I. Person responsible
The person responsible according to the General Data Protection Regulation (GDPR) and other national data protection laws of the memberstates as well as further data protection provisions is:
Tel.: +49 1573 7240305
II. General information on data processing / legal bases
We do only collect and use your personal data insofar as it is necessary to provide a functional website as well as our services and content.
You can use our website without giving any personal information. If you wish to use special features of our website (such as our online shop), a processing of personal data is required.
Insofar the collection and use of your personal data is required, this processing is either based on a legal basis or based on your consent.
Personal data will be deleted or blocked as soon as the purpose of the storage is omitted.
Storage may also take place if provided by the European or national legislator in either EU regulations, laws or other regulations to which the person responsible is subject.
Blocking or deletion of data takes place even if a storage period prescribed by the mentioned regulations expires, unless there is a need for further storage of data for conclusion or fulfillment of contract.
Insofar as we obtain your consent in the processing of your personal data, Article 6 (1) (a) GDPR serves as legal basis for the processing of personal data.
When processing personal data relevant to the fulfillment of contract, to which you, as data subject, are a party, is required, Article 6 (1) (b) GDPR serves as legal basis.
This also applies on processing operations required to carry out pre-contractual measures.
Insofar as processing of personal data is required to fulfill a legal obligation to which we are subject, Article 6 (1) ( c ) GDPR serves as legal basis.
In the event that vital interests of you as data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR serves as legal basis.
If processing data is necessary to preserve the legitimate interests of our company or a third party, and if the interest, fundamental rights and fundamental freedoms of the data subject do not outweigh the former interest, Article 6 (1) (f) GDPR serves as legal basis for processing data.
III. Provision of the website and creation of log files
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us, this page uses an SSL or. TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http: //” to “https: //” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
Each time our website is accessed, our system automatically collects data and information from the requesting computer.
This may include (1) information about type and version of the browser used, (2) the user’s operating system, (3) the user’s internet service provider, (4) the user’s IP address, (5) date and time of access, (6) websites from which the user’s system accesses our website and (7) websites that are accessed by the user’s system via our website.
This data is stored in the log files of our system. A storage of this data together with user’s personal data does not take place. Conclusions on the person concerned cannot be drawn.
The temporary storage of the IP address by the system is necessary to allow delivery of the website to the user’s computer. Therefore, the user's IP address must be stored for the duration of the session.
Storage in log files takes place to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure security of our information technology systems.
An evaluation of the data for marketing purposes does not take place.
These are the purposes in which our legitimate interest in data processing according to Article 6 (1) (f) GDPR lies, which is also the legal basis for the temporary storage of data and log files.
The data will be deleted as soon as its storage is no longer necessary for fulfillment of the purpose of its collection. Deletion in case of collecting data for provision of the website takes place at the end of each session.
Since the collecion of data for the provision of the website and storage of data in log files is mandatory for the provision of the website, there is no possibility of contradiction on your part.
The data collected in this way will be pseudonymized by technical means. Therefore, an assignment of the data to the calling user is no longer possible. The data will not be stored together with other personal data.
With analyzing cookies we improve the quality of our website and its contents. We learn how the website is used and can thus optimize our offer continuously.
These purposes constitute our legitimate interest in processing of personal data according to Article 6 (1) (f) GDPR, which also serves as the legal basis for the processing of personal data using cookies.
Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full.
On our website we offer you the opportunity to register by providing personal data. The data is entered in an input mask and transmitted to us and saved. The data collected as part of the registration process result from the respective input mask used for the survey.
As part of the registration process, your consent to the processing of this data is obtained. Your registration is required to fulfill a contract with you or to carry out pre-contractual measures. The personal data you enter will only be processed internally and for the purpose of fulfilling the contract.
For the execution of the contract, personal data may be passed on to third parties, e.g. Parcel carriers or payment service providers; this only happens to the extent necessary for the delivery of the goods or payment processing.
When registering on our website, the IP address assigned by your Internet service provider and the date and time of registration are also saved. The purpose of this storage is to prevent misuse of our services and to promote the investigation of criminal offenses. In principle, this data is not passed on to third parties, unless there is a legal obligation to pass it on or the passing on serves for criminal prosecution.
The legal basis for the processing of the data collected during registration is Article 6 (1) (a) GDPR.
Insofar as the registration for the fulfillment of a contract to which you are a party or for the implementation of pre-contractual measures is used, the additional legal basis for the processing of the data is Article 6 (1) (b) GDPR.
As far as we prevent or investigate misuse of our systems, the legal basis is our legitimate interest according to Article 6 (1) (f) GDPR.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, i.e. creating or operating a customer account.
Even after the customer account has been closed, there may be a need to store your personal data in order to meet contractual or legal obligations.
You have the option to cancel the registration at any time by sending us a message by email or by post. The account created for you internally will then be deleted by us immediately. If you have received login data for the account from us, you can change, add to or delete the data stored about you in your account at any time.
However, data can be deleted prematurely unless there are contractual or legal obligations (e.g. storage obligations on our part) that prevent deletion.
Even after your registration has been canceled (see above), there may be a need to store personal data in order to meet contractual or legal obligations.
You have the possibility to withdraw your consent at any time. If the data processing is based on our legitimate interest, you can object to the processing at any time.
You can initiate the objection and revocation as well as the modification of your data stored by us by notifying us of your request by email or post.
VI. E-mail an other contact
There is a contact form on our website that can be used to contact us electronically.
If you contact us in this way, the data entered in the input mask will be transmitted to us and saved. We are as economical as possible when collecting the data. All you have to do is provide your name and email address and describe your concerns. In addition, your IP address and the date and time of your request are saved.
Alternatively, you can contact us via the email address provided. In this case, your personal data transmitted with the email will be saved.
There is no transfer of the data to third parties. The data you provide to us on a voluntary basis will only be used to process the conversation.
The legal basis for the processing of the data transmitted in the course of using the contact form is your consent, which you give us before sending the contact form, Article 6 (1) (a) GDPR. The legal basis for sending data by email is Art. 6 Para. 1 lit. f GDPR. If your e-mail contact aims to conclude a contract, then an additional legal basis for the processing is Article 6 (1) (b) GDPR. Incidentally, it is a usage relationship between you and us if you use our contact form. In order to fulfill our obligations from this relationship, we store your data as part of the communication. In this regard, too, the legal basis is Article 6 (1) (b) GDPR.
The processing of personal data from the input mask serves us only to process the contact. If you contact us by email, this is also the necessary legitimate interest in the processing of the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. For personal data collected via the input mask or during the e-mail contact, this is the case when the respective conversation with the user has ended. The conversation ends when it can be assumed that the matter in question has been finally clarified.
You have the option of dissent to the storage of your personal data transmitted via the input mask or by e-mail at any time by notifying us of your request by telephone, e-mail or mail. In such a case, the conversation cannot be continued. All personal data stored in conjunction with the contact will be deleted.
You can subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input mask are transmitted to us. In line with the principle of data economy, this is only your email address. You can also voluntarily provide your name and address.
In addition, the IP address of the calling computer and the date and time of registration are recorded when registering.
For the processing of the data, your consent is obtained during the registration process and reference is made to this data protection declaration.
In connection with data processing for sending newsletters, the data is not passed on to third parties. The data is used exclusively for sending the newsletter.
The collection of your email address serves to deliver the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used.
The legal basis for processing the data after you have subscribed to the newsletter is your consent in accordance with Article 6 (1) (a) GDPR.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. The data you have entered will therefore be stored for as long as the subscription to the newsletter is active. Additional personal data collected during the registration process is usually deleted after a period of seven days.
You can unsubscribe from the newsletter at any time. For this purpose there is a corresponding link in every newsletter. You can also do this via our website in the "Newsletter" submenu. This also enables a revocation of the consent to the storage of the personal data collected during the registration process.
VIII. Third party processing
1. Tools for analyzis
a) Google Analytics
Google will use this information on our behalf to evaluate your use of our online offer, to compile reports on the activities within this online offer and to provide us with other services related to the use of this online offer and the internet. Pseudonymous usage profiles can be created from the processed data.
We only use Google Analytics with activated IP anonymization. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. The IP address transmitted by your browser will not be merged with other Google data.
The purpose of using Google Analytics is to get to know our website visitors better and to optimize our offer. For this purpose, Art. 6 (1) (f) GDPR serves as the legal basis.
You can prevent the storage of cookies by setting your browser software accordingly; You can also prevent Google from collecting the data generated by the cookie and relating to your use of the online offer and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl = de.
You can find further information on the use of data by Google for advertising purposes, setting and objection options on the Google website: https://www.google.com/intl/de/policies/privacy/partners/ ("Use of data by Google when you use Websites or apps of our partners"), http://www.google.com/policies/technologies/ads ("Use of data for advertising purposes"), http: //www.google.de/settings/ads ("Manage information that Google uses to show you advertisements") and http://www.google.com/ads/preferences/ ("Determine which advertisements Google shows you").
The data is stored for 14 months. After this retention period has expired, the data will be automatically deleted.
2. Embedding of content
a) Google Fonts
We use s. G. Web fonts provided by Google, Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043 / USA. Your browser loads the corresponding web fonts into your browser cache when you call one, so that the texts and fonts are displayed correctly.
For this reason, the browser you are using makes contact with the Google servers. This will transmit your IP address to Google and Google will be aware that you have visited our website with your IP address.
Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 ( 1) (f) GDPR.
3. Payment services
We have integrated Paypal components on our website. Paypal is a payment service provider. Payments are processed via PayPal accounts. These are virtual accounts. With PayPal, it is also possible to make payments via credit cards if the user does not have their own PayPal account. The PayPal account is managed via an e-mail address. The e-mail address is assigned to a specific account and is comparable to an account number.
PayPal makes it possible to initiate online payments to third parties or to receive payments. In addition, PayPal offers trustee functions and buyer protection services.
PayPal is operated in Europe by PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxembourg. If you have chosen Paypal, credit card via PayPal, direct debit via PayPal or - if offered - "Purchase on account via PayPal", we will automatically transmit your payment and order data – personal data transmitted by you to us, eg Name, address, e-mail address, IP address, telephone number or other data required for payment – to PayPal (Europe) S.à r.l. et Cie, S.C.A.22-24 Boulevard Royal, L-2449 Luxembourg.
These personal data will be transmitted to Paypal exclusively for the purpose of online ordering and payment processing. A transmission takes place in particular if there is a legitimate interest. PayPal may also share personal information with third parties such as credit rating agencies for identity and credit checks. Personal data may also be transferred to companies affiliated with PayPal and service providers or subcontractors as well as banking institutions, as far as this is necessary to fulfill the contractual obligation or the data is processed by order.
You have the option to revoke the consent to the handling of personal data to PayPal at any time. However, the revocation does not affect personal data that must be processed, used or transmitted for contractual payment processing.
or more details on data protection at Paypal can be read here: https://www.paypal.com/de/webapps/mpp/ua/privacy-prev
You have the possibility to pay with the payment service provider "Klarna” with the option “Sofortüberweisung".
Klarna Sofortüberweisung is a payment service that enables the cashless payment of products and services on the Internet. Sofortüberweisung represents a technical procedure by which the online retailer immediately receives a payment confirmation. This enables a merchant to deliver goods, services or downloads to the customer immediately after ordering.
Sofortüberweisung is operated by the company SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany. Sofort GmbH i spart oft he Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sverige.
If you select "Sofortüberweisung" as your payment method, your data will be automatically transferred to Sofortüberweisung. By choosing this payment option, you consent to the transfer of personal data required for payment processing.
When purchasing via Sofortüberweisung you transfer your PIN and TAN to the Sofort GmbH.
After a technical check of your account balance and retrieval of further data to check the account funds, Sofortüberweisung executes a transfer to the online retailer. The execution of the financial transaction is communicated to the online retailer automatically.
The personal data exchanged with Sofortüberweisung consists of first name, last name, address, email address, IP address, telephone number, mobile phone number or other data necessary for payment processing. The transmission of data takes place for the purpose of payment processing. We will provide Sofortüberweisung other personal information if there is a legitimate interest in the transfer.
Sofortüberweisung may transfer the personal data to affiliated companies and service providers or subcontractors, as far as this is necessary to fulfill the contractual obligations or the data is processed by order.
You have the option to revoke the consent concerning the handling of personal data at any time toward Sofortüberweisung. A revocation has no effect on personal data that must be processed, used or transmitted for (contractual) payment processing.
For further information regarding data protection for Sofortüberweisung see https://www.klarna.com/sofort/datenschutz/.
IX. Rights of the data subject
If and insofar as we process personal data of you, you are a data subject according to GDPR. Therefore, you have the following rights:
1. Right of access by the data subject
If the processing of personal data is involved, you may request information about the purposes for which the personal data is processed, the categories of personal data that are processed, the recipients or the categories according to Article 15 GDPR, the beneficiaries to whom the personal data relating to you have been disclosed, the planned period of storage of your personal data or, if specific information is not available, criteria for determining the retention period, information about the right of rectification or deletion of personal data concerning you, about a right to restriction of processing by the controller or a right to object to such processing, information about a right of appeal to a supervisory authority, all available information on the origin of the data, if the personal data data is not collected from the data subject. You have the right to request information about whether the personal data relating to you is transferred to a third country or an international organization. In this regard, you can request the appropriate warranties in accordance with Article 46 GDPR to be informed in connection with the transfer.
2. Right to rectification
According to Article 16 GDPR you have a right to rectification and / or completion if the processed personal data concerning you is incorrect or incomplete. The correction must be made immediately.
3. Right to erasure
According to Article 17 GDPR you can require that the personal data relating to you be deleted immediately. The right of cancellation does not exist insofar as the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, to perform a task in the public interest or to assert, pursue or defend legal claims.
4. Right to restriction of processing
You may request the restriction of the processing of your personal data in accordance with Article 18 GDPR, if you deny their accuracy, the processing is unlawful, the personal data is no longer needed for the purposes of processing, but you need them to assert, exercise or defend legal claims. Or, if you have objected to the processing under Article 21 (1) GDPR and it is not yet determined whether the legitimate reasons of the person responsible outweigh your reasons.
5. Notification obligation of the person responsible
If you have alleged your right to rectification, erasure, or restriction of processing, the person responsible shall communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. The person responsible shall inform you about those recipients if you request it.
6. Right to data portability
According to Article 20 GDPR you have the right to receive personal data concerning you in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person responsible, on condition that the processing is based on a consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract according to Article 6 (1) (b) GDPR and the processing is done using automated procedures.
In exercising this right, you also have the right to obtain that your personal data is transmitted directly from one person responsible to another person responsible, as far as this is technically feasible. Freedoms and rights of other persons may not be affected.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task of public interest.
7. Right of contradiction
According to Article 21 GDPR you have, at any time and for reasons arising from your particular situation, the right to contradict against the processing of your personal data based on Article 6 (1) (f) GDPR.
The contradicition can be explained by mail, fax or letter to the responsible person. In the event of a contradiction, the person responsible will no longer process personal data concerning you, unless compelling legitimate grounds for processing can be substantiate that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.
8. Right to revoke consent to data processing
According to Article 7 (3) GDPR you have, at any time, the right to revoke your consent to the data processing. The revocation of consent does not affect the lawfulness of earlier processing; future data processing does not take place.
9. Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing - including profiling - that will have legal effect or affects you in a similar manner. This shall not apply if the decision is required to conclude or to execute a contract between you and the person responsible, if the decision is permissible in the sense of Union or Member State legislation to which the person responsible is subject and that legislation is adequate to safeguard your rights and freedoms as well as your legitimate interests or the decision takes place with your express consent.
However, these decisions may not be based on special categories of personal data according to Article 9 (1) GDPR, unless Art. 9 (2) (a) or (g) GDPR applies and reasonable measures have been taken to protect your rights, freedoms and legitimate interests.
The person responsible shall take reasonable steps to safeguard your rights and freedoms, as well as your legitimate interests, including at least the right to obtain the intervention of a person by the person responsible, to express your own position and to contest the decision.
10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform you on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78.