Privacy policy

1) Information on the collection of personal data and contact details of the responsible person

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data in this context is all data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Sotra Fashion, grossbeerenstr. 13, 10963 Berlin, Germany, e-mail: info@sotrafashion.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or requests to the controller). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.n.

2) Data collection when visiting our Website

During the mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website

• Date and time at the time of access

• Amount of data sent in bytes

• Source/reference from which you reached the page

• Browser used

• Operating system used

• IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

3) Hosting & Content-Delivery-Network

Hosting by Shopify
We use the store system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online store on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of Shopify's aforementioned services, data may also be transferred to Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc, Shopify Payments (USA) Inc or Shopify (USA) Inc as part of further processing on our behalf. In the event that data is transferred to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by adequacy decision of the European Commission. For further information on Shopify's data protection, please visit the following website: https://www.shopify.de/legal/datenschutz.
Further processing on servers other than the aforementioned of Shopify takes place only within the framework communicated below.

4) Cookies

In order to make visiting our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. In some cases, these cookies are automatically deleted again after closing the browser (so-called "session cookies"), in other cases, these cookies remain on your end device for longer and allow page settings to be saved (so-called "persistent cookies"). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b DSGVO either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a DSGVO in the case of consent given, or in accordance with Art. 6 para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

5.1 - Shopify Chat
For customer support purposes, this website uses the Shopify Chat live chat system, a service provided by Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada ("Shopify"). In order to respond to live support requests, Shopify collects and stores anonymized user data. From this anonymized data, usage profiles can be created under a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the site visitor's Internet browser. The cookies enable the recognition of the Internet browser. If the information collected in this way has a personal reference, the processing is carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in effective customer service and the statistical analysis of user behavior for optimization purposes.
The data collected using Shopify technologies will not be used to personally identify the visitor to this website without the separately granted consent of the data subject and will not be merged with personal data about the bearer of the pseudonym. In order to avoid the storage of Shopify cookies, you can set your Internet browser so that no cookies can be stored on your computer in the future or so that cookies that have already been stored are deleted. However, switching off all cookies may mean that some functions on our Internet pages can no longer be executed. You can object to the collection and storage of data for the purpose of creating a pseudonymized user profile at any time with future effect by sending us your objection informally by e-mail to the e-mail address given in the imprint.
In the case of data transfers to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by adequacy decision of the European Commission.

5.2 Own rating reminder (no dispatch by a customer rating system).
We use your email address for a one-time reminder to submit a rating of your order for the rating system we use, provided that you have given us your express consent to do so during or after your order in accordance with Art. 6 (1) lit. a DSGVO.
You can revoke your consent at any time by sending a message to the data controller.

5.3 In the context of contacting us (e.g. via contact form or e-mail), personal data is processed - exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f DSGVO. If your contact aims at a contract, additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

5.4 WhatsApp Business

We offer visitors to our website the opportunity to contact us via the messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "business version" of WhatsApp.

If you contact us via WhatsApp on the occasion of a specific transaction (for example, an order placed), we store and use the mobile phone number you use on WhatsApp and - if provided - your first and last name pursuant to Art. 6 para. 1 lit. b. DSGVO to process and respond to your request. On the basis of the same legal basis, we may ask you to provide further data (order number, customer number, address or email address) via WhatsApp in order to be able to assign your request to a specific process.

If you use our WhatsApp contact for general inquiries (such as about the range of services, availability or our website), we store and use the mobile phone number you use on WhatsApp and - if provided - your first and last name in accordance with Art. 6 (1) lit. f DSGVO based on our legitimate interest in the efficient and timely provision of the requested information.

Your data will only ever be used to respond to your request via WhatsApp. It will not be passed on to third parties.

Please note that WhatsApp Business receives access to the address book of the mobile device we use for this purpose and automatically transfers phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp business account, we use a mobile device in whose address book only the WhatsApp contact data of those users who have also contacted us via WhatsApp are stored.

This ensures that each person whose WhatsApp contact data is stored in our address book has already consented to the transmission of his WhatsApp telephone number from the address books of his chat contacts in accordance with Art. 6 (1) lit. a DSGVO when using the app on his device for the first time by accepting the WhatsApp terms of use. A transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded in this respect.

For the purpose and scope of the data collection and the further processing and use of the data by WhatsApp, as well as your rights in this regard and setting options for protecting your privacy, please refer to the privacy notices of WhatsApp: https://www.whatsapp.com/legal/?eea=1#privacy-policy

6) Data processing when opening a customer account

Pursuant to Art. 6 para. 1 lit. b DSGVO, personal data will continue to be collected and processed to the extent necessary in each case if you provide us with this data when opening a customer account. Which data is required for opening an account can be found in the input mask of the corresponding form on our website. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the responsible person. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been fully processed, no legal retention periods are opposed and no legitimate interest on our part in the continued storage exists.

7) Comment function

In the context of the comment function on this website, in addition to your comment, information on the time of the creation of the comment and the commentator name selected by you will be stored and published on this website. Furthermore, your IP address will be stored for security reasons, in order to enable an assignment to the author in case of illegal comments. Your e-mail address will be stored for contacting you in case a third party should object to your published content as illegal.

8) Use of customer data for direct marketing

8.1 Registration for our e-mail newsletter

If you register for our e-mail newsletter, we will regularly send you information about our offers. Mandatory information for sending the newsletter is only your e-mail address. The provision of further data is voluntary and will be used to address you personally. For sending the newsletter we use the so-called double opt-in procedure, which ensures that you will only receive newsletters if you have expressly confirmed your consent to receive the newsletter by activating a verification link sent to the specified e-mail address.

By activating the verification link, you give us your consent to use your personal data in accordance with Art. 6 Para. 1 lit. a DSGVO. In doing so, we store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data we collect when you register for the newsletter is used strictly for the intended purpose. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the person responsible mentioned at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

8.2 Goods availability notification by e-mail

For temporarily unavailable items, you can sign up to receive email goods availability notifications. In this case, we will send you a one-time e-mail message about the availability of the item you have selected. Mandatory information for sending this notification is only your e-mail address. The provision of further data is voluntary and may be used to address you personally. For the mail dispatch we use the so-called double opt-in procedure, which ensures that you will only receive a notification if you have expressly confirmed your consent to this by activating a verification link sent to the specified mail address.

By activating the verification link, you give us your consent for the use of your personal data in accordance with Art. 6 Para. 1 lit. a DSGVO. In doing so, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data we collect when you register for our goods availability e-mail notification service is used strictly for the intended purpose. You can unsubscribe from the availability notifications at any time by sending a message to the responsible person mentioned at the beginning. After unsubscribing, your e-mail address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

9) Data processing for order fulfillment

9.1 - Transmission of image files for order processing via upload function
On our website, we offer customers the option to order the personalization of products by submitting image files via an upload function. In doing so, the submitted image motif is used as a template for the personalization of the selected product.
Using the upload form on the website, the customer can transmit one or more image files from the memory of the end device used directly to us via automated, encrypted data transmission. We then record, store and use the transmitted files exclusively for the production of the personalized product as defined in the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed about this in the following paragraphs. Any further transfer will not take place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all of the processing operations just mentioned will be carried out exclusively for the purpose of processing your online order in accordance with Art. 6 Para. 1 lit. b DSGVO. After final processing of the order, the transmitted image files are automatically and completely deleted.
- Transmission of image files for order processing by e-mail
On our website, we offer customers the option to order the personalization of products by sending image files by e-mail. In doing so, the submitted image motif is used as a template for the personalization of the selected product.
Using the e-mail address provided on the website, the customer can transmit one or more image files to us from the memory of the terminal device used. We then collect, store and use the files transmitted in this way exclusively for the production of the personalized product as defined in the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed about this in the following paragraphs. Any further transfer will not take place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all of the processing operations just mentioned will be carried out exclusively for the purpose of processing your online order in accordance with Art. 6 Para. 1 lit. b DSGVO. After final processing of the order, the transmitted image files will be automatically and completely deleted.

9.2 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b DSGVO.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data (name, address, e-mail address) provided by you when placing the order in order to inform you personally about upcoming updates within the legally stipulated period within the framework of our legal information obligations pursuant to Art. 6 (1) lit. c DSGVO by suitable means of communication (e.g. by post or e-mail). Your contact data will be used strictly for the purpose of informing you about updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.

In order to process your order, we also work together with the service provider(s) listed below, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

9.3 Transfer of personal data to shipping service providers

- German Post
If the goods are delivered by Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany), we will pass on your e-mail address to Deutsche Post in accordance with Art. 6 (1) a DSGVO prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent to this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to Deutsche Post for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b DSGVO. The disclosure is made only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with Deutsche Post or delivery notification is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis Deutsche Post.
- DHL
If the delivery of the goods is carried out by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany), we will pass on your e-mail address to DHL in accordance with Art. 6 Para. 1 lit. a DSGVO before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent for this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b DSGVO. The disclosure is made only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the transport service provider DHL.
- DHL Express
If the delivery of the goods is carried out by the transport service provider DHL Express (DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany), we will pass on your e-mail address to DHL Express in accordance with Art. 6 Para. 1 lit. a DSGVO before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent for this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL Express for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b DSGVO. The disclosure is made only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with DHL Express or delivery notification is not possible. The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the transport service provider DHL Express.

9.4 Use of payment service providers (payment services)

- Amazon Pay
If you select the payment method "Amazon Pay", the payment will be processed via the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: "Amazon Payments"), to which we will pass on the information you provided during the ordering process, together with information about your order, in accordance with Art. 6 (1) lit. b DSGVO. The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only insofar as it is necessary for this purpose. If cookies, i.e. small text files that are stored on the end device, are set when using Amazon Pay, this is done exclusively on the basis of your express consent pursuant to Art. 6 (1) lit. a DSGVO. This consent can be revoked at any time via the "Cookie Consent Tool" implemented on the website. You can obtain further information about the data protection provisions of Amazon Payments at the following Internet address: https://pay.amazon.de/help/82974
- Apple Pay
If you opt for the "Apple Pay" payment method of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing is carried out via the "Apple Pay" function of your end device operated with iOS, watchOS or macOS by charging a payment card deposited with "Apple Pay". Apple Pay uses security functions integrated into the hardware and software of your device to protect your transactions. For the release of a payment, the entry of a code previously defined by you as well as the verification by means of the "Face ID" or "Touch ID" function of your end device is therefore required.
For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, is passed on to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to carry out the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the source website to confirm the success of the payment.
If personal data is processed during the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) lit. b DSGVO.
Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was completed successfully. The anonymization completely eliminates any reference to individuals. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.
When you use Apple Pay on iPhone or Apple Watch to complete a purchase made through Safari on Mac, the Mac and the authorization device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay," and uncheck "Allow payments on Mac."
For more information about Apple Pay privacy, please visit the following web address: https://support.apple.com/de-de/HT203027

- Google Pay
If you choose the payment method "Google Pay" of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment processing will be carried out via the "Google Pay" application of your mobile device running at least Android 4.4 ("KitKat") and having an NFC function by charging a payment card deposited with Google Pay or a payment system verified there (e.g. PayPal). For the release of a payment via Google Pay in the amount of more than €25, the prior unlocking of your mobile end device by the respective verification measure set up (such as facial recognition, password, fingerprint or pattern) is required.
For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, will be passed on to Google. Google then transmits your payment information stored in Google Pay in the form of a uniquely assigned transaction number to the source website, with which a completed payment is verified. This transaction number does not contain any information about the real payment data of your payment means deposited in Google Pay, but is created and transmitted as a one-time valid numeric token. For all transactions via Google Pay, Google only acts as an intermediary to process the payment transaction. The transaction is carried out exclusively in the relationship between the user and the source website by debiting the means of payment deposited with Google Pay.
Insofar as personal data is processed during the described transfers, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) lit. b DSGVO.
Google reserves the right to collect, store and evaluate certain transaction-specific information for each transaction made via Google Pay. This includes the date, time and amount of the transaction, merchant location and description, a description of the purchased goods or services provided by the merchant, photos that you have attached to the transaction, the name and email address of the seller and buyer or the sender and recipient, the payment method used, your description for the reason for the transaction and, if applicable, the offer associated with the transaction.
According to Google, this processing is carried out exclusively in accordance with Art. 6 para.1 lit. f DSGVO on the basis of the legitimate interest in proper billing, verification of transaction data and optimization and functional maintenance of the Google Pay service.
Google also reserves the right to merge the processed transaction data with further information collected and stored by Google when using other Google services.
The terms of use of Google Pay can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information on data protection at Google Pay can be found at the following Internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- giropay
When paying via "giropay", the payment processing is carried out via giropay GmbH, An der Welle 4, 60322 Frankfurt/Main, to which we pass on the information you provided during the ordering process together with the information about your order. In accordance with Art. 6 Para. 1 lit. b DSGVO, your data will be passed on exclusively for the purpose of payment processing and only to the extent necessary for this purpose. You can obtain further information about the data protection provisions of giropay GmbH at the following Internet address: https://www.giropay.de/rechtliches/datenschutzerklaerung
- Klarna
If you choose a Klarna payment service, the payment will be processed by Klarna Bank AB (publ), https://www.klarna.com/de/, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). In order to enable the processing of the payment, your personal data (first and last name, street, house number, zip code, city, gender, email address, phone number and IP address, if necessary additionally the date of birth and your bank details) as well as data related to the order (e.g. invoice amount, article, delivery type) will be passed on to Klarna for the purpose of identity and credit checks, provided that you have expressly consented to this in accordance with Art. 6 para. 1 lit. a DSGVO during the ordering process. You can see which credit agencies your data may be forwarded to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Klarna uses the information obtained about the statistical probability of non-payment for a weighed decision on the establishment, implementation or termination of the contractual relationship.
You may withdraw your consent at any time by sending a message to the data controller or to Klarna. However, Klarna remains entitled to process your personal data, if applicable, insofar as this is necessary for the processing of payments in accordance with the contract.
Your personal data will be processed in accordance with the applicable data protection regulations and as specified in Klarna's Privacy Policy for Data Subjects located in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for data subjects based in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
will be treated.
- Masterpayment
When selecting the payment methods "Direct debit" and/or "Delivery on account" and/or "Installment purchase" via Masterpayment, you will be asked to provide your personal data (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number and, in the case of direct debit, the specified account details) during the order process. In order to safeguard our legitimate interest in determining the solvency of our customers, this data is forwarded by us to Masterpayment LTD, 483 Green Lanes, London, N13 4BS, United Kingdom ("Masterpayment") in accordance with Art. 6 (1) f DSGVO for the purpose of a credit check. Masterpayment checks whether the payment option selected by you can be granted with regard to payment and/or bad debt risks on the basis of the personal data provided by you and other data (such as shopping cart, invoice amount, order history, payment experience). For the decision within the scope of the application check, identity and creditworthiness information from the following credit agencies may be included in addition to Masterpayment-internal criteria pursuant to Art. 6 (1) lit. f DSGVO:
- CCreditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss, Tel.: +49 (0)2131-109-501, Fax: -557.
- CRIF GmbH, Friesenweg 4, House 12, 22763 Hamburg, Germany, Tel.: +49 (0)40-89803-0, Fax: -419
- SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Tel.: +49 (0)611-9278-0, Fax: -109
The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.
You may object to this processing of your data at any time by sending a message to the data controller or to Masterpayment. However, Masterpayment may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b DSGVO and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including information on the credit agencies used, please refer to PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
- Paypal Checkout
This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal's own payment methods and local payment methods from third-party providers.
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "Pay Later" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b DSGVO and only insofar as this is necessary for the payment processing.
For the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "Pay later" via PayPal - PayPal reserves the right to conduct a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment processing.
If you select the PayPal payment method "purchase on account", your payment data will first be transmitted to PayPal in preparation for the payment, whereupon PayPal will forward it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") in order to process the payment. The legal basis in each case is Art. 6 para. 1 lit. b DSGVO. In this case, RatePay carries out an identity and credit check on its own behalf to determine solvency in accordance with the principle already mentioned above and passes on your payment data to credit agencies on the basis of the legitimate interest in determining solvency in accordance with Art. 6 (1) lit. f DSGVO. A list of the credit agencies that Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/
If you use the payment method of a local third-party provider, your payment data will first be passed on to PayPal in preparation for payment in accordance with Art. 6 (1) lit. b DSGVO. Depending on your selection of an available local payment method, PayPal will then transmit your payment data to the corresponding provider in accordance with Art. 6 (1) lit. b DSGVO in order to execute the payment:
- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany).
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2.
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
For further information on data protection, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered via the payment service provider Shopify Payments, the payment processing is carried out by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on your information provided during the ordering process together with information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 (1) lit. b DSGVO. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only insofar as it is necessary for this purpose. You can find more information on the data protection of Shopify Payments at the following Internet address: https://www.shopify.com/legal/privacy.
You can find data protection information on Stripe Payments Europe Ltd. here: https://stripe.com/de/privacy
- Skrill
If you choose a payment method of the payment service provider Skrill, the payment processing is carried out via the payment service provider Skrill Ltd, Floor 27, 25 Canada Square, London, E14 5LQ, England, to whom we pass on your information provided during the ordering process together with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b DSGVO. The transfer of your data is solely for the purpose of payment processing with the payment service provider Skrill Ltd. and only to the extent necessary for this purpose.
- SOFORT
If you select the payment method "SOFORT", the payment will be processed by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we will pass on your information provided during the ordering process together with the information about your order in accordance with Art. 6 (1) lit. b DSGVO. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will only be passed on for the purpose of payment processing with the payment service provider SOFORT and only insofar as it is necessary for this purpose. You can obtain more information about SOFORT's privacy policy at the following Internet address: https://www.klarna.com/sofort/datenschutz.

10) Online-Marketing

10.1 Facebook Pixel for the Creation of Custom Audiences with Extended Data Matching (with Cookie Consent Tool)
Within our online offer, the so-called "Facebook Pixel" of the social network Facebook is used in the mode of extended data matching, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").
Based on his or her explicit consent, when a user clicks on an advertisement played on Facebook and served by us, an addition is added to the URL of our linked page by Facebook Pixel. Then, after redirection, this URL parameter is inscribed in the user's browser via a cookie that our linked page sets itself. In addition, this cookie collects specific customer data, such as the mail address, which we collect on our website linked to the Facebook ad during transactions such as purchase transactions, account logins or registrations (extended data matching). The cookie is then read by Facebook Pixel and allows the data, including specific customer data, to be forwarded to Facebook.
With the help of the Facebook Pixel with extended data matching, it is possible for Facebook, on the one hand, to precisely determine the visitors to our online offer as a target group for the display of advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook pixel with advanced data matching to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel with advanced data matching, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not have a harassing effect. This allows us to further evaluate the effectiveness of the Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). Compared to the standard variant of Facebook Pixel, the extended data matching feature helps us to better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.
All submitted data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with Facebook's data usage policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to place advertisements on and off Facebook.
These processing operations are carried out exclusively upon the granting of explicit consent pursuant to Art. 6 (1) (a) DSGVO.
The information generated by Facebook is usually transmitted to a Facebook server and stored there; this may also involve transmission to the servers of Meta Platforms Inc. in the USA. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

10.2 - Google AdSense
This website uses Google AdSense, a web advertising service Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. In addition, Google AdSense also uses so-called "web beacons" (small invisible graphics) to collect information, through the use of which simple actions such as visitor traffic on the website can be recorded, collected and analyzed. The information generated by the cookie and / or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. This may also involve transmission to the servers of Google LLC. in the USA.
Google uses the information thus obtained to carry out an evaluation of your usage behavior with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other data from Google. The information collected by Google may be transferred to third parties if this is required by law and/ or if third parties process this data on behalf of Google.
All processing described above, in particular reading out information on the end device used via cookies and/or web beacons, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a DSGVO. Without this consent, Google AdSense will not be used during your visit to the site.
You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/
- Google Ads Conversion-Tracking
This website uses the online advertising program "Google Ads" and within the scope of Google Ads the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the offer of Google Ads to draw attention to our attractive offers with the help of advertising media (so-called Google Adwords) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the aim of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by Google Ads. Cookies are small text files that are stored on your terminal device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across Google Ads customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted in to conversion tracking. The clients learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. In the course of using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
Details on the processing triggered by Google Ads Conversion Tracking and on Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites.
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
Furthermore, you can permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
Please note that certain functions of this website may not be available or may be restricted if you have deactivated the use of cookies.
Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/
- Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and within the scope of Google Ads the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the offer of Google Ads to draw attention to our attractive offers with the help of advertising media (so-called Google Adwords) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the aim of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by Google Ads. Cookies are small text files that are stored on your terminal device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across Google Ads customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted in to conversion tracking. The clients learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
In the course of using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
Details on the processing triggered by Google Ads Conversion Tracking and on Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
Furthermore, you can permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
In order to address users whose data we have received in the context of business or business-like relationships in a more interest-oriented advertising manner, we use a customer matching function in the context of Google Ads. For this purpose, we transmit one or more files with aggregated customer data (primarily mail addresses and telephone numbers) electronically to Google. Google does not gain access to any clear data, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to assign it to existing Google accounts that the data subjects have set up. This enables personalized advertising to be played via all Google services linked to the respective Google account.
The transfer of customer data to Google will only take place if you have given us your express consent to do so in accordance with Art. 6 (1) a DSGVO. You can revoke this consent at any time with effect for the future. Further information on Google's data protection measures in relation to the customer matching function can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182.
Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/
- Google Ads Conversion Tracking without Cookies
This website uses the online advertising program "Google Ads" and, within the scope of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the offer of Google Ads to draw attention to our attractive offers with the help of advertising media (so-called Google Adwords) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.
This website uses Google Ads Conversion Tracking exclusively without the use of cookies, which means that the service does not set cookies on your terminal device at any time.
Instead, the local memory of your browser is used to store an individual ID assigned by Google, which enables an analysis of your use of the website. For this purpose, certain user information is processed via the ID.
The ID is set when a user clicks on an ad placed by Google. If the user visits certain pages of this website, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across Google Ads customers' websites. The information obtained in this way is used to create conversion statistics for Google Ads customers who have opted in to conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. In the course of using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
Details on the processing triggered by Google Ads Conversion Tracking and on Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites.
If the information collected has a personal reference, the processing is carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in the statistical evaluation of the success of our advertising campaigns.
Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/
- Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform from the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").
GMP uses cookies to serve ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. By means of a cookie ID, Google records which ads are served in which browser and can thus prevent them from being displayed more than once. In addition, GMP can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a GMP ad and later, using the same browser, calls up the advertiser's website and makes a purchase via this website. According to Google, GMP cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our knowledge as follows: Through the integration of GMP, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider may obtain and store your IP address. In the context of the use of GMP, there may also be a transmission of personal data to the servers of Google LLC. in the USA.
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
The privacy policy of GMP by Google can be found here: https://www.google.de/policies/privacy/

11) Web analytics services

Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures an anonymization of the IP address by shortening and excludes a direct personal reference. Through the extension, your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC.server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. In this context, the IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.
Google Analytics also enables the creation of statistics with statements about the age, gender and interests of site visitors on the basis of an evaluation of interest-based advertising and with the involvement of third-party information via a special function, the so-called "demographic characteristics". This allows the definition and differentiation of user groups of the website for the purpose of targeting marketing measures. However, data records collected via "demographic characteristics" cannot be assigned to a specific person.
Details on the processing triggered by Google Analytics and Google's handling of website data can be found here: https://policies.google.com/technologies/partner-sites.
All processing described above, in particular the setting of Google Analytics cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a DSGVO. Without this consent, Google Analytics will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded an order processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Google refers to so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

12) Retargeting/ Remarketing/ Referral Advertising

Google Ads Remarketing
Our website uses the functions of Google Ads Remarketing, with this we advertise for this website in Google search results, as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your terminal device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. Additional data processing only takes place if you have consented to Google linking your Internet and app browsing history to your Google account and using information from your Google account to personalize ads that you view on the web. In this case, if they are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to form target groups. The use of Google Ads Remarketing may also involve the transmission of personal data to the servers of Google LLC. in the USA.
Details on the processing triggered by Google Ads Remarketing and on Google's handling of website data can be found here: https://policies.google.com/technologies/partner-sites.
You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the browser plug-in from Google available at the following link:
https://support.google.com/ads/answer/7395996?
Further information and the privacy policy regarding advertising and Google can be found here:
https://www.google.com/policies/technologies/ads/
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

Pinterest retargeting pixel
A pixel (Pinterest tag) of Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest") is integrated on this website. With the help of the pixel, information about the surfing behavior of website visitors can be collected, stored and analyzed in pseudonymized form. The information can be assigned to the person of the user with the help of further information that Pinterest has stored about the user, e.g. due to the ownership of an account on the social network "Pinterest". Pinterest uses an algorithm to analyze the surfing behavior and can then display targeted product recommendations as personalized advertising banners on the user's Pinterest account. Pinterest may also combine the information collected via the pixel with other information that Pinterest has collected via other websites and / or in connection with the use of the social network "Pinterest", and thus create pseudonymized usage profiles. In no case, however, can the information collected be used to personally identify visitors to this website.
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

Pinterest Tag Conversion Tracking
This website uses the conversion tracking technology "Pinterest Tag" of Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest").
If you have reached our website from a pin on Pinterest, we will set a cookie on your computer, which interacts with a likewise implemented "tag" in the form of a JavaScript code from Pinterest. Cookies are small text files that are stored on your terminal device. These cookies lose their validity after 180 days and are not used for personal identification.
If the user is redirected from a pin on Pinterest to pages on this website and the cookie has not yet expired, the tag records certain user actions predefined by us and can track them (e.g. completed transactions, leads, searches on the website, calls to product pages). When such an action is performed, your browser sends an HTTP request from the cookie to the Pinterest server via the Pinterest tag, with which certain information about the action (including type of action, time, browser type of the end device) is transmitted.
Through this transmission, Pinterest can create statistics about the usage behavior on our website after forwarding from a Pinterest Pin, which serve us to optimize our offer.
However, we do not receive any information with which users can be personally identified.
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

TikTok Pixel
This website uses the "TikTok Pixel", a tracking technology of the social network "TikTok" of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok").
With the help of cookies (small text files that are stored on the end device used), information about the surfing behavior on our website is collected in pseudonymized form, transmitted to TikTok, stored there and analyzed to then enable the playout of interest-based and personalized product recommendations on TikTok. The object of the information collected and processed pseudonymously in this way is basically the device ID, the device type, time stamp, the operating system used and the IP address. The information can be assigned to the person of the User with the aid of further information that TikTok has stored about the User, e.g. due to the ownership of an account on the social network "TikTok". TikTok may also combine the information collected through the pixel with other information that TikTok has collected through other websites and / or in connection with the use of the social network "TikTok", and thus create pseudonymous usage profiles. In no case can the information collected be used to personally identify visitors to this website.
The TikTok Pixel further enables us to track the effectiveness of advertisements on TikTok. If the user is redirected from an ad on TikTok to pages on this website and the cookies have not yet expired, the pixel captures and can track certain user actions predefined by us (e.g., completed transactions, leads, searches on the website, views of product pages). When such an action is performed, your browser sends an HTTP request from the cookie to the TikTok server via the TikTok pixel, which transmits certain information about the action. Through this transmission, TikTok can compile statistics about the usage behavior on our website after forwarding from a TikTok ad, which serve us to optimize our offer.
All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. We have entered into an order processing agreement with TikTok for the use of the TikTok Pixel, which obligates TikTok to protect the data of our site visitors and not to disclose it to third parties. TikTok generally transmits collected information outside the European Economic Area and relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

13) Page functionalities

13.1 Facebook Plugins with 2-Click Solution
Our website uses so-called social plugins ("plugins") of the social network Facebook, which is operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
To increase the protection of your data when visiting our website, the plugins are initially deactivated by means of a so-called "2-click" solution integrated into the page. You can recognize deactivated plugins by the fact that they are grayed out. This integration ensures that when you call up a page of our website that contains such plugins, no connection is yet established with the Facebook servers. Only when you activate the plugins and thus give your consent to the data transfer in accordance with Art. 6 (1) lit. a DSGVO, your browser establishes a direct connection to the Facebook servers. The content of the respective plugin is transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Facebook. We have no influence on the scope of the data that Facebook collects with the help of the plugins. According to our knowledge, Facebook in any case receives information about which of our websites you have currently and previously accessed. By integrating the plugins, Facebook also receives the information that your browser has accessed the corresponding page of our website if you do not have a profile on Facebook or are not currently logged in. The information collected (including your IP address) is transmitted from your browser directly to a server of Meta Platforms Inc. in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed there to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data that has already been transferred to Facebook.
For the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, please refer to Facebook's privacy policy: https://www.facebook.com/policy.php

13.2 Facebook plugins with Shariff solution
Our website uses so-called social plugins ("plugins") of the social network Facebook, which is operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
In order to increase the protection of your data when visiting our website, these buttons are not unrestricted plugins, but are only integrated into the page using an HTML link. This type of integration ensures that when you call up a page of our website that contains such buttons, no connection is yet established with Facebook's servers. When you click on the button, a new browser window opens and calls up the Facebook page, where you can interact with the plugins there (possibly after entering your login data).
For the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, please refer to Facebook's privacy policy: https://www.facebook.com/policy.php

13.3 Instagram plugin as shariff solution
Our website uses so-called social plugins ("plugins") of the online service Instagram, which is operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland ("Facebook").
In order to increase the protection of your data when visiting our website, these buttons are not unrestricted plugins, but are only integrated into the page using an HTML link. This type of integration ensures that when you call up a page of our website that contains such buttons, no connection is yet established with the servers of Instagram. When you click on the button, a new browser window opens and calls up the Instagram page, where you can interact with the plugins there (possibly after entering your login data).
For the purpose and scope of the data collection and the further processing and use of the data by Instagram, as well as your rights in this regard and setting options for protecting your privacy, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/

13.4 Use of Youtube videos
This website uses the Youtube embedding function to display and play videos of the provider "Youtube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
The extended data protection mode is used here, which, according to the provider, only triggers the storage of user information when the video(s) is/are played. If the playback of embedded Youtube videos is started, the provider "Youtube" uses cookies to collect information about user behavior. According to information from "Youtube", these are used, among other things, to collect video statistics, to improve user-friendliness and to prevent abusive behavior. If you are logged in to Google, your data is directly assigned to your account when you click on a video. If you do not want the assignment to your YouTube profile, you must log out before activating the button. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. The use of YouTube may also result in the transmission of personal data to the servers of Google LLC. in the USA.
Independently of a playback of the embedded videos, a connection to the Google network is established each time this website is called up, which may trigger further data processing operations without our influence.
All processing described above, in particular the reading of information on the end device used via the tracking pixel, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a DSGVO. Without this consent, Youtube videos will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website via alternative options communicated to you on the website.
Further information on data protection at "Youtube" can be found in the Youtube terms of use at https://www.youtube.com/static?template=terms and in Google's data protection declaration at https://www.google.de/intl/de/policies/privacy.

13.5 - Google Forms
To conduct surveys or in the case of online forms, we use the Google Forms service of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Forms enables us to design and evaluate surveys and online forms. In addition to the respective personal data that you enter into the forms, information on your operating system, browser, date and time of your visit, referrer URL and your IP address are also collected, transmitted to Google and stored on Google servers. The storage of the information you enter in the forms is password-protected to ensure that third party access is excluded and only we can evaluate the information data for the purpose specified in each case in the form.
When processing personal data that is required to fulfill a contract with you (this also applies to processing operations that are required to carry out pre-contractual measures), Art. 6 (1) lit. b DSGVO serves as the legal basis. If you have given us your consent for the processing of your data, the processing is based on Art. 6 (1) a DSGVO. Consent given can be revoked at any time with effect for the future.
We have concluded an order processing agreement with Google for the use of Google Forms, which obliges Google to protect the data of our site visitors and not to pass it on to third parties. Processing regularly takes place within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. However, data transfers to the USA cannot be ruled out.
For the transfer of data from the EU to the USA, Google refers to so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google Forms and Google's privacy policy can be found at: https://policies.google.com/privacy?hl=de

13.6 - Google Web Fonts
This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This may also result in the transmission of personal data to the servers of Google LLC. in the USA. In this way, Google obtains knowledge that our website was accessed via your IP address. The processing of personal data in the course of establishing a connection with the provider of the fonts is only carried out if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a default font will be used by your computer.
For more information on Google Web Fonts, please visit https://developers.google.com/fonts/faq and read Google's privacy policy: https://www.google.com/policies/privacy/

13.7 Google reCAPTCHA
On this website, we use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is primarily used to distinguish whether an input is made by a natural person or is abused by machine and automated processing. The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in determining individual ownership on the Internet and the prevention of abuse and spam. The use of Google reCAPTCHA may also involve the transmission of personal data to the servers of Google LLC. in the USA.
Further information on Google reCAPTCHA as well as Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.
Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option described above to make an objection.
For the transfer of data from the EU to the USA, Google refers to so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.

13.8 Google Translate

This site uses the translation service "Google Translate" of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") via an API integration. In order for the translation to be displayed automatically after your selection of a national language, the browser you use connects to Google's servers. Google uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
Further information on Google Translate and Google's privacy policy can be found at: https://www.google.com/policies/privacy/.

You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on the website.

13.9 Google Customer Reviews (formerly Google Certified Merchant Program).

We work with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This program gives us the opportunity to collect customer reviews from users of our website. Here, after making a purchase on our website, you will be asked if you would like to participate in an email survey from Google. If you give your consent in accordance with Art. 6 (1) lit. a DSGVO, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate the purchase experience on our website. The rating you provide will then be aggregated with our other ratings and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. In addition, your review will be used for Google Seller Reviews. As part of the use of Google Customer Reviews, there may also be a transfer of personal data to the servers of Google LLC. in the USA.

You can revoke your consent at any time by sending a message to the data controller or to Google.

Further information on Google's data protection in connection with the Google Customer Reviews program can be found at the following link: https://support.google.com/merchants/answer/7188525?hl=de.

You can read more information about the privacy of Google Seller Reviews at this link: https://support.google.com/google-ads/answer/2375474

13.10 Shopsync for Shopify

This website uses the Shopify app "Shopsync" from ShopSync LLC, PO Box 252, Jefferson City, TN 37760, USA.
With the help of ShopSync, the newsletter service "Mailchimp" is synchronized with our Shopify account in such a way that, on the one hand, updates in Mailchimp email lists (such as a newsletter recipient opting out) are also automatically stored on Shopify and, on the other hand, new contact data generated via contract conclusions on Shopify are automatically transferred to the Mailchimp email lists.

In the former case, data processing is carried out pursuant to Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in the effective and cross-system maintenance of the files of advertising addressees and the efficient observance of legally significant status changes.

In the second case, exclusively on the basis of the user's express consent pursuant to Art. 6 (1) a DSGVO, after a contract has been concluded on Shopify for inclusion in the Mailchimp list, the user's first and last name, address and mail address together with transaction-related information (purchase amount, time and date of purchase) are transferred by ShopSync to Mailchimp.

Data transferred in this way is not stored or retained by ShopSync after synchronization. All information synced between Shopify and Mailchimp is transmitted using Secure Socket Layer (SSL) technology, and all transmitted information remains encrypted during the sync process.

The synchronization process requires the transfer of information over a secure connection to servers hosted by Amazon Web Services in the United States.

You can find more data protection information about ShopSync here: https://shopsync.io/privacy-policy

14) Tools und Sonstiges

14.1 - Billomat
For the completion of accounting, we use the cloud-based accounting software of Billomat GmbH & Co. KG, Lorenzer Str. 31, 90402 Nuremberg ("Billomat").
Billomat processes incoming and outgoing invoices and, if applicable, also the bank transactions of our company in order to automatically record invoices, match them to the transactions and create the financial accounting from this in a semi-automated process.
If personal data is also processed in this process, the processing is carried out in accordance with Art. 6 (1) f DSGVO on the basis of our legitimate interest in the efficient organization and documentation of our business transactions.
You can find more information about Billomat, the automated processing of data and the data protection provisions at https://www.billomat.com/datenschutz/.

14.2 Cookie consent tool

This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "Cookie Consent Tool" is displayed to users in the form of an interactive user interface when they call up the page, on which consent for certain cookies and/or cookie-based applications can be given by ticking the appropriate box. By using the tool, all cookies/services requiring consent are only loaded if the respective user grants the corresponding consent by setting a check mark. This ensures that such cookies are only set on the respective user's end device if consent has been granted.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this context.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 (1) f DSGVO on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Further legal basis for the processing is Art. 6 para. 1 lit. c DSGVO. As the responsible party, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
Further information on the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

15) Rechte des Betroffenen

15.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise prerequisites:

• Right to information pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 DSGVO;
• Right to restriction of processing pursuant to Art. 18 DSGVO;
• Right to information pursuant to Art. 19 DSGVO;
• Right to data portability pursuant to Art. 20 DSGVO;
• Right to withdraw consent given pursuant to Art. 7(3) DSGVO;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

15.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSES OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

16) Duration of the storage of personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and - if relevant - additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of explicit consent pursuant to Art. 6 (1) a DSGVO, this data is stored until the data subject revokes his or her consent.

If there are statutory retention periods for data that is processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 (1) (b) DSGVO, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the fulfillment of the contract or the initiation of the contract and/or there is no legitimate interest on our part in continuing to store it.

When processing personal data on the basis of Art. 6(1)(f) DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21(1) DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct marketing on the basis of Article 6 (1) (f) DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Article 21 (2) DSGVO.

Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.