Privacy Policy
Data protection declaration
Unless stated otherwise below, the provision of your personal data is neither legally nor contractually obligatory, nor required for conclusion of a contract. You are not obliged to provide your data. Not providing it will have no consequences. This only applies as long as the processing procedures below do not state otherwise. “Personal data” is any information relating to an identified or identifiable natural person.
Server log files
You can use our websites without submitting personal data. Every time our website is accessed, user data is transferred to us or our web hosts/IT service providers by your internet browser and stored in server log files (e.g. page requested, date/time, IP address, data volume, requesting provider). Processing is based on Art. 6(1)(f) GDPR for our legitimate interests in stable operation and service improvement.
Contact – Responsible person
The contact details of the person responsible for data processing can be found in our legal notice (Impressum).
Proactive contact by e-mail
If you contact us by email, we process your data (name, email, message) to handle the request.
If pre-contractual/contractual: Art. 6(1)(b) GDPR. Otherwise: Art. 6(1)(f) GDPR (legitimate interest in responding). You may object at any time to processing under Art. 6(1)(f) GDPR. Data is deleted after statutory retention unless further processing is agreed.
Contact form
When you use our contact form, we process your data as provided (name, email, message) to make contact. Basis: Art. 6(1)(a) GDPR (consent). You can withdraw consent at any time; legality until withdrawal remains unaffected.
Customer account | Orders
When you open a customer account, we process the personal data requested to improve your shopping experience and simplify orders (Art. 6(1)(a) GDPR). You can withdraw consent at any time; your account will then be deleted.
Orders – collection/processing/transfer
When you place an order, we process personal data necessary to fulfil and handle your order and queries (Art. 6(1)(b) GDPR). Data may be transferred to shipping companies (incl. drop-shippers), payment providers, order-handling and IT service providers selected by you. We observe legal requirements; transmission is limited to the minimum necessary.
Use of your email for direct marketing
We may use your email obtained during a sale to send electronic marketing for our similar products/services unless you object (Art. 6(1)(f) GDPR). You can object any time via the unsubscribe link or via our imprint contacts.
Forwarding email to shipping companies (status updates)
If you consent during checkout, we forward your email to the shipping company to inform you about shipping status (Art. 6(1)(a) GDPR). Consent can be withdrawn with us or the carrier at any time.
Payment service providers
Stripe
All Stripe transactions are covered by Stripe’s Privacy Policy: stripe.com/legal/privacy-center
Stripe Express
We use Stripe (Stripe Deutschland GmbH / Stripe, Inc.) to offer payment methods. For integration, Stripe may collect device and usage data (e.g., IP, device/OS/browser, location) and set cookies. Basis: §15(3) TMG for cookies and Art. 6(1)(f) GDPR (legitimate interest in offering payment options); for executing a chosen payment: Art. 6(1)(b) GDPR. See Stripe’s privacy info above.
Cookies
Cookies are small text files saved by your browser. You can control or delete cookies in your browser settings; disabling may limit site functionality.
- Manage cookies in Chrome
- Manage cookies in Edge/IE
- Manage cookies in Firefox
- Manage cookies in Safari
Technically necessary cookies
We use essential cookies to provide core functions (e.g., cart, checkout). Basis: Art. 6(1)(f) GDPR (legitimate interest in optimal website functionality). You may object for reasons relating to your situation.
Analysis & Advertising
Google Analytics (IP anonymisation)
Controller for EEA/CH: Google Ireland Limited. Purpose: analytics/marketing. Data points may include IP (shortened), timestamps, clicks, device/browser, pages viewed, referrer, location, purchase actions. Info is usually sent to US servers; IP anonymisation is active (shortening within EEA/CH). Basis: Art. 6(1)(f) GDPR (legitimate interest in needs-based, targeted design). You may object at any time.
Facebook Pixel (Custom Audiences)
Purpose: interest-based ads on Facebook/Instagram. Facebook may receive info about your visit via pixel. Data may be transferred to the USA. Basis: Art. 6(1)(f) GDPR (legitimate interest in targeted advertising). You can disable interest-based ads in your Facebook settings. Details: facebook.com/about/privacy/.
Google Ads conversion tracking
After clicking our Google ad, a conversion-cookie may be set (non-personal; limited validity). Purpose: conversion stats. Possible US transfer. Basis: Art. 6(1)(f) GDPR. Opt-out: Google Ads settings or NAI opt-out.
Google remarketing / Similar Audiences
Purpose: interest-based ads across Google Display Network. Cookies are used; no storage of identifiable personal data. Basis: Art. 6(1)(f) GDPR. Opt-outs: Google opt-out or NAI opt-out. Info: google.com/privacy/ads/.
Plug-ins & others
Google Tag Manager
Manages tags for tracking/analytics. GTM itself doesn’t store cookies or process personal data, but can trigger tags that do. Terms: Tag Manager Use Policy.
Rights of persons affected & storage duration
Duration of storage
After contractual processing, data is stored for warranty period and for legal retention (tax/commercial) and then deleted unless further processing is agreed.
Your rights
Subject to legal requirements, you have rights under Art. 15–20 GDPR (access, rectification, deletion, restriction, portability) and a right to object under Art. 21 GDPR (including direct marketing).
Right to complain
You may lodge a complaint with a supervisory authority under Art. 77 GDPR if you believe your data is processed unlawfully.
Right to object
If processing is based on our legitimate interests per Art. 6(1)(f) GDPR, you may object at any time for reasons arising from your particular situation. For direct advertising, you may object at any time; upon objection we will stop processing for that purpose.