- Secure order
- Easy return shipment
- Service-Hotline 04231 - 66811
Privacy PolicyUnless otherwise stated below, the provision of your personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are under no obligation to provide this data. Failure to provide it will have no consequences. This applies only insofar as no other provision is made in the following processing operations
“Personal data” refers to any information relating to an identified or identifiable natural person.
Server log files
You can visit our websites without providing any personal details.
Each time you access our website, usage data is transmitted to us or our web host / IT service provider via your internetbrowser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the volume of data transferred and the requesting internet service provider.
Processing is carried out on the basis of Article 6( 1(f) of the GDPR, based on our overriding legitimate interest in ensuring the smooth operation of our website and in improving our service.
Data Controller/Data Protection Officer
Please contact us if you wish. The data controller is: Petra Kempf (VBS Hobby Service GmbH), An den Bauernwiesen 15, 21394 Kirchgellersen, Germany, +49 (0) 4135 80 88 990, datenschutz@kempf-consulting.de
Unsolicited contact from the customer via email
If you contact us unsolicited via email, we will collect your personal data (name, email address, message text) only to the extent that you have provided it. The data processing serves to handle and respond to your enquiry.
If the contact serves to carry out pre-contractual measures (e.g. advice regarding an interest in purchasing, preparation of a quotation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Article 6(1)(b) of the GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
We use your emailaddress will only be used to process your enquiry. Your data will subsequently be deleted in accordance with statutory retention periods, provided you have not consented to further processing and use.
Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent that you have provided it. The data is processed for the purpose of establishing contact.
If the contact serves to carry out pre-contractual measures (e.g. advice regarding an interest in purchasing, preparation of a quotation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Article 6(1)(b) of the GDPR. If contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on ouroverriding legitimate interest in processing and responding to your enquiry. In this case, you have the right, on grounds arising from your particular situation, to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR. We will only use your email address to process your enquiry. Your data will subsequently be deleted in accordance with statutory retention, provided you have not consented to further processing and use.
Collection and processing when using the cancellation button
If you have entered into a contract via our website, we provide you with a withdrawal function (withdrawal button) through which you can submit your notice of withdrawal immediately
When you use the cancellation function, we collect your personal data (name, email address, details identifying the contract or part of the contract you wish to cancel, and the time (date and time) of submission of the notice of cancellation) only to the extent that you have provided it. The purpose of this data processing is to provide you with the legally requiredto withdraw from your contract, as well as to ensure the proper processing of your withdrawal.
If the contact relates to a contract already concluded between you and us, this data processing is carried out on the basis of Article 6( 1(b) of the GDPR. Otherwise, data processing is carried out on the basis of Article 6(1)(c) of the GDPR, to fulfil a legal obligation to provide you with a withdrawal function on our website.
We use your email address solely to process your notice of withdrawal. Your data will subsequentlydeleted in accordance with statutory retention periods, provided you have not consented to further processing and use.
The processing of your personal data serves the purpose of fulfilling the legal requirements for the design of the withdrawal function in a legally compliant manner and is carried out on the basis of Article 6(1)(c) of the GDPR. This data processing is also carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in being able to provide you with a user-friendly withdrawal. In this case, you have the right, on groundsarising from your particular situation, to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR.
WhatsApp Business
If you contact us for business purposes via WhatsApp, we use the WhatsApp Business version provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are located outside the EuropeanEuropean Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The data processing is carried out for the purpose of handling and responding to your contact enquiry. To this end, we collect and process your mobile, if provided, your name, and any other data to the extent you have made it available. For this service, we use a mobile device whose address book contains onlycontains data from users who have contacted us via WhatsApp. Personal data will not be disclosed to WhatsApp unless you have already given your consent to WhatsApp for this purpose does not take place.
Your data is transferred by WhatsApp to servers operated by Meta Platforms Inc. in the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has obtained certification under the TADPF and is therefore obliged to comply with European data protection principles. If the contact serves to carry out pre-contractual measures(e.g. advice regarding an interest in purchasing, preparation of a quotation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Article 6( 1(b) of the GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our &overriding legitimate interest in providing a quick and easy means of contact and in responding to your enquiry. In this case, you have the right, for reasonsarising from your particular situation.
We use your personal data solely to process your enquiry. Your data will subsequently deleted in accordance with statutory retention periods, provided you have not consented to further processing and use.
Further information on the terms of use and data protection when using WhatsApp can be found at https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.
Customer account
When you open a customer account, we collect your personal data to the extent specified there. The purpose of data processing is to improve your shopping experience and simplify order processing. Processing takes place on the basis of Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal. Your customer account will then be deleted.
Collection, processing and disclosure of personal data when placing orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order, as well as to handle your enquiries. The provision of this data isrequired for the conclusion of the contract. Failure to provide this data means that no contract can be concluded. Processing is carried out on the basis of Article 6(1)(b) of the GDPR and is necessary for the performance of a contract with you.
Your data may be disclosed, for example, to the delivery companies and dropshipping providers you have selected, payment service providers, order fulfilment service providers and IT service providers. In all cases, we strictly comply with the legal requirements. The scope of data transfer is limitedto the minimum necessary.
Data collection when submitting a comment or review
When you comment on or review an article or post, we collect your personal data (name, emailaddress, comment text) only to the extent that you provide it. The processing serves the purpose of enabling you to post a comment or review and to display comments and reviews.
By submitting the comment orrating, you consent to the processing of the data provided. Processing is carried out on the basis of Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time by notifying us, without this affecting the lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal . Your personal data will then bedeleted.
When your comment is published, only the name you have provided will be displayed.
Website logo for Google Customer Reviews
The website logo forGoogle Customer Reviews, provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) is embedded on our website.
The purpose of this embedding is to display the number and results of the reviews we have received via Google to date and to promote participation in this programme.
Google uses cookies to display the logo on our website and to show you personalised adverts on Google. In doing so, your IP address may be processed and transmitted to Google.
Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and is therefore committed to complying with European data protection principles.
The processing of your personal data is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in optimising the marketing of our services by displaying customer reviews we have already received. You have the right to object at any time to the processing of your personal data on grounds relating to your particular situation. You can disable personalised adverts for you personalised adverts. You can find instructions on how to do this at
https://support.google.com/ads/answer/2662922?hl=de. Alternatively, you can prevent third-party providers from using cookies by visiting the Network Advertising Initiative’s opt-out page at https://www.networkadvertising.org/choices/ and following the further opt-out instructions provided there.
Further information on the terms of use and data protection when using Google Customer Reviews can be found at
https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html and at https://policies.google.com/privacy?hl=de.
Google Customer Reviews rating tool
We use the Google Customer Reviews rating tool provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
Once you have placed your order, we would like to ask you to rate and comment on your purchase from us. To this end, we will contact you by email, using Google’s survey opt-inmodule. In doing so, the following information, amongst other things, may be processed and transmitted to Google: order details (e.g. order ID, country of delivery, estimated delivery date, GTIN of the products ordered) as well as your email address.
Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and is therefore obliged to comply with European data protection principles.
Processing is carried out on the basis of Article 6(1)(a) a of the GDPR with your consent, provided that you have expressly consented to the transfer of your data and to receiving the request for a review. You may withdraw your consent at any time with effect for the future, without this affecting the lawfulnessof the processing carried out on the basis of your consent up to the point of withdrawal is affected&br>Further information on the terms of use and data protection when using Google Customer Reviews can be found at
https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html and at https://policies.google.com/privacy?hl=de.
Use of your personal data for sending postal advertising
We use your personal data (name, address), which we have received in connection with the sale of goods or services, to send you postal advertising, provided you have not objected to this use. The provision this data is necessary for the conclusion of the contract. Failure to provide this data means that no contract can be concluded.
Processing is carried out on the basis of Article 6( 1(f) of the GDPR, based on our overriding legitimate interest in direct marketing. You may object to this use of your address details at any time by notifying us. You will find the contact details for exercising your right to object in the legal notice.
Use of your email addresssending newsletters
We use your email address, independently of the fulfilment of the contract, exclusively for our own advertising purposes to send newsletters, provided you have expressly consented to this. Processing is carried out on the basis of Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time, without this affecting the lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal;. To do so, you can unsubscribe from the newsletter at any time by using the relevant link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.
Your data will be passed on to an email marketing service provider as part of a. Your data will not be passed on to any other third parties.
Use of your email address for sending direct marketing
We use your email address, which we have received in connection with the sale of goods or services, to send you electronic advertising for our own goods or services, which are similar to those you have already purchased from us, provided you have not objected to this use. The provision of your email address is necessary for the conclusion of the contract. Failure to provide this information means that no contract can be concluded. The processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in direct marketing. You may object to this use of your email address at any time by notifying us. The contact details forobjection can be found in the legal notice. You may also use the link provided for this purpose in the promotional email. This will not incur any costs other than the transmission charges in accordance with standard rates.
Use of your email address foravailability notifications
We offer a stock availability notification service on our website. Should an item be temporarily out of stock, you have the option to enter your emailaddress next to the relevant item and be notified by us via email once it becomes available, provided you have consented to this. Once the item is available, you will receive a one-off email notification regarding the availability of the relevant item. Processing is carried out on the basis of Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal. You can unsubscribe from the availability notification at any time by notifying us. Your email address will thenremoved from the mailing list.
Use of PayPal
On our website, we use the PayPal payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). The purpose of this data processing is to enable us to offer you payment via this payment service. By selecting and using PayPal as your payment method, the data required for payment processing will be transmitted to PayPal in order to fulfil the contract with you in accordance with the. This processing is carried out on the basis of Article 6(1)(b) of the GDPR.
All PayPal transactions are subject to the PayPal Privacy Policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use of PayPal Plus
On our website, we use the PayPal Plus payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). The purpose of data processing is to enable us to offer you payment via this payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, the data required for payment processing will be transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) of the GDPR.
For certain payment methods, such as credit card via PayPal or direct debit via PayPal, PayPal reserves the right to obtain a credit check, where necessary, based on mathematical and statistical methods using credit reference agencies. To this end,PayPal transfers the personal data required for a credit check to a credit reference agency and uses the information received regarding the statistical probability of payment default to make a balanced decisionthe establishment, performance or termination of the contractual relationship. The credit assessment may include probability values (scores) which are calculated on the basis of scientifically recognised mathematical and statistical methods and which incorporate, amongst other things, address data. Your legitimate interests will be taken into account in accordance with the statutory provisions. The data processing serves the purpose of a credit assessment for the purpose of entering into a contract. The processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in protecting against non-payment when PayPal makes an advance payment.
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR by notifying PayPal. The provision of the data isnecessary for the conclusion of the contract using your preferred payment method. Failure to provide the data will mean that the contract cannot be concluded using your chosen payment method.
Use of PayPal Express
On our website, we use the PayPal Express payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). The purpose of data processing is to enable us to offer you payment via the PayPal Express payment service. In order to integrate this payment service, it is necessary for PayPal to collect data (e.g. IP address, device type, operating system, browser type, location of your device) . Cookies may also be used for this purpose. The cookies enable your browser to be recognised.
The processing of your personal data is carried out on the basis of Article 6( 1(f) of the GDPR, based on our overriding legitimate interest in providing a customer-oriented range of payment methods. You have the right to object at any time to the processing of your personal data on grounds relating to your particular situation.
By selecting and using PayPal Express, the data required for payment processing will be transmitted to PayPal in order to fulfil the contract with you using the selectedselected payment method. This processing is carried out on the basis of Article 6(1)(b) of the GDPR. Further information on data processing when using the PayPal Express payment service can be found in the relevantseparate privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Data collection and processing for credit checks
Where we make an advance payment, e.g. in the case of payment on account or by direct debit, we reserve the right, where necessary, to transfer personal data collected within the scope of this contractual relationship relating to the application for and the conductthis business relationship, as well as data relating to non-contractual behaviour, to CRIF GmbH, Victor-Gollancz-Str. 5, 76137 Karlsruhe &
The legal basis for this transfer is Article 6(1), first sentence, letters (b) and (f) of the General Data Protection Regulation (GDPR). The exchange of data with CRIF GmbH also serves to fulfilfulfil statutory obligations regarding the carrying out of creditworthiness checks (Sections 505a and 506 of the German Civil Code).
CRIF GmbH processes the data received and also uses it for profiling (scoring) purposes in order to provide its contractual partners in the European Economic Area and Switzerland, as well as, where applicable, other third countries, to provide information, amongst other things, for the assessment of the creditworthiness of natural persons. The transfer of personal data to third countries takes place in accordance with Article 44 et seq. GDPR. Further information on the activities of CRIF GmbH can be found in its information sheet or viewed online at www.crif.de/datenschutz.
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR by notifying us. The provision of this data is necessary for the conclusion of the contract using your chosen payment method. Failure to provide this data will mean that the contract cannot be concluded using your chosen payment method.
Use of the payment service provider Mollie
We use the payment service provider Mollie B.V. (Keizersgracht 313, 1016 EE AMSTERDAM, Netherlands; “Mollie”). The purpose of this data processing is to enable us to offer you various payment methods through payment processing via the payment service provider Mollie. Once you have selected one of the payment options offered by Mollie, the data required for payment processing will be transmitted to Mollie. This includes your payment details (for example, bank account number or credit card number), your IP address, your web browser and device type, and in some cases your first and last name, your address details and information about the product or service you have purchased from us. This data processing is carried out on the basis of Article 6(1)(b) of the GDPR. F&Further information on data processing when using the payment service provider Mollie can be found in the relevant privacy policy https://www.mollie.com/de/privacy.
Our website uses cookies. Cookies are small text files that are stored in the web browser or by the web browser on a user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a distinctive string of characters that enables the browser to be uniquely identified when the website is visited again.
Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your web browser, you can be notified before cookies are set anddecide on a case-by-case basis whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, please note that you may then not be able to make full use of all the functions of this website.
The links below provide information on how to manage cookies in the most common browsers(including how to disable them):
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies for the purpose of making our website more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser even after you have changed pages and to offer you services. Some functions of our website cannot be provided without the use of cookies. For these, it is necessary for the browser to be recognised even after you have navigated to another page.
The use of cookies or similar technologies is based on § 25(2) of the TTDSG. The processing of your personal data is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in ensuring the optimal functionalityof the website and a user-friendly and effective design of our service.
You have the right to object at any time to the processing of your personal data on grounds relating to your particular situation.
Use of Google Analytics 4
Use of Google Analytics 4 We use the web analytics service Google Analytics, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”). The purpose of data processing is to analyse this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the information collected on behalf of the operator of this website to evaluate your use of the website, to compile reports ücompile reports on website activity, and to provide the website operator with other services relating to website and internet usage. The following information, amongst others, may be collected: IP address, date and time of the page view, click path, information about the browser and device you are using, pages visited, referrer URL (the website from which you accessed our website), location data, and purchasing activity. Your data may be linked by Google to other data, such as your search history, your personal accounts, your usage data from other devices, and any other data that Google holds about you
The IP address is truncated by Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area
Google uses technologies such as cookies, browser-based web storage andtracking pixels, which enable an analysis of your use of the website. The use of cookies or similar technologies is subject to your consent on the basis of Section 25(1), first sentence, of the TTDSG in conjunction with Article 6(1)(a) of the GDPR.
The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulnessä&of the processing carried out on the basis of your consent up to the point of withdrawal.
The information generated in this way regarding your use of this website is generally transmitted to a Google server in the USA &and stored there. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and is therefore obliged to comply with European data protection principles. Both Google and US government authorities have access to your data.
Further information on the Terms of Use and data protection can be found at
https://policies.google.com/technologies/partner-sites and at
https://policies.google.com/privacy?hl=de&gl=de.
Use of the Facebook Pixel
We use the ‘Custom Audiences’ remarketing feature provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ‘Facebook’) on our website.
Meta Platforms Ireland and we are joint controllers f&the collection of your data and the transfer of this data to Facebook that takes place when the service is integrated. The basis for this is an agreement between us and Meta Platforms Ireland on the joint processing of personal data, which sets out the respective responsibilities. The agreement is available at https://www.facebook.com/legal/controller_addendum. Under this agreement, we are specifically responsible for fulfilling the information obligations in accordance with Articles 13 and 14 of the GDPR, for compliance with the security requirements of Article 32 of the GDPR with regard to the correct technical implementation and configuration of the service, and for compliance with the obligations under Articles 33 and 34 of the GDPR, insofar as a breach of personal data protection affects our obligations under the agreementon joint processing. Meta Platforms Ireland is responsible for facilitating data subjects’ rights in accordance with Articles 15–20 of the GDPR, for ensuring compliance with the security requirements of Article 32 of the GDPR with regard to the security of the service,and to fulfil the obligations under Articles 33 and 34 of the GDPR, insofar as a breach of personal data protection affects Meta Platforms Ireland’s obligations under the Joint Processing Agreement.
The application serves the purpose of targeting website visitors with interest-based advertising on the Facebook social network. To this end, Facebook’s remarketing tag has been implemented on the website. When a user visits the website, this tag establishes a direct connection to the Facebook servers is established. This transmits information to the Facebook server regarding which of our pages you have visited. Facebook associates this information with your personal Facebook user account. When you visit the Facebook social network, you will then be shown personalised, interest-based Facebook adverts.
Your data may be transferred to the USA. Fün the case of the USA, an adequacy decision by the European Commission is in place: the Trans-Atlantic Data Privacy Framework (TADPF). Meta has obtained certification under the TADPF and has thereby undertaken to comply with European data protection principles.
The use of cookies or similar technologies is subject to your consent on the basis of § 25(1) sentence 1 TTDSG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data is subject to your consenton the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent up to the point of withdrawal.
Further information on the collection and use of data by Facebook, your rights in this regard and ways to protect your privacy can be found in Facebook’s privacy policy at https://www.facebook.com/about/privacy/.
Use of Google Ads conversion tracking
We use the online advertising programme “Google Ads” on our website and, as part of this, conversion tracking (visitor action analysis). Google conversion tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an advert placed by Google, a conversion tracking cookie is stored on your computer. These cookies have a limited validity period, do not contain any personal data and therefore cannot be used to identify you personally. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognise that you clicked on the advert and were redirected to that page. Each Google Ads customer receives a different cookie. Consequently, it is not possible for cookies to be tracked across the websites of Ads customers.
The information collected using the conversioncookie is used to compile conversion statistics. This tells us the total number of users who clicked on one of our adverts and were redirected to a page tagged with a conversion. However, we do not receive any information that can be used to personally identify users.
Your data may be transferred to Google LLC’s servers in the USA. An adequacy decision by the European Commission is in place for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and has thereby undertaken to comply with European data protection principles.
The use of cookies or similar technologies is subject to your consent on the basis of &Section 25(1), first sentence, of the TTDSG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) of the GDPR. Youou may withdraw your consent at any time without this affecting the lawfulness&of the processing carried out on the basis of your consent up until the time of withdrawal.
Further information and Google’s privacy policy can be found at:
https://www.google.de/policies/privacy/.
Use of the remarketing or “Similar Audiences” function provided by Google Inc.
We use the remarketing or “similar audiences” function provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
This function is used to analyse visitor behaviour and interests. Google uses cookies to analyse website usage, which forms the basis for the creation of interest-based adverts. &These cookies are used to record visits to the website and anonymised data on website usage. No personal data relating to website visitors is stored. If you subsequently visit another website within the Google Displaynetwork, you will be shown adverts that are highly likely to take into account the product and information sections you have previously viewed.
Your data may be transferred to servers operated by Google LLC in the USA &. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is subject to your consent in accordance with Section 25(1) sentence 1 of the TTDSG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulnessof the lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal.
Further information on Google Remarketing and the associatedprivacy policy can be found at: https://www.google.com/privacy/ads/.
Use of the Pinterest tag
We use the Pinterest tag from Pinterest Europe Limited (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) “Pinterest").
The purpose of this application is to target website visitors with interest-based advertising on the social network Pinterest. To this end, the Pinterest conversion tag has been implemented on the website. When you visit the website, this tag establishes a direct connection to the Pinterest servers. This transmits information to the Pinterest servers which of our pages you have visited. Pinterest associates this information with your personal Pinterest user account if you are logged in to the social network. When you visit Pinterest, you will then be shown personalised, interest-based Pinterest adverts.
If you access our website via a pin on the social network Pinterest, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity period, do not contain any personal data and therefore cannot be used to identify you personally. If you visit certain pages on our website and the cookie has not yet expired, Pinterest and we can recognise that you clicked on the pin and were redirected to that page. The information collected via the conversion cookie is used to compile conversion statistics and thereby optimise our website. In this context, the following information, amongst other things, the following information may be processed: the total number of users who have clicked on one of our pins and been redirected to our website, subpages visited on our website (e.g. category or product pages), search queries on our website, the contents of your shopping basket, and completed transactions.
Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF. The data transfer is based, amongst other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de (https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de).
The use of cookies or similar technologies is subject to your consent on the basis of Section 25(1), first sentence, of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulnessof the lawfulness of the processing carried out on the basis of your consent up to the point of withdrawal.
Further information on the collection and use of data by Pinterest, your rights in this regard and theto protect your privacy can be found in Pinterest’s privacy policy at https://policy.pinterest.com/de/privacy-policy (https://policy.pinterest.com/de/privacy-policy).
Use of Microsoft Advertising
We use Microsoft Advertising from Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; "Microsoft").
Data processing is carried out for marketing and advertising purposes and to measure the effectiveness of advertising campaigns (conversion tracking). We are informed of the total number of users who have clicked on one of our adverts and been redirected to a page tagged with a conversion tracking tag. However, this does not allow for the personal identification of these users. Microsoft Advertising uses technologies such as cookies andpixel tags, which enable an analysis of your use of the website. When you click on an advert placed by Microsoft Advertising, a cookie for conversion tracking is stored on your computer. This cookie has a limited validityand is not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Microsoft and we can recognise that you clicked on the advert and were redirected to that page. In doing so, the following information maya. the following information may be collected: IP address, identifiers assigned by Microsoft, information about the browser you are using and the device you are using, referrer URL (the websitevia which you accessed our website), and the URL of our website.
Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Microsoft has certified itself under the TADPF and is therefore obliged to comply with European data protection principles.
The use of cookies or similar technologies is subject to your consent on the basis of Section 25(1), first sentence, of the TTDSG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent up to the point of withdrawal.
Fühere Information on data protection and the cookies used by Microsoft can be found here https://privacy.microsoft.com/de-de/privacystatement.
Use of the Awin affiliate programme
We use the “Awin" run by AWIN AG (Eichhornstraße 3, 10785 Berlin; "Awin").
When you click on an advert containing an affiliate link, Awin will place a cookie on your computer for conversion tracking . The cookies serve the purpose of ensuring correct billing within the affiliate programme by recording the success of an advertising medium. The cookies recognise that you have clicked on the advert and enable the advertiser to trace the origin of the order. Awin also uses a technique known as ‘fingerprinting’. This enables the device you are using to be recognised. Among other things, Awin can detect that the affiliate link on this website has been clicked or viewed. Awin records, amongst other things, your transaction data (such as order value, product type, sales channel, use of a voucher) and your username in the form of a unique numerical sequence, so that your identity, but which contains information on the specific user actions and the end device used by the user.
Your data may be transferred to third countries such as the USA. No adequacy decision has been issued by the EU Commission. The data transfer is carried out, amongst other things, on the basis of Standard Contractual Clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or similar technologies is subject to your consent in accordance with Section 25( 1(1) of the TTDSG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal.
The privacy policywith detailed information on Awin’s use of data can be found at https://www.awin.com/de/datenschutzerklarung.
Mouseflow
We use the analytics tool provided by Mouseflow ApS (Flaesketorvet 68, 1711 Copenhagen, Dänemark; “Mouseflow”).
Data processing serves the purpose of personalising and analysing this website and its visitors. Mouseflow uses technologies such as cookies, web beacons and scripts. The cookies enableenable the recognition of the web browser. In doing so, the following information, amongst other things, may be collected: IP address, click path, information about the browser and operating system you are using, pages visited, time spent on our website, content viewed, and location data. Usage profiles may be created from this data under a pseudonym. The Mouseflow web tracking tool may alsorandomly selected individual visits (using only an anonymised IP address). This generates a log of mouse movements and clicks with the aim of randomly replaying individual website visits and deriving potential improvements for the website from this. The data collected using MouseFlow technologies will not be used to personally identify visitors to this website without the data subject’s separate consent, nor will it be combined with personal data relating to the holder of the pseudonym
Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Mouseflow has obtained certification under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies takes place with your consent pursuant to Section 25(1), first sentence, of the TDDDG inconjunction with Article 6(1)(a) of the GDPR. The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulnessof the lawfulness of the processing carried out on the basis of your consent up to the point of withdrawal.
Further information on the collection and use of your data by Mouseflow can be found at https://mouseflow.com/legal/visitor/.
AdRoll / Nextroll
On our website, we use a web tracking service provided by AdRoll Advertising Limited, 1 Burlington Plaza, 4 Dublin, Ireland (hereinafter: AdRoll). As part of its web tracking, AdRoll uses cookies that are stored on your computer and enable an analysis of your use of our website and your browsing behaviour (so-called ‘tracking’). We carry out this analysis using AdRoll’s tracking service in order to optimise our websiteand to make it more accessible. The legal basis for this is our legitimate interest pursuant to Article 6(1)(f) f of the GDPR. This legitimate interest arises from the ongoing improvement of our services. When you use our website, data – in particular your IP address and your user activities – is transmitted to servers operated by AdRoll Advertising Limited and processed and stored within the European Union and stored. The legal basis for data processing is Article 6(1)(a) of the GDPR. The data will be deleted as soon as the purpose for which it was collected has been fulfilled. Further information on the handling of the transferred data can be found in AdRoll’s privacy policy: https://www.adroll.com/about/privacy.
You can prevent the collection and transmission of personal data (in particular your IP address) as well as the processing of this data by disabling thescript code in your browser, installing a script blocker in your browser, or activating your browser’s “Do Not Track” setting.
Use of Google Tag Manager
We use Google Tag Manager, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
This application is used to manage JavaScript and HTML tags, which are used in particular to implement tracking and analytics tools. The purpose of data processing is to tailor the design of our website to users’ needs and to optimise it. The legal basis forthis processing is Article 6(1)(a) of the GDPR.
Google Tag Manager itself does not store any cookies, nor does it process any personal data. However, it enables the triggering of other tags that may collect and process personal data.
FüFurther information on terms of use and data protection can be found here
https://www.google.com/intl/de/tagmanager/use-policy.html.
Use of social plug-ins via “Shariff”
We use social network plug-ins on our website. To ensure you retain control over your data, we use the privacy-compliant “Shariff” buttons.
Without yourexplicit consent, no connections are established to the social network servers and, consequently, no data is transmitted.
“Shariff” was developed by specialists at the computer magazine c’t. It enables greater privacy online and replaces the usual “Share” buttons used by social networks. You can find more information about the Shariffproject can be found here https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.
When you click on the buttons, a pop-up window appears in which you can log in to the respective provider using your details. Only after you have actively logged in in this way will a direct connection to the social networks be established.
By logging in, you consent to thetransfer of your data to the relevant social media provider. Among other things, both your IP address and information about which of our pages you have visited will be transmitted. If you are logged into one or more of your social media accounts at the same time, the information collected will also be linked to your corresponding profiles. You cancan only be prevented by logging out of your social media accounts before visiting our website and before clicking the buttons. The social networks listed below are integrated via the “Shariff” function.
Further information on the scope and purpose of the collection and use of data, as well as yourand the options available to you for protecting your privacy can be found in the providers’ privacy policies, which are linked below.
The legal basis for this processing is Article 6(1)(a) of the GDPR.
Facebook by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
https://www.facebook.com/policy.php
Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Meta has obtained certification under the TADPF and is therefore obliged to comply with Europeandata protection principles.
Instagram, operated by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland) https://help.instagram.com/155833707900388.
Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Meta has obtained TADPF certification and has thereby committed to complying with European data protection principles.
Pinterest, operated by Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA) https://about.pinterest.com/de/privacy-policy
Your data may be transferred to the USA. An adequacy decision by the European Commission exists for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF.
Use of YouTube
On our website, we use the function for embedding YouTube videos provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”). YouTube is an affiliate of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
This feature displays videos hosted on YouTube within an iFrame on the website. The “Enhanced Privacy Mode” option is enabled. As a result, YouTube does not store any information &about visitors to the website. Only when you watch a video is information about it transmitted to YouTube &and stored there. Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has obtained certification under the TADPF and is therefore committed to complying with European data protection principles.
The processing of your personal data is carried out on the basis of Article 6(1)(f) of the GDPR, based on our &overriding legitimate interest in designing the website in a way that meets your needs and is targeted to your interests. You have the right to object at any time to the processing of your personal data on grounds relating to your particular situation.
Further information on the collection and use of data by YouTube and Google, &about your rights in this regard and ways to protect your privacy can be found in YouTube’s privacy policy at https://www.youtube.com/t/privacy.
Sentry.io
Our partner Messagebird uses the Sentry service (Sentry, 1501 Mariposa St #408, San Francisco, CA 94107, USA) to improve the technical stability of its services by monitoring system stability and identifying code errors. Sentry serves these purposes alone and does not analyse data for advertising purposes. User data, such as device details or the time of an error, is collected anonymously, is not used to identify individuals, and is subsequently deleted. Further information on this can be found in Sentry’s privacy policy: https://sentry.io/privacy/.
The legal basis for this processing is Article 6(1)(f) of the GDPR.
Peerius (Episerver GmbH, Optimizely Inc.)
This website uses technologies from Optimizely Inc. (https://www.optimizely.com/) are used to store data for marketing and optimisation purposes. This data enables us to tailor our website specifically to your interests and offer you a personalised service. This is achieved by analysing your user behaviour based on the products, f&you have already shown an interest in in our shop.
The analysis is carried out using so-called “cookies”, small text files, which are stored on your computer or mobile device. These cookies enable us to recognise your browser when you visit our website again. Usage profiles are created exclusively under pseudonyms and are not linked to your personal data.
If you do not wish to use our personalised website service, you can either delete the cookies stored on your device after visiting our website, or you canset your internet browser so that, as a general rule, no cookies can be stored on your computer. The legal basis for this processing is Article 6(1)(f) of the GDPR.
Integration of the Trusted Shops Trustbadge
Provided you have given your consent in accordance with Article 6(1), first sentence, point (a) of the GDPR, Trusted Shops widgets are integrated into this website to display Trusted Shops services (e.g. quality seals, collected reviews) and to offer Trusted Shops products to buyers following an order.
The Trustbadge and the services advertised through it are provided by Trusted Shops AG, Subbelrather Str. 15C, 50823 Köln (“Trusted Shops”), with whom we are joint controllers under Article 26 of the GDPR. In this privacy notice, we set out below the key terms of the agreement in accordance with Article 26(2) of the GDPR.
In the context of the joint controllership between us and Trusted Shops, please contact Trusted Shops in the first instance regarding data protection queries and to exercise your rights, using the contact details provided in the privacy policy (https://www.trustedshops.de/impressum/#datenschutz). Regardless of this, you may always contact the data controller of your choice. Your enquiry will then, if necessary, be forwarded to the other data controller for a response.
1. Data processing when the Trustbadge or other widgets are integrated
The Trustbadge is provided by a US-based CDN (Content Delivery Network) provider.
An adequate level of data protection is ensured in each case by an adequacy decision of the European Commission, which applies to the USA here (https://commission.europa.eu/system/files/2023-07/Adequacy%20decision%20EU-US%20Data%20Privacy%20Framework_en.pdf). Service providers based in the USA are generally certified under the EU-US Data Privacy Framework (DPF) . Further information is available here. Where service providers used are not certified under the DPF, standard contractual clauses have been agreed as an appropriate safeguard.
When the Trustbadge is accessed, the web server automatically stores a so-called server log file, which contains your IPaddress, the date and time of the request, the volume of data transferred and the requesting provider (access data), and documents the request. The IP address is anonymised immediately after collection, so that the stored data cannot be linked to you. The anonymised data is used in particular for statistical purposes and for error analysis.
2. Data processing after completion of an order
Provided you have given your consent, once the order has been completed, the Trustbadge accesses order information stored on your device (order total, order number, product purchased where applicable) as well as your E-mail address is hashed using a cryptographic one-way function. The hash value is then transmitted to Trusted Shops together with the order information in accordance with Article 6(1), first sentence, point (a) of the GDPR. This serves toverify whether you are already registered for Trusted Shops’ services. If this is the case, further processing takes place in accordance with the contractual agreement between you and Trusted Shops (https://www.trustedshops.com/tsdocument/BUYER_AUTO_PROTECTION_TERMS_de.pdf#:~:text=Buyer%20protection%3A%20%E2%80%A2%20Once%20you%20have%20successfully%20registered%20for%20the%20Basic,(main target market) and display the Trusted Shops%20quality seal). If you have not yet registered for the services or do not give your consent to automatic recognition via the Trustbadge, you will subsequently be given the opportunity to register manuallyto use the services or to finalise the security arrangements under your existing user agreement, if applicable.
For this purpose, once you have completed your order, the Trustbadge accesses the following information stored on the device you are using: order total, order number and email address. This is necessary so that we can offer you buyer protection. The data will only be transmitted to Trusted Shops once you have actively opted to take outby clicking on the button labelled as such on the so-called Trustcard. If you decide to use the services, further processing is governed by the contractual agreement with Trusted Shops in accordance with Art. 6(1)(b) of the GDPR, in order to complete your registration for buyer protection and to secure the order, as well as to send you review invitations by email where applicable
Trusted Shops uses service providers for hosting, monitoring and logging. The legal basis is Article 6(1)(f) of the GDPR for the purpose of ensuring trouble-free operation. In this context, processing may take place in third countries (the USA and Israel).
An adequate level of data protection is ensured in each case by an adequacy decision of the European Commission, which for the USA can be found here (https://commission.europa.eu/system/files/2023-07/Adequacy%20decision%20EU-US%20Data%20Privacy%20Framework_en.pdf) and for Israel here (https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32011D0061). Service providers based in the USA are generally certified under the EU-US Data Privacy Framework. Further information is available here (https://www.dataprivacyframework.gov/s/). Where service providers used are not certified under the DPF, standard contractual clauses have been agreed as an appropriate safeguard.
Retention period
Once the contract has been fully fulfilled, the data will initially be retained for the duration of the warranty period; thereafter, subject tostatutory retention periods, in particular those under tax and commercial law, and then deleted once these periods have expired, provided you have not consented to further processing and use.
Rights of the data subject
Provided the legal requirements are met, you are entitled to the following rights under Articles 15 to 20 of the GDPR: the right of access, the right to rectification, the right to erasure, the right to restrictionrestriction of processing, and to data portability.
In addition, pursuant to Article 21(1) of the GDPR, you have the right to object to processing based on Article 6(1)(f) of the GDPR, as well as to processing for the purposes of direct marketing.
Right to lodge a complaint to the supervisory authority
Under Article 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data is not lawful.
You maybe lodged, amongst others, with the supervisory authority responsible for us, which you can contact using the following details:
State Data Protection Commissioner for Lower Saxony
Prinzenstraße 5
30159 Hanover
Tel.: +49 511 1204500
Fax: +49 511 1204599
Email: poststelle@lfd.niedersachsen.de
Right to object
Where the processing of personal data listed here is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR, you have the right, on groundsarising from your particular situation.
Once an objection has been lodged, the processing of the data in question will cease, unless we can demonstrate compelling legitimate interests.for the processing that override your interests, rights and freedoms, or where the processing is necessary for the establishment, exerciseor defence of legal claims.
If personal data is processed for the purposes of direct marketing, you may object to such processing at any time by notifying us. Once an objection has been lodged, we will cease processing the data in question for the purposes of direct marketing.
