1.Information about the collection of personal data and contact details of the person responsible
1.1 General Information
We are pleased that you are visiting our website and thank you for your interest. Below, we will inform you about how your personal data is handled when you use our website. Personal data refers to all data with which you can be personally identified.
1.2 Person Responsible
The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Gavin.
The person responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
1.3 Data Transmission Security
For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses SSL or TLS encryption.
You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser’s address bar.
2.Collection and Processing of Access Data (Server Log Files)
2.1 Data Collected When Visiting Our Website
When you visit our website for informational purposes only — that is, when you do not register or otherwise provide us with information — we only collect data that your browser transmits to our server (so-called “server log files”).
The following data is collected, as it is technically necessary to display the website to you:
The specific page of our website visited
Date and time of access
Amount of data transmitted (in bytes)
Source/reference (referrer) from which you accessed the page
Browser used
Operating system used
IP address used (if necessary, in anonymized form)
2.2 Legal Basis and Purpose of Processing
The processing of this data is carried out in accordance with Article 6(1)(f) GDPR, based on our legitimate interest in improving the stability and functionality of our website.
This data is not passed on to third parties or used for any other purposes. However, we reserve the right to subsequently review the server log files if there are specific indications of illegal use.
2.3 Use of IP Address for Currency Conversion
By using our website, you (the visitor) agree that third parties may process your IP address in order to determine your location for the purpose of currency conversion.
You also consent to this currency selection being stored in a session cookie in your browser (a temporary cookie that is automatically deleted when you close your browser).
This ensures that the selected currency remains consistent while you browse our website, allowing prices to be displayed in your local currency.
3.Cookies
In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device.
Some of the cookies we use are deleted at the end of the browser session, i.e., after you close your browser (session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). Persistent cookies are automatically deleted after a certain period of time.
If cookies are set, they collect and process certain user information such as:
Browser data
Location data
IP address values
In some cases, cookies are used to simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website).
If personal data is processed through individual cookies used by us, the processing takes place:
pursuant to Article 6(1)(b) GDPR — for the performance of a contract, or
pursuant to Article 6(1)(f) GDPR — to protect our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly and effective design of the website visit.
We may work with advertising partners to help make our website more interesting for you. For this purpose, cookies from partner companies (third-party cookies) may also be stored on your hard drive when you visit our website.
If we cooperate with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the data collected in each case in the following sections.
Cookie Management
Please note that you can configure your browser to:
notify you when cookies are set
decide individually whether to accept them
exclude the acceptance of cookies for certain cases or in general
Each browser differs in how it manages cookie settings. You can find instructions for changing your cookie settings in the help menu of your respective browser:
Please note that if you do not accept cookies, the functionality of our website may be restricted.
4) Contact
When you contact us (e.g., via contact form or email), personal data is collected.
The specific data collected via the contact form is indicated in the respective form. This data is stored and used exclusively for the purpose of:
responding to your inquiry, or
contacting you, and
the associated technical administration.
The legal basis for processing this data is:
Article 6(1)(f) GDPR — our legitimate interest in responding to your request.
If your contact is aimed at concluding a contract, the additional legal basis is Article 6(1)(b) GDPR — performance of a contract.
Your data will be deleted once your request has been fully processed, provided that no other statutory retention obligations apply and it can be reasonably determined from the circumstances that further storage is no longer required.
5.Data Processing When Opening a Customer Account and for Contract Processing
In accordance with Article 6(1)(b) GDPR, personal data will be collected and processed when you provide it to us:
for the purpose of performing a contract, or
for the purpose of opening a customer account.
The specific data collected can be seen from the respective input forms.
Your customer account can be deleted at any time by sending a message to the contact address of the person responsible (as stated above).
We store and use the data you provide for the purpose of processing the contract.
After the contract has been fully executed, or upon deletion of your customer account, your data will be blocked in compliance with applicable tax and commercial law retention periods, and subsequently deleted once these statutory periods have expired.
6.Use of the Single Sign-On Procedure
Facebook Connect
You can create a customer account on our website or log in via the “Facebook Connect” social plugin of the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”), using the so-called single sign-on technology, if you have a Facebook profile.
You can recognize the “Facebook Connect” social plugins on our website by the blue button with the Facebook logo and the text such as:
“Log in with Facebook”
“Connect with Facebook”
“Sign in with Facebook”
When you access a page on our website that contains such a plugin, your browser establishes a direct connection to Facebook’s servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into our webpage.
Through this integration, Facebook receives information that your browser has accessed the corresponding page on our website — even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.
This data processing is carried out in accordance with Article 6(1)(f) GDPR, based on Facebook’s legitimate interest in displaying personalized advertising based on your browsing behavior.
Logging In via Facebook Connect
By using the “Facebook Connect” button on our website, you also have the opportunity to log in or register on our website using your Facebook user data.
Only if you give your explicit consent in accordance with Article 6(1)(a) GDPR during the registration process — based on a corresponding notice regarding data exchange with Facebook — will we receive certain personal data from Facebook when you use the “Facebook Connect” button.
Depending on your privacy settings on Facebook, the data transmitted may include:
User ID
Name
Profile picture
Age
Gender
Following changes to Facebook’s privacy policy and terms of use, your profile picture, your friends’ user IDs, and your friends list may also be transmitted if you have marked them as “public” in your Facebook privacy settings.
The data transmitted by Facebook is stored and processed by us for the purpose of creating a user account with the necessary data, if you have approved this on Facebook. This may include:
Title
First name
Last name
Address details
Country
Email address
Date of birth
Conversely, based on your consent, we may transmit data (e.g., information about your browsing or purchase behavior) to your Facebook profile.
Revocation of Consent
You may revoke your consent at any time by sending a message to the responsible person named at the beginning of this privacy policy.
Data Protection and Facebook
Facebook Inc., based in the USA, is certified under the EU-U.S. Privacy Shield Framework, which ensures compliance with EU data protection standards.
For details on the purpose and scope of data collection, further processing, and use of data by Facebook, as well as your rights and privacy settings options, please refer to Facebook’s privacy policy: https://www.facebook.com/policy.php
Preventing Data Association
If you do not want Facebook to directly associate the data collected via our website with your Facebook profile, you must log out of Facebook before visiting our website.
You can also completely prevent Facebook plugins from loading by using browser add-ons, e.g.: Adblock Plus — https://adblockplus.org/de/
7.Use of Your Data for Direct Advertising
Subscription to Our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers.
The only mandatory information required for sending the newsletter is your email address. Providing any additional data is voluntary and serves the purpose of addressing you personally.
We use the double opt-in procedure for sending the newsletter. This means that we will only send you the email newsletter if you have explicitly confirmed your consent to receive it.
After registration, you will receive a confirmation email, in which you will be asked to confirm your desire to receive future newsletters by clicking on a confirmation link.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) GDPR.
When you register for the newsletter, we store:
The IP address assigned by your Internet Service Provider (ISP)
The date and time of registration
This is done to enable us to trace any possible misuse of your email address at a later date.
The data we collect during newsletter registration is used exclusively for the purpose of sending you advertising via the newsletter.
You may unsubscribe from the newsletter at any time:
by clicking the unsubscribe link provided in the newsletter, or
by sending a message to the responsible person named above.
After you unsubscribe, your email address will be immediately deleted from our newsletter distribution list.
8) Data Processing for Order Processing
8.1 Transfer of Personal Data to Third Parties
The personal data we collect will be transferred to the shipping company commissioned with delivery, to the extent necessary to deliver the goods, in accordance with Article 6(1)(b) GDPR.
Your payment data will also be passed on to the commissioned credit institution as part of payment processing, to the extent necessary for payment processing.
When using external payment service providers, you will be expressly informed below. The legal basis for the transmission of data is Article 6(1)(b) GDPR.
8.2 Use of External Shipping Partners
To fulfill our contractual obligations to our customers, we work with external shipping partners.
In accordance with Article 6(1)(b) GDPR, we pass on your name and delivery address to a selected shipping partner exclusively for the purpose of delivering the goods.
8.3 Use of Payment Service Providers (Payment Processors)
Amazon Pay
If you choose the payment method “Amazon Pay”, payment will be processed via: Amazon Payments Europe S.C.A., 5 Rue Plaetis, L-2338 Luxembourg (“Amazon Payments”).
We will transmit your personal data (provided during the order process) and order details to Amazon Payments in accordance with Article 6(1)(b) GDPR. Data will be transferred only for the purpose of payment processing.
When using payment methods via PayPal (PayPal account, credit card via PayPal, direct debit via PayPal, or — if offered — “purchase on account” or “payment in installments”), your payment data is transmitted to: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”).
The transfer is made in accordance with Article 6(1)(b) GDPR and only to the extent necessary for payment processing.
Credit Check: For certain payment methods (credit card, direct debit, purchase on account, installment payments), PayPal reserves the right to perform a credit check in accordance with Article 6(1)(f) GDPR, based on PayPal’s legitimate interest in assessing your creditworthiness.
For this purpose, PayPal may transmit your payment data to credit agencies. The credit report may include score values based on scientifically recognized mathematical-statistical procedures, which may incorporate address data.
You may object to this processing at any time by contacting PayPal. However, PayPal may still be entitled to process your personal data if necessary for contractual payment processing.
For further details, please consult PayPal’s privacy policy.
SOFORT
If you choose the payment method “SOFORT”, payment will be processed via: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (“SOFORT”). SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden).
We will transmit your personal and order data to SOFORT in accordance with Article 6(1)(b) GDPR. Data will be transferred only for the purpose of payment processing.
If you choose a payment method provided by Stripe, payment will be processed via: Stripe Payments Europe Ltd., Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland.
We will transmit the following data in accordance with Article 6(1)(b) GDPR:
Name
Address
Account number
Bank sort code
Credit card number (if applicable)
Invoice amount
Currency
Transaction number
Data is transmitted only for the purpose of payment processing.
In order to offer you Klarna’s payment methods, we may pass on your personal data (contact and order details) to Klarna during the order process so that Klarna can check your eligibility for its payment methods and tailor them to you.
Your transmitted personal data will be processed in accordance with Klarna’s privacy policy.
9.Rights of the Data Subject
9.1 Overview of Your Rights
The applicable data protection law grants you comprehensive rights (rights of information and intervention) in relation to the processing of your personal data. These are summarized below:
Right of access (Art. 15 GDPR): You have the right to obtain confirmation as to whether personal data concerning you is being processed by us, and where that is the case, access to the personal data and the following information:
purposes of processing
categories of personal data concerned
recipients or categories of recipients
planned storage period or criteria for determining that period
existence of the right to rectification, erasure, restriction of processing, objection to processing, and the right to lodge a complaint with a supervisory authority
the origin of your data (if not collected from you)
existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing
appropriate safeguards pursuant to Art. 46 GDPR in case of data transfer to third countries
Right to rectification (Art. 16 GDPR): You have the right to obtain the rectification of inaccurate personal data and the completion of incomplete personal data without undue delay.
Right to erasure (Art. 17 GDPR): You have the right to request the erasure of your personal data under the conditions of Art. 17(1) GDPR. This right does not apply where processing is necessary:
for exercising the right of freedom of expression and information
for compliance with a legal obligation
for reasons of public interest
for the establishment, exercise, or defense of legal claims
Right to restriction of processing (Art. 18 GDPR): You have the right to request restriction of processing under the following conditions:
you contest the accuracy of the data (while verification is ongoing)
the processing is unlawful, but you oppose the erasure of the data and instead request restriction
we no longer need the data, but you require it to establish, exercise, or defend legal claims
you have objected to processing pending verification of whether our legitimate interests override yours
Right to notification (Art. 19 GDPR): If you have exercised your right to rectification, erasure, or restriction of processing, the controller is obliged to notify all recipients to whom the personal data was disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients.
Right to data portability (Art. 20 GDPR): You have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format or to request the transfer to another controller, where technically feasible.
Right to withdraw consent (Art. 7(3) GDPR): You have the right to withdraw any consent given to us for data processing at any time with effect for the future. Following withdrawal, we will erase the data concerned unless further processing is permitted by legal grounds that do not require consent.
Right to lodge a complaint (Art. 77 GDPR): If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in:
the Member State of your habitual residence,
place of work, or
place of the alleged infringement, without prejudice to any other administrative or judicial remedy.
9.2 Right to Object
If we process your personal data on the basis of our legitimate interests, you have the right to object at any time to such processing with future effect, based on reasons arising from your particular situation.
If you exercise this right to object, we will cease processing the affected personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.
Right to object to direct marketing: If we process your personal data for direct marketing purposes, you have the right to object at any time to such processing.
You can exercise this right as described above. If you object to processing for direct marketing purposes, we will immediately cease processing your personal data for such purposes.
10.Duration of Storage of Personal Data
The duration of storage of personal data depends on the respective statutory retention periods (e.g., under commercial and tax law).
After the expiry of the applicable retention period, the corresponding data is routinely deleted, unless:
we have a legitimate interest in continuing to store the data.
the data is still required for the fulfillment or initiation of a contract, or
