Privacy

as well as information about any consents you may have given

As the data controller within the meaning of data protection regulations, we inform you below about the processing of your personal data by us.

I. The concept of personal data and other important terms

Personal data, simply put, means all information relating to you as an identified or identifiable individual. You can find definitions of "personal data" and other important terms for the following privacy information in Article 4 of the GDPR (General Data Protection Regulation).

II. Name and contact details of the controller; contact details of the data protection officer

The controller, simply put, is the person or entity who alone or jointly with others decides on the purposes and means of processing personal data. The name and contact details of the controller (and, if a data protection officer has been appointed, the contact details of the data protection officer) can be found in our provider identification / imprint.

III. Purposes of processing your personal data; legal bases for processing

We process your personal data within the scope of our activities for the purposes listed below, in accordance with the legal bases stated in each case.

1. For the implementation of pre-contractual measures carried out at your request, the processing of your personal data is based on your consent according to Article 6(1)(a) GDPR or on Article 6(1)(b) GDPR.

2. To safeguard our legitimate interest in responding to inquiries and in carrying out other measures requested by you, the processing of your personal data is based on your consent according to Article 6(1)(a) GDPR or on Article 6(1)(f) GDPR.

3. For the performance of a contract to which you are a party, the processing of your personal data is based on your consent according to Article 6(1)(a) GDPR or on Article 6(1)(b) GDPR.

4. For advertising purposes, the processing of your personal data is based either on your consent according to Article 6(1)(a) GDPR or on Article 6(1)(f) GDPR.

To safeguard our legitimate interest in maintaining the proper operation of our website, providing user-friendly functions, and analyzing the use of our website, the processing of your personal data is based on Article 6(1)(f) GDPR.

6. To safeguard our legitimate interest in enforcing our rights and defending against claims made against us, the processing of your personal data is based on Article 6(1)(f) GDPR.

Our systems are protected according to the state of the art by technical and organizational measures to safeguard your personal data against access, alteration, or dissemination by unauthorized persons as well as against loss and destruction.

You can find more information about the processing of your personal data for individual purposes in the relevant sections of this privacy policy.

IV. Transfer of your personal data to third parties; categories of recipients of your personal data

To the extent necessary to achieve the purposes of processing your personal data, we transfer your personal data to third parties within the framework of the legal provisions. Detailed information on the transfer of your personal data to third parties for individual processing purposes can be found in the relevant sections of this privacy policy. In the case of transfers, the scope of the data transferred is limited to the necessary minimum.

V. Scope of processing your personal data for individual purposes

Below, we inform you in detail about the processing of your personal data for various purposes.

Your personal data will be deleted when it is no longer required for the respective processing purpose, unless we are permitted to process the data for another purpose in accordance with legal requirements and the information in this privacy policy.

1. Use of our website for informational purposes

If you visit our website without providing us with information, we only process the personal data that your browser transmits to our server. This includes the following data, which is technically necessary to display our website and to ensure stability and security:

- the page you accessed

- date and time of the request

- amount of data transferred

- source or reference from which you accessed the page

- browser used

- operating system used

- your IP address

The processing of your personal data is based on Article 6(1)(f) GDPR to safeguard our legitimate interest in maintaining the proper operation of our website.

Your personal data will be deleted after 6 months, unless it is needed for asserting rights or enforcing claims due to actions against the proper operation of our website. In this case, deletion will take place immediately after the conclusion of the relevant proceedings.

2. Processing of inquiries

If you contact us with an inquiry or concern, we process the personal data and information/documents you provide. Regardless of how you contact us, this may include:

- date and time of contact

- name data

- contact data

- data about the inquiry/concern

- information/documents provided

Processing of your personal data and the information/documents provided – depending on the content of your inquiry or concern – is based on your consent according to Article 6(1)(a) GDPR for answering your inquiry, or on Article 6(1)(b) GDPR for pre-contractual measures, or on Article 6(1)(b) GDPR for fulfilling a contract to which you are a party, or on Article 6(1)(f) GDPR to safeguard our legitimate interest in answering inquiries/concerns and in carrying out other measures related to processing inquiries/concerns.

If we provide a contact form and you contact us via this form, by submitting your message you give consent with the following content, about which you are separately informed in the contact form:

"I consent to the processing of my email address and other personal data provided by me for the purpose of answering my message. I can revoke this consent at any time and without giving reasons with effect for the future. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation."

You may revoke your consent at any time and without giving reasons with effect for the future. A corresponding message to the controller, whose contact details you can find in the information about the controller, is sufficient. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation.

If necessary for processing your inquiry/concern, we transfer your personal data to third parties within the framework of legal provisions. In the case of such transfers, the scope of the data transferred is limited to the necessary minimum.

Your personal data will be deleted when your inquiry/concern has been resolved, unless we are allowed to process the data for another purpose in accordance with legal requirements and the information in this privacy policy.

3. Fulfillment of contracts

If you provide us with personal data for the purpose of concluding a contract or in connection with the creation of a customer account, we process the data you provide for the execution of the contract. This includes your customer data (e.g., your name and address) and contract data (e.g., information about the products concerned, as well as payment and delivery information).

The processing of your personal data is based on Article 6(1)(b) GDPR for the performance of a contract to which you are a party.

If this is necessary for the performance of the contract with you, we transfer your personal data within the framework of legal provisions to third parties. This transfer is made to service providers involved in contract processing. These include providers of processing tools used by us, companies responsible for transport, and payment service providers.

If you use the payment service provider PayPal for payment processing, we expressly point out that the PayPal privacy policy applies to all PayPal transactions: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

In the case of transfers of your personal data to third parties, the scope of the data transferred is limited to the necessary minimum.

Your personal data will be deleted after the expiry of the tax and commercial retention periods of 6 or 10 years, unless we are allowed to process the data for another purpose in accordance with legal requirements and the information in this privacy policy.

4. Advertising by newsletter

If you sign up for our newsletter, we process the email address you provide – and, if you provide further personal data, also this data – to send you information about our offers by email. Only your email address is required. If you voluntarily provide additional personal data, we may use this data to address you personally in the newsletter.

When you sign up for our newsletter, you give consent with the following content: "I agree to be informed about interesting offers by email and therefore consent to the processing of my email address and other personal data provided by me for the purpose of sending the newsletter. This consent can be revoked at any time and without giving reasons with effect for the future. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation."

Registration for our newsletter takes place via the so-called double opt-in procedure. This means: After registration, you will first receive an email with a notification about the registration for the newsletter and a request to confirm the registration. Your confirmation of the registration is required to document the necessary consent to the sending of the newsletter and to be able to detect registrations to third-party email addresses. In connection with newsletter registrations and confirmations, the IP address as well as the date and time are logged in order to be able to prove the granting of consent in accordance with legal requirements.

The processing of your personal data is based on the consent you have given in accordance with Article 6(1)(a) GDPR.

If you revoke your consent or unsubscribe from our newsletter, your email address and any additional data provided will be deleted immediately, unless we are allowed to process the data for another purpose in accordance with legal requirements and the information in this privacy policy.

5. Advertising by postal mail

We may process the personal data you provide (first and last name, address) to send you information about our offers by postal mail.

The processing of your personal data is based on Article 6(1)(f) GDPR to safeguard our legitimate interest in carrying out advertising measures by mail.

You may object to the processing of your personal data for the purpose of advertising by mail at any time. A corresponding message to the controller, whose contact details you can find in the information about the controller, is sufficient.

If you object to the processing of your personal data for the purpose of advertising by mail, your personal data (first and last name, address) will be deleted immediately, unless we are allowed to process the data for another purpose in accordance with legal requirements and the information in this privacy policy.

6. Use of cookies

We use so-called cookies on our website. These are small files that are stored on your device and transmit certain information to us. The use of cookies is intended to enable you to use certain functions and to make our offer more user-friendly overall.

Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device even after the end of the browser session and enable us or our partner companies (third-party cookies) to recognize you on your next visit to our website (so-called persistent cookies).

Some of the cookies we use are technically necessary to enable you to use certain functions. For example, this is the case with the storage of entries in connection with the use of the shopping cart function. The processing of your personal data is based on Article 6(1)(b) GDPR for the implementation of pre-contractual measures at your request or on Article 6(1)(b) GDPR for the performance of a contract to which you are a party, or on Article 6(1)(f) GDPR to safeguard our legitimate interest in providing user-friendly functions. If we or our partner companies use cookies for audience measurement or marketing purposes, you can find detailed information in the relevant sections of this privacy policy.

You can prevent the storage of cookies by adjusting your browser settings accordingly. Please refer to the program help of your browser for information on how to make the appropriate settings. However, please note that in this case, you may not be able to use all functions of our website to their full extent. For example, see information for the following common browsers:

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Safari: https://support.apple.com/kb/ph21411?locale=de_DE

7. Enforcement of our rights and defense against claims made against us

We may process your personal data to safeguard our legitimate interest in enforcing our rights and defending against claims made against us.

In this case, the processing of your personal data is based on Article 6(1)(f) GDPR.

If necessary to safeguard our legitimate interest, we transfer your personal data to third parties within the framework of legal provisions. This transfer is made to the providers of debt collection services or our lawyers involved.

In the case of transfers of your personal data to third parties, the scope of the data transferred is limited to the necessary minimum.

Your personal data will be deleted after the conclusion of the proceedings, but no sooner than after the expiry of the tax and commercial retention periods of 6 or 10 years, unless we are allowed to process the data for another purpose in accordance with legal requirements and the information in this privacy policy.

VI. Duration for which your personal data is stored or criteria for determining this duration

Your personal data will be deleted when it is no longer required for the respective processing purpose, unless we are allowed to process the data for another purpose in accordance with legal requirements and the information in this privacy policy. Information on the duration for which your personal data is stored or the criteria for determining this duration can be found in the information on the processing of your personal data for individual purposes in this privacy policy.

VII. Your rights

1. Overview

To ensure fair and transparent processing of personal data, you as the data subject have the following rights under data protection law:

the right to information under Article 15 GDPR,

the right to rectification under Article 16 GDPR,

the right to erasure under Article 17 GDPR,

the right to restriction of processing under Article 18 GDPR,

the right to data portability under Article 20 GDPR

the right to withdraw consent at any time under Article 7(3) GDPR,

the right to object to processing under Article 21 GDPR, about which we inform you separately below

and the right to lodge a complaint with a supervisory authority under Article 77 GDPR, about which we inform you separately below.

2. Your right to object to processing

The processing of personal data is lawful if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child, Article 6(1)(f) GDPR.

As a data subject, you have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on Article 6(1)(f) GDPR; this also applies to profiling based on those provisions.

If you exercise your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

If we process your personal data for direct marketing purposes, you as the data subject have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

3. Your right to lodge a complaint with a supervisory authority

As a data subject, you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

VIII. Information on the basis for providing your personal data

If you wish to conclude a contract with us or contact us with an inquiry, the provision of your personal data is necessary for the conclusion of a contract or for processing your inquiry. You are not obliged to provide your personal data. However, failure to provide your personal data would mean that we cannot conclude a contract with you or process your inquiry.