Privacy policy

Unless stated otherwise in the following, the provision of your personal data is neither legally or contractually specified nor necessary for the conclusion of a contract. You are under no obligation to provide the data. Such lack of provision does not result in any consequences. This applies only insofar as nothing is stated otherwise in the following processing procedures.
’Personal data’ are all information concerning an identified or identifiable natural person.

Server log files
You can visit our websites without providing any personal data. 
Each time you access our website, usage data are transferred to us or our web hoster/IT service provider by your Internet browser and stored in log data (what are called server log files). These stored data include e.g. the name of the page called up, the date and time on/at which it was called up, the IP address, the volume of data transferred and the requesting provider. Processing is carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in guaranteeing the trouble-free operation of our website and in improving it.
Contact

Data controller
Contact us if necessary. The contact details of the data controller responsible for data processing can be found in our imprint.

Ad hoc customer contact by e-mail
If you contact us on an ad hoc basis regarding business by e-mail, we only collect the personal data (name, e-mail address, message text) which you have provided to us. Data processing serves to process and respond to your contact request.
If you contact us for the purpose of carrying out pre-contractual measures (e.g. advice if you are interested in purchasing, creation of an offer) or concerning a contract that has already been concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) (b) GDPR.
If you contact us for other reasons, this data processing is carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object at any time to this processing of your personal data on the basis of Art. 6 (1) (f) GDPR due to reasons arising from your particular situation.
We only use your e-mail address to process your request. Your data are then deleted subject to compliance with statutory retention periods insofar as you have not consented to further processing and use.
Collection and processing on use of the contact form
On use of the contact form, we only collect the personal data (name, e-mail address, message text) which you have provided to us. Data processing serves the purpose of contacting you.
If contacting you serves the purpose of carrying out pre-contractual measures (e.g. advice if you are interested in purchasing, creation of an offer) or concerns a contract that has already been concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) (b) GDPR. If contacting you is carried out for other reasons, this data processing is carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object at any time to this processing of your personal data on the basis of Art. 6 (1) (f) GDPR due to reasons arising from your particular situation. We only use your e-mail address to process your request. Your data are then deleted subject to compliance with statutory retention periods insofar as you have not consented to further processing and use.

Customer account      Purchase orders     

Customer account
When you open a customer account, we collect the personal data that you have provided during the process. Data processing serves the purpose of improving your shopping experience and simplifying purchase order processing. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us, without this affecting the lawfulness of the processing carried out based on your consent up to such revocation. Your customer account will subsequently be deleted.

Collection, processing and forwarding of personal data on submission of purchase orders
On submission of a purchase order, we only collect and process your personal data insofar as this is necessary to fulfil and process your purchase order and to process your requests. The provision of the data is necessary for concluding the contract. The consequence of failure to provide the data is that no contract can be concluded. Processing is carried out on the basis of Art. 6 (1) (b) GDPR and is necessary for fulfilling a contract with you. 
Your data are forwarded, for instance, to your chosen shipping companies and drop shipping providers, payment service providers, service providers for order processing and IT service providers. We strictly comply with the statutory regulations in all cases. The extent of data transfer is restricted to a minimum.

Advertising     

Use of your e-mail address for sending newsletters
Irrespective of contract processing, we will use your e-mail address exclusively for sending newsletters for our own advertising purposes insofar as you have expressly consented to this. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time without this affecting the lawfulness of the processing carried out based on your consent up to such revocation. To do this, you can cancel the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the distribution list.

Stock management     

Use of an external stock management system
We use a stock management system for contract processing in the context of order processing. To do this, the personal data collected from you in the context of the purchase order are transferred to
AP+
.

Payment service provider     

Use of PayPal
All PayPal transactions are subject to the PayPal privacy policy. This is available at https://www.paypal.com/de/webapps/mpp/ua/privacy-full (https://www.paypal.com/de/webapps/mpp/ua/privacy-full)

Cookies

Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on a user's computer system. When a user calls up a website, a cookie can be stored on his or her operating system. This cookie contains a characteristic character string which enables the clear identification of the browser when the website is called up again.

Cookies are stored on your computer. This means that you have full control over the use of cookies. By selecting corresponding technical settings in your Internet browser, you can be notified before cookies are set and decide individually on their acceptance as well as prevent the storage of cookies and the transfer of the data they contain. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may then possibly be unable to use all of the functions of this website in full.

You can obtain information on how to manage (and also deactivate) cookies in the most important browsers using the links in the following:
Chrome: https://support.google.com/accounts/answer/61416?hl=de (https://support.google.com/accounts/answer/61416?hl=de)
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies (https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies)
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen (https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen)
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac (https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac)

Technically necessary cookies
Unless otherwise stated further on in the privacy policy, we only use these technically necessary cookies for the purpose of making our website more user-friendly, effective and secure. Cookies additionally enable our systems to recognise your browser even after changing websites and to offer you services. Some of the functions of our website cannot be made available without the use of cookies. For these, it is necessary for the browser to be recognised again even after changing websites.

The use of cookies or comparable technologies is carried out on the basis of Section 25 (2) of the German Act on Data Protection and the Protection of Privacy in Telecommunications and Telemedia (TTDSG). Your personal data are processed on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in guaranteeing the optimum function of our website and in structuring it in a user-friendly and effective manner.
You have the right to object at any time to this processing of your personal data due to reasons arising from your particular situation.

Analysis     

Use of Google Analytics
We use the Google Analytics web analysis service from Google LLC on our website. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; ‘Google’). If your habitual place of residence is in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller responsible for your data. Accordingly, Google Ireland Limited is the company affiliated to Google that is responsible for processing your data and complying with the applicable data protection legislation.
Data processing is used for the purpose of analysing this website and its visitors as well as for marketing and advertising purposes. To do this, Google uses the information obtained on behalf of the operator of this website in order to evaluate your use of the website, to compile reports concerning website activities and to provide other services related to the use of the website and Internet to the website operator. The following, among other information, may be collected in this process: IP address, date and time at which the page was called up, click path, information about the browser and device used by you, pages visited, referrer URL (website from which you called up our website), location data, purchasing activities. The IP address transferred by your browser in the context of Google Analytics is not combined with other data by Google.
Google Analytics uses technologies such as cookies, web storage in the browser and tracking pixels, which enable your use of the website to be analysed. The information generated in this manner concerning your use of this website is usually transferred to a Google server in the USA and stored there. No EU Commission adequacy decision is available for the USA. Data transfer is carried out, among others, on the basis of standard contractual clauses as suitable guarantees of personal data protection. These can be seen at: https://policies.google.com/privacy/frameworks (https://policies.google.com/privacy/frameworks) and https://business.safety.google/adsprocessorterms/ (https://business.safety.google/adsprocessorterms/). Both Google and also US state authorities have access to your data. Your data can be linked to other data by Google, such as your search history, your personal accounts, your usage data from other devices and all other data that Google has with respect to you, for example.
IP anonymisation is enabled on this website. As a result of this, your IP address is shortened in advance by Google within Member States of the European Union or in other states that are contracting parties to the Agreement on the European Economic Area. The full IP address is only transferred to a Google server in the USA and shortened there in exceptional cases.
Your personal data are processed on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in structuring our website in a needs-based and targeted manner. You have the right to object at any time to this processing of your personal data due to reasons arising from your particular situation.
You can prevent the collection of data generated by Google Analytics in relation to your use of the website (incl. your IP address) and their transfer to Google as well as the processing of these data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de (https://tools.google.com/dlpage/gaoptout?hl=de)
You can set an opt-out cookie to prevent data collection and storage by Google Analytics on all devices. Opt-out cookies prevent your data from being collected in the future when you visit this website. You must carry out this opt-out on all of the systems and devices that you use in order for it to take effect universally. If you delete the opt-out cookie, queries will be transferred to Google again. The opt-out cookie will be set if you click here: deactivate Google Analytics (javascript:gaOptout()).
More detailed information on terms and conditions of use and data protection is available at https://www.google.com/analytics/terms/de.html (https://www.google.com/analytics/terms/de.html) or https://www.google.de/intl/de/policies/ (https://www.google.de/intl/de/policies/) and at https://policies.google.com/technologies/cookies?hl=de (https://policies.google.com/technologies/cookies?hl=de).

Plug-ins and miscellaneous

Use of the Google Tag Manager
We use the Google Tag Manager from Google LLC on our website. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; ‘Google’). If your habitual place of residence is in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller responsible for your data. Accordingly, Google Ireland Limited is the company affiliated to Google that is responsible for processing your data and complying with the applicable data protection legislation.
This application is used to manage JavaScript tags and HTML tags that are used to implement tracking and analysis tools in particular. The purpose of this data processing is to design and optimise our website according to needs.
The Google Tag Manager itself does not either store cookies or process personal data. However, it enables the triggering of further tags that can collect and process personal data.
More detailed information on terms and conditions of use and data protection is available here (https://www.google.com/intl/de/tagmanager/use-policy.html).
Use of social plug-ins by means of the ‘2-click solution’
We use social network plug-ins on our website by means of the ‘2-click solution’. In this process, no links to the servers of social networks are established and, consequently, no data are transferred without your express consent.
When the plug-ins are integrated as standard, a link between your computer and the servers of the social network providers is established when you call up pages on our website that contain such a plug-in, and the plug-in is shown on the page by sending a notification to your browser. Both your IP address and information concerning which of our pages you have visited are transferred to the provider servers. This applies irrespective of whether you are registered with or logged into the social network. Transfer takes place even in the case of users who are not registered or logged in. If you are additionally logged into the Facebook social network, this information will be assigned to your personal user account. When using the plug-in functions (e.g. by pressing the button), this information is also assigned to your user account; you can only prevent this by logging out before using the plug-in. So that you maintain control of your data, we have decided to initially disable the corresponding button. This can be recognised by the greyed-out button. Without your express consent – in the form of your activating the button – no link to the social network server will be established and, consequently, no data will be transferred.
The button only becomes active (highlighted in colour) when you activate it, and a direct link to the social network servers is established.
By this activation, you give your consent to the transfer of your data to the respective social network provider. Among other information, your IP address and information concerning which of our pages you have visited are transferred. If you are linked to one or more of your social network accounts at the same time, the information collected will also be assigned to your corresponding profiles. You can only prevent this allocation by logging out from your user accounts on the social networks before visiting our website and activating the buttons.
The social networks listed in the following are integrated by means of the ‘2-click function’. More detailed information concerning the scope and purpose of data collection and use as well as your respective rights and options for protecting your privacy can be found in the providers’ linked data protection notices.

Facebook from Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA)
https://www.facebook.com/policy.php (https://www.facebook.com/policy.php)
Your data may possibly be transferred to the USA. No EU Commission adequacy decision is available for the USA. Data transfer is carried out, among others, on the basis of standard contractual clauses as suitable guarantees of personal data protection. These can be seen at: https://www.facebook.com/legal/EU_data_transfer_addendum (https://www.facebook.com/legal/EU_data_transfer_addendum).

Instagram from Instagram LLC. (1601 Willow Road, Menlo Park, CA 94025, USA):
http://instagram.com/legal/privacy/ (http://instagram.com/legal/privacy/)
Your data may possibly be transferred to the USA. No EU Commission adequacy decision is available for the USA. Data transfer is carried out, among others, on the basis of standard contractual clauses as suitable guarantees of personal data protection. These can be seen at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de).

LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland):
https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy (https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy)
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out (https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out)
Your data may possibly be transferred to the USA. No EU Commission adequacy decision is available for the USA.

Xing from XING SE (Dammtorstrasse 30, 20354 Hamburg, Germany):
https://www.xing.com/privacy (https://www.xing.com/privacy)
https://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen/widerspruchsrecht (https://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen/widerspruchsrecht)
Your data may possibly be transferred to the USA. No EU Commission adequacy decision is available for the USA. Data transfer is carried out, among others, on the basis of standard contractual clauses as suitable guarantees of personal data protection. These can be seen at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de).

Use of All In One WP Security & Firewall
We use the ‘All In One WP Security & Firewall’ security plug-in from Tips and Tricks HQ on our website.
The purpose of this data processing is to increase the security and protection of our website and to determine vulnerabilities. Cookies via which user data such as your IP address can be collected are used to do this. The data are only stored on our servers. The data are not forwarded to third parties.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25 (1) sentence 1 TTDSG in combination with Art. 6 (1) (a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) (a) GDPR. You can revoke your consent at any time without this affecting the lawfulness of the processing carried out based on your consent up to such revocation.
More detailed information on data processing when using the plug-in is available at https://de.wordpress.org/plugins/all-in-one-wp-security-and-firewall/ (https://de.wordpress.org/plugins/all-in-one-wp-security-and-firewall/) (https://de.wordpress.org/plugins/all-in-one-wp-security-and-firewall/) and https://www.tipsandtricks-hq.com/wordpress-security-and-firewall-plugin (https://www.tipsandtricks-hq.com/wordpress-security-and-firewall-plugin) (https://www.tipsandtricks-hq.com/wordpress-security-and-firewall-plugin).

Use of Google Maps
We use the function for embedding maps provided by Google Maps from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; 'Google') on our website.
If your habitual place of residence is in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller responsible for your data. Accordingly, Google Ireland Limited is the company affiliated to Google that is responsible for processing your data and complying with the applicable data protection legislation.
This function enables the visual representation of geographical information and interactive maps. During this process, data of visitors to the websites are collected, processed and used by Google when calling up the pages into which maps provided by Google Maps are integrated.
Your data may possibly also be transferred to the USA in this case. No EU Commission adequacy decision is available for the USA. Data transfer is carried out, among others, on the basis of standard contractual clauses as suitable guarantees of personal data protection. These can be seen at: https://policies.google.com/privacy/frameworks (https://policies.google.com/privacy/frameworks).
Your personal data are processed on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in structuring our website in a needs-based and targeted manner. You have the right to object at any time to this processing of your personal data due to reasons arising from your particular situation.
More detailed information concerning the collection and use of the data by Google can be found in the Google data protection notices at https://www.google.com/privacypolicy.html (https://www.google.com/privacypolicy.html). In the data protection centre there, you also have the option of changing your settings so that you can manage and protect the personal data that Google processes.

Use of YouTube
We use the function for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; ‘YouTube’) on our website. YouTube is a company affiliated to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; 'Google').
This function displays videos stored at YouTube in an iFrame on the website. The ‘Privacy-enhanced mode’ option is enabled in this case. As a result of this, no information concerning the website’s visitors is stored by YouTube. Only when you watch a video is information about it transferred to YouTube and stored there. Your data may possibly be transferred to the USA. No EU Commission adequacy decision is available for the USA. Data transfer is carried out, among others, on the basis of standard contractual clauses as suitable guarantees of personal data protection. These can be seen at: https://policies.google.com/privacy/frameworks (https://policies.google.com/privacy/frameworks).
Your personal data are processed on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in structuring our website in a needs-based and targeted manner. You have the right to object at any time to this processing of your personal data due to reasons arising from your particular situation.
More detailed information concerning the collection and use of the data by YouTube and Google as well as your respective rights and options for protecting your privacy can be found in YouTube’s data protection notices at https://www.youtube.com/t/privacy (https://www.youtube.com/t/privacy).

Data subject rights and duration of storage

Duration of storage
Following complete processing of the contract, the data will initially be stored for the duration of the warranty period; they are then stored subject to consideration of statutory, especially tax and commercial law, retention periods and are then deleted following the expiry of the period insofar as you have not consented to further processing and use.

Rights of the data subject
if the legal requirements are met, you are entitled to the following rights in accordance with Art. 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction processing, right to data portability.
In accordance with Art. 21 (1) GDPR, you also have a right to object to the processing based on Art. 6 (1) (f) GDPR and to processing for direct marketing purposes.

Right to lodge a complaint with a supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that your personal data are being processed unlawfully.

Right to object
If the personal data processing listed here is carried out on the basis of our legitimate interest in accordance with Art. 6 (1) (f) GDPR, you have the right to object at any time to this processing of your personal data with effect for the future due to reasons arising from your particular situation.
After you have lodged an objection, the processing of the data concerned will be ended unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms or if this processing is used for the establishment, exercise or defence of legal claims.

Last updated: 01.12.2021