PRIVACY POLICY

The legal basis for storing the IP address and the date and time of using the contact form is also Article 6(1)(f) GDPR. Data processing is necessary to safeguard our legitimate interests in the trouble-free use of our services and, in case of misuse, potentially asserting, exercising, or defending legal claims. In the case of abusive input of third-party data, this data processing may also be necessary to safeguard the legitimate interests of a third party, namely the owner of the entered data.

Storage Duration:

This data will be stored for as long as necessary to handle the respective inquiry. Furthermore, longer storage may be necessary due to legal obligations, particularly based on commercial or tax retention periods from the Commercial Code (HGB) and the Fiscal Code (AO), which provide for storage of up to ten years. Otherwise, data will be stored for a longer period only if required to fulfill a contract.

​

3.6. Social Media - Profiles

We maintain publicly accessible profiles on social networks. The specific social networks we use are listed below. Social networks such as Facebook, Twitter, etc., can extensively analyze your user behavior when you visit their website or a website with integrated social media content (e.g., like buttons or advertising banners). Visiting our social media presences triggers numerous privacy-relevant processing operations.

If you are logged into your social media account and visit our social media presence, the operator of the social media platform can associate this visit with your user account. Your personal data may also be collected even if you are not logged in or do not have an account with the respective social media platform. In such cases, data may be collected, for example, through cookies stored on your device or by capturing your IP address.

With the data collected in this way, the operators of the social media platforms can create user profiles that contain your preferences and interests. This allows for interest-based advertising to be displayed both within and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are logged in or have been logged in.

Please note that we cannot fully trace all processing operations on social media platforms. Depending on the provider, additional processing operations may be performed by the operators of the social media platforms. For details, refer to the terms of use and privacy policies of the respective social media platforms.

Legal Basis:

Our social media appearances aim to ensure a comprehensive online presence. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. The analysis processes initiated by social media networks may be based on different legal grounds, which are to be indicated by the operators of the social media networks (e.g., consent within the meaning of Article 6(1)(a) GDPR).

Controller and Assertion of Rights:

When you visit one of our social media appearances (e.g., Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can assert your rights (access, rectification, erasure, restriction of processing, data portability, and complaints) both against us and against the operator of the respective social media platform (e.g., Facebook). Please note that despite the joint responsibility with the social media platform operators, we do not have full influence on the data processing operations of the social media platforms. Our options are primarily determined by the company policy of the respective provider.

Storage Duration:

Data directly collected by us through the social media presence will be deleted from our systems as soon as the purpose for its storage ceases to apply, you request its deletion, revoke your consent to its storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions, especially retention periods, remain unaffected.

We have no influence on the storage duration of your data stored by the operators of social media networks for their own purposes. For details, please refer directly to the operators of social media networks (e.g., in their privacy policies, see below).

Individual Social Media Networks:

Facebook:

We have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook, the data collected is also transferred to the USA and other third countries.

We have entered into an agreement with Facebook on joint processing (Controller Addendum). In this agreement, it is stipulated for which data processing operations we or Facebook are responsible when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can adjust your advertising settings independently in your user account. To do this, click on the following link and log in: https://www.facebook.com/settings?tab=ads.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

For more details, refer to Facebook's Privacy Policy.

Twitter:

We use the short message service Twitter. The provider is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The data transfer to the USA is based on the standard contractual clauses of the European Commission.

For details, refer to Twitter's Privacy Policy.

Instagram:

We have a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://help.instagram.com/519522125107875. We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. For more information, refer to Instagram's Privacy Policy: http://instagram.com/about/legal/privacy/.

Pinterest:

We have a profile on Pinterest. The operator is Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA ("Pinterest"). Details regarding the handling of your personal data by Pinterest can be found in Pinterest's Privacy Policy: https://policy.pinterest.com/de/privacy-policy.

YouTube:

We have a channel account on YouTube. The operator is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://policies.google.com/privacy/frameworks?hl=de; Privacy Policy: https://www.google.com/policies/privacy/.

3.7. Legal or contractual obligation to provide data:

If you send us a contact inquiry and wish us to process and respond to your request, we require the personal data indicated as necessary in that contact form. Otherwise, we are unable to process your request. Similarly, if you wish to register on our webshop, we also need the data indicated as necessary to carry out the registration. Without this required personal data, we cannot perform these processes and conclude the contract with you properly.

3.8. Data transfers or recipients of data:

In general, we do not disclose personal data to third parties, especially for advertising purposes.

Exceptions to this are only our service partners whom we need to process the contractual relationship or service providers that we use for contract data processing. In addition to the recipients named in the respective clauses of this privacy policy, these may include shipping service providers, payment service providers, merchandise management service providers, service providers for order processing, web hosting providers, IT service providers, and dropshipping retailers. In all cases, we strictly comply with legal requirements. The scope of data transmission is limited to a minimum. When we use external service providers, they are subject to the same strict data protection regulations and are additionally integrated into our data protection concept.

Furthermore, your personal data is only disclosed to third parties for the purposes listed below.

We only disclose your personal data to third parties:

- If you have given your consent in accordance with Article 6(1)(a) GDPR, or

- If the disclosure is necessary under Article 6(1)(f) GDPR to assert, exercise, or defend legal claims, and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data, or

- If there is a legal obligation under Article 6(1)(c) GDPR to disclose the data, or

- If it is legally permissible and necessary under Article 6(1)(b) GDPR for the performance of a contract with you.

3.8.1. Dropshipping:

If the goods you purchase from us are shipped directly from the wholesaler or manufacturer, we will pass on the data for the ordered goods and your personal data (name and address) to them so that they can send you the goods. The legal basis for this is Article 6(1)(b) GDPR, which allows us to process the data if it is necessary for the performance of a contract with you or for the implementation of pre-contractual measures.

3.8.2. Disclosure of email address and/or phone number to shipping service providers:

On our website, you have the option to agree to the disclosure of your email address and/or phone number to the selected shipping service provider to allow them to announce the delivery or coordinate with you. Below, we inform you about which data will be disclosed to which shipping service provider and the legal basis for this disclosure:

- DHL: If the delivery of your goods is carried out by the shipping service provider DHL, and you expressly consented to the disclosure of your email address during the ordering process, it will be disclosed to DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn) for the purpose of announcing the delivery or coordinating the delivery date. The legal basis for data processing is Article 6(1)(a) GDPR, which allows us to process the data if you have given your consent. If you do not agree to the disclosure of your email address, the announcement of delivery or coordination of the delivery date by DHL is not possible. A given consent to data usage can be revoked at any time in the future, either to the responsible party mentioned above or to the transport service provider.

- DPD: If the delivery of your goods is carried out by the shipping service provider DPD, and you expressly consented to the disclosure of your email address and/or phone number during the ordering process, it will be disclosed to DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg) for the purpose of announcing the delivery or coordinating the delivery date. The legal basis for data processing is Article 6(1)(a) GDPR, which allows us to process the data if you have given your consent. If you do not agree to the disclosure of your email address, the announcement of delivery or coordination of the delivery date by DPD is not possible. A given consent to data usage can be revoked at any time in the future, either to the responsible party mentioned above or to the transport service provider.

- GLS: If the delivery of your goods is carried out by the shipping service provider GLS, and you expressly consented to the disclosure of your email address during the ordering process, it will be disclosed to GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein) for the purpose of announcing the delivery or coordinating the delivery date. The legal basis for data processing is Article 6(1)(a) GDPR, which allows us to process the data if you have given your consent. If you do not agree to the disclosure of your email address, the announcement of delivery or coordination of the delivery date by GLS is not possible. A given consent to data usage can be revoked at any time in the future, either to the responsible party mentioned above or to the transport service provider.

- Hermes Versand: If the delivery of your goods is carried out by the shipping service provider Hermes, and you expressly consented to the disclosure of your email address during the ordering process, it will be disclosed to Hermes (Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg) for the purpose of announcing the delivery or coordinating the delivery date. The

3.8.4. Credit check:

To fulfill the contract under Article 6(1)(b) GDPR, we may forward your data to an authorized collection agency if our payment claim remains unpaid despite previous reminders. In this case, the collection agency will directly collect the debt. Additionally, the disclosure serves to protect our legitimate interests in effectively asserting or enforcing our payment claim according to Article 6(1)(f) GDPR.

3.9. Data security:

We take measures to ensure the security of your data. To prevent loss, misuse, or alteration of personal data, we have implemented appropriate physical, electronic, and administrative procedures, continuously adjusted according to the current state of technology.

For added security and protection of confidential content transmitted, such as the inquiries you send to us as the website operator, this page uses SSL encryption. You can recognize an encrypted connection by the change from "http://" to "https://" in the address bar of your browser and the padlock symbol. With SSL encryption active, data you transmit to us cannot be read by third parties.

3.10. No automated decision-making, including profiling:

We do not utilize profiling or any other automated decision-making processes that solely rely on automated data processing and have legal effects or significantly affect you.

4. Use of your data for direct advertising:

4.1. Newsletter after registration:

If you subscribe to our email newsletter, we will regularly send you information about our offers. The mandatory information for sending the newsletter is solely your email address. Additional optional data may be used to address you personally. We use the double opt-in procedure for newsletter distribution. This means that we will only send you an email newsletter after you have expressly confirmed that you consent to receive newsletters. We will then send you a confirmation email asking you to confirm that you wish to receive future newsletters by clicking on a corresponding link.

By activating the confirmation link, you grant us your consent to use your personal data in accordance with Article 6(1)(a) GDPR. When you sign up for the newsletter, we store your IP address provided by the internet service provider (ISP) and the date and time of registration to prevent misuse of your email address at a later time. The data collected during the newsletter registration process will be used solely for the purpose of sending promotional content via the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the data controller mentioned at the beginning. After unsubscribing, your email address will be promptly deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes permitted by law and about which we inform you in this declaration.

4.2. Newsletter for existing customers:

If you have purchased goods or services on our website and provided your email address, we may use it, unless you object, to send you a newsletter containing direct advertising for similar goods or services from our range. The legal basis for sending the newsletter after the sale of goods or services is § 7(3) of the German Unfair Competition Act (UWG). The legal basis for data processing is Article 6(1)(f) GDPR, which allows us to process data in cases where we have a legitimate interest. Our legitimate interest in this case is to send you personalized advertising. You can object to the use of your data for this purpose at any time with future effect. To object, please contact the data controller responsible for data processing, as named under section 1 of this privacy policy.

4.3. Advertising by mail:

Based on our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, mailing address, and, where applicable, additional information obtained during the contractual relationship, such as your title, academic degree, birth year, and professional, industry, or business designation, in accordance with Article 6(1)(f) GDPR, and to use it for sending interesting offers and information about our products by postal mail. You can object to the storage and use of your data for this purpose at any time by sending a message to the data controller.

4.4. Advertising by phone:

Advertising phone calls are made only after prior explicit consent.

5. Your rights as a data subject:

5.1. Right to information (Art. 15 GDPR):

You have the right to request information about the processing of your personal data. This includes details about the processing purposes, categories of personal data, recipients or categories of recipients to whom the data has been or will be disclosed, the planned storage period, the right to rectification, erasure, restriction of processing, or objection, the right to lodge a complaint, the source of the data if not collected from you, and the existence of automated decision-making, including profiling, and meaningful information about its details.

5.2. Right to rectification (Art. 16 GDPR):

You have the right to promptly request the correction of inaccurate or incomplete personal data we have about you.

5.3. Right to erasure (Art. 17 GDPR):

You have the right to request the deletion of your stored personal data, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

5.4. Right to restriction of processing (Art. 18 GDPR):

You have the right to request the restriction of the processing of your personal data, if the accuracy of the data is contested by you, if the processing is unlawful but you oppose its erasure, if we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims, or if you have objected to the processing pursuant to Article 21 GDPR.

5.5. Right to data portability (Art. 20 GDPR):

You have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format or to transmit it to another controller.

5.6. Right to withdraw consent (Art. 7(3) in conjunction with Art. 6(1)(a) or Art. 9(2)(a) GDPR):

You have the right to withdraw your consent at any time. This means that we may no longer process data based on that consent for the future, provided there is no other legal basis for the processing.

5.7. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG 2018):

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. Usually, you can contact the supervisory authority at your usual place of residence or workplace or our company headquarters.

5.8. Right to object (Art. 21 GDPR):

If we process data about you based on legitimate interests, you have the right to object for reasons arising from your particular situation. Additionally, you can object to the processing of your data for direct marketing purposes.

To exercise your rights, you can contact the responsible person mentioned above.