Privacy policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is any data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is KESSETECH GmbH, Billingstr 89, 29320 Hermannsburg, Germany, Email: info@doxafer.de. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you: the website visited, date and time of access, amount of data sent in bytes, source/referrer from which you accessed the page, browser used, operating system used, IP address used (anonymized where applicable). Processing takes place pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. Data is not disclosed or otherwise used. However, we reserve the right to review server log files retroactively if concrete indications of unlawful use arise.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the lock icon in your browser bar.

3) Hosting & Content Delivery Network

3.1 Shopify
For hosting our website and displaying its content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada. All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties. For data transfers to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

3.2 Shopify
We use a content delivery network from the following provider: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Data may also be transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada; Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA. This service allows us to deliver large media files such as graphics, page content, or scripts faster via a network of regionally distributed servers. Processing takes place to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties. For data transfers to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission. For data transfers to the USA, the recipient has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.

4) Cookies

To make visiting our website appealing and to enable the use of certain functions, we use cookies, i.e. small text files stored on your device. Some of these cookies are automatically deleted after you close your browser ("session cookies"), while others remain on your device longer and allow page settings to be saved ("persistent cookies"). In the latter case, you can find the storage duration in your browser's cookie settings overview. Where individual cookies we use also process personal data, this processing takes place pursuant to Art. 6(1)(b) GDPR to perform the contract, pursuant to Art. 6(1)(a) GDPR where consent has been given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly, effective website experience. You can set your browser to notify you when cookies are set and to decide individually on their acceptance, or to exclude the acceptance of cookies in certain cases or generally. Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

5.1 Shopify Inbox
This website uses the live chat system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Processing of personal data transmitted via chat takes place either pursuant to Art. 6(1)(b) GDPR, because it is necessary for the initiation or performance of a contract, or pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in effectively supporting our website visitors. Data transmitted in this way will be deleted, subject to conflicting statutory retention periods, once the matter has been conclusively resolved. Additionally, further information may be collected and evaluated using cookies for the purpose of creating pseudonymized usage profiles; this information does not serve to identify you personally and is not combined with other data sets. Where this information has a personal reference, processing takes place pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization purposes. Setting cookies can be prevented through corresponding browser settings; however, the functionality of our website may be limited as a result. You may object at any time, with effect for the future, to the collection and storage of data for the purpose of creating a pseudonymized usage profile. Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada. We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties. For data transfers to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

5.2 Judge.me
For review reminders, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom. Solely on the basis of your express consent pursuant to Art. 6(1)(a) GDPR, we transmit your email address and, where applicable, further customer data to the provider so that it can contact you with a review reminder by email. You may withdraw your consent at any time with effect for the future, either to us or to the provider. We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties. For data transfers to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

5.3 When you contact us (e.g. via contact form or email), personal data is processed solely for the purpose of handling and responding to your inquiry, and only to the extent necessary for that purpose. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once it can be inferred from the circumstances that the matter has been conclusively resolved, provided no statutory retention obligations apply.

6) Data Processing When Opening a Customer Account

Pursuant to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. The data required to open an account can be found in the input fields of the corresponding form on our website. Your customer account can be deleted at any time by sending a message to the controller's address stated above. After deletion of your customer account, your data will be deleted, provided all contracts concluded through it have been fully processed, no statutory retention periods conflict, and we no longer have a legitimate interest in continued storage.

7) Use of Customer Data for Direct Marketing

7.1 Signing Up for Our Email Newsletter
If you sign up for our email newsletter, we regularly send you information about our offers. The only mandatory information required to send the newsletter is your email address. Providing further data is voluntary and is used to address you personally. For newsletter distribution, we use the double opt-in procedure, which ensures that you only receive the newsletter once you have expressly confirmed your consent by clicking a verification link sent to the provided email address. By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. We store the IP address assigned by your Internet service provider (ISP) as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. Data collected during newsletter sign-up is used strictly for its intended purpose. You may unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the controller named above. After unsubscribing, your email address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve a further use of data that is legally permitted and about which we inform you in this statement.

7.2 Shopify Email
Our email newsletters are sent via the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada. Based on our legitimate interest in effective, user-friendly newsletter marketing, we pass on the data you provided during newsletter sign-up to this provider pursuant to Art. 6(1)(f) GDPR, so that it can carry out the newsletter distribution on our behalf. Subject to your express consent pursuant to Art. 6(1)(a) GDPR, the provider also conducts statistical performance analysis of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the newsletter content. Device information (e.g. time of access, IP address, browser type, and operating system) is also collected and evaluated, but not combined with other data. You may withdraw your consent to newsletter tracking at any time with effect for the future. We have concluded a data processing agreement with the provider that protects our visitors' data and prohibits disclosure to third parties. For data transfers to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

7.3 Cart Reminders by Email
If you abandon your purchase with us before completing your order, you have the option to be reminded once by email about the contents of your virtual shopping cart. The only mandatory information required to send this reminder is your email address. Providing further data is voluntary and may be used to address you personally. For sending this email, we use the double opt-in procedure, which ensures that you only receive a notification once you have expressly confirmed your consent by clicking a verification link sent to the provided email address. By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR for the purpose of sending a cart reminder. We store the IP address assigned by your Internet service provider (ISP) as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. Data collected when signing up for our email notification service is used strictly for its intended purpose. You may unsubscribe from cart reminders at any time by sending a message to the controller named above. After unsubscribing, your email address will be deleted without delay from the distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve a further use of data that is legally permitted and about which we inform you in this statement.

8) Data Processing for Order Fulfillment

8.1 To the extent necessary for contract fulfillment for delivery and payment purposes, the personal data we collect is disclosed pursuant to Art. 6(1)(b) GDPR to the commissioned transport company and the commissioned credit institution.

If we owe you updates for goods with digital elements or for digital products under a corresponding contract, we process the contact details you provided when ordering in order to inform you personally as part of our statutory information obligations pursuant to Art. 6(1)(c) GDPR. Your contact details are used strictly for the purpose of communications about updates owed by us and are processed by us only to the extent necessary for the respective information.

To process your order, we further work with the following service provider(s), who support us fully or in part in performing concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

8.2 Disclosure of Personal Data to Shipping Service Providers

- DHL

As a shipping service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We disclose your email address and/or phone number to the provider pursuant to Art. 6(1)(a) GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or providing delivery notification, provided you have given your express consent to this during the ordering process. Otherwise, for delivery purposes we disclose only the recipient's name and delivery address to the provider pursuant to Art. 6(1)(b) GDPR. Disclosure takes place only to the extent necessary for delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

Consent may be withdrawn at any time with effect for the future, either to the controller named above or to the provider.

8.3 Use of Payment Service Providers

- Apple Pay

If you choose the "Apple Pay" payment method offered by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed via the "Apple Pay" function of your iOS, watchOS, or macOS device by charging a payment card stored in "Apple Pay." Apple Pay uses security features built into your device's hardware and software to protect your transactions. Authorizing a payment therefore requires entering a code you have previously set, as well as verification via your device's "Face ID" or "Touch ID" function.

For payment processing purposes, the information you provide during the ordering process, along with information about your order, is transmitted to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before it is transmitted to the payment service provider of the payment card stored in Apple Pay to carry out the payment. This encryption ensures that only the website through which the purchase was made can access the payment data. After payment has been made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm successful payment.

To the extent personal data is processed in connection with the transmissions described, processing takes place exclusively for payment processing purposes pursuant to Art. 6(1)(b) GDPR.

Apple retains anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was completed successfully. Anonymization fully rules out any personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.

If you use Apple Pay on iPhone or Apple Watch to complete a purchase made via Safari on Mac, the Mac and the authorizing device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac."

For further information on data protection with Apple Pay, please visit: https://support.apple.com/de-de/HT203027

- Klarna

One or more online payment methods offered by the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you select a payment method offered by the provider that requires you to pay in advance (such as credit card payment), your payment data provided during the ordering process (including name, address, bank and card details, currency, and transaction number), as well as information about the content of your order, will be disclosed to the provider pursuant to Art. 6(1)(b) GDPR. In this case, your data is disclosed exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

If you select a payment method where the provider pays in advance (such as purchase on account, installment purchase, or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and, if applicable, information about an alternative payment method).

To safeguard our legitimate interest in determining our customers' creditworthiness, this data is forwarded by us to the provider pursuant to Art. 6(1)(f) GDPR for the purpose of a credit check. Based on the personal data you provided as well as further data (such as shopping cart, invoice amount, order history, payment experience), the provider assesses whether the payment method you selected can be granted in view of payment and/or default risks.

For the decision within the scope of the application review, identity and credit information from the following credit agencies may be considered in addition to provider-internal criteria pursuant to Art. 6(1)(f) GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). To the extent score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Among other factors, but not exclusively, address data is included in the calculation of score values.

You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain entitled to process your personal data if this is necessary for payment processing in accordance with the contract.

- Masterpayment

One or more online payment methods offered by the following provider are available on this website: Masterpayment LTD, 483 Green Lanes, London, N13 4BS, United Kingdom

Creditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss, Germany, Tel.: +49 (0)2131-109-501, Fax: -557
CRIF GmbH, Friesenweg 4, Haus 12, 22763 Hamburg, Germany, Tel.: +49 (0)40-89803-0, Fax: -419
SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Germany, Tel.: +49 (0)611-9278-0, Fax: -109

For data transfers to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

- Mollie

One or more online payment methods offered by the following provider are available on this website: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands

- PayPal

One or more online payment methods offered by the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method offered by the provider that requires you to pay in advance, your payment data provided during the ordering process (including name, address, bank and card details, currency, and transaction number), as well as information about the content of your order, will be disclosed to the provider pursuant to Art. 6(1)(b) GDPR. In this case, your data is disclosed exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

If you select a payment method where we pay in advance, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and, if applicable, information about an alternative payment method).

To safeguard our legitimate interest in determining your creditworthiness in such cases, this data is forwarded by us to the provider pursuant to Art. 6(1)(f) GDPR for the purpose of a credit check. Based on the personal data you provided as well as further data (such as shopping cart, invoice amount, order history, payment experience), the provider assesses whether the payment method you selected can be granted in view of payment and/or default risks.

- PayPal Checkout

This website uses PayPal Checkout, an online payment system from PayPal that combines PayPal's own payment methods with local third-party payment methods.

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "Pay Later" via PayPal, we disclose your payment data as part of payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). This disclosure takes place pursuant to Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "Pay Later" via PayPal, PayPal reserves the right to conduct a credit check. For this purpose, your payment data may be disclosed to credit agencies pursuant to Art. 6(1)(f) GDPR based on PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of payment default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). To the extent score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Among other factors, but not exclusively, address data is included in the calculation of score values. You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may remain entitled to process your personal data if this is necessary for payment processing in accordance with the contract.

If the PayPal payment method "Purchase on Invoice" is available and selected, your payment data is first transmitted to PayPal to prepare the payment, whereupon PayPal forwards it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") to carry out the payment. The legal basis in each case is Art. 6(1)(b) GDPR. In this case, RatePay conducts an identity and credit check in its own name to determine creditworthiness in accordance with the principle already described above, and discloses your payment data to credit agencies based on its legitimate interest in determining creditworthiness pursuant to Art. 6(1)(f) GDPR. A list of the credit agencies Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/

If you use a local third-party payment method, your payment data is first disclosed to PayPal to prepare the payment pursuant to Art. 6(1)(b) GDPR. Depending on your selection of an available local payment method, PayPal then transmits your payment data to the corresponding provider to carry out the payment pursuant to Art. 6(1)(b) GDPR:

- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDeal (Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands)
- Bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- Blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- EPS (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further data protection information, please refer to PayPal's privacy policy: https://www.paypal.com/de/legalhub/paypal/privacy-full

- Shopify Payments

One or more online payment methods offered by the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

9) Web Analytics Services

9.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables analysis of your use of our website.

By default, Google (Universal) Analytics sets cookies when you visit the website. These are small text files stored on your device that collect certain information. This information includes your IP address, which is, however, shortened by Google by removing the last digits to rule out direct personal identification.

The information is transmitted to Google's servers and processed there. Transmissions to Google LLC, based in the USA, are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide further services related to website and internet usage. The shortened IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. Data collected through the use of Google (Universal) Analytics is stored for a period of two months and then deleted.

All of the processing described above, in particular the setting of cookies on the device used, only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without your consent, Google (Universal) Analytics will not be used during your visit to the website. You may withdraw your given consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

For further legal information on Google (Universal) Analytics, please visit: https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de, and https://policies.google.com/technologies/partner-sites

Demographic Characteristics
Google (Universal) Analytics uses the special "demographic characteristics" feature and can use it to create statistics on the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the data collected cannot be attributed to a specific person and is deleted after being stored for two months.

Google Signals
As an extension to Google (Universal) Analytics, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google Account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the "Personalized Advertising" feature in your Google Account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information on Google Signals can be found at: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google (Universal) Analytics, the "UserIDs" feature may be used on this website. If you have consented to the use of Google (Universal) Analytics pursuant to Art. 6(1)(a) GDPR, have set up an account on this website, and log in with this account on various devices, your activities, including conversions, may be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.

9.2 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables analysis of your use of our website.

By default, Google Analytics 4 sets cookies when you visit the website. These are small text files stored on your device that collect certain information. This information includes your IP address, which is, however, shortened by Google by removing the last digits to rule out direct personal identification.

The information is transmitted to Google's servers and processed there. Transmissions to Google LLC, based in the USA, are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide further services related to website and internet usage. The shortened IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. Data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.

All of the processing described above, in particular the setting of cookies on the device used, only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without your consent, Google Analytics 4 will not be used during your visit to the website. You may withdraw your given consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

For further legal information on Google Analytics 4, please visit: https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de, and https://policies.google.com/technologies/partner-sites

Demographic Characteristics
Google Analytics 4 uses the special "demographic characteristics" feature and can use it to create statistics on the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the data collected cannot be attributed to a specific person and is deleted after being stored for two months.

Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google Account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the "Personalized Advertising" feature in your Google Account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information on Google Signals can be found at: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the "UserIDs" feature may be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6(1)(a) GDPR, have set up an account on this website, and log in with this account on various devices, your activities, including conversions, may be analyzed across devices.

Collection of User-Provided Data
To improve analysis results for users whose contact details we have obtained through business or business-like relationships, we use the "Collection of User-Provided Data" feature.
Subject to your express consent pursuant to Art. 6(1)(a) GDPR, as part of this feature we transmit one or more files containing customer data aggregated for you (primarily email address and phone number) electronically to Google. Google does not have access to plain-text data; rather, the information in the customer files is automatically encrypted during the transmission process using a special algorithm. The encrypted information can then only be used by Google to match it to existing Google Accounts set up by the data subjects.
This processing serves to refine measurement data, improves cross-device user tracking, and enables the integration of analysis results into Google Ads' ad personalization and conversion tracking features.
You may withdraw your consent to us at any time with effect for the future. Further information on Google's data protection measures regarding the transmission of customer data can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182

9.3 Google Tag Manager

This website uses "Google Tag Manager," a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").

Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analytics services, and for calibrating, controlling, and conditioning them via a unified user interface. Google Tag Manager itself does not store or read any information on user devices, nor does the service perform any independent data analysis. However, Google Tag Manager transmits your IP address to Google when you access a page, where it may be stored. Transmission to Google LLC's servers in the USA is also possible.

This processing only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without this consent, Google Tag Manager will not be used during your visit to the website. You may withdraw your given consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

For further legal information on Google Tag Manager, please visit: https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de

9.4 Hotjar

This website uses the web analytics service of the following provider: Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used, such as IP address and browser information, in order to evaluate it for statistical analyses of usage behavior on our website and create pseudonymized usage profiles. Among other things, this enables the analysis of movement patterns (so-called heatmaps), which show the duration of page visits as well as interactions with page content (e.g., text entries, scrolling, clicks, and mouse-overs). Pseudonymization generally rules out a direct connection to a specific person. Data is not combined with plain-text data about you obtained in any other way.

All of the processing described above, in particular the reading or storing of information on the device used, only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

9.5 IONOS WebAnalytics

This website uses the web analytics service of the following provider: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany

We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

9.6 Klaviyo Onsite Tracking

This website uses the web analytics service of the following provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA

We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

9.7 Shopify Analytics

This website uses the web analytics service of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used, such as IP address and browser information, in order to evaluate it for statistical analyses of usage behavior on our website and create pseudonymized usage profiles. Pseudonymization generally rules out a direct connection to a specific person. Data is not combined with plain-text data about you obtained in any other way.

We have concluded a data processing agreement with the provider that protects our visitors' data and prohibits disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

9.8 Shopify Network Intelligence

This website uses the "Shopify Network Intelligence" feature of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Through this feature, certain customer data collected (order and search histories, location information, and transaction details), where collected, is automatically transmitted to Shopify in pseudonymized form, processed by Shopify, and then used for statistical and analytical purposes.

The analysis results may also include pseudonymized data from customers of other Shopify merchants, without any merchant gaining individual access to this third-party data beyond their own customer base.

As part of the processing, Shopify does not have access to plain-text data; rather, the information is automatically encrypted during the transmission process using a special algorithm.

Processing takes place pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in the statistical evaluation of our shop's reach and the acceptance of our offering for optimization purposes.

As part of the aforementioned processing, data may also be transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

For further details on the processing described above, please refer to Shopify's privacy policy: https://www.shopify.com/de/legal/privacy/consumers?country=de&lang=de

10) Retargeting/Remarketing and Conversion Tracking

10.1 Meta Pixel with Advanced Matching

As part of our online offering, we use the "Meta Pixel" service of the following provider in advanced matching mode: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta")

If a user clicks on an advertisement we have placed on Facebook or Instagram, "Meta Pixel" is used to add a parameter to the URL of our linked page. After redirection, this URL parameter is then entered into the user's browser via a cookie set by our linked page itself. In addition, this cookie captures specific customer data, such as the email address, which we collect on our website linked to the Facebook or Instagram ad during processes such as completed purchases, account registrations, or sign-ups (advanced matching). The cookie is then read out, enabling the transmission of the data, including the specific customer data, to Meta.

We use "Meta Pixel" with advanced matching to make our ads (so-called "Ads") on Facebook and/or Instagram more effective and to ensure that they match user interests or exhibit certain characteristics (e.g., interests in certain topics or products, determined based on the websites visited), which we transmit to Meta (so-called "Custom Audiences").

In addition, we analyze the effectiveness of our ads by tracking whether users were redirected to our website after clicking on an ad (conversion). Compared to the standard version of "Meta Pixel," the advanced matching feature helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.

All transmitted data is stored and processed by Meta, allowing it to be attributed to the respective user profile, and Meta may use the data for its own advertising purposes in accordance with Meta's Data Use Policy (https://www.facebook.com/about/privacy/). This data may enable Meta and its partners to place ads on and off Facebook.

All of the processing described above, in particular the setting of cookies for reading information on the device used, only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

The information generated by Meta is generally transmitted to and stored on a Meta server; in this context, transmission to Meta Platforms Inc.'s servers in the USA is also possible.

10.2 Google Ads Conversion Tracking

This website uses the "Google Ads" online advertising program and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

We use Google Ads' offering to draw attention to our products on external websites using advertising materials (so-called Google AdWords). We can determine, in relation to advertising campaign data, how successful individual advertising measures are. In doing so, we aim to show you advertising that is of interest to you, to make our website more interesting for you, and to achieve a fair calculation of advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across Google Ads customers' websites. The information obtained using the conversion cookie, which also includes your IP address, is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that could be used to personally identify users.

The use of Google Ads may also result in the transmission of personal data to Google LLC's servers in the USA.

For details on the processing triggered by Google Ads conversion tracking and Google's handling of website data, please visit: https://policies.google.com/technologies/partner-sites

You may also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing Google's browser plug-in available at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de

To provide more relevant advertising to users whose data we have obtained through business or business-like relationships, we use a customer matching feature within Google Ads. For this purpose, we transmit one or more files with aggregated customer data (primarily email addresses and phone numbers) electronically to Google. Google does not have access to plain-text data; rather, the information in the customer files is automatically encrypted during the transmission process using a special algorithm. The encrypted information can then only be used by Google to match it to existing Google Accounts set up by the data subjects. This enables the delivery of personalized advertising across all Google services linked to the respective Google Account.

Customer data is transmitted to Google only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw this consent at any time with effect for the future. Further information on Google's data protection measures regarding the customer matching feature can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

10.3 Google Marketing Platform

This website uses the Google Marketing Platform online marketing tool operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").

GMP uses cookies to display ads relevant to users, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Using a cookie ID, Google records which ads are shown in which browser, allowing it to prevent them from being shown multiple times. In addition, GMP can use cookie IDs to record so-called conversions related to ad requests. This is the case, for example, when a user sees a GMP ad and later, using the same browser, visits the advertiser's website and makes a purchase through that website. According to Google, GMP cookies do not contain personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server.

We have no influence over the scope and further use of the data collected by Google through the use of this tool and therefore inform you as follows to the best of our knowledge: By integrating GMP, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google may be able to associate the visit with your account. Even if you are not registered with Google or are not logged in, it is possible that the provider may determine and store your IP address. The use of GMP may also result in the transmission of personal data to Google LLC's servers in the USA.

GMP by Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

10.4 TikTok Pixel

This website uses the conversion tracking technology of the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland

If you arrived at our website via an ad on the provider's domain, the success of the ad can be tracked using cookies and/or comparable technologies (tracking pixels, web beacons, pings, or HTTP requests).

For this purpose, certain device and browser information, including, if applicable, your IP address, is read via the tracking technology in order to capture and evaluate user actions predefined by us (e.g., completed transactions, leads, search queries on the website, views of product pages). This enables the creation of statistics on usage behavior on our website following redirection from an ad, which we use to optimize our offering.

We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

10.5 Twitter Conversion Tracking

This website uses the conversion tracking technology of the following provider: Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland

We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

11) Site Functionalities

11.1 Google Reviews PRO

Graphic elements from the following provider are integrated into our website to display external customer reviews: MARKET PUSH APPS S.R.L., Str. Costesti Nr.66 E, Costesti 337327, Romania

When you access a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers in order to properly load the elements. In doing so, certain browser information, including your IP address, is transmitted to the provider.

To the extent personal data is processed in this context, it takes place pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in optimally marketing our offering and presenting our website in an appealing manner.

11.2 Judge.me

Graphic elements from the following provider are integrated into our website to display external customer reviews and/or an externally awarded quality seal: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

11.3 Google Photos

This website uses the "Google Photos" image service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google") to embed and display photographs.

Google Photos itself does not store or read any information on user devices, nor does the service perform any independent data analysis.

However, in order to load image files from Google's network, your IP address is transmitted to Google when you access a page and may be stored there. Transmission to Google LLC's servers in the USA is also possible.

This processing only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without this consent, image files will not be loaded via Google Photos.

You may withdraw your given consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Google, obligating Google to protect our visitors' data and not disclose it to third parties.

11.4 Google Customer Reviews (formerly Google Trusted Stores Program)

We work with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This program allows us to collect customer reviews from users of our website. After using our services, you will be asked on our website whether you would like to participate in an email survey from Google.

If you give your consent pursuant to Art. 6(1)(a) GDPR, we transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your shopping experience on our website. Your rating will then be aggregated with our other ratings and displayed in our Google Customer Reviews badge as well as in our Merchant Center dashboard. Your rating will also be used for Google Seller Ratings. The use of Google Customer Reviews may also result in the transmission of personal data to Google LLC's servers in the USA.

You may withdraw your consent at any time by sending a message to the controller responsible for data processing or to Google.

For further information on Google's privacy policy, please visit: https://business.safety.google/intl/de/privacy/

12) Tools and Other Services

12.1 AccountOne

For our accounting, we use the cloud-based accounting software service of the following provider: AccountOne GmbH, Fördepromenade 4d, 24944 Flensburg, Germany

The provider processes incoming and outgoing invoices as well as, where applicable, our company's bank transactions in order to automatically capture invoices, match them to transactions, and generate financial accounting through a partially automated process.

To the extent personal data is also processed in this context, processing takes place on the basis of our legitimate interest in the efficient organization and documentation of our business operations pursuant to Art. 6(1)(f) GDPR.

12.2 DATEV

For our accounting, we use the cloud-based accounting software service of the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany

12.3 pathway solutions

For our accounting, we use the cloud-based accounting software service of the following provider: pathway solutions gmbh, c/o ba tax gmbh, Alstertwiete 3, 20099 Hamburg, Germany

12.4 Cookie Consent Tool

This website uses a so-called "Cookie Consent Tool" to obtain effective user consent for cookies and cookie-based applications requiring consent. The "Cookie Consent Tool" is displayed to users when the website is accessed in the form of an interactive user interface, on which consent for certain cookies and/or cookie-based applications can be given by checking boxes. This ensures that all cookies/services requiring consent are only loaded once the respective user has given the corresponding consent by checking the box. This ensures that such cookies are only set on the user's device if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data (such as an IP address) is nevertheless processed for the purpose of storing, assigning, or logging cookie settings, this takes place pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies, and thus in the legally compliant design of our website.

The further legal basis for processing is also Art. 6(1)(c) GDPR. As the controller, we are subject to the legal obligation to make the use of non-technically necessary cookies dependent on the respective user's consent.

Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

Further information on the operator and the setting options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

12.5 Judge.me

To verify and publish customer reviews, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

When you submit a review on our website, your first and last name, email address, order date and number, as well as the name and international references (GTIN/ISDNF) are collected, transmitted to the provider, and evaluated there in order to decide on the legitimacy of a customer review for a specific order. This processing takes place pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in ensuring the authenticity of customer reviews by verifying their connection to a transaction and preventing review abuse. Once the review verification and approval process is complete, the data is deleted by the provider.

For data transfers to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

13) Rights of the Data Subject

13.1 Applicable data protection law grants you the following rights (rights to information and intervention) with respect to the controller regarding the processing of your personal data, with the applicable legal basis referenced for the respective conditions of exercise:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent given pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

13.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) Duration of Storage of Personal Data

The duration of storage of personal data is determined based on the respective legal basis, the purpose of processing, and, where applicable, the respective statutory retention period (e.g., retention periods under commercial and tax law).

When personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

Where statutory retention periods exist for data processed as part of contractual or quasi-contractual obligations pursuant to Art. 6(1)(b) GDPR, this data is routinely deleted upon expiry of the retention periods, provided it is no longer required for contract performance or initiation and/or we no longer have a legitimate interest in continued storage.

When personal data is processed on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

When personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise indicated by the other information in this statement regarding specific processing situations, stored personal data will otherwise be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.

Your cart is empty

Your cart

Estimated total

Privacy policy