Privacy Policy

Privacy & Data Protection Notice

Unless explicitly indicated otherwise in the sections below, sharing your personal data with us is entirely voluntary — it is neither a legal obligation nor a prerequisite for entering into a contract. You are under no obligation to disclose any personal information, and choosing not to do so will not result in any negative consequences. This principle applies in all cases unless a specific processing activity described below states otherwise. The term "personal data" encompasses any information that relates to a living individual who can be directly or indirectly identified.

Web server log data

Our website can be browsed without submitting any personal information. Each time a page on our site is loaded, your web browser automatically transmits certain technical data to our servers or those of our hosting and IT infrastructure providers. This data — which may include the requested URL, access date and time, your IP address, the volume of data transferred, and your internet service provider — is recorded in server log files. We process this information on the basis of Art. 6(1)(f) GDPR, as it serves our legitimate interest in maintaining the stability, security, and continuous improvement of our online services.

Data controller & contact details

You can find the full contact information of the party responsible for processing your data in our legal notice (Impressum).

Communication via email

When you reach out to us by email, we will process the information you share (such as your name, email address, and the content of your message) solely for the purpose of addressing your enquiry.

Where your message relates to a pending or existing contract, the legal basis is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual steps). In all other cases, processing is based on Art. 6(1)(f) GDPR (our legitimate interest in handling incoming communications). You have the right to object to processing carried out under Art. 6(1)(f) GDPR at any time. Your data will be erased once statutory retention periods have lapsed, unless you have consented to continued processing.

Enquiry form

When you submit an enquiry through our website form, we process the details you provide (such as your name, email address, and message text) in order to respond to you. The legal basis for this processing is Art. 6(1)(a) GDPR (your consent). You are free to revoke your consent at any point; any processing that took place before the revocation remains lawful.

User accounts & purchasing

If you register for an account on our website, we collect and process the personal data you provide in order to enhance your shopping experience and streamline future purchases. The legal basis is Art. 6(1)(a) GDPR (consent). You may revoke your consent at any time, after which your account and associated data will be removed.

Order processing & data sharing

When you submit an order, we collect and process the personal data needed to execute, manage, and follow up on your purchase, as well as to respond to any related questions. The legal basis is Art. 6(1)(b) GDPR (contract performance). Where necessary for fulfilment, your data may be shared with logistics providers (including drop-shipping partners), payment processors, and IT or order management service providers that you have selected. We strictly comply with applicable legal requirements and limit any data transfer to the minimum extent necessary.

Email marketing for existing customers

If you have previously made a purchase from us, we may use the email address collected during that transaction to send you promotional communications about our own similar products and services, unless you have opted out. This is based on Art. 6(1)(f) GDPR (our legitimate interest in direct marketing to existing customers). You can opt out at any time by clicking the unsubscribe link included in every marketing email or by contacting us through the details in our Impressum.

Sharing your email with carriers for delivery notifications

If you give your consent during checkout, we will pass your email address on to the relevant shipping carrier so they can send you updates about the status of your delivery. The legal basis is Art. 6(1)(a) GDPR (consent). You may withdraw this consent at any time, either by notifying us directly or by contacting the carrier.

Payment processing

Stripe

All payment transactions handled through Stripe are subject to Stripe's own privacy policy: stripe.com/legal/privacy-center

Stripe Express integration

We rely on Stripe (operated by Stripe Deutschland GmbH / Stripe, Inc.) to provide a range of payment options. As part of this integration, Stripe may gather device-related and usage data (for example, your IP address, operating system, browser type, device identifiers, and approximate location) and may place cookies on your device. The use of cookies is based on §15(3) TMG, and the broader data processing relies on Art. 6(1)(f) GDPR (our legitimate interest in offering diverse payment methods). When you actively select and use a Stripe-powered payment method, the applicable legal basis is Art. 6(1)(b) GDPR (contract performance). For full details, please refer to the Stripe privacy policy linked above.

Cookies

Cookies are small data files that your browser stores on your device when you visit a website. You can manage, restrict, or remove cookies at any time through your browser's settings. Please be aware that disabling certain cookies may affect the functionality of our website.

Essential cookies

We deploy cookies that are strictly necessary for the basic operation of our website (for instance, to maintain your shopping basket and enable the checkout process). The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in delivering a fully functional online shop). You retain the right to object to this processing on grounds relating to your individual circumstances.

Analytics & advertising technologies

Google Analytics (with IP masking)

Data controller for EEA/Switzerland: Google Ireland Limited. We use Google Analytics for website usage analysis and marketing purposes. Data points collected may include your shortened IP address, timestamps, click behaviour, device and browser information, pages visited, referral sources, geographic location, and purchase activity. This data is typically transmitted to servers in the United States; however, IP anonymisation is enabled, meaning your IP address is truncated while still within the EEA/Switzerland. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in understanding how visitors use our website in order to improve it). You may object to this processing at any time.

Facebook Pixel (Custom Audiences)

We use the Facebook Pixel to display tailored advertisements to visitors on Facebook and Instagram. Through this pixel, Facebook may receive information about your activity on our website. Data may be transferred to servers in the United States. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in reaching relevant audiences with targeted advertising). You can adjust your preferences for interest-based advertising within your Facebook account settings. Further information is available at: facebook.com/about/privacy/.

Google Ads conversion measurement

When you arrive at our website via a Google advertisement, a time-limited conversion cookie may be placed on your device. This cookie does not contain personally identifiable information and is used solely to generate aggregated conversion statistics. Data may be transferred to the United States. The legal basis is Art. 6(1)(f) GDPR. To opt out, visit: Google Ads preferences or the NAI opt-out page.

Google remarketing & similar audience targeting

We use Google's remarketing features to show interest-based advertisements across the Google Display Network. Cookies are used for this purpose; however, no directly identifiable personal information is stored. The legal basis is Art. 6(1)(f) GDPR. To opt out: Google ad personalisation settings or the NAI opt-out page. More details: google.com/privacy/ads/.

Third-party integrations

Google Tag Manager

We use Google Tag Manager to deploy and manage tracking and analytics tags on our website. Google Tag Manager itself does not store cookies or collect personal data independently; however, it may activate other tags or scripts that do. For more information, see the Google Tag Manager Terms of Use.

Your rights & data retention

How long we keep your data

Once the contractual relationship has concluded, your data will be retained for the applicable warranty period and any mandatory statutory retention periods (such as those required by tax and commercial law). After these periods expire, the data will be deleted, unless you have given consent for continued processing.

Your data protection rights

In accordance with the applicable legal requirements, you are entitled to exercise the rights set out in Articles 15 through 20 of the GDPR. These include the right to access your data, have it corrected, request its deletion, restrict its processing, and receive it in a portable format. You also have a right to object under Art. 21 GDPR, including the right to object to the use of your data for direct marketing at any time.

Right to file a complaint

If you believe that the processing of your personal data is unlawful, you have the right to submit a complaint to the relevant data protection supervisory authority in accordance with Art. 77 GDPR.

Right to object to processing

Where we process your data based on our legitimate interests under Art. 6(1)(f) GDPR, you may object at any time on grounds specific to your personal situation. In relation to direct marketing specifically, you have an unconditional right to object at any time — once you do so, we will immediately cease processing your data for that purpose.