General Information

Unless otherwise specified below, the provision of your personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are not obligated to provide this data. Failure to provide such data has no consequences. This applies only to the extent that no other information is provided regarding the processing operations described below."Personal data" means any information relating to an identified or identifiable natural person.

You can visit our website without providing any personal information. Each time you access our website, your internet browser transmits usage data to us or our web host/IT service provider, and this data is stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting Internet service provider.Processing is carried out on the basis of the Art. 6(1)(f) of the GDPR based on our overriding legitimate interest in ensuring the smooth operation of our website and in improving our services.Your data may be transferred to third countries outside the European Union for which the European Commission has issued an adequacy decision.

Customer initiates contact via email

If you contact us on your own initiative via email, we will collect your personal data (name, email address, message text) only to the extent that you provide it. The purpose of this data processing is to handle and respond to your inquiry.Legal basis: Art. 6(1)(b) of the GDPR (pre-contractual/contractual measures) or Art. 6(1)(f) of the GDPR (legitimate interest for other inquiries). You have the right to object under Article 21(1) of the GDPR.

Data Collection and Processing When Using the Contact Form

When you use the contact form, we collect your personal data (name, email address, message text) only to the extent that you provide it. The purpose of this data processing is to contact you.Legal basis: Art. 6(1)(b) of the GDPR (pre-contractual/contractual measures) or Art. 6(1)(f) of the GDPR (legitimate interest for other inquiries). You have the right to object under Article 21(1) of the GDPR.

We use software provided by Whistleblower Software ApS, Kannikegade 4, 1, DK-8000 Aarhus C, Denmark, as our internal reporting channel for receiving reports in accordance with the Whistleblower Protection Act (HinSchG). We collect only the data you provide (name, contact information, message text, information about violations as defined in Section 3(3) of the HinSchG, etc.).Purpose: To fulfill the responsibilities, duties, and rights of the internal reporting office under the HinSchG.Legal basis: Art. 6(1)(c) of the GDPR in conjunction with § 10 of the HinSchG (Compliance with a legal obligation).Retention period: 3 years after the conclusion of the proceedings within the meaning of § 18 HinSchG.Details: Privacy Policy for Whistleblower Software

For applications submitted by email or through the application form, we collect your contact information, qualifications, and documentation of your work experience. Providing this information is necessary for us to process your application.Purpose: To establish contact and decide whether to enter into an employment relationship.Legal basis: Art. 6(1)(b) of the GDPR in conjunction with § 26(1) of the BDSG (pre-contractual measures). If consent is given to be included in the applicant pool: Art. 6(1)(a) of the GDPR (Consent).Special categories of data (Art. 9(1) of the GDPR, e.g., severe disability) are processed on the basis of Art. 9, para. 2, subparagraph (b) of the GDPR processed.Retention period: No later than six months, unless the applicant is accepted into the applicant pool or an employment relationship is established.

Customer Account

The launch is intended to improve the shopping experience and streamline the ordering process. Processing is based on the Art. 6(1)(a) of the GDPR with your consent. The customer account will be deleted upon revocation.

Collection, Processing, and Disclosure of Information for Orders

We collect and process data only to the extent necessary to fulfill and process your order. Providing this data is required to conclude the contract.Legal basis: Art. 6(1)(b) of the GDPR (Performance of a contract).Data is shared with: shipping companies, dropshipping/fulfillment providers, payment service providers, and IT service providers. The scope of data sharing is limited to the minimum necessary.Note on Transfers to Third Countries: Your data may be transferred to third countries outside the European Union for which the European Commission has issued an adequacy decision.

Data Collection When Posting a Comment or Review

We collect your name, email address, and comment text to enable and display the review. Order numbers are collected for verification purposes.Legal basis: Art. 6(1)(a) of the GDPR (Consent).In addition, the IP address is stored to prevent misuse (also based on your consent pursuant to Article 6(1)(a) of the GDPR).

Use of the Email Address to Send Newsletters

We use your email address to send you information and offers, provided you have expressly consented to this.Legal basis: Art. 6(1)(a) of the GDPR (Consent). You may unsubscribe at any time. Inclusion on the blacklist based on the Art. 6(1)(f) of the GDPR (legitimate interest).

Use of Mailchimp (Newsletter Distribution)

Mailings are sent via Mailchimp (Rocket Science Group LLC, USA). Data is shared for statistical analysis and for sending mailings.Transfer to a third country: Your data will be transferred to the United States. Mailchimp is not certified under the TADPF. The transfer is based, among other things, on standard contractual clauses.Legal basis: Art. 6(1)(f) of the GDPR (legitimate interest in a targeted newsletter system). You have the right to object.

Use of the Email Address for Availability Notifications

You will receive a one-time notification via email, provided you have given your consent.Legal basis: Art. 6(1)(a) of the GDPR (Consent). May be revoked at any time.

Using WeTransfer

We use WeTransfer B.V. (Netherlands) to transfer large files (up to 2 GB). We share your email address and the file. Data may be transferred to servers in the United States.Legal basis: Art. 6(1)(a) of the GDPR (Consent). May be revoked at any time.Note on Transfers to Third Countries: WeTransfer is not certified under the TADPF. Transfers are made, among other things, on the basis of standard contractual clauses.

Sharing of email addresses with shipping companies to provide information about shipping status

We will share your email address with the shipping company if you have expressly consented to this during the ordering process.Legal basis: Art. 6(1)(a) of the GDPR (Consent). May be revoked at any time.

Using PayPal, PayPal Plus, PayPal Express, and PayPal Checkout

Payments are processed through PayPal (Luxembourg).Legal basis: Art. 6(1)(b) of the GDPR (Performance of the Contract).Note on Credit Checks (for certain payment methods such as credit card, direct debit, or "Pay Later" via PayPal): The credit check is intended to protect against non-payment. Legal basis: Art. 6(1)(f) of the GDPR (legitimate interest). You have the right to object.

Use of the payment service providers Stripe and Link

Payments are processed by Stripe Payments Europe Ltd. (Ireland).Legal basis: Art. 6(1)(b) of the GDPR (Performance of the Contract).Note on Credit Check (via Stripe): Conducted as part of the contract initiation process. Legal basis: Art. 6(1)(f) of the GDPR (legitimate interest). You have the right to object.Note: The use of cookies and other technologies is subject to your consent (§ 25(1), sentence 1, of the TDDDG in conjunction with Art. 6(1)(a) of the GDPR ). Data processing is carried out for the purpose of fulfilling the contract on the basis of the Art. 6(1)(b) of the GDPR .Note: Third parties (e.g., Apple Pay, Google Pay) and purchase on account via PayPal (Ratepay): Data is shared for the purpose of fulfilling the contract based on the Art. 6(1)(b) of the GDPR .

Cookies

Cookies are small text files that are stored in your browser. You have full control over their use (deletion/rejection via browser settings). Instructions for disabling cookies are provided for the most common browsers (Chrome, Edge, Firefox, Safari).

Technically Necessary Cookies

To ensure optimal functionality, user-friendliness, and security of the website.Legal Basis: Use of technologies based on the § 25(2) TDDDG . Processing based on the Art. 6(1)(f) of the GDPR (legitimate interest). You have the right to object.

Use of Borlab's Cookie

We use the Borlabs Cookie consent management tool to obtain and document consent.Legal basis: Art. 6(1)(c) of the GDPR (Compliance with a legal obligation).

Use of Google Analytics 4

Used to analyze the website and its visitors, as well as for marketing purposes. Your IP address is truncated beforehand.Legal Basis: Use of technologies based on the § 25(1), sentence 1, of the TDDDG in conjunction with Art. 6(1)(a) of the GDPR (Consent). Processing based on the Art. 6(1)(a) of the GDPR (Consent). May be revoked at any time.Note on Transfers to Third Countries: United States, certified under TADPF.

Using PHP Web Stat

Analytics tool for analyzing and optimizing the website. Pseudonymous user profiles are created. This feature uses cookies.Legal Basis: Use of technologies based on the § 25(1), sentence 1, of the TDDDG in conjunction with Art. 6(1)(a) of the GDPR (Consent). Processing based on the Art. 6(1)(a) of the GDPR (Consent). May be revoked at any time.

Using WooCommerce Order Attribution Tracking

Statistics and analysis feature for optimizing marketing initiatives. This feature uses cookies.Legal Basis: Use of technologies based on the § 25(1), sentence 1, of the TDDDG in conjunction with Art. 6(1)(a) of the GDPR (Consent). Processing based on the Art. 6(1)(a) of the GDPR (Consent). May be revoked at any time.

Use of the Meta Pixel (Facebook/Instagram)

Used for targeted, interest-based advertising (remarketing) and conversion statistics. We and Meta are joint controllers.Legal basis: Art. 6(1)(a) of the GDPR (Consent). May be revoked at any time.Note on Transfers to Third Countries: United States, certified under TADPF.

Use of Google Ads Conversion Tracking

Used to generate conversion statistics when you click on a Google ad. This feature uses cookies.Legal Basis: Use of technologies based on the § 25(1), sentence 1, of the TDDDG in conjunction with Art. 6(1)(a) of the GDPR (Consent). Processing based on the Art. 6(1)(a) of the GDPR (Consent). May be revoked at any time.Note on Transfers to Third Countries: United States, certified under TADPF.

Using the Pinterest Tag

Used for targeted, interest-based advertising and conversion statistics. This feature uses cookies. Data may be transferred to the United States (not TADPF-certified; standard contractual clauses are used).Legal Basis: Use of technologies based on the § 25(1), sentence 1, of the TDDDG in conjunction with Art. 6(1)(a) of the GDPR (Consent). Processing based on the Art. 6(1)(a) of the GDPR (Consent). May be revoked at any time.

Use of TikTok Pixel

Used to analyze website traffic and display targeted ads. This feature uses cookies. We and TikTok are joint controllers.Legal Basis: Use of technologies based on the § 25(1), sentence 1, of the TDDDG in conjunction with Art. 6(1)(a) of the GDPR (Consent). Processing based on the Art. 6(1)(a) of the GDPR (Consent). May be revoked at any time.Note on Transfers to Third Countries: The United States and third countries (not TADPF-certified; use of standard contractual clauses).

Using Google Tag Manager

Used to manage tracking and analytics tools. It does not store any cookies itself and does not process any personal data.

Use of Google Maps

Used to display geographic information visually. When accessed, data is collected by Google. This feature uses cookies.Legal Basis: Use of technologies based on the § 25(1), sentence 1, of the TDDDG in conjunction with Art. 6(1)(a) of the GDPR (Consent). Processing based on the Art. 6(1)(a) of the GDPR (Consent). May be revoked at any time.Note on Transfers to Third Countries: United States, certified under TADPF.

Using YouTube

Used to embed videos in "Enhanced Privacy Mode." Data is not transmitted to YouTube until the video is played. This feature uses cookies.Legal Basis: Use of technologies based on the § 25(1), sentence 1, of the TDDDG in conjunction with Art. 6(1)(a) of the GDPR (Consent). Processing based on the Art. 6(1)(a) of the GDPR (Consent). May be revoked at any time.Note on Transfers to Third Countries: United States, certified under TADPF.

Duration of Storage

After the contract has been fulfilled, data is stored for the duration of the warranty period; thereafter, it is retained in accordance with statutory (tax and commercial law) retention periods and subsequently deleted.

Rights of the Data Subject (Articles 15 through 20 of the GDPR)

You have the following rights: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, and the right to data portability.

Right to Object (Art. 21(1) of the GDPR)

You have the right to object to processing based on Art. 6(1)(f) of the GDPR (legitimate interest), as well as against processing for the purpose of direct marketing.

Right to File a Complaint with the Supervisory Authority (Art. 77 of the GDPR)

You have the right to file a complaint with the supervisory authority if you believe that your personal data is not being processed lawfully.Competent supervisory authority:State Data Protection Commissioner of Lower Saxony Prinzenstraße 5, 30159 Hanover Tel.: +49 511 1204500, Email: poststelle@lfd.niedersachsen.de