Privacy Policy

When you select a payment method from the provider that requires you to pay in advance, your payment details provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the contents of your order will be transmitted to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data will be transmitted exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose .

When selecting a payment method where we advance payment, you will also be asked to provide certain personal data during the order process ( first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, details of an alternative payment method).

The credit report may contain probability values (so-called score values). If score values are included in the credit report , they are based on a scientifically recognized mathematical-statistical method. Address data is among the factors, but not the only factor, used in calculating the score values.

You can object to this processing of your data at any time by sending us a message or contacting the provider. However, the provider may still be entitled to process your personal data if this is necessary for processing payments in accordance with the contract.
- Paypal Checkout This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal's own payment methods and local payment methods from third-party providers.

When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “Pay Later” via PayPal, we forward your payment data to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “ PayPal”) for payment processing. This transfer is carried out in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.

When using a local third-party payment method, your payment data will first be forwarded to PayPal in accordance with Article 6(1)(b) GDPR to prepare the payment . Depending on your selection of an available local payment method , PayPal will then transmit your payment data to the respective provider in accordance with Article 6(1)(b) GDPR to process the payment.

- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels , Belgium)
- blik (Polski Standard Płatności sp. z oo, ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria )
- MyBank (PRETA SAS, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań , Poland)

For further information on data protection, please refer to PayPal's privacy policy : https://www.paypal.com/de/legalhub/paypal/privacy-full
- TWINT

When you select a payment method from the provider that requires you to pay in advance (such as credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the contents of your order will be transmitted to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data will be transmitted exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

When data is transferred to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission .

8.4 Electronic revocation function for distance contracts

When using the cancellation function, in addition to information to identify the contract to be cancelled, further personal information such as the consumer's first and last name and email address must also be provided or confirmed .

9) Web analytics services

9.1 Google (Universal) Analytics

The information is transferred to Google servers and processed there. This may also involve transfers to Google LLC, which is based in the USA .

All processing activities described above, in particular the setting of cookies on the device used , will only take place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.
Without your consent, Google (Universal) Analytics will not be used during your visit to our website. You can revoke your consent at any time with effect for the future. To exercise your right of revocation , please deactivate this service using the " Cookie Consent Tool " provided on the website .

We have concluded a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further legal information about Google (Universal) Analytics can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google (Universal) Analytics uses the special feature " demographics" to generate statistics that provide information about the age, gender, and interests of website visitors. This is achieved by analyzing advertising and information from third-party providers. This allows for the identification of target groups for marketing activities . However, the collected data cannot be linked to any specific individual and is deleted after a storage period of two months .

Google Signals
As an extension to Google (Universal) Analytics, this website may use Google Signals to generate reports across devices. If you have enabled personalized ads and linked your devices to your Google account , Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6 para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including those related to cross- device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross- device analysis , you can deactivate the "Personalized advertising" feature in your Google account settings. Follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google (Universal) Analytics, the "UserIDs" function may be used on this website. If you have consented to the use of Google (Universal) Analytics in accordance with Art. 6 para. 1 lit. a GDPR, have created an account on this website, and log in to this account on various devices, your activities , including conversions, can be analyzed across devices .

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission , ensures compliance with the European level of data protection.

9.2 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website .

By default, Google Analytics 4 does not use cookies when you visit the website unless you explicitly consent to cookies . Instead, information about your usage behavior is collected and processed through so-called pings (small data packets sent to the host of a device ) . This information includes your IP address, which Google, however, shortens by removing the last digits to prevent direct identification of individuals .

The information is transferred to Google servers and processed there. This may also involve transfers to Google LLC, which is based in the USA .

All processing described above, including data transmission via " pings " and the possible setting of Google Analytics cookies, will only take place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.

Without your consent, Google Analytics 4 will not be used during your visit to our website. You can revoke your consent at any time with effect for the future. To exercise your right of revocation , please deactivate this service using the " Cookie Consent Tool " provided on the website .

We have concluded a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further legal information about Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google Analytics 4 uses the special " demographics" feature and can generate statistics that provide information about the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third-party providers. This allows target groups for marketing activities to be identified. However, the collected data cannot be attributed to any specific person and is deleted after being stored for two months .

Google Signals
As an extension to Google Analytics 4, this website may use Google Signals to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google account , Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6 para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including those related to cross- device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross- device analysis , you can deactivate the "Personalized advertising" feature in your Google account settings. Follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the "UserIDs" function may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR, have created an account on this website , and log in to this account on various devices , your activities , including conversions, can be analyzed across devices .

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission , ensures compliance with the European level of data protection.

9.3 Google Tag Manager

This website uses the “ Google Tag Manager ” , a service provided by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “ Google ” ).

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission , ensures compliance with the European level of data protection.

Further legal information regarding Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de

9.4 Microsoft Clarity

This website uses the web analytics service of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA

Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information from the device used , such as the IP address and browser information, in order to evaluate it for statistical analysis of user behavior on our website and to create pseudonymized user profiles. Among other things, this makes it possible to analyze movement patterns (so-called heatmaps) , which show the duration of page visits as well as interactions with page content (e.g., text input, scrolling, clicks, and mouse-overs). Pseudonymization fundamentally precludes any direct identification of individuals . This data is not combined with clear personal data collected through other means.

All processing described above, in particular the reading or storage of information on the device used , will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the " Cookie Consent Tool " provided on the website .

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission , ensures compliance with the European level of data protection.

9.5 Plausible

This website uses “ Plausible ” , a web analytics tool from Plausible Insights OÜ , Västriku tn 2, 50403, Tartu, Estonia.

This anonymously records and analyzes the interactions of randomly selected individual visitors with the website in order to collect information about website usage (such as visitor numbers, page views, bounce rates, and time spent on the site).

At no time is personal data processed. Plausible collects only non-personal data such as browser and user agent information when you use this website. This data is stored in a non-personally identifiable form and evaluated for statistical purposes. It is deleted as soon as it is no longer needed for our evaluation purposes .

If personal data is processed in individual cases, this processing is based on our legitimate interest in the statistical analysis of user behavior for optimization purposes in accordance with Art. 6 para. 1 lit. f GDPR.

10) Retargeting/remarketing and conversion tracking

10.1 Google Ads Remarketing

This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

All processing described above, in particular the setting of cookies for reading information on the device used , will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR . Without this consent, the use of retargeting technology during your visit to our website will not take place .

You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal , please deactivate this service in the " Cookie Consent Tool " provided on the website .

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission , ensures compliance with the European level of data protection.

Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

10.2 Microsoft Advertising

This website uses retargeting technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

This allows us to target visitors to our website with personalized, interest-based advertising who have already shown interest in our shop and our products. The display of the advertising material is based on a cookie-based analysis of previous and current user behavior.

In the case of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus tailor advertising to the stored information. These cookies are small text files that are stored on your computer or mobile device . This allows you to be shown advertising that is highly likely to match your product and information interests.

All processing described above, in particular the setting of cookies for reading information on the device used , will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR . Without this consent, the use of retargeting technology during your visit to our website will not take place .

You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal , please deactivate this service in the " Cookie Consent Tool " provided on the website .

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission , ensures compliance with the European level of data protection.

10.3 Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and, within the framework of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ( " Google " ).

We use Google Ads to advertise our attractive offers on external websites using advertising materials (so-called Google AdWords). Based on the data from these advertising campaigns, we can determine the success of individual advertising measures. Our aim is to show you advertising that is relevant to you , to make our website more interesting for you , and to ensure a fair calculation of the advertising costs incurred.

When using Google Ads, personal data may also be transferred to the servers of Google LLC in the USA.

All processing activities described above, in particular the setting of cookies for reading information on the device used , will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the " Cookie Consent Tool " provided on the website .

You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the browser plug-in from Google available at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de

To target users whose data we have obtained through business or similar relationships with more relevant advertising , we use a customer matching function within Google Ads. For this purpose, we electronically transmit one or more files containing aggregated customer data (primarily email addresses and telephone numbers) to Google. Google does not gain access to unencrypted data; instead, it automatically encrypts the information in the customer files during the transmission process using a special algorithm. Google can then only use the encrypted information to associate it with existing Google accounts that the data subjects have created. This enables the delivery of personalized advertising across all Google services linked to the respective Google account .

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission , ensures compliance with the European level of data protection.

10.4 Google Ads Conversion Tracking

All processing activities described above, in particular the setting of cookies for reading information on the device used , will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the " Cookie Consent Tool " provided on the website .

You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the browser plug-in from Google available at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission , ensures compliance with the European level of data protection.

10.5 Microsoft Advertising Universal Event Tracking

This website uses conversion tracking technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

For the use of Universal Event Tracking, a tag is embedded on every page of our website that interacts with the conversion cookie set by Microsoft. This interaction makes user behavior on our website traceable and sends the collected information to Microsoft. The purpose of this is to statistically record and analyze certain predefined goals, such as purchases or leads, in order to better tailor the targeting and content of our offers to user interests. The tags are never used to personally identify users.

All processing described above, in particular the setting of cookies for reading information on the device used , will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR . Without this consent, the use of retargeting technology during your visit to our website will not take place .

You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal , please deactivate this service in the " Cookie Consent Tool " provided on the website .

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission , ensures compliance with the European level of data protection.

11) Page functionalities

11.1 Youtube

Data may also be transferred to: Google LLC, USA

When embedded videos are played via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics, and prevent abusive behavior.

All of the aforementioned processing activities, in particular the setting of cookies for reading information on the device used , will only take place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the " Cookie Consent Tool " provided on the website .

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission , ensures compliance with the European level of data protection.

11.2 - Google reCAPTCHA

This website uses the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transferred to: Google LLC, USA.

For the visual design of the CAPTCHA window, the provider uses " Google Fonts," i.e., fonts downloaded from the internet by Google. No further information is processed beyond what is already mentioned above and transmitted to Google via the functionality of reCAPTCHA .

If the processing described above is based on cookies, these will only be set if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the " Cookie Consent Tool " provided on the website .

If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in establishing individual responsibility on the internet and preventing misuse and spam in accordance with Art. 6 para. 1 lit. f GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission , ensures compliance with the European level of data protection.

11.3 Applications for job postings via email

Applicants must provide all personal data necessary for a thorough assessment, including general information such as name, address, and contact details , as well as performance-related evidence and, where applicable, health-related information. Details regarding the application process can be found in the job posting.

After receiving your application by email, the data will be stored and evaluated solely for the purpose of processing your application. For follow - up questions, we will use either the applicant's email address or telephone number. This processing is based on Article 6 Paragraph 1 Letter b GDPR (or Section 26 Paragraph 1 BDSG), according to which the application process is considered the initiation of an employment contract.

If, during the application process, special categories of personal data within the meaning of Article 9(1) GDPR (e.g., health data such as information about severe disability) are requested from applicants, the processing is carried out in accordance with Article 9(2)(b) GDPR so that we can exercise our rights arising from employment law and social security and social protection law and fulfill our related obligations .

In the event of a successful application, the data provided will be processed on the basis of Art. 6 para. 1 lit. b GDPR (in the case of processing in Germany in conjunction with § 26 para. 1 BDSG) for the purpose of carrying out the employment relationship .

11.4 Online applications via a form

On our website, we currently list vacant positions in a separate section, for which interested parties can apply using a corresponding form .

Applicants must provide all personal data necessary for a thorough assessment, including general information such as name, address, and contact details , as well as performance-related evidence and, where applicable, health-related information. Details regarding the application process can be found in the job posting.

When you submit the form, your application data will be encrypted using state-of-the-art technology and transmitted to us. We will store this data and evaluate it solely for the purpose of processing your application. This processing is based on Article 6 Paragraph 1 Letter b of the GDPR (or Section 26 Paragraph 1 of the German Federal Data Protection Act (BDSG)), according to which completing the application process is considered the initiation of an employment contract.

If, during the application process, special categories of personal data within the meaning of Article 9(1) GDPR (e.g., health data such as information about severe disability) are requested from applicants, the processing is carried out in accordance with Article 9(2)(b) GDPR so that we can exercise our rights arising from employment law and social security and social protection law and fulfill our related obligations .

If an applicant is not selected or withdraws their application prematurely , their data submitted via the application form, as well as all electronic correspondence , including the application email, will be deleted no later than six months after notification . This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to comply with our obligations to provide evidence under the regulations on equal treatment of applicants .

In the event of a successful application, the data provided will be processed on the basis of Art. 6 para. 1 lit. b GDPR (in the case of processing in Germany in conjunction with § 26 para. 1 BDSG) for the purpose of carrying out the employment relationship .

11.5 Personio

For the administration, organization and processing of online applications, we use the software of the following provider: Personio SE & Co. KG, Seidlstraße 3, 80335 Munich

Based on our legitimate interest in effective and user-friendly applicant management, your data submitted as part of the online application will be encrypted and forwarded to the provider in accordance with Art. 6 para. 1 lit. f GDPR, stored there, and made available to us for processing your application .

We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits its transfer to third parties.

12) Tools and other items

Cookie Consent Tool

This tool uses technically necessary cookies to store your cookie preferences . No personal user data is processed in this process .

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Article 6 Paragraph 1 Letter f GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our website.

Another legal basis for processing is also Article 6(1)(c) GDPR. As data controllers, we are subject to the legal obligation to make the use of cookies that are not technically necessary dependent on the respective user's consent .

Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further information about the operator and the settings options of the cookie consent tool can be found directly in the corresponding user interface on our website.

13) Rights of the data subject

13.1 The applicable data protection law grants you the following rights as a data subject (rights of access and intervention) vis-à - vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis cited for the respective conditions of exercise :

Right of access pursuant to Art. 15 GDPR; Right to rectification pursuant to Article 16 GDPR; Right to erasure pursuant to Article 17 GDPR; Right to restriction of processing pursuant to Article 18 GDPR;
• Right to information pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent pursuant to Art. 7 para. 3 GDPR; Right to lodge a complaint pursuant to Article 77 GDPR.

13.2 RIGHT OF OBJECTION

If we process your personal data based on our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future.

If you exercise your right to object, we will cease processing the data in question. However, further processing remains possible if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the purpose of establishing, exercising or defending legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. You can exercise your right to object as described above.

If you exercise your right to object, we will cease processing the data in question for direct marketing purposes.

14) Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – where applicable – additionally by the respective statutory retention period (e.g. commercial and tax law retention periods).

When processing personal data based on explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the data in question will be stored until you withdraw your consent.

If statutory retention periods exist for data processed in the context of legal or quasi-legal obligations based on Article 6(1)(b) GDPR, this data will be routinely deleted after the retention periods have expired , unless it is still required for the performance of a contract or for taking steps prior to entering into a contract and/or we have a legitimate interest in its continued storage.

When processing personal data on the basis of Article 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms , or the processing serves the purpose of establishing, exercising or defending legal claims .

When processing personal data for direct marketing purposes based on Article 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Article 21(2) GDPR.