Data protection declaration
Unless stated otherwise below, the provision of your personal data is neither legally nor contractually obligatory, nor required for conclusion of a contract. You are not obliged to provide your data. Not providing it will have no consequences. This only applies as long as the processing procedures below do not state otherwise.
“Personal data” is any information relating to an identified or identifiable natural person.
Server log files
You can use our websites without submitting personal data. Every time you access our website, user data is transmitted by your internet browser and stored in protocol files (server log files). This stored data includes e.g. name of the site called up, date and time of the request, amount of data transferred and the provider making the request. This data serves exclusively to ensure smooth operation of our website and to improve our offering. It is not possible to assign this data to a particular person.
When you open a customer account, we will collect your personal data in the scope given there. The data processing is for the purpose of improving your shopping experience and simplifying order processing. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your customer account will then be deleted.
Collection, processing, and use of personal data in orders
When you submit an order, we only collect and use your personal data where this is necessary for the fulfilment and handling of your requests. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of art. 6 (1) lit. b GDPR and is required for the fulfilment of a contract with you. We will not forward your data to third parties without your explicit consent. This only excludes our service partners which we require in order to handle the contractual relationship or service providers we use to process an order. Along with the recipients named in the clauses of this data protection declaration, these may be recipients in the following categories: Shipping providers, payment service providers, merchandise management service providers, service providers for order processing, web hosts, IT service providers and dropshipping dealers. We will comply strictly with legal requirements in every case. The scope of data transmission is restricted to a minimum.
Use of your email address for mailing of direct marketing
We use your email address, which we obtained in the course of selling a good or service, for the electronic transmission of marketing for our own goods or services which are similar to those you have already purchased from us, unless you have objected to this use. You must provide your email address in order to conclude a contract. Failure to provide it will prevent the conclusion of any contract. The processing will be carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in direct marketing. You can object to this use of your email address at any time by contacting us. You will find the contact details for exercising your right to object in our imprint. You can also use the link provided in the marketing email. This will not involve any costs other than transmission costs at basic tariffs.
With the following information we would like to advise you of the contents of our newsletter and of the evaluation processes relating to registration, shipping and statistics and also of your right of objection. By signing up to our newsletter you agree to receiving it and to the processes described.
Contents of the newsletter: We only forward newsletters, e-mails and other such electronic communications containing advertising material (referred to collectively as the newsletter) if the recipient has explicitly expressed his/her approval or legally binding permission. If during the sign-up process for the newsletter its contents are precisely described such contents shall be applicable to the users’ permission. Furthermore our newsletters contain information on our services and ourselves.
Double opt-in and logging: Signing up for our newsletter entails a so-called double opt-in process which means you will receive an e-mail after registration requesting you to confirm you have signed up. This confirmation is necessary to ensure nobody can register with an alien e-mail address. Newsletter registrations are protocolled in order to substantiate the sign-up process in accordance with statutory requirements. This involves storing the sign-up and confirmation times as well as the IP address. Furthermore, changes to the data stored by your communications service provider will also be protocolled.
Registration Data: It is sufficient if you quote your e-mail address when signing up for the newsletter
Communication of the newsletter and the success evaluation involved are governed on the basis of the recipient’s permission pursuant to Article 6, section 1 lit.a. Article 7 of the German Data Protection Act, in connection with § 7, section 2, number 3 of the German Act against Unfair Competition and/or on the basis of statutory permission in accordance with § 7, section 3 of the German Act against Unfair Competition.
Protocolling the registration process is based upon our justified interests as per Article 6, section 1 lit. f of the German Data Protection Act. Our interest complies with the implementation of a user-friendly and secure newsletter system that serves both our commercial interests and the expectations of the users while at the same time providing us with proof that permission has been granted.
Cancellation/Revocation – You can cancel receipt of the newsletter at any time, i.e. rescind your permission. You will find a link for cancelling the newsletter at the end of each newsletter. We can store rescinded e-mail addresses for a period of up to three years on the basis of justified interests before deleting them to enable us to prove that permission had once been granted. Processing such data shall be limited to the purpose of possibly defending ourselves against claims. An individual application for data deletion may be lodged at any time provided it confirms that permission had been granted in the past
Newsletter – Mailchimp
The newsletter is distributed by a marketing automation platform called MailChimp run by the Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view this distributor’s data protection terms here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee that European data protection standards are met (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). We utilize this communications service provider on the basis of our justified interests pursuant to Article 6, section 1 lit. f of the German Data Protection Act and on an order processing contract concluded pursuant to Article 28, section 1 lit. f of the German Data Protection Act.
The communications service provider may use the recipient’s data under a pseudonym, i.e. without correlation to a user, in order to optimise or improve its own services, for example by using the data for technical improvements to the distribution system or to the presentation of the newsletter or for statistical purposes. However, the communications service provider may not utilize the data on our newsletter recipients in order to contact them directly or to pass on the data to third parties.
The newsletters contain a so-called web-beacon, i.e. a pixel size file which is retrieved by our server when the newsletter is opened and/or by that of the communications service provider if we use one. This data retrieval primarily involves technical information such as details on the browser and your system, but also your IP address and the time at which the data is retrieved.
This information is used for technically improving the services by means of the technical data or the target groups and their reading behaviour based on the location (this can be determined with the help of the IP address) or the times they are accessed. The statistical survey also includes ascertaining whether the newsletters have been opened, when they have been opened and which links have been activated. For technical reasons this information can be traced to individual newsletter readers, although it neither our intent nor that of the communications service provider, if one is used, to observe individual users. These evaluations are of more use to us in recognizing our users’ reading habits and in adapting our contents to them or communicating various other contents reflecting the interests of our readers.
All PayPal transaction are covered by the PayPal Data Privacy Statement. You can found this at https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=en_GB
Processing is carried out on the basis of § 15 (3) TMG (Telemedia Act) as well as art. 6 (1) lit. f GDPR due to our justified interest in the purposes above.
Using the links below, you can find out how to manage cookies (or deactivate them, among other things) in major browsers:
Chrome Browser: https://support.google.com/accounts/answer/61416?hl=en
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Duration of storage
After contractual processing has been completed, the data is initially stored for the duration of the warranty period, then in accordance with the retention periods prescribed by law, especially tax and commercial law, and then deleted after the period has elapsed, unless you have agreed to further processing and use.
Rights of the affected person
If the legal requirements are fulfilled, you have the following rights according to art. 15 to 20 GDPR: Right to information, correction, deletion, restriction of processing, data portability. You also have a right of objection against processing based on art. 6 (1) GDPR, and to processing for the purposes of direct marketing, according to art. 21 (1) GDPR.
Contact us at any time. Our contact details can be found in our imprint.
Right to complain to the regulatory authority
You have the right to complain to the regulatory authority according to art. 77 GDPR if you believe that your data is not being processed legally.
last update: 25.04.2018