Privacy policy

Privacy Policy

––––––––––––––––––––


1) Introduction and Contact Details of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is any information by which you can be personally identified.

1.2 The data controller for processing personal data on this website under the General Data Protection Regulation (GDPR) The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.


2) Data Collection When Visiting Our Website

When using our website purely for informational purposes, i.e., if you do not register or provide us with other information, we only collect data that your browser transmits to the web server (so-called “server log files”). When you access our website, we collect the following data that is technically necessary to display the website:

 

  • The website visited

  • Date and time of access

  • Amount of data sent in bytes

  • Source/referral from which you reached the site

  • Browser used

  • Operating system used

  • IP address (if applicable: anonymized)

 


Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used otherwise. However, we reserve the right to review server log files retrospectively if there are concrete indications of unlawful use.


3) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some cookies are automatically deleted after closing the browser (“session cookies”), while others remain longer on your device and allow the storage of site settings (“persistent cookies”). In the latter case, you can see the storage duration in the overview of your browser’s cookie settings.


If any of the cookies we use process personal data, the processing is carried out according to Art. 6(1)(b) GDPR for contract execution, Art. 6(1)(a) GDPR if consent is given, or Art. 6(1)(f) GDPR to protect our legitimate interests in optimal website functionality and a user-friendly, effective site visit.


You can set your browser to inform you about cookie placement and decide individually whether to accept them or block cookies in certain cases or entirely. Please note that declining cookies may limit the functionality of our website.


4) Contacting Us

When contacting us (e.g., via contact form or email), personal data is processed solely to handle and respond to your inquiry and only to the extent necessary. The legal basis for processing these data is our legitimate interest in responding to your inquiry under Art. 6(1)(f) GDPR. If your contact relates to a contract, the additional legal basis is Art. 6(1)(b) GDPR. Your data will be deleted once it can be inferred that the matter has been conclusively resolved, unless legal retention obligations exist.


5) Data Processing for Order Fulfillment

To the extent necessary for contractual processing for delivery and payment purposes, the personal data collected will be forwarded in accordance with Art. 6(1)(b) GDPR to the contracted shipping company and bank.


If we owe updates for goods with digital elements or digital products under a corresponding contract, we process the contact details you provided during the order to inform you personally in accordance with our legal obligations under Art. 6(1)(c) GDPR. Your contact data will be used exclusively for notifications regarding owed updates and processed only to the extent necessary for this purpose.


For order processing, we also work with the following service providers who support us wholly or partially in fulfilling concluded contracts. Certain personal data will be transmitted to these providers as described below.


6) Rights of Data Subjects

6.1 Applicable data protection law grants you the following rights regarding the processing of your personal data, with reference to the legal basis for exercising these rights:

 

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to notification (Art. 19 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to withdraw consent (Art. 7(3) GDPR)

  • Right to lodge a complaint (Art. 77 GDPR)

 


Right to Object

If we process your personal data based on our legitimate interests, you have the right at any time to object to such processing for reasons arising from your particular situation, effective for the future. If you exercise your right to object, we will cease processing the data, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if processing serves the establishment, exercise, or defense of legal claims.


If your personal data is processed for direct marketing, you have the right to object at any time to processing of your personal data for such marketing purposes. If you exercise your right to object, we will cease processing for direct marketing purposes.


7) Duration of Storage of Personal Data

The duration of storage of personal data depends on the legal basis, the processing purpose, and, if applicable, statutory retention periods (e.g., commercial and tax law retention periods).


If personal data is processed based on your explicit consent (Art. 6(1)(a) GDPR), it is stored until you revoke your consent.


If legal retention periods exist for data processed under Art. 6(1)(b) GDPR, data will be routinely deleted after the retention period unless required for contract fulfillment or if we have a legitimate interest in continued storage.


For processing based on Art. 6(1)(f) GDPR, data is stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if processing serves the establishment, exercise, or defense of legal claims.


For data processed for direct marketing purposes under Art. 6(1)(f) GDPR, data is stored until you exercise your right to object under Art. 21(2) GDPR.


Unless otherwise specified in this policy, stored personal data will be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.