Privacy
Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obligated to provide the data. Failure to provide it has no consequences. This applies only insofar as no other statement is made in the processing operations below.
"Personal data" means any information relating to an identified or identifiable natural person.
Server Log Files
You can visit our website without providing any personal information.
Each time our website is accessed, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). The stored data includes, for example, the name of the page accessed, the date and time of the request, the IP address, the amount of data transferred, and the requesting provider. Processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in ensuring the smooth operation of our website and improving our offering.
Contact
Controller
Please contact us if you wish. The controller responsible for data processing is: ITFach - IT- und Internetservice, Guido Rabe, Lindenberg 61, 91555 Feuchtwangen Germany, 098527679806,
Customer-initiated contact via email
If you proactively contact us by email for business purposes, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves to handle and respond to your contact request. If the contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, preparation of offers) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR. If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in processing and responding to your request. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR. We use your email address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of making contact. If the contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, preparation of offers) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR. If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in processing and responding to your request. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR. We use your email address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the revocation button
If you have concluded a contract via our online presence, we provide you with a revocation function (revocation button) through which you can submit your declaration of revocation directly.
When using the revocation function, we collect your personal data (name, email address, information to identify the contract or part of the contract you wish to revoke, and the time (date and time) of submission of the revocation declaration) only to the extent provided by you. The data processing serves the purpose of providing you with the legally required option to revoke your contract and to properly process your revocation.
If the contact concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR. Otherwise, the data processing is carried out on the basis of Art. 6(1)(c) GDPR, to fulfil a legal obligation to provide you with a revocation function on our online presence.
We use your email address only to process your revocation declaration. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
The processing of your personal data serves the purpose of fulfilling the legal requirements for the design of the revocation function in a legally compliant manner and is carried out on the basis of Art. 6(1)(c) GDPR. This data processing is also carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in being able to provide you with a user-friendly revocation option.
In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR.
Customer Account
Customer account and associated personal data
When opening a customer account, we collect your personal data to the extent indicated therein. The data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal. Your customer account will subsequently be deleted.
Orders
Collection, processing and transfer of personal data for orders
When placing an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to handle your enquiries. Providing the data is required to conclude the contract. Failure to provide it means that no contract can be concluded. Processing is carried out on the basis of Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you. Your data may be shared with, for example, shipping companies, dropshipping or fulfilment providers, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly comply with legal requirements. The scope of data transmission is limited to a minimum.
Reviews
Data collection when writing a comment or review
When commenting on or reviewing an article or post, we collect your personal data (name, email address, comment text) only to the extent provided by you. The processing serves the purpose of enabling comments/reviews and displaying comments/reviews.
For the purpose of verifying your review/comment, we also collect the following data: order number, , , .
By submitting the comment/review, you consent to the processing of the transmitted data. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal. Your personal data will subsequently be deleted.
Upon publication of your comment/review, the name you provided and the email address you submitted will be published.
In addition, your IP address is stored when submitting the comment/review for the purpose of preventing misuse of the comment or review function and ensuring the security of our information technology systems. By submitting the comment/review, you consent to the processing of the transmitted data. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal. Your IP address will subsequently be deleted.
Payment Service Providers
Use of PayPal Express
We use the payment service PayPal Express of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable your browser to be recognised. The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you. When selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Further information on data processing when using the PayPal Express payment service can be found in the corresponding privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Use of PayPal Check-Out
We use the payment service PayPal Check-Out of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you payment via the payment service. When selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
Cookies may be stored in the process, enabling your browser to be recognised. The resulting data processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you.
Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal
For certain payment methods such as credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical methods using credit agencies where applicable. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of payment default to make a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) calculated using scientifically recognised mathematical-statistical methods, which incorporate address data among other factors. Your legitimate interests are taken into account in accordance with legal provisions. The data processing serves the purpose of credit assessment for contract initiation. Processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in protection against payment default when PayPal makes advance payments. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6(1)(f) GDPR by notifying PayPal. Providing the data is required to conclude the contract with the payment method of your choice. Failure to provide it means that the contract cannot be concluded with the payment method you have chosen.
Third-party providers
When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6(1)(b) GDPR. To process this payment method, the data may then be passed on by PayPal to the respective provider. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Local third-party providers may include, for example:
- Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
Purchase on invoice via PayPal
When paying via the invoice purchase payment method, the data required for payment processing is first transmitted to PayPal. To process this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Ratepay may conduct a credit report based on mathematical-statistical methods (probability or score values) using credit agencies following the process described above. The data processing serves the purpose of credit assessment for contract initiation. Processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in protection against payment default when Ratepay makes advance payments. Further information on data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/. Further information on data processing when using PayPal can be found in the corresponding privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Cookies
Our website uses cookies. Cookies are small text files that are stored in or by the internet browser on a user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is visited again.
Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set, decide individually whether to accept them, and prevent the storage of cookies and transmission of the data they contain. Cookies that have already been stored can be deleted at any time. Please note, however, that you may then not be able to use all features of this website to their full extent.
You can find information on how to manage (including disable) cookies in the most common browsers at the following links:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies for the purpose of making our offering more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.
The use of cookies or comparable technologies is carried out on the basis of § 25(2) TDDDG. The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in ensuring optimal website functionality and a user-friendly and effective design of our offering.
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you.
Analytics
Use of Google Analytics 4
We use the web analytics service Google Analytics of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of analysing this website and its visitors, as well as for marketing and advertising purposes. For this purpose, Google will, on behalf of the operator of this website, use the information obtained to evaluate your use of the website, to compile reports on website activity, and to provide further services associated with website usage and internet usage to the website operator. The following information may be collected, among other things: IP address, date and time of the page view, click path, information about the browser and device you are using, pages visited, referrer URL (the website from which you accessed our website), location data, purchasing activities. Your data may be linked by Google with other data such as your search history, your personal accounts, your usage data from other devices and all other data that Google holds about you.
Your IP address is first truncated by us on our own servers. Google therefore only receives pseudonymised data.
Google uses technologies such as cookies, browser web storage and counting pixels that enable analysis of your use of the website. The use of cookies or comparable technologies is carried out with your consent on the basis of § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR.
The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
The information generated about your use of this website is generally transmitted to and stored on a server of Google in the USA. An adequacy decision by the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thereby committed to complying with European data protection principles. Both Google and US government authorities have access to your data. Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites at https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/.
Plug-ins and Other Services
Use of Google Tag Manager
We use Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This application manages JavaScript tags and HTML tags used to implement tracking and analytics tools in particular. The data processing serves the purpose of need-based design and optimisation of our website. Google Tag Manager itself does not store any cookies, nor does it process any personal data. However, it enables the triggering of further tags that may collect and process personal data.
Further information on terms of use and data protection can be found here.
Use of Google reCAPTCHA
We use the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website within the framework of commissioned data processing. The query serves the purpose of distinguishing input by a human from automated, machine-based processing. For this purpose, your input is transmitted to Google and used further there. In addition, the IP address and, where applicable, further data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and may also be transmitted to servers of Google LLC in the USA. An adequacy decision by the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thereby committed to complying with European data protection principles. The use of cookies or comparable technologies is carried out with your consent on the basis of § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
Use of Google Invisible reCAPTCHA
We use the Invisible reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This serves the purpose of distinguishing input by a human from automated, machine-based processing. In the background, Google collects and analyses usage data that Invisible reCAPTCHA uses to distinguish regular users from bots. For this purpose, your input is transmitted to Google and used further there. In addition, the IP address and, where applicable, further data required by Google for the Invisible reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and may also be transmitted to servers of Google LLC in the USA. An adequacy decision by the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thereby committed to complying with European data protection principles. The use of cookies or comparable technologies is carried out with your consent on the basis of § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal. Further information on Google reCAPTCHA and the corresponding privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy
Use of YouTube
We use the YouTube video embedding function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The function displays videos stored on YouTube in an iFrame on the website. The "Enhanced Privacy Mode" option is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transferred to the USA. An adequacy decision by the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified itself under the TADPF and thereby committed to complying with European data protection principles. The use of cookies or comparable technologies is carried out with your consent on the basis of § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal. Further information on the collection and use of data by YouTube and Google, your related rights and options for protecting your privacy can be found in YouTube's privacy policy at https://www.youtube.com/t/privacy.
Integration of the Händlerbund Member Logo
Our website includes the Händlerbund member logo (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig). When you access our website, your browser automatically sends information to the server of Händlerbund e.V. This information is temporarily stored in a so-called server log file for 7 days. The following information is recorded without any action on your part and stored until it is automatically deleted:
- IP address of the requesting computer,
- date and time of access,
- name and URL of the retrieved file,
- website from which access was made (referrer URL),
- browser used and, where applicable, the operating system of your computer and the name of your access provider.
The temporary storage of the IP address by the system is necessary to enable delivery of the website. For this purpose, the IP address must be stored for the duration of the session. Storage in log files is carried out to ensure the functionality of the website. In addition, the data serves to optimise the website and to ensure the security of our information technology systems. This data is not stored together with other personal data. The legal basis for data processing is Art. 6(1) sentence 1(f) GDPR.
Integration of the "FairCommerce" Initiative Logo
Our website includes the logo of the "FairCommerce" initiative (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig). When you access our website, your browser automatically sends information to the server of Händlerbund e.V. This information is temporarily stored in a so-called server log file for 7 days. The following information is recorded without any action on your part and stored until it is automatically deleted:
- IP address of the requesting computer,
- date and time of access,
- name and URL of the retrieved file,
- website from which access was made (referrer URL),
- browser used and, where applicable, the operating system of your computer and the name of your access provider.
The temporary storage of the IP address by the system is necessary to enable delivery of the website. For this purpose, the IP address must be stored for the duration of the session. Storage in log files is carried out to ensure the functionality of the website. In addition, the data serves to optimise the website and to ensure the security of our information technology systems. This data is not stored together with other personal data. The legal basis for data processing is Art. 6(1) sentence 1(f) GDPR.
Integration of the Buyer Seal Logo
Our website includes the Käufersiegel logo (Händlerbund Management AG, Kohlgartenstraße 11 - 13, 04315 Leipzig). When you access our website, your browser automatically sends information to the server of Händlerbund Management AG. This information is temporarily stored in a so-called server log file for 7 days. The following information is recorded without any action on your part and stored until it is automatically deleted:
- IP address of the requesting computer,
- date and time of access,
- name and URL of the retrieved file,
- website from which access was made (referrer URL),
- browser used, protocol and, where applicable, the operating system of your computer and the name of your access provider.
The temporary storage of the IP address by the system is necessary to enable delivery of the website. For this purpose, the IP address must be stored for the duration of the session. Storage in log files is carried out to ensure the functionality of the website. In addition, the data serves to optimise the website and to ensure the security of our information technology systems. This data is not stored together with other personal data. The legal basis for data processing is Art. 6(1) sentence 1(f) GDPR.
Use of Google Fonts
We use Google Fonts of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of uniform display of fonts on our website. To load the fonts, a connection to Google's servers is established when the page is accessed. Cookies may be used for this purpose. In the process, your IP address and information about the browser you are using are processed and transmitted to Google, among other things. This data is not linked to your Google account. Your data may be transferred to the USA. An adequacy decision by the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thereby committed to complying with European data protection principles. The use of cookies or comparable technologies is carried out with your consent on the basis of § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal. Further information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.
Use of FontAwesome
We use Font Awesome of Fonticons Inc. (307 S Main St., Suite 202, Bentonville, AR, 72712-9214 USA; "Font Awesome") on our website. The data processing serves the purpose of uniform display of fonts and icons on our website. To load the fonts, a connection to FontAwesome's servers is established when the page is accessed.
Cookies may be used for this purpose. In the process, your IP address and information about the browser you are using are processed and transmitted to Font Awesome, among other things. Your data may be transferred to third countries, such as the USA. An adequacy decision by the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Font Awesome is not certified under the TADPF.
The use of cookies or comparable technologies is carried out with your consent on the basis of § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
Further information on data processing and data protection can be found at https://fontawesome.com/privacy and at https://fontawesome.com/support.
Data Subject Rights and Retention Period
Retention period
After complete processing of the contract, the data is first stored for the duration of the warranty period, then stored in consideration of statutory, in particular tax and commercial law retention periods, and subsequently deleted after expiry of the period, unless you have consented to further processing and use.
Rights of the data subject
Subject to the legal requirements being met, you have the following rights under Art. 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability.
You also have a right to object under Art. 21(1) GDPR to processing based on Art. 6(1)(f) GDPR, as well as to processing for the purposes of direct marketing.
Right to lodge a complaint with the supervisory authority
You have the right pursuant to Art. 77 GDPR to lodge a complaint with the supervisory authority if you consider that the processing of your personal data is not lawful.
You may lodge a complaint with, among others, the supervisory authority responsible for us, which you can reach at the following contact details:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Tel.: +49 981 1800930
Fax: +49 981 180093800
E-Mail:
Right to object
If the personal data processing listed here is carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object to these processing activities at any time with effect for the future. After an objection has been made, processing of the affected data will cease, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.