Name and address of the controller
The controller in the meaning of the General Data Protection Regulation and other national data protection laws and regulations of the Member States as well as other provisions relating to data protection is:
Name and address of the Data Protection Officer
The Data Protection Officer of the controller is:
Thank you for your interest in our online shop. The protection of your privacy is very important to us. In the following we inform you in detail about the handling of your data.
General information on data processing
Scope of the processing of personal data
As a matter of principle, we process the personal data of our users only to the extent necessary to provide a properly functioning website as well as our contents and our services. The processing of personal data of our users is generally only performed with the user's consent. An exception is only made in those cases in which prior consent cannot be obtained for factual reasons and the processing of data is permitted by law.
"Personal information" is deemed to mean any and all information relating to an identified or identifiable natural person.
Legal basis for the processing of personal data
If we obtain the consent of the data subject for the processing of personal data, Art. 6, section 1, letter a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data which is necessary for the performance of a contract to which the data subject is a party, Art. 6, section 1, letter b of the GDPR (General Data Protection Regulation) serves as the legal basis. This also applies to processing operations which are necessary to carry out pre-contractual measures.
When the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6, section 1, letter c of the GDPR serves as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6, section 1, letter d of the GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6, section 1, letter f of the GDPR serves as the legal basis for the processing.
You can visit our websites without providing any personal information. Every time you access our website, usage data is transmitted by your Internet browser and stored in log files (server log files). These stored data include, for example, the name of the page accessed, the data and time of access, the user's IP address, the amount of data transferred and the requesting provider. These data are used exclusively to ensure the smooth operation of our website and to improve our service. It is not possible to assign these data to a specific individual.
The legal basis for the temporary storage of data and log files is Art. 6, section 1, letter f of the GDPR.
Duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. In the event that the data are collected for the purpose of providing the website, this is the case when the respective session is ended.
In the event that the data are stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of users will be deleted or alienated so that it is no longer possible to assign these to the clients that call up our pages.
Possibility of objection and removal
The collection of data in order to provide the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is therefore no possibility of objection on the part of the user.
Hosting services by a third party provider
In the context of processing being performed on our behalf, a third party provider renders services involving hosting and display of the website for us. This serves to protect our legitimate interests in a correct presentation of our service, which outweighs all other interests. All data collected in the course of using this website or in forms provided in the online shop for this purpose as described in the following are processed on its servers. Processing on other servers is only performed within the scope described herein.
This service provider is located within a country of the European Union or the European Economic Area.
Collecting and processing data when using the contact form
When using the contact form, we only collect your personal data (name, e-mail address, message text) to the extent that you have provided such. The data processing serves the purpose of establishing contact. By sending your message you agree to the processing of the transmitted data. The processing is based on Art. 6, section 1, letter a of the GDPR with your consent.
You can revoke your consent at any time by notifying us, without this affecting the lawfulness of the processing performed on the basis of this consent until revocation. We will only use your e-mail address to process your request. Your data will then be deleted unless you have agreed to further processing and use.
Forwarding of data
In order to fulfil the contract in accordance with Art. 6, section 1, subsection 1, letter b of the GDPR, we pass your data on to the shipping service commissioned with delivery to the extent that this is necessary to deliver the goods ordered. Depending on which payment service provider you select in the ordering process, we will pass on the payment data collected for this purpose to the credit institution commissioned to perform the payment and, if applicable, to the payment service provider commissioned by us to the selected payment service for the processing of payments. In some cases, the selected payment service providers also collect this data themselves if you open an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the data protection declaration of the respective payment service provider applies.
Data transfer to shipping company
If you have provided us your express consent to do so during or after your order, we will pass on your e-mail address and telephone number to the shipping company selected in accordance with Art. 6, section 1, subsection 1, letter a of the GDPR so that they can contact you before delivery to inform you about and coordinate delivery.
This consent can be revoked at any time by sending a message to the contact possibility stated below or directly to the shipping company at the contact addresses provided below. After revocation, we will delete the data provided by you for this purpose unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this as permitted by law and regarding which we will inform you in said declaration.
DHL Paket GmbH
United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
Use of Google reCAPTCHA
On our website we use the service of reCAPTCHA from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The query serves the purpose of distinguishing whether the input is made by a human being or by automated machine processing. The query includes the sending of the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your entry will be transmitted to Google and used there. Your IP address will, however, first be shortened by Google within the Member States of the European Union or in other signatory states of the Agreement on the European Economic Area before it is used. Only in cases of exception will the full IP address be transferred to a Google server in the USA and be shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser in connection with reCaptcha will not be combined with other data from Google. Your data may also be transferred to the USA. With regard to data transmissions to the USA, an adequacy decision by the European Commission, the "Privacy Shield", is in place. Google participates in the "Privacy Shield" and has submitted to its requirements. By clicking on the query, you consent to the processing of your data. The processing is carried out on the basis of Art. 6, section 1, letter a of the GDPR with your consent. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent until revocation.
Additional information on Google reCAPTCHA and the corresponding data protection declaration can be found at: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying the order processing. The processing is based on Art. 6, section 1, letter a of the GDPR with your consent. You may revoke your consent at any time by clicking on the "delete account" button or by notifying us without affecting the legality of the processing carried out on the basis of the consent until revocation. Your customer account will then be deleted.
Data collection when writing a comment
When commenting on an article or a commentary, we only collect your personal data (name, e-mail address, commentary text) to the extent that you have provided such. The processing serves the purpose of enabling commentaries and displaying comments. By submitting the comment, you agree to the processing of the transmitted data. The processing is based on Art. 6, section 1, letter a of the GDPR with your consent. You may revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. Your personal data will then be deleted.
If your comment is published, only the name you have provided will be published.
Collection, processing and use of personal data for orders
Use of the e-mail address to send newsletters
We use your e-mail address, regardless of the execution of the contract, exclusively for our own advertising purposes for newsletter dispatch, provided you have expressly agreed to this. The processing is based on Art. 6, section 1, letter a of the GDPR with your consent. You may revoke your consent at any time without affecting the lawfulness of the processing that has taken place on the basis of the consent until revocation. To do so, you can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the distribution list.
The newsletter will be sent by a service provider on our behalf, to whom we will forward your e-mail address for this purpose.
This service provider is located within a country of the European Union or the European Economic Area.
Sending of analysis reminders by e-mail
If you have given us your express consent to do so during or after your order in accordance with Art. 6, section 1, subsection 1, letter a of the GDPR, we will use your e-mail address as a reminder to submit a rating of your order via the analytical system we use.
This consent can be revoked at any time by sending a message to the contact option described below.
Use of PayPal
All PayPal transactions are subject to the PayPal Data Privacy Declaration. You will find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=de_DE
Integration of the Trusted Shops Trustbadge
To display our Trusted Shops seal of approval and the collected ratings as well as the offer of Trusted Shops products for buyers after an order, the Trusted Shops Trustbadge is integrated on this website.
This serves the protection of our overriding legitimate interests in offering an optimum marketing of our service in the context of a consideration of interests in an optimal marketing of our service in accordance with Art. 6, section 1, subsection 1, letter f of the GDPR. Trustbadge and the services advertised with it are a service of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When Trustbadge is called up, the web server automatically saves a so-called server log file, which contains e.g. your IP address, the date and time of the call, the data volume transferred and the requesting provider (access data) and documents the call. These access data are not analysed and are automatically overwritten at the latest seven days after the end of your visit to the site.
Other personal data are only transferred to Trusted Shops if you have consented to this, decide to use Trusted Shops products after completing an order or have already registered for use. In this case, the contractual agreement concluded between you and Trusted Shops applies.
converify.de in connection with adnet.de as technical service provider
Ve as technical service provider
The processing is performed based on the legitimate interest in the above-mentioned purposes on the basis of § 15, section 3 of the German Telemedia Act (hereinafter also referred to by its German acronym, TMG) and Art. 6, section 1, letter f of the GDPR.
The data collected from you in this way is pseudonymised by technical precautions. It is therefore no longer possible to assign the data to you as an individual. The data will not be stored together with other personal data relating to you
You can find out how you can manage the cookies of the most important browsers (as well as deactivating them) at the following links:
Chrome Browser: https://support.google.com/accounts/answer/61416?hl=de
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Use of Google DoubleClick
This website also uses the so-called DoubleClick cookie as part of the application of Google Analytics (see below), which enables recognition of your browser when you visit other websites. This serves to protect our legitimate interests, which override in the context of a consideration of interests, in the optimal marketing of our website in accordance with Art. 6, section 1, subsection 1, letter f of the GDPR. The information automatically generated by the cookie about your visit to this website is transferred to a Google server in the USA and stored there. The IP address is thereby shortened by activating IP anonymisation on this website before transmission within the Member States of the European Union or in other States which are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. The anonymised IP address transmitted by your browser within the framework of Google Analytics is not merged with other data from Google.
Google will use this information to compile reports on website activity and to provide other services related to website use. This serves to protect our legitimate interests in the optimal marketing of our website, which override any other interests. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. The data collected in this context will be deleted after the purpose has been met and use of Google DoubleClick by us.
Google Double Click is an offer from Google LLC. (www.google.de).
Google LLC has its domicile in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. On the basis of this treaty between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.
You can deactivate the DoubleClick cookie using this link. In addition, you can obtain information from the Digital Advertising Alliance about the setting of cookies and make settings for this. Finally, you can set your browser to inform you when cookies are set and decide individually whether to accept them or not, or to refuse to accept cookies in certain cases or generally. If cookies are not accepted, the functionality of our website may be limited.
Use of Google Analytics
On our website we use the web analysis service Google Analytics of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The data processing serves the purpose of analysing this website and its visitors. To this end, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide additional services to the website operator in connection with website and Internet use. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.
[https://tools.google.com/dlpage/gaoptout?hl=de]. In order to prevent collection by Google Analytics across devices, you can set an opt-out cookie. Opt-out cookies prevent the future collection of your data when you visit this website. You must opt out on all systems and devices in use for this to be fully effective. Click here to set the opt-out cookie: Disable Google Analytics.
Use of remarketing or the "similar target groups" function of Google Inc.
We use the remarketing or "similar target groups" feature of Google Inc. on our website. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). This function serves the purpose of analysing visitor behaviour and interests.
Your data may also be transferred to the USA. Data transfers to the United States are subject to an adequacy decision by the European Commission.
The processing is carried out on the basis of Art. 6, section 1, letter f of the GDPR based on a legitimate interest in addressing visitors to the website with targeted advertising by displaying personalised, interest-based advertisements for visitors to the provider's website when they visit other websites in the Google Display Network.
Use of Google Adwords Conversion Tracking
We use the online advertising program "Google AdWords" on our website and in this context conversion tracking (analysis of visitors' actions). Google Conversion Tracking is an analytical service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). When you click on an ad placed by Google, a conversion tracking cookie is placed on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages on our site and the cookie has not expired, Google and we can ascertain that you clicked on the ad and were redirected to that page. Each Google AdWords customer receives a different cookie. As a result, there is no way that cookies can be tracked across the websites of AdWords customers.
The information collected using the conversion cookie is used to compile conversion statistics. This tells us the total number of users who have clicked on one of our ads and have been redirected to a page with a conversion tracking tag. However, we do not receive information that personally identifies users. The processing is based on Art. 6, section 1, letter f of the GDPR in connection with our legitimate interest in targeted advertising and analysis of the impact and efficiency of this advertising.
You have the right to object at any time, for reasons emanating from your particular situation, to the processing of your personal data based on Art. 6, section 1, letter f of the GDPR. To this end, you can prevent the storage of cookies by selecting the appropriate technical settings in your browser software. However, we would like to note that in this case you may not be able to use all the functions of this website to their full extent. You will then not be included in the conversion tracking statistics.
Use of Social Plug-ins via "Shariff"
We use social networking plug-ins on our website. To allow you to maintain control over your information, we use the secure "Shariff" buttons.
No links to the social network servers will be created without your explicit consent and consequently no data will be transmitted.
"Shariff" is a development by specialists at the computer magazine c't. It allows more privacy on the net and replaces the usual "share" buttons of social networks. More information about the Shariff project can be found at https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.
When you click on the buttons, a pop-up window appears where you can log in with your data from the respective provider. Only after you perform this active login will a direct connection to the social networks be established.
With your login you provide your consent to the transfer of your data to the respective social media provider. In doing so, both your IP address and the information about which of our pages you have visited will be transmitted. If you are connected to one or more of your social network accounts at the same time, the information collected is also assigned to your corresponding profiles. You can only prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons. The social networks listed below are connected using the "Shariff" function.
You will find more detailed information on the scope and purpose of the collection and use of the data as well as on your rights in this regard and possibilities for protecting your privacy in the linked data protection notices of the providers.
Google+ of Google Inc. (1600 Amphitheatre Parkway, Mountain View, California, 94043 USA) https://www.google.com/intl/de/+/policy/+1button.html
Facebook of Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA) https://www.facebook.com/policy.php
Twitter of Twitter Inc. (795 Folsom St., Suite 600, San Francisco, CA 94107, USA) https://twitter.com/privacy
Use of GoogleMaps
On our website we use the function for embedding GoogleMaps maps from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
This feature allows the visual display of geographic information and interactive maps.
Your data may also be transferred to the USA. An adequacy decision has been issued by the European Commission for data transfers to the USA.
You have the right to object at any time, for reasons emanating from your particular situation, to the processing of your personal data based on Art. 6, section 1, f of the GDPR.
Facebook Custom Audiences and Facebook Marketing services
In our online offer, our legitimate interests in analysis, optimisation and economical operation of our online service apply, and for these purposes the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is used.
Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law.
First of all, the Facebook pixel enables Facebook to determine who the visitors are of our online service as a target group for the presentation of ads (so-called "Facebook ads"). Accordingly, we use the Facebook Pixel to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offer or who exhibit certain traits (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "custom audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of users and are not annoying. With the help of the Facebook Pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users have been redirected to our website after clicking on a Facebook ad (so-called "conversion").
The Facebook pixel is directly integrated by Facebook when you call up our websites and can store a so-called cookie on your device. If you then log in to Facebook or visit Facebook when logged in, the visit to our online offer will be noted in your profile. The data collected about you are anonymous to us, so we cannot draw conclusions about the identity of users. However, the data are stored and processed by Facebook so that a connection to the respective user profile is possible and can be used by Facebook as well as for our own market research and advertising purposes. If we should transmit data to Facebook for comparison purposes, these data are encrypted locally on the browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of comparing the data with the data similarly encrypted by Facebook.
Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage no longer applies. Furthermore, data may be stored if this has been provided for by European or national lawmakers in EU regulations, laws or other provisions to which the data controller is subject. Data will also be blocked or deleted when a storage period prescribed by the above-mentioned standards expires, unless there is a need to continue storing the data for the purpose of concluding or fulfilling a contract.
Contact options and your rights
As data subject, you have the following rights:
- in accordance with Art. 15 of the GDPR, the right to request information about your personal data processed by us in the scope described therein;
- in accordance with Art. 16 of the GDPR, the right to demand the immediate correction of incorrect or incomplete personal data stored by us;
- in accordance with Art. 17 of the GDPR, the right to demand the deletion of your personal data stored by us, unless further processing of the data is required
- to exercise the right to freedom of expression and information;
- to fulfil a legal obligation;
- for reasons of public interest or
- to assert, exercise or defend legal claims;
- in accordance with Art. 18 of the GDPR, the right to demand the restriction of the processing of your personal data, insofar as
- the correctness of the data is disputed by you;
- the processing is unlawful, but you object to its deletion;
- we no longer need the data, but you need it to assert, exercise or defend legal claims;
- you have lodged an objection to the processing pursuant to Art. 21 of the GDPR;
- in accordance with Art. 20 of the GDPR, the right to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another controller;
- in accordance with Art. 77 of the GDPR the right to complain to a supervisory authority. As a rule, you may contact the supervisory authority at your usual place of residence or workplace or at our registered office for this purpose.
If you have any questions regarding the collection, processing or use of your personal data, in connection with information, correction, blocking or deletion of data, the revocation of consents granted or objection to a specific use of data, please contact us directly via the contact details in our imprint.
Right of appeal to the supervisory authority
You have the right to complain to the supervisory authority under Art. 77 of the GDPR if you believe that your personal data are being processed unlawfully.
last update: 25 April 2018