Privacy

Responsible for data processing is: Marek Schimschewski Friedenstr. 10 59872 Meschede Germany

Phone: +49 291 321 989 29

We appreciate your interest in our online shop. The protection of your privacy is very important to us. Below we inform you in detail about the handling of your data.

Access data and hosting You can visit our websites without providing any personal information. When you access a website, the web server automatically stores only a so-called server log file, which, for example, contains the name of the requested file, your IP address, date and time of access, transferred data volume, and the requesting provider (access data) and documents the access. This access data is evaluated exclusively for the purpose of ensuring the trouble-free operation of the site and improving our offer. This serves to safeguard our legitimate interests, which predominate within the scope of a balance of interests, in a correct presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. All access data is deleted no later than seven days after the end of your visit to the site.
Data processing for contract processing, contacting us, and opening a customer account We collect personal data when you provide it to us voluntarily within the framework of your order or when you contact us (e.g. via contact form or email). Mandatory fields are marked as such because in these cases we require the data for contract processing or to process your contact request, and you cannot send the order or contact request without providing it. The data collected can be seen from the respective input forms. We use the data you provide for contract processing and to process your inquiries in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR. If you have given your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR by deciding to open a customer account, we use your data for the purpose of opening a customer account. Further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order processing, payment, and shipping, can be found in the following sections of this data protection declaration. After complete processing of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the expiry of the tax and commercial retention periods pursuant to Art. 6 Para. 1 S. 1 lit. c GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6 Para. 1 S. 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration. You can delete your customer account at any time, either by sending a message to the contact option described in this data protection declaration or via a function provided for this purpose in the customer account.
Data processing for the purpose of shipping processing For the purpose of contract fulfillment pursuant to Art. 6 Para. 1 S. 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. The same applies to the transfer of data to our manufacturers or wholesalers in cases where they take over the shipping for us (dropshipping). These are considered shipping service providers within the meaning of this data protection declaration.

Data transfer to shipping service providers for the purpose of shipping notification If you have given us your express consent during or after your order, we will forward your email address and telephone number to the selected shipping service provider based on this consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, so that they can contact you before delivery for the purpose of delivery notification or coordination. You can revoke your consent at any time by sending a message to the contact option described in this data protection declaration or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

United Parcel Service Deutschland S.à r.l. & Co. OHG Görlitzer Straße 1 41460 Neuss Germany

DPD Deutschland GmbH Wailandtstraße 1 63741 Aschaffenburg Germany

DHL Paket GmbH Sträßchensweg 10 53113 Bonn Germany

General Logistics Systems Germany GmbH & Co. OHG GLS Germany-Straße 1 - 7 DE-36286 Neuenstein Germany

Hermes Germany GmbH Essener Straße 89 D-22419 Hamburg Germany

Data processing for payment processing When processing payments in our online shop, we work with these partners: technical service providers, banks, payment service providers.

4.1 Data processing for transaction processing Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers who work for us within the framework of order processing, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary for the payment transaction. This serves to fulfill the contract pursuant to Art. 6 Para. 1 S. 1 lit. b GDPR. In some cases, the payment service providers collect the data required for processing the payment themselves, e.g. on their own website or via a technical integration in the ordering process. In this respect, the data protection declaration of the respective payment service provider applies. If you have any questions about our payment processing partners, please contact us using the contact option described in this privacy policy.

4.2 Data processing for the purpose of preventing fraud and abuse We reserve the right to transmit personal data to credit agencies for the purpose of checking identity and creditworthiness in the event of a legitimate interest pursuant to Art. 6 Para. 1 S. 1 lit. f GDPR. The credit report can contain probability values (score values) which are calculated on the basis of scientifically recognized mathematical-statistical methods and in the calculation of which, among other things, address data is included. We use the result of the credit check with regard to the statistical probability of non-payment for the purpose of making a balanced decision on the establishment, implementation, or termination of the contractual relationship. Your legitimate interests will be taken into account in accordance with the statutory provisions. You can contact us at any time using the contact option described in this privacy policy to object to this processing of your data.

Cookies and web analysis To make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to safeguard our legitimate interests, which predominate within the scope of a balance of interests, in a correct presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser the next time you visit (persistent cookies). You can see the duration of storage in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You will find these for each browser under the following links:

Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies Safari™: https://support.apple.com/kb/ph21411?locale=de_DE Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647 Firefox™ https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Opera™ : http://help.opera.com/Windows/10.20/de/cookies.html Failure to accept cookies may limit the functionality of our website.

Using the tool below, you can deactivate or activate individual tracking methods. Please note that, if you delete your cookies, this will also delete the opt-out cookie, which you may have to activate again.

You can revoke your consent at any time with effect for the future by setting the Do-Not-Track option in your browser.

Social media plugins We use social plugins from various social networks. With the help of these plugins, you can, for example, share content or recommend products. The plugins are deactivated by default on our website and therefore do not send any data. By clicking the corresponding buttons, you can activate them. The respective provider then receives the information that you have accessed the corresponding website of our online offer. In addition, the data mentioned under § 3 of this declaration is transmitted. In the case of Facebook and Xing, according to the respective providers in Germany, the IP address is anonymized immediately after it is collected. By activating the plugin, personal data is transferred from you to the respective plugin provider and stored there (in the case of US providers in the USA). Since the plugin provider collects data in particular via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the grayed-out box.

We have no influence on the data collected and data processing operations, nor are we aware of the full extent of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the collected data by the plugin provider.

The plugin provider stores the data collected about you as usage profiles and uses these for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the presentation of demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plugin provider to exercise this right. Via the plugins, we offer you the opportunity to interact with social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of plugins is Art. 6 Para. 1 S. 1 lit. f GDPR.

The data transfer takes place regardless of whether you have an account with the plugin provider and are logged in there. If you are logged in with the plugin provider, your data collected with us will be directly assigned to your existing account with the plugin provider. If you press the activated button and, for example, link the page, the plugin provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, especially before activating the button, as this way you can avoid being assigned to your profile with the plugin provider.

For more information on the purpose and scope of data collection and its processing by the plugin provider, please refer to the data protection declarations of these providers provided below. There you will also find further information on your rights in this regard and setting options for protecting your privacy.

Addresses of the respective plugin providers and URL with their data protection information:

a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. b) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. c) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. d) Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy. e) Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; https://help.instagram.com/155833707900388. f) Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA; https://about.pinterest.com/de/privacy-policy.

Using YouTube This website uses the YouTube embedding function for display and playback of videos offered by "YouTube". For this purpose, the extended data protection mode is used, which, according to the provider's information, does not initiate the storage of user information until the video(s) is/are played. If the playback of embedded YouTube videos is started, the provider "YouTube" uses cookies to collect information about user behavior. According to indications from "YouTube", these are used, among other things, to collect video statistics, improve user-friendliness, and prevent abusive practices. If you are logged in to Google, your data will be directly assigned to your account when you click on a video. If you do not want your profile to be associated with YouTube, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place in particular in accordance with Art. 6 Para. 1 lit.f GDPR on the basis of the legitimate interests of Google in the insertion of personalized advertising, market research and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.

Regardless of whether the embedded video is played back, every time this website is accessed, a connection to the Google "DoubleClick" network is established, which may trigger further data processing operations without our influence.

Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.

You can find more information on data protection at YouTube in the provider's data protection declaration at: https://policies.google.com/privacy?hl=en.

Rights of the data subject 8.1 The applicable data protection law grants you comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the data controller concerning the processing of your personal data, about which we inform you below:

Right of access by the data subject pursuant to Art. 15 GDPR: In particular, you have a right of access to your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, deletion, restriction of processing, objection to processing, a complaint to a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed of the guarantees pursuant to Art. 46 GDPR relating to the transfer of your data to third countries;
Right to rectification pursuant to Art. 16 GDPR: You have the right to immediate rectification of incorrect data concerning you and/or completion of your incomplete data stored by us;
Right to erase pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Art. 17 Para. 1 GDPR are met. However, this right shall not apply if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims;
Right to restricting of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data contested, if you refuse to delete your data due to unauthorized data processing and instead request the restriction of the processing of your data if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons will prevail;
Right to be informed pursuant to Art. 19 GDPR: If you have exercised your right to rectify, erase or restrict the processing vis-à-vis the controller, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed regarding this rectification, erasure of the data or restriction on processing, unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
Right to data portability pursuant to Art. 20 GDPR: You have the right to receive the personal data you have provided to us in a structured, current and machine-readable format or to request its transfer to another person responsible, insofar as this is technically feasible;
Right to withdraw consent granted pursuant to Art. 7 Para. 3 GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned without delay, provided that further processing cannot be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal;
Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have the right of appeal to a supervisory authority, in particular in the member state where you reside or work or in the place of the suspected infringement, without prejudice to any other administrative or judicial remedy.
Right to effective judicial remedy: You also have the right to an effective judicial remedy if you consider that your rights under the GDPR have been violated as a result of processing your personal data in breach of this Regulation. 8.2 RIGHT TO OBJECT IF, WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING GROUNDS FOR PROCESSING WORTHY OF PROTECTION WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS. IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

Duration of storage of personal data The duration of the storage of personal data is determined by the respective legal retention period (e.g. commercial and tax retention periods). After the expiry of this period, the corresponding data will be routinely deleted if it is no longer necessary for the fulfillment of the contract or the initiation of a contract and/or if we no longer have a legitimate interest in further storage.
Data security We use the popular SSL (Secure Socket Layer) method within the site visit in conjunction with the highest level of encryption supported by your browser. Usually, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser. We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
Up-to-dateness and amendment of this data protection declaration This data protection declaration is currently valid and has the status as of May 2018. Due to the further development of our website and offers above or due to changed legal or official requirements, it may be necessary to change this data protection declaration. You can call up and print out the current data protection declaration at any time on the website at https://www.website.com/privacy.

Last updated: January 2024