You can visit our websites without providing any personal information. Whenever a web page is accessed, the web server automatically stores only a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the volume of data transferred and the requesting provider (access data), and documents the access. This access data is analysed exclusively to ensure the smooth operation of the website and to improve our offering. This serves to safeguard our legitimate interests in the correct presentation of our offering, which prevail in a balancing of interests, pursuant to Art. 6(1), first sentence, point (f) GDPR. All access data is processed only for as long as necessary to achieve the processing purposes stated above.

1.1 Hosting

The services for hosting and displaying the website are provided in part by our service providers as processors acting on our behalf. Unless otherwise explained in this Privacy Policy, all access data and all data collected in the forms provided for this purpose on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this Privacy Policy.

1.2 Content Delivery Network

To reduce loading times, we use a so-called Content Delivery Network ("CDN") for some of our offerings. With this service, content, such as large media files, is delivered via regionally distributed servers operated by external CDN service providers. Access data is therefore processed on the service providers' servers. Our service providers act as processors on our behalf.

Our service providers are based and/or use servers in countries outside the EU and the EEA. The European Commission has not issued an adequacy decision for these countries.
Our cooperation with them is based on the European Commission's standard contractual clauses.

If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this Privacy Policy.

2.1 Data processing for contract performance

For the purpose of contract performance (including enquiries concerning and the handling of any claims under warranty rights, rights arising from defective or non-performance, and the right of withdrawal, as well as any statutory updating obligations) pursuant to Art. 6(1), first sentence, point (b) GDPR, we collect personal data when you voluntarily provide it to us as part of your order. Mandatory fields are marked as such because, in these cases, we require the data to perform the contract and cannot dispatch the order without it. The respective input forms indicate which data is collected.

Further information about the processing of your data, particularly its disclosure to our service providers for order, payment and shipping processing, can be found in the following sections of this Privacy Policy. Once the contract has been fully performed, your data will be restricted from further processing and deleted after the retention periods required under tax and commercial law have expired, pursuant to Art. 6(1), first sentence, point (c) GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1), first sentence, point (a) GDPR or we reserve the right to use your data beyond this to the extent permitted by law and as described in this policy.

2.2 Customer account

If you have given your consent pursuant to Art. 6(1), first sentence, point (a) GDPR by deciding to open a customer account, we use your data to open the customer account and to store your data for future orders on our website. You may delete your customer account at any time, either by sending a message using the contact option described in this Privacy Policy or by using the function provided for this purpose in your customer account. After your customer account has been deleted, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6(1), first sentence, point (a) GDPR or we reserve the right to use your data beyond this to the extent permitted by law and as described in this policy.

Contacting us

As part of our customer communications, we collect personal data to process your enquiries pursuant to Art. 6(1), first sentence, point (b) GDPR when you voluntarily provide it to us when contacting us (e.g. via a contact form, live chat tool or email). Mandatory fields are marked as such because, in these cases, we require the data to process your enquiry. The respective input forms indicate which data is collected. Once your enquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6(1), first sentence, point (a) GDPR or we reserve the right to use your data beyond this to the extent permitted by law and as described in this policy.

WhatsApp live chat tool

For customer communications, we use the live chat tool provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland ("WhatsApp"). This serves to safeguard our legitimate interests in effective and improved customer communications, which prevail in a balancing of interests, pursuant to Art. 6(1), first sentence, point (f) GDPR. WhatsApp acts on our behalf. The telephone numbers we store on our mobile device are automatically processed on servers belonging to Meta companies headquartered at 1601 Willow Road, Menlo Park, California 94025, USA. Only the telephone numbers of customers who have previously contacted us via WhatsApp and have therefore already accepted WhatsApp's terms of use and privacy terms are stored.

Our service providers are based and/or use servers in the following countries for which the European Commission has determined, by decision, that an adequate level of data protection exists: USA, Israel, United Kingdom.

The adequacy decision for the USA serves as the basis for transfers to that third country insofar as the respective service provider is certified. Certification is in place.

Our service providers are based and/or use servers in these countries: Singapore. The European Commission has not issued an adequacy decision for these countries. Our cooperation with them is based on these safeguards: the European Commission's standard contractual clauses.

To perform the contract pursuant to Art. 6(1), first sentence, point (b) GDPR, we disclose your data to the shipping service provider commissioned with delivery insofar as this is necessary to deliver the goods ordered. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this Privacy Policy.

Disclosure of data to shipping service providers for delivery notifications

If you have given us your express consent during or after placing your order, we disclose your email address to the selected shipping service provider on the basis of that consent pursuant to Art. 6(1), first sentence, point (a) GDPR, so that the provider can contact you before delivery to notify you of or coordinate the delivery.
You may withdraw your consent at any time by sending a message using the contact option described in this Privacy Policy. Following withdrawal, we delete the data you provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this to the extent permitted by law and as described in this policy. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this Privacy Policy.

We work with the following partners to process payments in our online shop: technical service providers, credit institutions and payment service providers.

4.1 Data processing for transaction processing

Depending on the payment method selected, we disclose the data necessary to process the payment transaction to our technical service providers, the commissioned credit institutions or the selected payment service provider insofar as this is necessary to process the payment. This serves to perform the contract pursuant to Art. 6(1), first sentence, point (b) GDPR. In some cases, the payment service providers themselves collect the data necessary to process the payment, e.g. on their own website or via technical integration into the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

Depending on the payment method selected, data may be transferred to third countries outside the EU/EEA for which the European Commission has determined, by decision, that an adequate level of data protection exists. Where data is transferred to third countries outside the EU/EEA for which the European Commission has not issued a decision confirming an adequate level of data protection, cooperation is based on the European Commission's standard contractual clauses.

If you have any questions about our payment processing partners or the basis of our cooperation with them, please use the contact option specified in this Privacy Policy.

4.2 Data processing for fraud prevention and the optimisation of our payment processes

Where appropriate, we provide the aforementioned service providers with additional data, which they use together with the data necessary for payment processing to prevent fraud and optimise our payment processes (e.g. invoicing, handling disputed payments and supporting accounting). Pursuant to Art. 6(1), first sentence, point (f) GDPR, this serves to safeguard our legitimate interests in protecting ourselves against fraud and in efficient payment management, which prevail in a balancing of interests.

5.1 Email newsletter with subscription, newsletter tracking with separate consent

If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to send you our email newsletter regularly on the basis of your consent pursuant to Art. 6(1), first sentence, point (a) GDPR. You may unsubscribe from the newsletter at any time, either by sending a message using the contact option described below or via the link provided for this purpose in the newsletter. After you unsubscribe, we delete your email address from the recipient list unless you have expressly consented to further use of your data pursuant to Art. 6(1), first sentence, point (a) GDPR or we reserve the right to use your data beyond this to the extent permitted by law and as described in this policy.

If you have also given us your consent pursuant to Art. 6(1), first sentence, point (a) GDPR to analyse our newsletters, we also analyse how you interact with our newsletter by measuring, storing and evaluating open rates and click rates for the purpose of designing future newsletter campaigns ("newsletter tracking").

For this analysis, the emails sent contain single-pixel technologies (e.g. so-called web beacons or tracking pixels) stored on our website. For the analyses, we link in particular the following "newsletter data"

• the page from which the page was requested (the so-called referrer URL),
• the date and time of access,
• a description of the type of web browser used,
• the IP address of the requesting computer,
• the email address,
• the date and time of subscription and confirmation

and the single-pixel technologies with your email address or your IP address and, where applicable, an individual ID. Links contained in the newsletter may also contain this ID.

You may opt out of newsletter tracking at any time, either by sending a message using the contact option described or via the link provided for this purpose in the newsletter.

The information is stored for as long as you are subscribed to the newsletter.

Email newsletter without subscription and your right to object

If we receive your email address in connection with the sale of goods or services, we reserve the right to email you regular offers for products from our range that are similar to those you have already purchased. We will not send you such offers if you have already objected to this use of your email address or are entered on a Robinson list that we are legally required to observe.

You may object to this use of your email address at any time, easily and free of charge, by sending a message using the contact option described in this Privacy Policy or via the link provided for this purpose in the advertising email, i.e. without incurring any costs other than transmission costs at the basic rates. After you unsubscribe, we delete your email address from the recipient list unless you have expressly consented to further use of your data pursuant to Art. 6(1), first sentence, point (a) GDPR or we reserve the right to use your data beyond this to the extent permitted by law and as described in this policy.

5.2 Newsletter delivery

Where applicable, our service providers also send the newsletter and carry out the newsletter tracking described above as processors acting on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this Privacy Policy.

Our service providers are based and/or use servers in the following countries for which the European Commission has determined, by decision, that an adequate level of data protection exists: USA.

The adequacy decision for the USA serves as the basis for transfers to that third country insofar as the respective service provider is certified. Certification is in place.

5.3 Sending review requests by email

If you have given us your express consent during or after placing your order pursuant to Art. 6(1), first sentence, point (a) GDPR, we use your email address to ask you to review your order via the review system we use. You may withdraw this consent at any time by sending a message using the contact option described in this Privacy Policy or via the link provided for this purpose in the review request. After you withdraw your consent, we delete your email address from the recipient list unless you have expressly consented to further use of your data pursuant to Art. 6(1), first sentence, point (a) GDPR or we reserve the right to use your data beyond this to the extent permitted by law and as described in this policy.

Where applicable, review requests are also sent by our service provider Trusted Shops SE, Subbelrather Str. 15C, 50823 Köln ("Trusted Shops").

When review requests are sent, we receive information about their respective status from Trusted Shops (e.g. whether the review request has been sent and whether it has been received). This takes place pursuant to Art. 6(1), first sentence, point (f) GDPR to fulfil our legitimate interest in receiving information about review invitations so that we can make improvements on that basis where appropriate, and to fulfil Trusted Shops' legitimate interest in being able to provide this service.

We and Trusted Shops are jointly responsible for sending review requests and for collecting and displaying review and status information.

Within the framework of the joint controllership between us and Trusted Shops, please preferably contact Trusted Shops with any data protection questions and to exercise your rights. You can find their contact details here . Further information on data protection can be found via the following link here . Regardless of this, you can always contact us using the contact option described in this Privacy Policy. If necessary, your enquiry will then be forwarded to the other controller for a response.

5.4 Postal advertising and your right to object

We also reserve the right to use your first and last name and your postal address for our own advertising purposes, e.g. to send you interesting offers and information about our products by post. This serves to safeguard our legitimate interests in communicating advertising to our customers, which prevail in a balancing of interests, pursuant to Art. 6(1), first sentence, point (f) GDPR. You may object to the storage and use of your data for these purposes at any time by sending a message using the contact option described in this Privacy Policy.
After you withdraw your consent, we delete your address from the recipient list unless you have expressly consented to further use of your data pursuant to Art. 6(1), first sentence, point (a) GDPR or we reserve the right to use your data beyond this to the extent permitted by law and as described in this policy.

General information

To make visiting our website appealing and enable the use of certain functions, we use technologies, including so-called cookies, on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. when you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognise your browser on your next visit (persistent cookies). You can find the storage duration in the overview in your web browser's cookie settings.

Protection of privacy on terminal devices

When you use our online offering, we use strictly necessary technologies to provide the digital service you have expressly requested. In this respect, storing information on your device or accessing information already stored on your device does not require consent.

For functions that are not strictly necessary, storing information on your device or accessing information already stored on your device requires your consent. Please note that, if you do not give your consent, you may not be able to use parts of the website without restrictions. Any consent you have given remains in effect until you adjust or reset the respective settings on your device.

Any subsequent data processing through cookies and other technologies

We use technologies that are strictly necessary for the use of certain functions of our website. These technologies collect and process your IP address, the time of your visit, device and browser information, and information about your use of our website. This serves our legitimate interests in the optimised presentation of our offering, which prevail in a balancing of interests, pursuant to Art. 6(1), first sentence, point (f) GDPR.

We also use technologies to fulfil the legal obligations to which we are subject (e.g. to be able to demonstrate consent to the processing of your personal data), as well as for web analytics and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this Privacy Policy.

Cookie settings

You can find the cookie settings for your browser via the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of these technologies pursuant to Art. 6(1), first sentence, point (a) GDPR, you may withdraw your consent at any time by sending a message using the contact option described in this Privacy Policy.

We use the following cookies and other technologies from third-party providers on our website. Unless otherwise stated for the individual technologies, this is based on your consent pursuant to Art. 6(1), first sentence, point (a) GDPR. Once the purpose no longer applies and we stop using the respective technology, the data collected in this context will be deleted. You may withdraw your consent at any time with effect for the future. Further information about your withdrawal options can be found in the section "Cookies and other technologies". Further information, including the basis of our cooperation with the individual providers, can be found under the individual technologies. If you have any questions about the providers and the basis of our cooperation with them, please use the contact option described in this Privacy Policy.

7.1 Use of Adobe services

We use the technologies described below from Adobe Systems, Software Ireland Limited, Ireland, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland ("Adobe"). The information automatically collected by Adobe technologies about your use of our website is generally transferred to and stored on a server of Adobe, Inc., 345 Park Avenue San Jose, CA 95110-2704, USA. If your IP address is collected through Adobe technologies, it is truncated or entirely replaced with a generic IP address before being stored on Adobe's servers by activating the corresponding settings.

Our service providers are based and/or use servers in the following countries for which the European Commission has determined, by decision, that an adequate level of data protection exists: Canada, Japan, Switzerland, United Kingdom, USA.

The adequacy decision for the USA serves as the basis for transfers to that third country insofar as the respective service provider is certified. Certification is in place.

Our service providers are based and/or use servers in countries outside the EU and the EEA. The European Commission has not issued an adequacy decision for these countries. Our cooperation with them is based on the European Commission's standard contractual clauses.

Adobe Fonts

To ensure a consistent presentation of the content on our website, the script code "Adobe Fonts" collects data (IP address, time of visit, device and browser information), transmits it to Adobe, and Adobe subsequently processes it. We have no influence over this subsequent data processing. Data processing is based on an agreement between joint controllers pursuant to Art. 26 GDPR.

7.2 Use of Google services

We use the technologies described below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google technologies about your use of our website is generally transferred to and stored on a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Unless otherwise stated for the individual technologies, data processing is based on an agreement between joint controllers concluded for the respective technology pursuant to Art. 26 GDPR. Further information about data processing by Google can be found in Google's privacy notice.

Our service providers are based and/or use servers in countries outside the EU and the EEA for which the European Commission has determined, by decision, that an adequate level of data protection exists.

Our service providers are based and/or use servers in countries outside the EU and the EEA. The European Commission has not issued an adequacy decision for these countries. Our cooperation with them is based on the European Commission's standard contractual clauses.

Google Analytics

For website analytics purposes, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. If you visit our website from the EU, your IP address is stored on a server located in the EU to derive location data and is then deleted immediately before the traffic is forwarded for processing on other Google servers. Data processing is based on a data processing agreement with Google.

To optimise the marketing of our website, we have enabled the data sharing settings for "Google products & services" . This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google services. Data is shared with Google under these data sharing settings on the basis of an additional agreement between controllers. We have no influence over Google's subsequent data processing.

To optimise the marketing of our website, we use the so-called User-ID feature. This feature enables us to assign a unique, permanent ID to your interaction data from one or more sessions on our online presences and thus analyse your user behaviour across devices and sessions.

For web analytics purposes, the Google Analytics extension Google Signals enables so-called "cross-device tracking". If your internet-enabled devices are linked to your Google account and you have enabled the "personalised advertising" setting in your Google account, Google can create reports about your usage behaviour (in particular, user numbers across devices), even when you change devices. We do not process personal data in this respect; we only receive statistics created on the basis of Google Signals.

For web analytics and advertising purposes, the Google Analytics extension known as the DoubleClick cookie enables your browser to be recognised when you visit other websites. Google will use this information to compile reports on website activity and to provide other services related to website use.

If you do not give us your consent pursuant to Art. 6(1), first sentence, point (a) GDPR to the use of Google Analytics, no cookies are stored on or read from your device. The data processing described in the preceding paragraphs does not take place. To close gaps in web analytics through behavioural and conversion modelling, pings containing data (user agent, information about your consent behaviour, screen resolution, IP address) are sent to Google.

Google AdSense

Our website uses Google AdSense to market advertising space to third-party advertisers. These advertisements are displayed to you at various locations on this website. The so-called DoubleClick cookie enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information, and information about your use of our website) and automatically assigning a pseudonymous user ID, which is used to identify interests based on visits to this and other websites.

Google Ads

For advertising in Google search results and on third-party websites, a so-called Google Remarketing cookie is set when you visit our website. By automatically collecting and processing data (IP address, time of visit, device and browser information, and information about your use of our website), using a pseudonymous cookie ID and taking account of the pages you have visited, this cookie enables interest-based advertising. Further data processing takes place only if you have enabled the "personalised advertising" setting in your Google account. If, in this case, you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing.

For website analytics and event tracking purposes, we use Google Ads Conversion Tracking to measure your subsequent usage behaviour if you have reached our website via a Google Ads advertisement. Cookies may be used and data may be collected for this purpose (IP address, time of visit, device and browser information, and information about your use of our website based on events we specify, such as visiting a web page or subscribing to a newsletter), from which usage profiles are created using pseudonyms.

If you do not give us your consent pursuant to Art. 6(1), first sentence, point (a) GDPR to the use of Google Ads, no cookies are stored on or read from your device. The data processing described in the preceding paragraphs does not take place. To close gaps in web analytics through behavioural and conversion modelling, pings containing data (user agent, information about your consent behaviour, screen resolution, IP address, page URL, information about ad clicks in URL parameters) are sent to Google. Your IP address is used to derive the country associated with the IP address.

Google Maps

To display geographical information visually, Google Maps collects data about your use of the Maps functions, in particular your IP address and location data, transmits it to Google, and Google subsequently processes it. We have no influence over this subsequent data processing.

Google reCAPTCHA

To protect our web forms against misuse and against spam generated by automated software (so-called bots), Google reCAPTCHA collects data (IP address, time of visit, browser information and information about your use of our website) and analyses your use of our website using JavaScript and cookies. Other cookies stored in your browser by Google services are also evaluated. Data processing is based on a data processing agreement with Google. A customer's users who access websites protected by reCAPTCHA are no longer subject to Google's Privacy Policy and Terms of Service.

Google Fonts

To ensure a consistent presentation of the content on our website, the script code "Google Fonts" collects data (IP address, time of visit, device and browser information), transmits it to Google, and Google subsequently processes it. We have no influence over this subsequent data processing.

Google Tag Manager

Google Tag Manager allows us to manage various codes and services on our website. When implementing individual tags, Google may also process personal data (e.g. IP address and online identifiers, including cookies). Data processing is based on a data processing agreement with Google.

Google Tag Manager enables the integration of various services/technologies.
If you do not wish individual tracking services to be used and have therefore disabled them, they remain disabled for all affected tracking tags integrated through Google Tag Manager.

YouTube Video Plugin

To integrate third-party content, the YouTube Video Plugin, in the privacy-enhanced mode we use, collects data (IP address, time of visit, device and browser information), transmits it to Google, and Google subsequently processes it only when you play a video.

7.3 Use of Microsoft services

We use the technologies described below from Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland ("Microsoft"). Data processing is based on an agreement between joint controllers pursuant to Art. 26 GDPR. The information automatically collected by Microsoft technologies about your use of our website is generally transferred to and stored on a server of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Further information about data processing by Microsoft can be found in Microsoft's privacy notice.

Our service providers are based and/or use servers in countries outside the EU and the EEA for which the European Commission has determined, by decision, that an adequate level of data protection exists.

Our service providers are based and/or use servers in countries outside the EU and the EEA. The European Commission has not issued an adequacy decision for these countries. Our cooperation with them is based on the European Commission's standard contractual clauses.

Microsoft Advertising

For advertising in Bing, Yahoo and MSN search results and on third-party websites, a so-called Microsoft Advertising Remarketing cookie is set when you visit our website. By automatically collecting and processing data (IP address, time of visit, device and browser information, and information about your use of our website), using a pseudonymous cookie ID and taking account of the pages you have visited, this cookie enables interest-based advertising.

For website analytics and event tracking purposes, we use Microsoft Advertising Universal Event Tracking (UET) to measure your subsequent usage behaviour if you have reached our website via a Microsoft Advertising advertisement. Cookies may be used and data may be collected for this purpose (IP address, time of visit, device and browser information, and information about your use of our website based on events we specify, such as visiting a web page or subscribing to a newsletter), from which usage profiles are created using pseudonyms. If your internet-enabled devices are linked to your Microsoft account and you have not disabled the "interest-based advertising" setting in your Microsoft account, Microsoft can create reports about usage behaviour (in particular, user numbers across devices), even when you change devices, through so-called "cross-device tracking". We do not process personal data in this respect; we only receive statistics created on the basis of Microsoft UET.

7.4 Bing Maps

To display geographical information visually, Bing Maps collects data about your use of the Maps functions, in particular your IP address and location data, transmits it to Microsoft, and Microsoft processes it. We have no influence over this data processing.

7.5 Use of Meta services

Use of Meta Pixel

We use Meta Pixel as part of the technologies described below from Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Facebook (by Meta)" or "Meta Platforms Ireland"). Meta Pixel automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website based on events we specify, such as visiting a web page or subscribing to a newsletter), from which usage profiles are created using pseudonyms. As part of so-called advanced matching, information that can identify individuals (e.g. names, email addresses and telephone numbers) is also collected and stored in hashed form for matching purposes. For this purpose, Meta Pixel automatically sets a cookie when you visit our website, which automatically enables your browser to be recognised when you visit other websites by means of a pseudonymous cookie ID. Meta Platforms Ireland will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website use, in particular personalised and group-based advertising.
The information automatically collected by Meta Platforms Ireland's technologies about your use of our website is generally transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Further information about data processing by Meta Platforms Ireland can be found in Meta Platforms Ireland's privacy notice.

Our service providers are based and/or use servers in the following countries for which the European Commission has determined, by decision, that an adequate level of data protection exists: Brazil, USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA serves as the basis for transfers to that third country insofar as the respective service provider is certified. Certification is in place.

Our service providers are based and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Mexico. The European Commission has not issued an adequacy decision for these countries. Our cooperation with them is based on these safeguards: the European Commission's standard contractual clauses.

Meta Ads Manager

We use Meta Ads Manager to advertise this website on Facebook (by Meta) and on other platforms. We determine the parameters of each advertising campaign. Meta Platforms Ireland is responsible for the specific implementation, particularly the decision on placing advertisements with individual users. Unless otherwise stated for the individual technologies, data processing is based on an agreement between joint controllers pursuant to Art. 26 GDPR. Joint controllership is limited to the collection of data and its transmission to Meta Platforms Ireland. It does not cover subsequent data processing by Meta Platforms Ireland.

Based on the statistics about visitor activity on our website created using Meta Pixel, we use Custom Audiences to carry out group-based advertising on Facebook (by Meta) by defining the characteristics of the respective target audience. In the context of advanced matching carried out to determine the respective target audience (see above), Meta Platforms Ireland acts as our processor.

Based on the pseudonymous cookie ID set by Meta Pixel and the data collected about your usage behaviour on our website, we use Custom Audiences to carry out personalised advertising.

Using Conversions (via Meta Pixel or Conversations API), we measure your subsequent usage behaviour for web analytics and event tracking purposes if you have reached our website via an advertisement from Meta Ads Manager. Data processing is based on a data processing agreement with Meta Platforms Ireland.

7.6 Other providers of web analytics and online marketing services

Use of the Vimeo Video Plugin to integrate third-party content

To integrate third-party content, the video plugin from Vimeo Inc., 330 West 34th Street, 5th Floor, New York 10011, USA ("Vimeo") collects data (IP address, time of visit, device and browser information), transmits it to Vimeo, and Vimeo subsequently processes it. Data processing is based on an agreement between joint controllers pursuant to Art. 26 GDPR. Google Analytics is automatically integrated into the Vimeo Video Plugin. For website analytics purposes, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Google Analytics is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google about your use of our website is generally transferred to and stored on a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. If you visit our website from the EU, your IP address is stored on a server located in the EU to derive location data and is then deleted immediately before the traffic is forwarded for processing on other Google servers. We have no influence over or access to data processing by Vimeo, including the settings and results of Google Analytics.

Our service providers are based and/or use servers in countries outside the EU and the EEA for which the European Commission has determined, by decision, that an adequate level of data protection exists.

Our service providers are based and/or use servers in countries outside the EU and the EEA. The European Commission has not issued an adequacy decision for these countries. Our cooperation with them is based on the European Commission's standard contractual clauses.

If you have given your consent pursuant to Art. 6(1), first sentence, point (a) GDPR, Trusted Shops widgets are integrated into this website to display Trusted Shops services (e.g. the trustmark and collected reviews) and to offer Trusted Shops products for buyers after an order.

The Trustbadge and the services advertised through it are provided by Trusted Shops SE, Subbelrather Str. 15C, 50823 Köln ("Trusted Shops"), with whom we are joint controllers under data protection law pursuant to Art. 26 GDPR. In the following sections of this Privacy Policy, we inform you of the essential contents of the agreement pursuant to Art. 26(2) GDPR.

When you interact with the Trustbadge AI+, session cookies are set to store your login status and display the so-called welcome layer, which shows the details of the respective online shop (company information, reviews and information about the existence of Buyer Protection) as well as the #trstd secret. A cookie is set to recognise logged-in users and is stored for a maximum of 400 days after login. Session cookies are also set to send push notifications when the app is used, provided the user has allowed them. This is necessary for Trusted Shops to provide the digital service you have requested. Trusted Shops is responsible for data processing when you interact with the Trustbadge AI+.

Within the framework of the joint controllership between us and Trusted Shops SE, please preferably contact Trusted Shops with any data protection questions and to exercise your rights, using the contact details provided in the privacy information . Regardless of this, you may always contact the controller of your choice. If necessary, your enquiry will then be forwarded to the other controller for a response.

8.1 Data processing when integrating the Trustbadge/other widgets

The Trustbadge is provided by a US-based CDN provider (Content Delivery Network). An adequate level of data protection is ensured in each case by an adequacy decision of the European Commission, which can be accessed for the USA here . Service providers used in the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. Where service providers used are not certified under the DPF, standard contractual clauses have been concluded as an appropriate safeguard.

When the Trustbadge is accessed, the web server automatically stores a so-called server log file, which also contains your IP address, the date and time of access, the volume of data transferred and the requesting provider (access data), and documents the access. The IP address is anonymised immediately after collection, so that the stored data cannot be linked to you. The anonymised data is used in particular for statistical purposes and error analysis.

8.2 Data processing after completion of an order

If you have given your consent, the Trustbadge accesses order information stored on your terminal device (order total, order number and, where applicable, the product purchased), as well as your email address, after completion of the order, and your email address is hashed using a cryptographic one-way function. The hash value is then transmitted to Trusted Shops together with the order information pursuant to Art. 6(1), first sentence, point (a) GDPR.
This is used to check whether you are already registered for Trusted Shops services. If so, further processing takes place in accordance with the contractual agreement between you and Trusted Shops. You can find this for Germany here; for Austria here and for Switzerland here. If you are not yet registered for the services or do not give your consent to automatic recognition via the Trustbadge, you will subsequently be given the option of registering manually to use the services or of completing protection under any existing user agreement.

For this purpose, after you complete your order, the Trustbadge accesses the following information stored on the terminal device you use: order total, order number and email address. This is necessary for us to offer you Buyer Protection. Data is only transmitted to Trusted Shops if you actively choose to take out Buyer Protection by clicking the appropriately labelled button in the so-called Trustcard. If you decide to use the services, further processing is governed by the contractual agreement with Trusted Shops pursuant to Art. 6(1)(b) GDPR in order to complete your registration for Buyer Protection, protect the order and, where applicable, subsequently send you review invitations by email.

Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6(1)(f) GDPR for the purpose of ensuring smooth operation. Processing may take place in third countries (USA, United Kingdom and Israel). An adequate level of data protection is ensured in each case by an adequacy decision of the European Commission, which can be accessed for the USA here, for the United Kingdom here and for Israel here . Service providers used in the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. Where service providers used are not certified under the DPF, standard contractual clauses have been concluded as an appropriate safeguard.

9.1 Social buttons from Facebook (by Meta), X (formerly Twitter), Instagram (by Meta), Pinterest, Xing, Whatsapp

Social buttons from social networks are used on our website. They are integrated into the page only as HTML links, so no connection to the respective provider's servers is established when you access our website. If you click one of the buttons, the respective social network's website opens in a new browser window. There, you can, for example, use the Like or Share button.

9.2 Our online presence on Facebook (by Meta), X (formerly Twitter), Instagram (by Meta), Youtube, Pinterest, LinkedIn, Xing

If you have given your consent to the respective social media operator pursuant to Art. 6(1), first sentence, point (a) GDPR, your data is automatically collected and stored for market research and advertising purposes when you visit our online presences on the social media platforms mentioned above, and usage profiles are created from it using pseudonyms. These may be used, for example, to display advertisements within and outside the platforms that are likely to match your interests. Cookies are generally used for this purpose. For detailed information about the processing and use of data by the respective social media operator, as well as contact details, your rights in this respect and settings options to protect your privacy, please refer to the providers' privacy notices linked below. If you still need assistance in this regard, you can contact us.

Facebook (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Facebook (by Meta) is generally transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing when visiting a Facebook (by Meta) fan page is based on an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (information about Insights data) can be found here.

Our service providers are based and/or use servers in the following countries for which the European Commission has determined, by decision, that an adequate level of data protection exists: Brazil, USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA serves as the basis for transfers to that third country insofar as the respective service provider is certified. Certification is in place.

Our service providers are based and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Mexico.
The European Commission has not issued an adequacy decision for these countries. Our cooperation with them is based on these safeguards: the European Commission's standard contractual clauses.

X is a service provided by X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland ("X"). The information automatically collected by X about your use of our online presence on X is generally transferred to and stored on a server of X Corp., FM 1209, Building 2, Bastrop, TX 78602, USA.

Our service providers are based and/or use servers in countries outside the EU and the EEA for which the European Commission has determined, by decision, that an adequate level of data protection exists.

Our service providers are based and/or use servers in countries outside the EU and the EEA. The European Commission has not issued an adequacy decision for these countries. Our cooperation with them is based on the European Commission's standard contractual clauses.

Instagram (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is generally transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Data processing when visiting an Instagram (by Meta) fan page is based on an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (information about Insights data) can be found here.

Our service providers are based and/or use servers in the following countries for which the European Commission has determined, by decision, that an adequate level of data protection exists: Brazil, USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA serves as the basis for transfers to that third country insofar as the respective service provider is certified. Certification is in place.

Our service providers are based and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Mexico.
The European Commission has not issued an adequacy decision for these countries. Our cooperation with them is based on these safeguards: the European Commission's standard contractual clauses.

YouTube is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google about your use of our online presence on YouTube is generally transferred to and stored on a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Our service providers are based and/or use servers in countries outside the EU and the EEA for which the European Commission has determined, by decision, that an adequate level of data protection exists.

Our service providers are based and/or use servers in countries outside the EU and the EEA. The European Commission has not issued an adequacy decision for these countries. Our cooperation with them is based on the European Commission's standard contractual clauses.

Pinterest is a service provided by Pinterest Europe Ltd., Waterloo Exchange, 3rd Floor, Waterloo Road, Dublin 4, Ireland ("Pinterest"). The information automatically collected by Pinterest about your use of our online presence on Pinterest is generally transferred to and stored on a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA.

Our service providers are based and/or use servers in countries outside the EU and the EEA for which the European Commission has determined, by decision, that an adequate level of data protection exists.

Our service providers are based and/or use servers in countries outside the EU and the EEA. The European Commission has not issued an adequacy decision for these countries. Our cooperation with them is based on the European Commission's standard contractual clauses.

LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). The information automatically collected by LinkedIn about your use of our online presence on LinkedIn is generally transferred to and stored on a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

Our service providers are based and/or use servers in the following countries for which the European Commission has determined, by decision, that an adequate level of data protection exists: USA.

The adequacy decision for the USA serves as the basis for transfers to that third country insofar as the respective service provider is certified. Certification is in place.

Xing is a service provided by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

Our service providers are based and/or use servers in countries outside the EU and the EEA for which the European Commission has determined, by decision, that an adequate level of data protection exists.

Our service providers are based and/or use servers in countries outside the EU and the EEA. The European Commission has not issued an adequacy decision for these countries. Our cooperation with them is based on the European Commission's standard contractual clauses.

10.1 Your rights

As a data subject, you have the following rights:

• pursuant to Art. 15 GDPR, the right to request access to your personal data processed by us to the extent specified therein;
• pursuant to Art. 16 GDPR, the right to request the rectification of inaccurate personal data or the completion of your personal data stored by us without undue delay;
• pursuant to Art. 17 GDPR, the right to request the erasure of your personal data stored by us unless further processing is necessary
  • to exercise the right to freedom of expression and information;
  • to comply with a legal obligation;
  • for reasons of public interest; or
  • for the establishment, exercise or defence of legal claims;
• pursuant to Art. 18 GDPR, the right to request restriction of the processing of your personal data where
  • you contest the accuracy of the data;
  • the processing is unlawful, but you oppose its erasure;
  • we no longer need the data, but you require it for the establishment, exercise or defence of legal claims; or
  • you have objected to processing pursuant to Art. 21 GDPR;
• pursuant to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
• pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your habitual residence, your place of work or our company's registered office.

10.2 Contact options

If you have any questions about the collection, processing or use of your personal data, or wish to request access to, rectification, restriction or erasure of data, withdraw consent you have given or object to a particular use of your data, please contact us directly using the contact details in our legal notice.