Privacy Policy

Privacy Policy: data protection

Server log files
You can visit our website without providing any personal information. 
Every time our website is accessed, usage data is transmitted to us or our web host / IT service provider through your Internet browser and stored in log data (so-called server log files). These stored data include, for example, the name of the page called up, the date and time of the call, the IP address, the amount of data transferred and the requesting provider. Processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR based on our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our offer. 
 

Server Location
Our website is hosted on servers located in Germany and Austria. This ensures a high level of data protection in compliance with the GDPR.
Data processing takes place exclusively within Germany and Austria to ensure that all legal requirements of the General Data Protection Regulation (GDPR) are met.
 

Customer account Orders      

Customer account
When opening a customer account, we collect your personal data to the extent specified there. Data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the lawfulness of the processing carried out based on your consent until you revoke it. Your customer account will then be deleted.


Collection, processing and transfer of personal data when placing orders
When placing an order, we only collect and process your personal data insofar as this is necessary to fulfill and process your order and to process your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to make this available means that no contract can be concluded. Processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR and is necessary for the performance of a contract with you. 
Your data will be passed on, for example, to the shipping companies and dropshipping providers, payment service providers, service providers for order processing and IT service providers you have selected. In all cases, we strictly observe the legal requirements. The amount of data transmission is limited to a minimum.
 

Contact      Ratings       newsletter      

collection and processing when using the contact form
When using the contact form, we only collect your personal data (name, email address, message text) to the extent that you provide. The data processing serves the purpose of establishing contact. By submitting your message, you consent to the processing of the transmitted data. Processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent.
You can withdraw your consent at any time by notifying us without affecting the lawfulness of the processing carried out based on the consent until the withdrawal. We only use your email address to process your request. Your data will then be deleted unless you have consented to further processing and use.


Buyer Seal Customer Rating 
We use the Buyer Seal Customer Rating Tool from Merchant Association Management AG (Torgauer Strasse 233 B, 04347 Leipzig) on ​​our website. After placing your order, we would like to ask you to rate and comment on your purchase from us.
For this purpose, we will write to you by e-mail, whereby we use the technical system of the provider of the buyer seal assessment tool as part of an order processing.
Your data is processed either with your consent or based on our legitimate interest.
Processing is based on Art. 6 Para. 1 lit. a GDPR with your consent, provided that you have expressly consented to receiving the evaluation request. You can revoke your consent at any time using the corresponding link in the e-mail, without affecting the legality of the processing based on your consent until the revocation. Your email address will then be removed from the mailing list.
Processing without express consent is based on Art. 6 Para. 1 lit. f GDPR from the legitimate interest in truthful, verified evaluations of our services in the context of direct advertising. For this purpose, we send an electronic request for evaluation of your own goods or services that you have already purchased from us. The shipment will be sent to the email address that we received from you when we sold a product or service. The sending of the evaluation request is subject to the reservation that you have not objected to this use of your email address.
The objection is possible at any time by notifying us. The contact details for exercising the objection can be found in the imprint.You can also use the link provided in the evaluation request. There are no other costs than the transmission costs according to the basic tariffs.

The personal data stored in this context in the technical system of the buyer seal assessment tool will be deleted 3 months after the delivery of goods recorded for assessment.

Use of the email address for sending newsletters
We use your e-mail address, regardless of the contract, only for our own advertising purposes for sending the newsletter, provided you have expressly agreed to this. Processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on your consent until you revoke it. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. 



Payment service provider       credit check      

using PayPal
All PayPal transactions are subject to the PayPal privacy policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full


Data collection and processing for the payment methods via PaySafe "purchase on account" (purchase on account and / or "installment payment")
When paying via the payment methods paysafe "purchase on account" (purchase on account and / or "installment payment"), the purchase price claim is assigned to net-m privatbank 1891 AG (Odeonsplatz 18, 80539 Munich; hereinafter referred to as "bank"). The data required for payment processing are transmitted to payolution GmbH (Am Euro Platz 2, 1120 Vienna, Austria). The data transmission serves the purpose that paysafe can carry out an identity and credit check to process your purchase with the payment method you require. Processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR based on our overriding legitimate interest in offering various payment methods and in protecting against payment default.You have the right at any time for reasons arising from your particular situation to object to this according to Art. 6 Para. 1 lit. f to object to processing based on the GDPR by notifying us. You can find paysafe's privacy policy here . If you would like information about the use of your personal data, you can contact datenschutz@payolution.com. The provision of the data is necessary for the conclusion of the contract with the payment method you require. Failure to make this available means that the contract cannot be concluded with the payment method you have selected.



Cookies 
 
Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on a user's computer system. If a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that enables the browser to be clearly identified when the website is called up again. 
We use these cookies for the purpose of making our website more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after changing pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change.
Processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR based on our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.
Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data contained therein. Cookies that have already been saved can be deleted at any time. However, we would like to point out that you may then not be able to use all functions of this website to their full extent.
Under the following links you can find out how you can manage (and also deactivate) cookies in the most important browsers:
Chrome browser: https://support.google.com/accounts/answer/61416?hl=de
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
 

Communication analysis      

The data processing described below in this section, in particular the setting of cookies, is based on Art. 6 Para. 1 lit. f GDPR out of our overriding legitimate interest: 

- in the needs-based and targeted design of the website, e.g. with analysis and statistics tools 

- in direct customer communication, e.g. with live chat tools

You have the right for reasons that arise Of your particular situation, at any time according to Art. 6 Para. 1 lit. to object to processing based on the GDPR relating to your personal data.


Using PHP Web Stat
We use the PHP Web Stat analysis tool from the PHP Web Stat (Sternbuschweg 2, 46562 Voerde; “PHP Web Stat”) on our website.
Data processing serves the purpose of analyzing this website and its visitors. For this purpose, data is collected and stored for marketing and optimization purposes. Usage profiles can be created from this data under a pseudonym. Cookies may be used. Cookies enable recognition of the Internet browser. The data collected with the PHP Web Stat technologies will not be used to personally identify the visitor to this website without the separate consent of the person concerned and will not be combined with personal data about the bearer of the pseudonym.
You can prevent the storage of cookies by selecting the appropriate technical settings in your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.


Use of the Chatra live chat system
We use the Chatra live chat system on our website (Roger Wilco LLC, Millen, White, Zelano & Branigan Attn: Jeff Cohen 2200 Clarendon Blvd., Suite 1400A Arlington, VA 22201 " chatra.io ").
Data processing serves the purpose of communication between you and us as the provider. Anonymous data is processed for the operation of the system and for web analysis. User profiles can be created from this data under a pseudonym, whereby cookies can be used. Cookies enable recognition of the Internet browser.
The data collected will not be used to personally identify the visitor to this website without the separate consent of the person concerned.
Your data may be transferred to the United States. Chatra.io has submitted to the US-EU data protection agreement “Privacy Shield” and thus committed to comply with the data protection guidelines.
You can prevent the storage of cookies by selecting the appropriate technical settings in your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
Further information on the Chatra data protection declaration can be found at https://chatra.io/privacy-policy/



Plug-ins

Use of InterNetX as domain interface
We use InterNetX as a domain interface for your domain registrations and domain transfers. To read InterNetX's privacy policy, you can visit:

https://www.internetx.com/datenschutz/

Use of social plug-ins using the "2-click solution"
We use plug-ins on our website using social networks the "2-click solution". Without your express consent, no connections are made to the servers of the social networks and, consequently, no data is transmitted.
With the standard integration of plug-ins, when you visit the pages of our website that contain such a plug-in, a link is established between your computer and the servers of the providers of the social network, and the plug-in is opened by notifying your browser of the page. Your IP address and the information about which of our pages you have visited are transmitted to the provider server. This applies regardless of whether you are registered or logged in to the social network. A transmission also takes place for users who are not registered or not logged in. If you are also logged into the Facebook social network, this information will be assigned to your personal user account. When using the plug-in functions (e.g. by pressing the button) this information is also assigned to your user account, which you can only prevent by logging out before using the plug-in. So that you retain control over your data, we have decided to first deactivate the corresponding button. You can recognize this by the greyed out button. Without your express consent - in the form of activating the button - no link will be made to the server of the social network and consequently no data will be transmitted. You can recognize this by the greyed out button. Without your express consent - in the form of activating the button - no link will be made to the social network server and consequently no data will be transmitted. You can recognize this by the greyed out button. Without your express consent - in the form of activating the button - no link will be made to the server of the social network and consequently no data will be transmitted.
Only when you activate the button does the button become active (highlighted in color) and a direct connection to the server of the social network is established.
By activating you give your consent to the transmission of your data to the respective provider of the social network. Here, among other things, both your IP address and the information about which of our pages you have visited are transmitted. If you are connected to one or more of your social network accounts at the same time, the information collected will also be assigned to your corresponding profiles. You can only prevent this assignment by logging out of your user accounts on the social networks before visiting our website and activating the buttons.
The following social networks are integrated using the "2-click function". You can find more information on the scope and purpose of the collection and use of the data as well as your rights and options to protect your privacy in the linked data protection notices of the providers.


Google+ of Google LLC (1600 Amphitheater Parkway, Mountain View, California, 94043 USA): https://www.google.com/intl/de/+/policy/+1button.html
https://policies.google.com/privacy
https://adssettings.google.com/authenticated
 
Facebook Inc. Facebook (1601 S. California Ave, Palo Alto, CA 94304, USA) 
https://www.facebook.com/policy.php


Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA):
https://twitter.com/privacy
https://twitter.com/personalization

 
Use of
Google Maps We use the function on our website to embed Google Maps from  Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google").
If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the person responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws.
The function enables the visual display of geographic information and interactive maps. When calling up the pages in which GoogleMaps maps are integrated, Google also collects, processes and uses data from website visitors.
Your data may also be transferred to the United States. Google has certified itself according to the US-EU data protection agreement “Privacy Shield” and thus committed to comply with the data protection guidelines.
Processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR from the legitimate interest in the needs-based and targeted design of our website.
You can find more information on the collection and use of data by Google in Google's data protection information at https://www.google.com/privacypolicy.html. There you also have the option of changing your settings in the data protection center so that you can manage and protect your data processed by Google.

 
Use of Google reCAPTCHA 
We use the reCAPTCHA service from Google LLC on our website (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google").
If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the person responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws. The purpose of the query is to differentiate between the input by a person or by automated, machine processing. Your entry will be transmitted to Google and used there. In addition, the IP address and any other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and possibly also transferred to the USA. Google has certified itself according to the US-EU data protection agreement “Privacy Shield” and thus committed to comply with the data protection guidelines.  
Processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR for the legitimate interest of protecting our website against automated spying, misuse and SPAM.
Further information on Google reCAPTCHA and the associated data protection declaration can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy. 
 
Use of Cloudflare CDN
We use the Cloudflare CDN service provided by Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA; “Cloudflare”).
Cloudflare is used to deliver JavaScript and CSS libraries, as well as to accelerate and secure our website. Data such as your IP address and other information required for the service may be transmitted to Cloudflare. These data may be processed outside the EU, including in the USA.
Cloudflare is certified under the EU-US Privacy Shield and is committed to complying with European data protection regulations.
Processing is based on Art. 6 (1) lit. f GDPR due to our legitimate interest in ensuring secure and fast delivery of our website.
For more information about Cloudflare and their privacy policy, please visit: https://www.cloudflare.com/privacypolicy/.
 
Use of ProvenExpert
We use the ProvenExpert service provided by Expert Systems AG (Quedlinburger Straße 1, 10589 Berlin, Germany; “ProvenExpert”).
ProvenExpert is used to provide reviews and feedback about our services. Data such as your IP address and other necessary technical information may be processed. ProvenExpert processes the data exclusively within the EU.
Processing is based on Art. 6 (1) lit. f GDPR due to our legitimate interest in offering credible feedback about our services.
For more information about ProvenExpert and their privacy policy, please visit: https://www.provenexpert.com/privacy/.
 
Use of Uploadcare CDN
We use the Uploadcare CDN service provided by Uploadcare, Inc. (303 Twin Dolphin Drive, Redwood City, CA 94065, USA; “Uploadcare”).
Uploadcare is used for media hosting and optimization. Data such as your IP address may be transmitted to Uploadcare, and this data may be processed outside the EU.
Processing is based on Art. 6 (1) lit. f GDPR due to our legitimate interest in efficient media delivery.
For more information about Uploadcare and their privacy policy, please visit: https://uploadcare.com/privacy_policy/.
 
Use of Hosttest
We use the Hosttest service provided by Cyando AG (General-Wille-Strasse 10, 8002 Zurich, Switzerland; “Hosttest”).
Hosttest is used to compare hosting providers and provide relevant information to users. Data such as your IP address may be processed to provide the service.
Processing is based on Art. 6 (1) lit. f GDPR due to our legitimate interest in providing helpful information about hosting services.
For more information about Hosttest and their privacy policy, please visit: https://www.hosttest.de/datenschutz/.
 


Affected rights and storage

duration Duration of storage
After the contract has been fully processed, the data is stored for the duration of the warranty period, then taking legal, in particular tax and commercial, retention periods into account and then deleted after the deadline, unless you have consented to further processing and use.


Rights of the data subject
You have the following rights under Art. 15 to 20 GDPR on: Right to information, correction, deletion, restriction of processing, data portability.
In addition, according to Art. 21 Para. 1 GDPR you have a right to object to processing based on Art. 6 Para. 1 f GDPR and processing for the purpose of direct advertising.


Contact us on request. The contact details can be found in our imprint. Right to

lodge a complaint with the supervisory authority In
accordance with Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.


Right to object
The personal data processing listed here is based on our legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR, you have the right to object to this processing at any time with future effect for reasons that arise from your particular situation.
After the objection has been made, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If personal data processing takes place for the purposes of direct advertising, you can object to this processing at any time by notifying us. After the objection has been made, we will stop processing the data concerned for the purpose of direct advertising.