technologies.

Legal basis: Section 25 (1) sentence 1 TDDDG i.V.m. Art. 6 (1) lit. a DSGVO (Consent). Processing based on Art. 6 (1) lit. a GDPR (Consent). Can be withdrawn at any time.

Third Country Transfer Note: USA, certified under TADPF.

Use of PHP Web Stat

Analytics tool for website analysis. Usage profiles are created under a pseudonym. Function uses cookies.

Legal basis: Section 25 (1) sentence 1 TDDDG i.V.m. Art. 6 (1) lit. a DSGVO (Consent). Processing based on Art. 6 (1) lit. a GDPR (Consent). Can be withdrawn at any time.

Use of WooCommerce Order Attribution Tracking

Statistics and analysis function to optimize marketing. Function uses cookies.

Legal basis: Section 25 (1) sentence 1 TDDDG i.V.m. Art. 6 (1) lit. a DSGVO (Consent). Processing based on Art. 6 (1) lit. a GDPR (Consent). Can be withdrawn at any time.

Use of Meta Pixel (Facebook/Instagram)

For targeted, interest-based advertising (Remarketing) and Conversion Statistics. We and Meta are joint controllers.

Legal basis: Art. 6 (1) lit. a GDPR (Consent). Can be withdrawn at any time.

Third Country Transfer Note: USA, certified under TADPF.

Use of Google Ads Conversion-Tracking

For creating Conversion Statistics. Function uses cookies.

Legal basis: Section 25 (1) sentence 1 TDDDG i.V.m. Art. 6 (1) lit. a DSGVO (Consent). Processing based on Art. 6 (1) lit. a GDPR (Consent). Can be withdrawn at any time.

Third Country Transfer Note: USA, certified under TADPF.

Use of Pinterest Tag

For targeted advertising and Conversion Statistics. Function uses cookies. Data may be transferred to the USA (not TADPF certified; transfer based on Standard Contractual Clauses).

Legal basis: Section 25 (1) sentence 1 TDDDG i.V.m. Art. 6 (1) lit. a DSGVO (Consent). Processing based on Art. 6 (1) lit. a GDPR (Consent). Can be withdrawn at any time.

Use of TikTok Pixel

For identifying and analyzing website access and targeted advertising. We and TikTok are joint controllers. Function uses cookies.

Legal basis: Section 25 (1) sentence 1 TDDDG i.V.m. Art. 6 (1) lit. a DSGVO (Consent). Processing based on Art. 6 (1) lit. a GDPR (Consent). Can be withdrawn at any time.

Third Country Transfer Note: USA and third countries (not TADPF certified; transfer based on Standard Contractual Clauses).

Use of Google Tag Manager

Manages JavaScript and HTML tags for implementing tracking/analysis tools. Does not store cookies or process personal data itself.

Use of GoogleMaps

For the visual display of geographical information. Data is collected by Google when pages with embedded maps are accessed. Function uses cookies.

Legal basis: Section 25 (1) sentence 1 TDDDG i.V.m. Art. 6 (1) lit. a DSGVO (Consent). Processing based on Art. 6 (1) lit. a GDPR (Consent). Can be withdrawn at any time.

Third Country Transfer Note: USA, certified under TADPF.

Use of YouTube

For embedding videos in “enhanced privacy mode.” Data is only transferred to YouTube when you watch a video. Function uses cookies.

Legal basis: Section 25 (1) sentence 1 TDDDG i.V.m. Art. 6 (1) lit. a DSGVO (Consent). Processing based on Art. 6 (1) lit. a GDPR (Consent). Can be withdrawn at any time.

Third Country Transfer Note: USA, certified under TADPF.

Data Subject Rights, Right to Object, and Storage Duration

Duration of Storage

After complete contract execution, data is stored for the duration of the warranty period, then considering legal (tax/commercial) retention periods, and subsequently deleted.

Data Subject Rights (Art. 15 to 20 GDPR)

You have the following rights: Right of access, to rectification, to erasure, to restriction of processing, and to data portability.

Right to Object (Art. 21 (1) GDPR)

You have a right to object to processing based on **Art. 6 (1) lit. f GDPR** (legitimate interest) and to processing for **direct marketing purposes**.

Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not lawful.

Competent Supervisory Authority:

State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5, 30159 Hannover
Phone: +49 511 1204500, E-Mail: poststelle@lfd.niedersachsen.de

Last updated: 22.10.2024