Privacy Policy
Personal data (hereinafter mostly referred to simply as “data”) is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
According to Art. 4 No. 1 of Regulation (EU) 2016/679, i.e., the General Data Protection Regulation (hereinafter referred to only as “GDPR”), “processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
With the following privacy policy, we inform you in particular about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we either alone or jointly with others decide on the purposes and means of processing. In addition, we inform you below about the third-party components we use for optimization purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.
Our privacy policy is structured as follows:
I. Information about us as the controller
II. Rights of users and data subjects
III. Information on data processing
I. Information about us as the controller
The responsible provider of this website within the meaning of data protection law is:
II. Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right
- to confirmation as to whether data concerning them is being processed, to information about the processed data, to further information about the data processing, and to copies of the data (see also Art. 15 GDPR);
- to rectification or completion of incorrect or incomplete data (see also Art. 16 GDPR);
- to immediate erasure of data concerning them (see also Art. 17 GDPR), or, alternatively, if further processing is required pursuant to Art. 17(3) GDPR, to restriction of processing in accordance with Art. 18 GDPR;
- to receive the data concerning them and provided by them and to transmit this data to other providers/controllers (see also Art. 20 GDPR);
- to lodge a complaint with the supervisory authority if they believe that the data concerning them is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing that takes place pursuant to Articles 16, 17(1), 18 GDPR. However, this obligation does not apply if such notification is impossible or involves disproportionate effort. Nevertheless, the user has a right to information about these recipients.
Likewise, users and data subjects have the right under Art. 21 GDPR to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Art. 6(1)(f) GDPR. In particular, an objection to data processing for the purpose of direct marketing is permissible.
III. Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of storage ceases to apply, provided that no statutory retention obligations prevent the deletion of the data and no other information regarding individual processing procedures is provided below.
Cookie Manager
To obtain consent for the use of technically non-essential cookies on the website, the provider uses a cookie manager.
When the website is accessed, a cookie containing the settings information is stored on the user’s device, so that on a subsequent visit, the consent query does not have to be made again.
The cookie is necessary to obtain legally compliant consent from the user.
The user can prevent or terminate the installation of cookies through the settings of their browser.
Cookies
a) Session Cookies
We use so-called cookies on our website. Cookies are small text files or other storage technologies that are stored on your device by the internet browser you use. These cookies process certain information about you to a limited extent, such as your browser or location data or your IP address.
This processing makes our website more user-friendly, effective, and secure, as the processing enables, for example, the reproduction of our website in different languages or the provision of a shopping cart function.
The legal basis for this processing is Art. 6(1)(b) GDPR, insofar as these cookies process data for the initiation or performance of a contract.
If the processing does not serve the initiation or performance of a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6(1)(f) GDPR.
These session cookies are deleted when you close your internet browser.
b) Third-Party Cookies
If applicable, our website also uses cookies from partner companies with whom we cooperate for the purpose of advertising, analysis, or the functionalities of our website.
Please refer to the following information for details, in particular regarding the purposes and legal bases for the processing of such third-party cookies.
c) Removal Options
You can prevent or restrict the installation of cookies through a setting in your internet browser. You can also delete cookies that have already been stored at any time. However, the steps and measures required for this depend on the specific internet browser you use. If you have questions, please use the help function or documentation of your internet browser or contact its manufacturer or support. In the case of so-called Flash cookies, however, processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player accordingly. The steps and measures required for this also depend on the specific Flash player you use. If you have questions, please also use the help function or documentation of your Flash player or contact the manufacturer or user support.
However, if you prevent or restrict the installation of cookies, this may result in not all functions of our website being fully usable.
Borlabs Cookie
This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consents. Borlabs Cookie does not process any personal data.
The borlabs-cookie stores your consents that you gave when entering the website. If you wish to revoke these consents, simply delete the cookie in your browser. When you enter/reload the website again, you will be asked for your cookie consent again.
Contest
We offer you the opportunity to participate in contests via our website. If you participate in one of our contests, the data you enter when participating will be processed without your further consent, but of course exclusively for the purpose of conducting and processing the respective contest.
As part of processing the contest, we pass on your data to the transport company commissioned with the delivery of goods or to a financial service provider, insofar as the transfer is necessary for the delivery or payment of your prize. If your data is published in the event of a win, you will be informed of this in the consent declaration.
The legal basis for the transfer of data is then Art. 6(1)(b) GDPR.
You can revoke your consent to the processing of data for participation in our contests at any time with effect for the future in accordance with Art. 7(3) GDPR. To do so, you only need to inform us of your revocation.
Contact Requests / Contact Options
If you contact us via a contact form or email, the data you provide will be used to process your request. The provision of data is necessary to process and respond to your request—without providing it, we cannot or can only respond to your request to a limited extent.
The legal basis for this processing is Art. 6(1)(b) GDPR.
Your data will be deleted once your request has been conclusively answered and no statutory retention obligations prevent deletion, such as in the case of any subsequent contract processing.
Customer Account / Registration Function
If you create a customer account with us via our website, we will collect and store the data you enter during registration (e.g., your name, your address, or your email address) exclusively for pre-contractual services, for contract fulfillment, or for the purpose of customer care (e.g., to provide you with an overview of your previous orders with us or to offer you the so-called wishlist function). At the same time, we store the IP address and the date of your registration along with the time. This data is of course not passed on to third parties.
As part of the further registration process, your consent to this processing is obtained and reference is made to this privacy policy. The data we collect is used exclusively for providing the customer account.
Insofar as you consent to this processing, Art. 6(1)(a) GDPR is the legal basis for the processing.
If opening the customer account also serves pre-contractual measures or contract fulfillment, the legal basis for this processing is also Art. 6(1)(b) GDPR.
You can revoke the consent you have given us to open and maintain the customer account at any time with effect for the future in accordance with Art. 7(3) GDPR. To do so, you only need to inform us of your revocation.
The data collected in this respect will be deleted as soon as the processing is no longer necessary. However, we must observe tax and commercial retention periods.
Newsletter
If you register for our free newsletter, the data requested from you for this purpose, i.e., your email address and—optionally—your name and address, will be transmitted to us. At the same time, we store the IP address of the internet connection from which you access our website as well as the date and time of your registration. As part of the further registration process, we will obtain your consent to send the newsletter, describe the content specifically, and refer to this privacy policy. The data collected in this process is used exclusively for sending the newsletter—it is therefore not passed on to third parties in particular.
The legal basis here is Art. 6(1)(a) GDPR.
You can revoke your consent to receive the newsletter at any time with effect for the future in accordance with Art. 7(3) GDPR. To do so, you only need to inform us of your revocation or click the unsubscribe link contained in each newsletter.
User Contributions, Comments, and Reviews
We offer you the opportunity to publish questions, answers, opinions, or reviews, hereinafter referred to only as “contributions,” on our website. If you make use of this offer, we process and publish your contribution, the date and time of submission, and any pseudonym you may have used.
The legal basis here is Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future in accordance with Art. 7(3) GDPR. To do so, you simply need to notify us of your revocation.
In addition, we also process your IP and email address. The IP address is processed because we have a legitimate interest in taking or supporting further steps if your contribution infringes the rights of third parties and/or is otherwise unlawful.
The legal basis in this case is Art. 6(1)(f) GDPR. Our legitimate interest lies in any necessary legal defense.
Online Job Applications / Publication of Job Advertisements
We offer you the opportunity to apply to us via our website. As part of the digital application, your application data is collected and processed by us electronically for the purpose of handling the application process.
The legal basis for this processing is Art. 6(1)(b) GDPR (implementation of pre-contractual measures) as well as Section 4(3) DSG in conjunction with Art. 88 GDPR (data processing in the employment context).
If an employment relationship subsequently arises, we store the application data in your personnel file in order to handle the usual organizational and administrative processes within the framework of the employment relationship. Of course, all statutory retention periods and data protection regulations are observed.
If the application is rejected, we delete the transmitted data no later than six months after completion of the application process. Storage takes place for this period in order to be able to examine and defend any claims under the Equal Treatment Act (GlBG) or other legal obligations. The legal basis for this is Art. 6(1)(f) GDPR (legitimate interest in legal defense).
If you have expressly consented to longer storage of your data (e.g., for inclusion in an applicant pool), we process your data on the basis of this consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future (Art. 7(3) GDPR).
Contract Processing
The data you transmit to us for the use of our goods and/or services is processed by us for the purpose of contract processing and is necessary to that extent. Conclusion and processing of the contract are not possible without providing your data.
The legal basis for the processing is Art. 6(1)(b) GDPR.
We delete the data upon complete contract processing, but must observe tax and commercial retention periods.
As part of contract processing, we pass on your data to the transport company commissioned with the delivery of goods or to the financial service provider, insofar as the transfer is necessary for the delivery of goods or for payment purposes.
The legal basis for the transfer of data is then Art. 6(1)(b) GDPR.
General Linking to Third-Party Profiles
The provider uses a link to the social networks listed below on the website.
The legal basis here is Art. 6(1)(f) GDPR. The provider’s legitimate interest lies in improving the quality of use of the website.
The integration of the plugins is done via a linked graphic. Only by clicking on the corresponding graphic is the user redirected to the service of the respective social network.
After the customer is redirected, information about the user is collected by the respective network. This initially includes data such as IP address, date, time, and page visited. If the user is logged into their user account of the respective network at the same time, the network operator may be able to assign the collected information from the specific visit of the user to the user’s personal account. If the user interacts via a “Share” button of the respective network, this information can be stored in the user’s personal user account and possibly published. If the user wants to prevent the collected information from being directly assigned to their user account, the user must log out before clicking on the graphic. In addition, it is possible to configure the respective user account accordingly.
The following social networks are linked by the provider:
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Privacy policy: https://www.facebook.com/policy.php
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Privacy policy: https://help.instagram.com/519522125107875
Facebook Pixel – Conversion Tracking
We use the Facebook visitor action pixel on our website, a web analytics and conversion measurement service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Meta Platforms Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA, hereinafter “Facebook”.
The Facebook visitor action pixel helps us analyze user behavior on our website and promote our services on the Facebook platform. The basis for this is Art. 6(1)(a) GDPR. The user can revoke consent to use at any time with effect for the future via the Consent Manager settings (“Cookie Settings”) on our website in accordance with Art. 7(3) GDPR.
The visitor action pixel establishes a connection to Facebook’s servers in the USA. Facebook collects the IP address as well as information about the user’s browser. In addition, an individual pixel ID along with the associated website activities of the user is stored.
Meta Platforms Inc. is part of the “Data Privacy Framework” for which the EU Commission has issued an adequacy decision pursuant to Art. 45 GDPR:
https://www.dataprivacyframework.gov/list
Thanks to this data processing, Facebook can show the user personalized advertising from us on Facebook or on third-party sites. Conversion measurement also enables us to analyze and evaluate user behavior after clicking on a Facebook ad and subsequent redirection to our website in order to increase the effectiveness of our Facebook ads.
In this context, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, within the meaning of Art. 26 GDPR.
The joint controllers have defined their respective obligations under the GDPR in an agreement. This agreement can be viewed at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The data protection officer of Meta Platforms Ireland Limited can be reached via a contact form:
https://www.facebook.com/help/contact/540977946302970
Detailed information on data processing by Facebook as well as on the rights and protection options of users is described in Facebook’s privacy notices:
https://www.facebook.com/policy.php
Integration of Trusted Shops Trustbadge / Other Widgets
To display the Trusted Shops seal of approval and any reviews we may have received through it, as well as to promote the services offered by Trusted Shops after an order, we use the Trusted Shops “Trustbadge”.
“Trustbadge” is a product of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, for which we are jointly responsible—pursuant to Art. 26 GDPR—with Trusted Shops GmbH under data protection law.
The use serves to protect our legitimate interests, which prevail in the context of a balancing of interests, in optimal marketing by enabling secure shopping in accordance with Art. 6(1)(f) GDPR.
The Trustbadge is provided within the framework of joint responsibility by a US CDN provider (Content Delivery Network). An adequate level of data protection is ensured by standard data protection clauses and other contractual measures. Further information on data protection at Trusted Shops GmbH is available at the following link: https://www.trustedshops.de/impressum-datenschutz/#datenschutz
When the website is accessed, the Trusted Shops web server collects the visitor’s IP address, date and time of access, amount of data transferred, and the requesting provider (access data) to display the requested information. In addition, the web server automatically stores a so-called server log file, which also contains the IP address, date and time of access, amount of data transferred, and the requesting provider (access data) and documents the access. The IP address is anonymized immediately after collection, so that the stored data cannot be assigned to the visitor. The anonymized data is used in particular for statistical purposes and for error analysis.
After completion of the order, the email address provided in the order is transmitted to Trusted Shops GmbH. The transfer is done using a cryptological hash function, so that it is not possible to reconstruct the email address from the generated hash.
The legal basis for the transfer is Art. 6(1)(f) GDPR. The transmission serves to check whether the visitor is already registered for services with Trusted Shops GmbH and is therefore necessary for the legitimate interests of the provider and Trusted Shops GmbH in providing the buyer protection and transactional review services linked to the specific order.
If you are already registered for Trusted Shops GmbH services, further processing takes place in accordance with the contractual agreement made between you and Trusted Shops GmbH. If the visitor is not yet registered for the services, they will be given the opportunity to register. Further processing after successful registration is also governed by the contractual agreement with Trusted Shops GmbH. If the visitor does not register, all transmitted data is automatically deleted by Trusted Shops GmbH and a personal reference is then no longer possible.
Trusted Shops GmbH uses service providers in the areas of hosting, monitoring, and logging. The legal basis is Art. 6(1)(f) GDPR for the purpose of ensuring trouble-free operation. Processing may take place in third countries (USA and Israel). An adequate level of data protection is ensured in the case of the USA by standard data protection clauses and other contractual measures, and in the case of Israel by an adequacy decision.
Within the framework of the joint responsibility existing between us and Trusted Shops GmbH, you can preferably contact Trusted Shops GmbH with data protection questions and to assert your rights using the contact options specified in the privacy information linked above. Regardless of this, you can always contact the controller of your choice. The request will then be forwarded to the other controller for response if necessary.
Google Maps
On our website, we use Google Maps to display our location and to create directions. This is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to only as “Google”.
If you access the Google Maps component integrated into our website, Google stores a cookie on your device via your internet browser. To display our location and create directions, your user settings and data are processed. We cannot rule out that Google uses servers in the USA.
In the event of consent given by you for this processing, the legal basis is Art. 6(1)(a) GDPR. The legal basis can also be Art. 6(1)(f) GDPR. Our legitimate interest lies in optimizing the functionality of our website.
Through the connection thus established to Google, Google can determine from which website your request was sent and to which IP address the directions are to be transmitted.
If you do not agree with this processing, you have the option of preventing the installation of cookies through the appropriate settings in your internet browser. Details on this can be found above under the section “Cookies”.
In addition, the use of Google Maps and the information obtained via Google Maps is subject to the Google Terms of Service and the Terms and Conditions for Google Maps.
Furthermore, Google offers
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
further information.
YouTube
On our website, we use YouTube. This is a video portal of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to only as “YouTube”.
We use YouTube in connection with the “Enhanced Privacy Mode” function to show you videos. In the event of consent given by you for this processing, the legal basis is Art. 6(1)(a) GDPR. The legal basis can also be Art. 6(1)(f) GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the “Enhanced Privacy Mode” function means that the data described in more detail below is only transmitted to the YouTube server if you actually start a video.
Without this “Enhanced Privacy Mode”, a connection to the YouTube server in the USA is established as soon as you access one of our web pages on which a YouTube video is embedded.
This connection is necessary to display the respective video on our website via your internet browser. In the course of this, YouTube will at least collect and process your IP address, the date and time, as well as the website you visited. In addition, a connection to the “DoubleClick” advertising network of Google is established.
If you are logged into YouTube at the same time, YouTube assigns the connection information to your YouTube account. If you want to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.
For the purpose of functionality and to analyze usage behavior, YouTube permanently stores cookies via your internet browser on your device. If you do not agree with this processing, you have the option of preventing the storage of cookies through a setting in your internet browser. Further information on this can be found above under “Cookies”.
Further information on the collection and use of data as well as your rights and protection options in this regard is provided by Google in the privacy notices available at
https://policies.google.com/privacy
privacy notices.
Use of PayPal as a Payment Method
If you choose to pay with the online payment service provider PayPal as part of your order process, your contact details will be transmitted to PayPal as part of the order thus triggered. PayPal is an offer of PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal assumes the function of an online payment service provider as well as a trustee and offers buyer protection services.
The personal data transmitted to PayPal usually consists of first name, last name, address, telephone number, IP address, email address, or other data required for order processing, as well as data related to the order, such as number of items, item number, invoice amount and taxes in percent, invoice information, etc.
This transmission is necessary to process your order with the payment method you have selected, in particular to confirm your identity, to administer your payment and the customer relationship. The transmission of your data to PayPal is therefore based on Art. 6(1)(b) GDPR.
Please note, however: Personal data may also be passed on by PayPal to service providers, subcontractors, or other affiliated companies, insofar as this is necessary to fulfill the contractual obligations arising from your order or the personal data is to be processed on behalf.
Depending on the payment method selected via PayPal, e.g., invoice or direct debit, the personal data transmitted to PayPal is transmitted by PayPal to credit agencies. This transmission serves the purpose of identity and credit checks in relation to the order you have placed. To find out which credit agencies this involves and which data is generally collected, processed, stored, and passed on by PayPal, please refer to PayPal’s privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of Stripe as a Payment Method
If you choose to pay via the online payment service provider Stripe (e.g., credit card) as part of your order process, your payment and contact details will be transmitted to Stripe as part of the order thus triggered. The provider for customers within the European Economic Area is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Stripe assumes the function of an online payment service provider and processes the payment transaction.
The personal data transmitted to Stripe usually consists of first name, last name, address, email address, IP address, telephone number, as well as payment data such as credit card number, expiration date and verification code, as well as data related to the order, such as number of items, item number, invoice amount and taxes in percent, invoice information, etc. This transmission is necessary to process your order with the payment method you have selected, in particular to confirm your identity, to administer your payment and the customer relationship. The transmission of your data to Stripe is therefore based on Art. 6(1)(b) GDPR.
Please note, however: Personal data may also be passed on by Stripe to service providers, subcontractors, or other affiliated companies, insofar as this is necessary to fulfill the contractual obligations arising from your order or the personal data is to be processed on behalf. For fraud prevention, Stripe may also process the transmitted data and, if necessary, pass it on to third parties.
Insofar as personal data is transmitted to Stripe Inc. in the USA, Stripe relies on the EU-U.S. Data Privacy Framework as well as on standard contractual clauses pursuant to Art. 46(2)(c) GDPR. Which data is generally collected, processed, stored, and passed on by Stripe can be found in Stripe’s privacy policy at https://stripe.com/at/privacy
MailChimp – Newsletter
We offer you the opportunity to register for our free newsletter via our website.
For newsletter delivery, we use MailChimp, a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, hereinafter referred to only as “The Rocket Science Group”.
In addition, The Rocket Science Group offers
http://mailchimp.com/legal/privacy/
further privacy information.
If you register for our newsletter delivery, the data requested during the registration process, such as your email address and, optionally, your name and address, will be processed by The Rocket Science Group. In addition, your IP address as well as the date of your registration along with the time are stored. As part of the further registration process, your consent to send the newsletter is obtained, the content is specifically described, and reference is made to this privacy policy.
The newsletter subsequently sent via The Rocket Science Group also contains a so-called tracking pixel, also called a web beacon. With the help of this tracking pixel, we can evaluate whether and when you have read our newsletter and whether you have followed any links contained in the newsletter. In addition to other technical data, such as the data of your computer system and your IP address, the data processed in this way is stored so that we can optimize our newsletter offering and respond to the wishes of readers. The data is therefore used to increase the quality and attractiveness of our newsletter offering.
The legal basis for sending the newsletter and the analysis is Art. 6(1)(a) GDPR.
You can revoke your consent to receive the newsletter at any time with effect for the future in accordance with Art. 7(3) GDPR. To do so, you only need to inform us of your revocation or click the unsubscribe link contained in each newsletter.
Google Analytics
We use Google Analytics on our website, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google”.
Google Analytics helps us analyze the use of the website and measure the effectiveness of our marketing campaigns. The legal basis here is Art. 6(1)(a) GDPR. The user can revoke their consent to the use of Google Analytics at any time with effect for the future via the “Cookie Settings” of our website in accordance with Art. 7(3) GDPR. Without consent, Google Analytics will not be loaded.
Information such as time, location, and frequency of website visits, as well as interactions with the website (e.g., click paths, viewed/clicked ads, clicks on links), is processed. Transmission to a Google server in the USA cannot be ruled out. Event data is deleted after 2 months, user-related data after 14 months. If the same user becomes active again, the retention period for user data restarts.
Google LLC is part of the “Data Privacy Framework” for which the EU Commission has issued an adequacy decision pursuant to Art. 45 GDPR:
https://www.dataprivacyframework.gov/list
We use Google Analytics in the version Google Analytics 4. In this version, according to Google’s own statements, the user’s IP address is used exclusively to determine the approximate location and is not permanently stored or logged. For access from the European Economic Area, according to Google, the processing of the IP address takes place on servers within the EU.
The “Google signals” feature is not enabled in our property. Therefore, no linking of usage data with Google accounts, no collection of demographic characteristics, and no cross-device analysis takes place.
Google uses the collected data to evaluate the user’s website visit and to compile reports on website activities for us. The data is also used to provide further services related to website and internet usage. Google may pass this information on to third parties if required by law or if third parties process this data on behalf of Google.
According to its own statements, Google will under no circumstances link the user’s IP address with other Google data. Google provides further information and options for preventing data use here:
https://www.google.com/intl/de/policies/privacy/partners
If the user does not agree to the collection, they can also prevent it by performing a one-time installation of the browser add-on for deactivating Google Analytics.
Consent Mode (Google Consent Mode V2)
For the Google services used on our website, we use the so-called Consent Mode (Consent Mode V2). The status of your selection made via our Consent Manager is transmitted to the Google services used.
By default, all consent types (storage of advertising cookies, user data for advertising, personalization of advertising, storage of analytics cookies, storage of functionality cookies, storage of personalization cookies, and storage of security cookies) are set to “denied”. Only when you grant your consent for the respective category is the corresponding status changed to “granted” and the associated service executed.
As long as you have not granted consent, no data is transmitted to Google and no cookies of the relevant services are set. We do not use Consent Mode in the so-called advanced mode; therefore, no transmission of anonymized or modeled data takes place before your consent.
You can change or revoke your selection at any time via the “Cookie Settings” on our website.
Google Tag Manager
To manage and integrate various functions on our website, we use the Google Tag Manager. This product is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google”.
The Google Tag Manager serves exclusively to centrally manage the services used on our website. The Tag Manager itself does not collect any personal data, does not set any cookies, and does not perform any analysis of user behavior.
The program code of the Google Tag Manager required for operation is delivered from our own server. Therefore, when accessing our website, no connection to Google servers takes place, and in particular no IP addresses or other data are transmitted to Google.
The services managed via the Google Tag Manager are only loaded and executed after you have granted your consent for the respective service. Without your consent, no data processing by these services takes place. The consents you have not granted are respected when using the Google Tag Manager. The services used are listed in this privacy policy.
Google LLC is also part of the “Data Privacy Framework”, for which the EU Commission has issued an adequacy decision pursuant to Art. 45 GDPR:
https://www.dataprivacyframework.gov/list
The legal basis for the use of the Google Tag Manager is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically efficient and legally compliant management of the services used on our website. Since no data is transmitted to Google when loading the Tag Manager, no consent is required for this.
Google Ads with Conversion Tracking
On our website, we use the advertising component Google Ads and, in doing so, so-called conversion tracking. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to only as “Google”.
We use conversion tracking for the targeted promotion of our offering. The legal basis is Art. 6(1)(a) GDPR. The user can revoke their consent to the use at any time with effect for the future via the “Cookie Settings” on our website in accordance with Art. 7(3) GDPR. Without consent, conversion tracking will not be loaded.
If you click on an advertisement placed by Google, the conversion tracking we use stores a cookie on your end device. These so-called conversion cookies lose their validity after 30 days and otherwise do not serve to identify you personally.
If the cookie is still valid and you visit a certain page of our website, both we and Google can evaluate that you clicked on one of our advertisements placed with Google and that you were subsequently redirected to our website.
Through the information obtained in this way, Google creates statistics for us about the visit to our website. In addition, we receive information about the number of users who clicked on our advertisement(s) as well as about the pages of our website subsequently accessed. However, neither we nor third parties who also use Google Ads are placed in a position to identify you in this way.
Through the corresponding settings of your internet browser, you can also prevent or restrict the installation of cookies. At the same time, you can delete already stored cookies at any time. The steps and measures required for this, however, depend on the specific internet browser you use. If you have any questions, please use the help function or documentation of your internet browser or contact its manufacturer or support.
Furthermore, Google also offers
https://services.google.com/sitestats/de.html
https://www.google.com/policies/technologies/ads/
http://www.google.de/policies/privacy/
further information on this topic and in particular on the possibilities of preventing data use.
Enhanced Conversions
If you complete an order in our online shop and have previously given your consent to marketing cookies, we transmit your email address in encrypted form (SHA-256 hash value) to Google Ads. The encryption takes place on our server before the data leaves your browser; your email address is not transmitted to Google in plain text. Google uses this hash value exclusively to assign your order to a previous click on one of our advertisements and deletes it after the matching process. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR. No transmission takes place without your consent to marketing cookies.
Google Merchant Center and Google Shopping
To display our products in Google’s services, particularly in Google Shopping and in Shopping ads, we use the Google Merchant Center, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”.
For this purpose, we transmit product data from our online shop to Google. This exclusively involves information about our product range, such as product name, description, price, availability, product images, article numbers, and category assignments. Personal data of our website visitors is not processed as part of this transmission.
Google also automatically retrieves the publicly accessible product pages of our online shop to verify and keep the transmitted product data up to date.
The legal basis for the transmission of product data is Art. 6(1)(f) GDPR. Our legitimate interest lies in the promotion and economic operation of our online shop.
If you click on one of our products in the search results or in a Shopping ad, you will be redirected to our website. The data processing that takes place during this and in the further course of your visit is governed by the other information in this privacy policy, in particular the sections on Consent Mode, Google Analytics, and Google Ads.
Further information on data processing by Google can be found at:
https://policies.google.com/privacy
Model Data Protection Declaration of the Law Firm Weiß & Partner