HEY! OLTRE 130.000 CLIENTI SODDISFATTI!
SPEDIZIONE GRATUITE IN TUTTO IL MONDO!
HEY! OLTRE 130.000 CLIENTI SODDISFATTI!
SPEDIZIONE GRATUITE IN TUTTO IL MONDO!
I boxer che miglioreranno la TUA vita! I boxer che miglioreranno la TUA vita!

Carrello Close

Information on data protection

This privacy policy informs you about our handling of your data. In order to make the processing of your data comprehensible to you, we would like to provide you with the following information to give you an overview of this processing. In order to ensure fair processing, this data protection declaration contains general information about our handling of your data as well as information about your rights according to the European Data Protection Basic Regulation (DSGVO) and the Federal Data Protection Act (BDSG).

We also inform you in detail about

I. General information

II. data processing via our website

III. data processing via our Mobile Shopping App

IV. Data processing via our Facebook fan page

V. Further data protection processing.

Responsible for data processing: see imprint (hereinafter referred to as "we" or "us").

I. General information

1st contact

If you have any questions or suggestions regarding this information or if you would like to contact us about asserting your rights, please address your enquiry to > see imprint.

2. general information on data processing

The term "personal data" in data protection law refers to all information relating to an identified or identifiable individual.

We process personal data in compliance with the relevant data protection regulations, in particular the DSGVO and the BDSG. Data processing by us is only carried out on the basis of a legal permission. We process personal data only with your consent (Art. 6 para. 1 letter a) DSGVO), for the fulfilment of a contract to which you are a party or, at your request, for the implementation of pre-contractual measures (Art. 6 para. 1 letter b) DSGVO), for the fulfilment of a legal obligation (Art. 6 para. 1 letter c) DSGVO) or if the processing is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms that require the protection of personal data outweigh the processing (Art. 6 para. 1 S letter f) DSGVO). If you apply for a vacant position in our company, we also process your personal data to decide on the establishment of an employment relationship (Art. 26 para. 1 S. 1 BDSG).

3. general information on the purposes of data processing

The processing of personal data that you provide us with or that we collect about you in any other way serves the following purposes, among others:

To identify you as a registered user when you log on to our website and visit it again;

to process payments;

to improve the Website and our services;

to answer your questions and provide you with appropriate customer services;

to send you our newsletter;

recommend personalised offers on the Website;

Enable our social sharing features, including providing you with the option to connect with members of your network who are both customers of and members of one or more social networks;

carry out various internal business activities, such as data analysis, controls, monitoring and fraud prevention measures, developing new products and services, improving or revising the Site or our services, identifying usage trends, determining the effectiveness of our advertising campaigns, and conducting and expanding our business;

ensure compliance with laws and procedures and the requirements of public and government authorities, applicable industry standards and our internal policies;

enforce our terms and conditions;

protect our business and that of our affiliated companies;

protect our rights, our privacy, our security or our property and/or those of our affiliates, you or others;

allow us to seek possible remedies and limit any damages we may suffer.

4. duration of storage

Unless otherwise stated in the following information, we only store the data for as long as is necessary to achieve the purpose of processing or to fulfil our contractual or legal obligations. Such statutory storage obligations may result in particular from commercial or tax law regulations. If we store the data because of the existence of a legal obligation to retain data, this processing is based on the legal basis of Article 6, paragraph 1, letter. c DSGVO.

5. recipient of the data
We use commissioned service providers for individual processing. This includes, for example, hosting, maintenance and support of IT systems, document management, marketing measures or monitoring. These service providers process the data only on express instruction and are contractually obliged to guarantee suitable technical and organisational measures for data protection. Furthermore, we may transfer personal data of our customers to entities such as postal and delivery services, or logistics services, payment and information services, house bank, tax advisor/auditor or the financial administration.

6. processing when exercising your rights according to art. 15 to 22 DSGVO
If you exercise your rights in accordance with articles 12 to 22 of the DSGVO, we process the personal data transmitted for the purpose of implementing these rights by us and to provide proof of this.

We will process data stored for the purpose of providing information and preparing it only for this purpose as well as for the purposes of data protection control and otherwise restrict processing in accordance with Art. 18 DSGVO.

These processing operations are based on the legal basis of Article 6 paragraph 1 letter. c) DSGVO in conjunction with Articles 15 to 22 DSGVO and Section 34 (2) BDSG.

7. your rights
As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:

In accordance with Art. 15 DSGVO and § 34 BDSG, you have the right to request information as to whether and, if so, to what extent we process personal data relating to you or not.
In accordance with Art. 16 DSGVO, you have the right to demand that we correct your data.
You have the right to demand that we delete your personal data in accordance with Art. 17 DSGVO and § 35 BDSG.
You have the right to have the processing of your personal data restricted in accordance with Art. 18 DSGVO.
You have the right, in accordance with Art. 20 DSGVO, to receive the personal data concerning you that you have provided us with in a structured, common and machine-readable format and to transfer this data to another person responsible.
If you are of the opinion that the processing of personal data relating to you is in breach of the provisions of the DSGVO, you have the right to appeal to a supervisory authority in accordance with Art. 77 DSGVO.

8. revocation of consent
If you have given us separate consent to data processing, you can revoke this consent at any time in accordance with Art. 7 Para. 3 DSGVO. Such a revocation does not affect the lawfulness of the processing which has taken place until revocation on the basis of the consent.

9. right of objection
Under Article 21(1) of the DSGVO, you have the right to object to processing operations based on the legal basis of Article 6(1)(e) or (f) DSGVO for reasons arising from your particular situation. If personal data relating to you is processed by us for the purpose of direct advertising, you may object to this processing in accordance with Art. 21, Paragraph 2 and Paragraph 3 of the DSGVO.

10. data protection officer
You can reach our data protection officer at the following contact details > see imprint.

II. data processing via our website
When using our website, we collect information that you provide yourself. In addition, certain information about your use of the website is automatically collected during your visit to the website. In data protection law, the IP address is also generally regarded as a personal date. An IP address is assigned to every device connected to the Internet by the Internet provider so that it can send and receive data.

1. data transfer to the USA
Visiting our website may involve the transfer of certain personal data to the USA. For data transfers to the USA as a third country, i.e. a country in which the DSGVO is not applicable law, the European Commission has decided in accordance with Art. 45 DSGVO that an adequate level of data protection is required with regard to companies certified under the EU-US Privacy Shield. The transfer to the US will then be carried out in a lawful manner.

2. processing of server log files
When you use our website for purely informative purposes, general information is initially stored automatically (i.e. not via registration), which your browser sends to our server. This information is standard:

Our visited website;
Date and time of access;
amount of data sent in bytes;
Source/reference from which you reached the site;
Browser used;
Operating system used;
IP address used (possibly: in anonymised form);
The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 Paragraph 1 Letter f) DSGVO. This processing serves the technical management and security of the website. The stored data will be deleted after thirty days, unless there is a justified suspicion of illegal use based on concrete evidence and further examination and processing of the information is necessary for this reason.

We are not in a position to identify you as a data subject on the basis of the stored information. According to Art. 11 para. 2 DSGVO, Art. 15 to 22 DSGVO are therefore not applicable unless, in order to exercise your rights set out in these articles, you provide additional information that enables your identification.

3 Processing of personal data by Shopify International Limited
To operate our online shop we use Shopify, a service provided by Shopify International Limited (Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, "Shopify Limited"). Shopify is an e-commerce platform through which we offer our goods for sale.

When you use our online shop, Shopify Limited processes your name, email address, shipping and billing address, payment information, your company name and telephone number where applicable. It also processes the IP address used, information about orders you place, information about the online shops you visit based on the Shopify platform, and information about your device and browser used.

The processing is carried out on our behalf in order to provide you with the online shop. This processing is carried out to protect our legitimate interest in offering our products via an online shop. It is based on the legal basis of article 6 paragraph 1 letter f) DSGVO.

If the processed data is transferred to Shopify Inc. (150 Elgin St., 8th Fl, Ottawa, ON K2P 1L4, Canada) located in Canada, the European Commission has determined in an adequacy finding pursuant to Art. 45 DSGVO that the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) provides an adequate level of data protection. The Adequacy Decision can be found at https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32002D0002&from=EN

We cannot exclude the possibility that personal data may be transferred to Shopify (USA) Inc. based in the USA. Shopify (USA) Inc. is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000TNSNAA4).

For more information about Shopify Limited's data processing practices, please visit https://www.shopify.com/legal/privacy.

4. contact details and enquiries
To manage and process contact requests we use the Enchant service of the Canadian company Senvee Inc, 45 Broadbridge Dr Toronto, ON M1C 3K5. The data transfer is based on an adequacy decision of the European Commission according to Art. 45 DSGVO (https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32002D0002&from=en).

If your enquiry is directed at the conclusion or implementation of a contract with us, Art. 6 Paragraph 1 Letter b) DSGVO is the legal basis for data processing. Otherwise, we process the data on the basis of our legitimate interest in getting in contact with requesting persons. The legal basis for data processing is then Art. 6 para. 1 letter f) DSGVO.

5. ordering a product
a. Processing of information provided
If you order a product via our website, we process personal data exclusively for the purpose of processing the contract or to provide you with the ordered product or programme. During the booking or ordering process, we process the data that you yourself have entered in the input mask, further information for processing your order and, if applicable, payment information if you pay by advance bank transfer. We also process further information about the status of your payment. The provision of this data is necessary for the conclusion of a contract.

In order to be able to deliver the ordered products to you, we transmit your data required for delivery to one of our delivery service providers as specified in the order.

The legal basis for the processing is in each case Art. 6 para. 1 letter b) DSGVO. All data fields marked as mandatory fields are required to process your booking or order. Failure to provide them will mean that we will not be able to process your booking or order. The provision of further data is voluntary.

b. Payment by credit card
We offer you the possibility to pay by credit card. In order to execute the payment, we transmit the credit card data you have entered in encrypted form to the service provider (acquirer) Stripe, Inc. (510 Townsend Street, San Francisco, California 94103, "Stripe"). After the payment has been executed, Stripe will report this back to us. Stripe is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000TQOUAA4) Please note that Stripe is responsible for the collection and processing of payment information.

c. Payment via Paypal
Furthermore you have the possibility to pay via Paypal. Please note that the relevant payment information is collected and processed by PayPal (Europe) S.à r.l. et Cie, S.C.A. based in Luxembourg.

Paypal transfers to us your address data stored with Paypal, which we process exclusively for the execution of the contract. The legal basis is article 6 paragraph 1 letter b) DSGVO.

d. Payment by instant bank transfer
We offer you the payment method "Immediately" in cooperation with the service provider Sofort GmbH, a company of the Klarna Group, located at Theresienhöhe 12, 80339 Munich. If you use this service, Sofort GmbH will send us confirmation of the successful placement of the transfer order for your order. This includes the data from the remittance form (name, account number, bank code, subject, remittance amount) as well as the date (with time) and the transaction identification chosen by us (e.g. order number). For SEPA transfers and if, depending on your bank, BIC and IBAN are required to set up the transfer to your online banking account, the confirmation sent to us will also contain BIC and IBAN. In principle, we can also take these data from our bank statement. Sofort GmbH does not transmit further personal data to us. We process the received data for the purpose of contract implementation on the legal basis of Article 6 paragraph 1 letter b) DSGVO.

For the rest, Sofort GmbH processes the data on its own responsibility.

Further information on data protection at Sofort GmbH can be found at the address https://www.klarna.com/sofort/kundenservice/erfahre-mehr-ueber-den-datenschutz-bei-sofort-gmbh-a-klarna-group-company/.

6. customer account
You have the possibility to create a user account. For this purpose we will collect your first and last name. In addition, you must enter an e-mail address and assign a password. We also process the other information you add to your user profile. After successful registration, you can log in to the protected customer area with your e-mail address and password. If you have forgotten your password, we will use the e-mail address provided to send you an e-mail to reset your password.

The customer account allows you to view your order history at any time. In addition, you can manage your addresses, which are available for pre-selection when ordering. The creation of a user account is voluntary. The website can also be used as a guest.

The processing of personal data is based on the legal basis of article 6 paragraph 1 letter b) DSGVO.

7. search in the webshop
To offer you the search function on our website, we process the IP address used and the search query. The processing serves to protect our legitimate interest in enabling visitors to our website to use the website easily and is based on the legal basis of Art. 6 Para. 1 Letter f) DSGVO.

8. product recommendations
In order to be able to show you product recommendations on our site that are specially tailored to you, we process your IP address and the product pages you have already visited. For this purpose, we work together with our contracted service provider LimeSpot Solutions Inc. (LimeSpot). LimeSpot also processes the data on services of Micosoft Azure Plattfom. This may involve the transfer of data to the USA or Canada. If this is the case, Microsoft is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK) for transfer to the USA. The transfer of data to Canada is based on an adequacy decision of the European Commission in accordance with Art. 45 DSGVO (https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32002D0002&from=en.

9. customer satisfaction analysis
a. Satisfaction analysis with order
When you order a product in our shop, we will ask you to rate your satisfaction with your order by e-mail. To send you this request, we will use the e-mail address you have provided us with. We also process your name, the IP address and IP geolocation used and information about your order. The data processing within the framework of this customer satisfaction survey is based on the legal basis of Art. 6, Paragraph 1, Letter f) DSGVO. The processing serves the purpose of direct advertising and our legitimate interest in checking the quality of our offer. In order to carry out the survey, we are working with the service provider Nice Reply s.r.o., which we commissioned. (Štefanovičova 2971/8, 811 04 Bratislava, Slovak Republic).

You can object to the processing and in particular to the use of your e-mail address for this purpose at any time in accordance with Art. 21 Par. 2 DSGVO, without incurring any costs other than the transmission costs according to the basic tariffs.

b. Satisfaction analysis for support requests
If you contact us as part of a customer enquiry, we will also ask you to evaluate your satisfaction with the processing of your enquiry by us in the support mail. The data processing within the framework of this customer satisfaction survey is based on the legal basis of Art. 6 Para. 1 letter f) DSGVO. The processing serves our legitimate interest in checking the quality of our offer. In order to carry out the survey, we work with Enchant, the service provider commissioned by us from the Canadian company Senvee Inc. (45 Broadbridge Dr Toronto, ON M1C 3K5). The data transfer to Canada is based on an adequacy decision of the European Commission according to Art. 45 DSGVO (https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32002D0002&from=en).

10. Newsletter
a. Customer information
If you provide us with your e-mail address when placing an order in our shop, we will use this e-mail address to inform you about our products and offers in the future. We will only inform you about products that we offer ourselves and in which you might be interested. We process personal data such as your e-mail address and your name to protect our legitimate interest in informing our existing customers about our products and offers. The legal basis for data processing is Art. 6 Para. 1 letter f) DSGVO in conjunction with § 7 paragraph 3 UWG. 
You can object to this processing at any time in accordance with Art. 21 Para. 2DSGVO, for example by using the corresponding link in a received e-mail or by contacting us via the above-mentioned channels.

b. Newsletter
On our website we offer the possibility to register for our newsletter. After registration we will inform you regularly about the latest news about our offers. A valid e-mail address is required to register for the newsletter. To verify the e-mail address, you will first receive a registration e-mail, which you must confirm via a link (double opt-in). If you subscribe to the newsletter on our website, we process personal data such as your e-mail address and your name on the basis of the consent you have given. The processing is based on the legal basis of article 6 paragraph 1 letter a) DSGVO.

You can revoke the consent you have given at any time with effect for the future, for example by clicking on the "unsubscribe" link in the newsletter or by contacting us via the above-mentioned channels. The legality of the data processing operations already carried out remains unaffected by the revocation.

When registering for the newsletter, we also save the IP address and the date and time of registration. The processing of this data is necessary to prove that you have given your consent. The legal basis is derived from our legal obligation to document your consent (Art. 6 para. 1 letter c) in conjunction with Art. 7 para. 1 DSGVO).

c. Analysis
We also analyse the reading behaviour of the recipients of our e-mails and the opening rates with regard to the messages sent. For this purpose, we collect and process pseudonymised usage data, which we do not combine with your e-mail address or IP address.

The legal basis for this analysis is Art. 6 para. 1 letter f) DSGVO and the processing serves our legitimate interest in optimising the content of our e-mails. You can object to this at any time by contacting one of the contact channels mentioned above.

d. Service provider Mailchimp
For the management of subscribers, sending of messages and analysis we use the service MailChimp of The Rocket Science Group LLC d/b/a MailChimp (675 Ponce De Leon Ave NE, Suite 5000 Atlanta, Georgia 30308, USA, "MailChimp"). Your e-mail address will therefore be transmitted by us to MailChimp. The processing is done on our behalf and is based on the legal basis of article 6 letter f) DSGVO. It serves our legitimate interest in the optimisation and economic sending of our e-mails. If you do not want your data to be processed by MailChimp, you cannot subscribe to or unsubscribe from the newsletter or as our customer object to the above described use of your e-mail address.

The Rocket Science Group LLC d/b/a MailChimp is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG)

11. whatsapp newsletter and chat function via Whappodo
You can subscribe to a Whatsapp newsletter on our website. After registering, we will regularly inform you about the latest news on our offers. To subscribe to the newsletter you need to enter your telephone number. If you subscribe to the newsletter on our website, we process other personal data such as your name in addition to your telephone number on the basis of the consent you have given us. The processing is based on the legal basis of article 6 paragraph 1 letter a) DSGVO.

You can revoke the consent you have given at any time with effect for the future, for example by contacting us via the above-mentioned channels. The legality of the data processing operations already carried out remains unaffected by the revocation.

When registering for the newsletter, we also save the IP address and the date and time of registration. The processing of this data is necessary to prove that you have given your consent. The legal basis is derived from our legal obligation to document your consent (Art. 6 para. 1 letter c) in conjunction with Art. 7 para. 1 DSGVO).

In addition, you can send contact requests directly to us via Whatsapp. If your enquiry is directed at the conclusion or execution of a contract with us, Art. 6 para. 1 letter b) DSGVO is the legal basis for data processing. Otherwise, we process the data on the basis of our legitimate interest in getting in contact with requesting persons. The legal basis for data processing is then Art. 6 para. 1 letter f) DSGVO.

For the administration of the subscribers and the management of enquiries we use the service of the provider Whappodo.COM! GmbH (Walter-Kolb-Str. 5-7, 60594 Frankfurt, Germany). Further information on data protection at Whappodo.COM! GmbH can be found at https://www.whappodo.com/de/datenschutz.

12. Event Tickets
You can register on our website for special events offered by us. To do so, it is necessary that you provide us with your name and e-mail address. We also process information about the event when you register.

The processing of the data is based on the legal basis of Art. 6Abs. 1 letter b) DSGVO.

The processing of the data is carried out by the service provider Kable, based in Canada and commissioned by us. If you use this service, personal data will be transferred to Canada. The European Commission has determined in an adequacy finding pursuant to Art. 45 DSGVO that the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) provides an adequate level of data protection. The Adequacy Decision can be found at https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32002D0002&from=EN

13. applications
You have the possibility to apply for a job via our website. For this purpose, we collect personal data from you, which includes in particular your name, curriculum vitae, letter of application and other contents provided by you

Your personal application data will be collected, stored, processed and used exclusively for purposes related to your interest in current or future employment with us and the processing of your application. Your online application will only be processed and taken note of by the relevant contact persons at our company. All employees entrusted with data processing are obliged to maintain the confidentiality of your data.

If we are unable to offer you employment, we will keep the data you provide for up to six months after completion of the application process for the purpose of answering questions in connection with your application and rejection. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence or if you have expressly agreed to longer storage.

The legal basis for the collection of data is § 26 para. 1 sentence 1 BDSG. Should we store your applicant data for a period of six months and you have expressly consented to this, we would like to point out that this consent can be freely revoked at any time in accordance with Art. 7 Para. 3 DSGVO. Such revocation does not affect the lawfulness of the processing which has taken place until revocation on the basis of the consent.

14. affiliate sales
If you reached our website via a link created by one of our partners as part of our referral program (affiliate link), we process certain information about your further orders on our website. The purpose of this processing is to determine the commission for our partner.

The processing serves our legitimate interest in marketing through a referral programme and to determine the basis for the commission of our partners. It is based on the legal basis of article 6 paragraph 1 letter f) DSGVO.

15. cookies
Cookies are small pieces of information that the website stores in the persistent memory of your computer, tablet or smartphone. Please note that HTML5 has introduced the Web Storage feature, which is similar to cookies, and for this reason we refer to it below as a cookie.

Cookies contain information that the website uses to improve the efficiency of communication between you and your web browser. Cookies identify your computer or device and not you as a specific user.

We use session cookies and permanent cookies. Session cookies are temporary. They are deleted when you close your web browser. Permanent cookies and HTML5 localStorage objects are stored for a longer period of time and remain on your device until they are deleted or expire.

We distinguish between functional cookies, which are absolutely necessary for the use of the website (e.g. for login or checkout) and optional cookies for tracking and analysis purposes as well as for marketing purposes.

Data processing via functional cookies is based on the legal basis of Art. 6 Para. 1 letter f) DSGVO. These cookies are necessary for the basic functions of the website and the processing thus serves our legitimate interest in offering a functional website.

Data processing via the optional cookies is only carried out with your consent and is based on the legal basis of Art. 6 para. 1 letter a) DSGVO. You can declare your consent under the item "Cookie settings" on our website.

In order to document the declaration of consent and to be able to provide proof of this, we store the IP address used and a timestamp in addition to the declaration. This processing serves our legitimate interest in being able to prove your declaration of consent and is based on the legal basis of Art. 6 para. 1 letter f) DSGVO.

You can prevent the storage of cookies by Google Analytics via a corresponding setting in your browser software. You can also object to the setting of optional cookies on our website under the item "Cookie settings".

Cookies are used for the following purposes:

Generation of statistics: to measure website traffic, such as the number of visitors to the website, the domain from which visitors come, the pages they visit on the website and the geographical areas in which visitors are located.
Monitoring website performance and your use of our website: to monitor website performance, our applications and infrastructure and how you use our website.
Enabling shopping cart and checkout: cookies are used to store the information you enter when you purchase products on the website and thus support the purchasing process.
Registration procedures and improving the functionality of our website: to optimise the user experience on the website, including a reminder function for the login status when you revisit the website and a reminder function for your browser and preferred settings (e.g. your preferred language).
16. content management
We only set and process certain cookies for analysis, performance and marketing purposes if we have your consent. In order to give you the opportunity to give your consent when you visit our website and to be able to prove that you have given your consent at a later date, we use a technical solution provided by the provider Civic Computing (12 South Charlotte Street, Edinburgh, Scotland, EH2 4AX). In order to be able to provide proof of consent, we store the IP address used and a digital timestamp.

This processing serves our legitimate interest in providing you with a technical solution to declare your consent - this is documented. It is based on the legal basis of Art. 6 para. 1 letter f) DSGVO.

17. analysis of our website with Google Analytics
We use the Google Analytics service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") or, if you are resident in the EU, Google Ireland Limited, (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") to evaluate our website visits. Google uses cookies that enable an analysis of your use of our website. Personal data in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers and information about your interaction with our website are processed. The information generated by the cookie about the use of our website by the user is usually transferred to a Google server in the USA and stored there. Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within our website and to provide us with further services associated with the use of our website and the use of the Internet. The processed data can be used to create pseudonymous user profiles of the users.

We only use Google Analytics with activated IP anonymisation. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. The IP address transmitted by the user's browser is not combined with other data from Google.

We use the variant Google Universal Analytics. This enables us to assign interaction data from different devices and from different sessions to a unique user ID. This enables us to put individual user actions into context and analyse long-term relationships.

The data on user actions is stored for a period of 14 months and then automatically deleted. The deletion of data whose storage period has expired is automatically carried out once a month.

We also use the Google Analytics advertising functions. This function enables us to display advertisements in a more targeted manner in order to present users with advertisements that match their interests. Remarketing is used to show users ads and products that are of interest to other websites in the Google network. We may also link Google Analytics to other Google services such as Google Ads. For these linked services, Google Analytics will then collect data for advertising purposes. For this purpose, Google cookies for advertising preferences and anonymous identifiers are used to collect further data on access.

You can find information on the cookies used by Google at https://policies.google.com/technologies/types?hl=de.

You can prevent the storage of cookies by Google Analytics via a corresponding setting in your browser software. You can also prevent the collection of information generated by the cookie by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout. You can also object to the setting of cookies on our website under "Cookie settings".

The legal basis for the data processing in connection with the Google Analytics service is Art. 6 para. 1 letter a) DSGVO and the processing serves the legitimate interest of the analysis of user behaviour on our website and the possible needs-based design.

When using Google Analytics, we cannot exclude the possibility that the processed data may be transmitted by us to Google LLC based in the USA. Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI).

18. tracking & retargeting
a. Google Ads
We use the online advertising program Google Ads of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") or, if you are an EU resident, Google Ireland Limited, (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") through which we display ads on the Google search engine. When you access our website via a Google ad, Google places a cookie on your device ("conversion cookie"). A different conversion cookie is associated with each Google Ads customer, so that the cookies are not tracked across the websites of different ads customers. The information collected through the cookie is used to compile conversion statistics. This allows us to know the total number of users who have clicked on any of our Google ads. However, we do not receive any information that can be used to identify users personally.

If personal data is processed in this process, this is done for the purpose of marketing our offer and for direct advertising. The processing is only carried out with your consent and is based on the legal basis of article 6 paragraph 1 letter a) DSGVO. You can prevent the inclusion in the conversion tracking by preventing the setting of cookies via your browser settings.

We cannot exclude the possibility that the processed data may be transmitted to Google LLC, a company based in the USA. Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI).

b. Facebook Pixel (Conversion and Custom Audience)
Within our internet presence we use the Facebook pixel" of Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

The Facebook pixel enables us to track the behaviour of users after they have clicked on a Facebook advertisement to be redirected to the provider's website ("conversion"). We may also use it to measure the effectiveness of the Facebook Ads for statistical and market research purposes. The data collected in this way is anonymous to us, which means that we do not see the personal data of individual users. However, this data is stored and processed by Facebook, which we will inform you about according to our state of knowledge. Facebook can link this data to your Facebook account and also use it for its own advertising purposes, in accordance with the Facebook Data Usage Policy https://www.facebook.com/about/privacy/. You can enable Facebook and its partners to place advertisements on and outside of Facebook. A cookie can also be stored on your computer for these purposes.

The Facebook pixel is triggered by Facebook when you call up our website and can store a so-called cookie, i.e. a small file, on your device. If you then log in to Facebook or visit Facebook when logged in, the visit to our online offer will be noted in your profile. The data collected about you is still anonymous for us, so we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and can be used by Facebook as well as for our own market research and advertising purposes.

This processing is done for the purpose of obtaining information about the effectiveness of Facebook Ads. It takes place exclusively with your consent and is based on the legal basis of Art. 6 para. 1 letter a) DSGVO.

You can revoke your consent by clicking on "Cookie settings" on our website and withdraw your consent.

You can also object to the collection by the Facebook pixel and the use of your data to display Facebook ads at the following address: https://www.facebook.com/settings?tab=ads.

We also use the Custom Audience service through the Facebook pixel. Here, Facebook records the visitors to our website via the integrated pixel and can use their data as the basis for ads (Facebook Ads). General information about the browser session is transferred to Facebook through the pixel, as well as a non-reversible and non-personal checksum (hash value), which is generated from your Facebook ID. Details on how Facebook handles your data, as well as your rights and setting options for the protection of your personal data, can be found in Facebook's privacy policy at https://www.facebook.com/privacy/explanation.

This processing is carried out for the purpose of marketing our offers via the target-group-specific display of advertising and is carried out with your consent. It is based on the legal basis of article 6 paragraph 1 letter a) DSGVO.

You can revoke your consent by withdrawing it under the item "Cookie settings" on our website.

If you also wish to object ("opt out") of the use of Facebook Website Custom Audiences for the future, you can do so at https://www.facebook.com/ads/website_custom_audiences.

Facebook is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC).

19 Included third party services and content
We use on our website services, features and content provided by third parties (hereinafter collectively referred to as "Content"). For such integration, it is technically necessary to process your IP address so that the content can be sent to your browser. Your IP address is therefore transmitted to the respective third party providers.

Such third parties are in particular so-called Content Delivery Networks (CDN)

Unless otherwise stated in the following explanations, these data processing operations are carried out in each case to safeguard our legitimate interests in the optimisation and economic operation of our website and are based on the legal basis of Art. 6 para. 1 letter f) DSGVO.

You can object to this data processing at any time by changing the settings of the browser used or certain browser extensions. One such extension is the matrix-based firewall uMatrix for the browsers Firefox and Google-Chrome. Please note that this may result in functional restrictions on the website.

We have incorporated into our website content from the following services provided by third parties:

Services provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google")

"Google Maps" for the display of maps;

"Google Web Fonts" for the display of fonts

"Google Cloud Platform" to display content

When using Google services, we cannot exclude the possibility that the processed data may be transferred to Google LLC, which is based in the USA. Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI).

"YouTube" of YouTube LLC (901 Cherry Ave., San Bruno, CA 94066, USA; "YouTube") for the display of videos. We have integrated YouTube videos into our website using the so-called two-click solution. When using the two-click solution, no connection to the third party provider is established, but a placeholder is first loaded from our own server. Only when you click on the placeholder will the video content be loaded from a third server. The data processing required for this is thus carried out with your consent and is based on the legal basis of Art. 6 Para. 1 letter a) DSGVO. YouTube is certified as a subsidiary of Google under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI).

Amazon Cloudfront" of the third-party provider Amazon Web Services, Inc. (410 Terry Avenue North, Seattle WA 98109, USA; "Amazon") for the provision of content. Amazon is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4).

A script from the provider Shopgate GmbH, which enables the integration of our online shop into our mobile shopping app.

III. data processing via our Mobile Shopping App
1. download the app from the App Store
When downloading the app from Apple's App Store (iTunes Store) or Google (Google Play), some data is transferred to the store operators. This data includes in particular the user name, e-mail address or customer number, time of download and the individual device identification number. However, we have no influence on this data collection and are not responsible for it. We process the data provided to the extent necessary for downloading the app.

2. execution of an order
If you place an order via our Mobile Shopping App, you will be redirected directly to the web shop on our website. Please refer to the information on our website regarding data processing when placing an order.

IV. Data processing via our Facebook fan page
When you visit our Facebook page, through which we present our company or individual products from our range, certain information about you is processed. The sole responsible party for this processing of personal data is Facebook Ireland Ltd (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, "Facebook"). Further information about the processing of personal data by Facebook can be found at https://www.facebook.com/privacy/explanation.

1. processing of page views
Facebook provides us with statistics and insights for our Facebook page in anonymous form, which help us to gain knowledge about the types of actions that people take on our page (so-called "page insights"). These Page-Insights are created on the basis of certain information about people who have visited our site. This processing of personal data is carried out by Facebook and us as jointly responsible parties. The processing serves our legitimate interest in evaluating the types of actions taken on our site and improving our site based on this information. The legal basis for this processing is Art. 6, paragraph 1, letter f) DSGVO. Under no circumstances will we assign the information obtained via the Page Insights to a specific Facebook profile via the reference to "Like" information for our Page.

We have entered into an agreement with Facebook on processing as jointly responsible party, which defines the distribution of data protection obligations between us and Facebook. Details of the processing of personal data to create Page Insights and the agreement between us and Facebook can be found at https://www.facebook.com/legal/terms/information_about_page_insights_data.

2. processing of data, which is communicated to us via our site
We also process information that you have provided to us via our Facebook page. Such information may be the Facebook name, contact details or a message to us. We only process this personal data if we have expressly asked you to provide us with this information beforehand, for example in the context of a survey or a competition. We process these data as the sole responsible party. The processing is based on the legal basis of article 6 paragraph 1 letter f) DSGVO and serves our legitimate interest in interacting with the users of our fan page via the Facebook platform.

If you have given us the information because you have taken part in a competition, we only process this information in order to be able to send you a prize if necessary. We will delete the data after delivery of the prize or if you have not won. The legal basis for the processing is Art. 6 Par. 1 letter b) DSGVO.

Status: May 2019

Information on data protection

This privacy policy informs you about our handling of your data. In order to make the processing of your data comprehensible to you, we would like to provide you with the following information to give you an overview of this processing. In order to ensure fair processing, this data protection declaration contains general information about our handling of your data as well as information about your rights according to the European Data Protection Basic Regulation (DSGVO) and the Federal Data Protection Act (BDSG).

We also inform you in detail about

I. General information

II. data processing via our website

III. data processing via our Mobile Shopping App

IV. Data processing via our Facebook fan page

V. Further data protection processing.

Responsible for data processing: see imprint (hereinafter referred to as "we" or "us").

I. General information

1st contact

If you have any questions or suggestions regarding this information or if you would like to contact us about asserting your rights, please address your enquiry to > see imprint.

2. general information on data processing

The term "personal data" in data protection law refers to all information relating to an identified or identifiable individual.

We process personal data in compliance with the relevant data protection regulations, in particular the DSGVO and the BDSG. Data processing by us is only carried out on the basis of a legal permission. We process personal data only with your consent (Art. 6 para. 1 letter a) DSGVO), for the fulfilment of a contract to which you are a party or, at your request, for the implementation of pre-contractual measures (Art. 6 para. 1 letter b) DSGVO), for the fulfilment of a legal obligation (Art. 6 para. 1 letter c) DSGVO) or if the processing is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms that require the protection of personal data outweigh the processing (Art. 6 para. 1 S letter f) DSGVO). If you apply for a vacant position in our company, we also process your personal data to decide on the establishment of an employment relationship (Art. 26 para. 1 S. 1 BDSG).

3. general information on the purposes of data processing

The processing of personal data that you provide us with or that we collect about you in any other way serves the following purposes, among others:

To identify you as a registered user when you log on to our website and visit it again;

to process payments;

to improve the Website and our services;

to answer your questions and provide you with appropriate customer services;

to send you our newsletter;

recommend personalised offers on the Website;

Enable our social sharing features, including providing you with the option to connect with members of your network who are both customers of and members of one or more social networks;

carry out various internal business activities, such as data analysis, controls, monitoring and fraud prevention measures, developing new products and services, improving or revising the Site or our services, identifying usage trends, determining the effectiveness of our advertising campaigns, and conducting and expanding our business;

ensure compliance with laws and procedures and the requirements of public and government authorities, applicable industry standards and our internal policies;

enforce our terms and conditions;

protect our business and that of our affiliated companies;

protect our rights, our privacy, our security or our property and/or those of our affiliates, you or others;

allow us to seek possible remedies and limit any damages we may suffer.

4. duration of storage

Unless otherwise stated in the following information, we only store the data for as long as is necessary to achieve the purpose of processing or to fulfil our contractual or legal obligations. Such statutory storage obligations may result in particular from commercial or tax law regulations. If we store the data because of the existence of a legal obligation to retain data, this processing is based on the legal basis of Article 6, paragraph 1, letter. c DSGVO.

5. recipient of the data
We use commissioned service providers for individual processing. This includes, for example, hosting, maintenance and support of IT systems, document management, marketing measures or monitoring. These service providers process the data only on express instruction and are contractually obliged to guarantee suitable technical and organisational measures for data protection. Furthermore, we may transfer personal data of our customers to entities such as postal and delivery services, or logistics services, payment and information services, house bank, tax advisor/auditor or the financial administration.

6. processing when exercising your rights according to art. 15 to 22 DSGVO
If you exercise your rights in accordance with articles 12 to 22 of the DSGVO, we process the personal data transmitted for the purpose of implementing these rights by us and to provide proof of this.

We will process data stored for the purpose of providing information and preparing it only for this purpose as well as for the purposes of data protection control and otherwise restrict processing in accordance with Art. 18 DSGVO.

These processing operations are based on the legal basis of Article 6 paragraph 1 letter. c) DSGVO in conjunction with Articles 15 to 22 DSGVO and Section 34 (2) BDSG.

7. your rights
As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:

In accordance with Art. 15 DSGVO and § 34 BDSG, you have the right to request information as to whether and, if so, to what extent we process personal data relating to you or not.
In accordance with Art. 16 DSGVO, you have the right to demand that we correct your data.
You have the right to demand that we delete your personal data in accordance with Art. 17 DSGVO and § 35 BDSG.
You have the right to have the processing of your personal data restricted in accordance with Art. 18 DSGVO.
You have the right, in accordance with Art. 20 DSGVO, to receive the personal data concerning you that you have provided us with in a structured, common and machine-readable format and to transfer this data to another person responsible.
If you are of the opinion that the processing of personal data relating to you is in breach of the provisions of the DSGVO, you have the right to appeal to a supervisory authority in accordance with Art. 77 DSGVO.

8. revocation of consent
If you have given us separate consent to data processing, you can revoke this consent at any time in accordance with Art. 7 Para. 3 DSGVO. Such a revocation does not affect the lawfulness of the processing which has taken place until revocation on the basis of the consent.

9. right of objection
Under Article 21(1) of the DSGVO, you have the right to object to processing operations based on the legal basis of Article 6(1)(e) or (f) DSGVO for reasons arising from your particular situation. If personal data relating to you is processed by us for the purpose of direct advertising, you may object to this processing in accordance with Art. 21, Paragraph 2 and Paragraph 3 of the DSGVO.

10. data protection officer
You can reach our data protection officer at the following contact details > see imprint.

II. data processing via our website
When using our website, we collect information that you provide yourself. In addition, certain information about your use of the website is automatically collected during your visit to the website. In data protection law, the IP address is also generally regarded as a personal date. An IP address is assigned to every device connected to the Internet by the Internet provider so that it can send and receive data.

1. data transfer to the USA
Visiting our website may involve the transfer of certain personal data to the USA. For data transfers to the USA as a third country, i.e. a country in which the DSGVO is not applicable law, the European Commission has decided in accordance with Art. 45 DSGVO that an adequate level of data protection is required with regard to companies certified under the EU-US Privacy Shield. The transfer to the US will then be carried out in a lawful manner.

2. processing of server log files
When you use our website for purely informative purposes, general information is initially stored automatically (i.e. not via registration), which your browser sends to our server. This information is standard:

Our visited website;
Date and time of access;
amount of data sent in bytes;
Source/reference from which you reached the site;
Browser used;
Operating system used;
IP address used (possibly: in anonymised form);
The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 Paragraph 1 Letter f) DSGVO. This processing serves the technical management and security of the website. The stored data will be deleted after thirty days, unless there is a justified suspicion of illegal use based on concrete evidence and further examination and processing of the information is necessary for this reason.

We are not in a position to identify you as a data subject on the basis of the stored information. According to Art. 11 para. 2 DSGVO, Art. 15 to 22 DSGVO are therefore not applicable unless, in order to exercise your rights set out in these articles, you provide additional information that enables your identification.

3 Processing of personal data by Shopify International Limited
To operate our online shop we use Shopify, a service provided by Shopify International Limited (Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, "Shopify Limited"). Shopify is an e-commerce platform through which we offer our goods for sale.

When you use our online shop, Shopify Limited processes your name, email address, shipping and billing address, payment information, your company name and telephone number where applicable. It also processes the IP address used, information about orders you place, information about the online shops you visit based on the Shopify platform, and information about your device and browser used.

The processing is carried out on our behalf in order to provide you with the online shop. This processing is carried out to protect our legitimate interest in offering our products via an online shop. It is based on the legal basis of article 6 paragraph 1 letter f) DSGVO.

If the processed data is transferred to Shopify Inc. (150 Elgin St., 8th Fl, Ottawa, ON K2P 1L4, Canada) located in Canada, the European Commission has determined in an adequacy finding pursuant to Art. 45 DSGVO that the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) provides an adequate level of data protection. The Adequacy Decision can be found at https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32002D0002&from=EN

We cannot exclude the possibility that personal data may be transferred to Shopify (USA) Inc. based in the USA. Shopify (USA) Inc. is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000TNSNAA4).

For more information about Shopify Limited's data processing practices, please visit https://www.shopify.com/legal/privacy.

4. contact details and enquiries
To manage and process contact requests we use the Enchant service of the Canadian company Senvee Inc, 45 Broadbridge Dr Toronto, ON M1C 3K5. The data transfer is based on an adequacy decision of the European Commission according to Art. 45 DSGVO (https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32002D0002&from=en).

If your enquiry is directed at the conclusion or implementation of a contract with us, Art. 6 Paragraph 1 Letter b) DSGVO is the legal basis for data processing. Otherwise, we process the data on the basis of our legitimate interest in getting in contact with requesting persons. The legal basis for data processing is then Art. 6 para. 1 letter f) DSGVO.

5. ordering a product
a. Processing of information provided
If you order a product via our website, we process personal data exclusively for the purpose of processing the contract or to provide you with the ordered product or programme. During the booking or ordering process, we process the data that you yourself have entered in the input mask, further information for processing your order and, if applicable, payment information if you pay by advance bank transfer. We also process further information about the status of your payment. The provision of this data is necessary for the conclusion of a contract.

In order to be able to deliver the ordered products to you, we transmit your data required for delivery to one of our delivery service providers as specified in the order.

The legal basis for the processing is in each case Art. 6 para. 1 letter b) DSGVO. All data fields marked as mandatory fields are required to process your booking or order. Failure to provide them will mean that we will not be able to process your booking or order. The provision of further data is voluntary.

b. Payment by credit card
We offer you the possibility to pay by credit card. In order to execute the payment, we transmit the credit card data you have entered in encrypted form to the service provider (acquirer) Stripe, Inc. (510 Townsend Street, San Francisco, California 94103, "Stripe"). After the payment has been executed, Stripe will report this back to us. Stripe is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000TQOUAA4) Please note that Stripe is responsible for the collection and processing of payment information.

c. Payment via Paypal
Furthermore you have the possibility to pay via Paypal. Please note that the relevant payment information is collected and processed by PayPal (Europe) S.à r.l. et Cie, S.C.A. based in Luxembourg.

Paypal transfers to us your address data stored with Paypal, which we process exclusively for the execution of the contract. The legal basis is article 6 paragraph 1 letter b) DSGVO.

d. Payment by instant bank transfer
We offer you the payment method "Immediately" in cooperation with the service provider Sofort GmbH, a company of the Klarna Group, located at Theresienhöhe 12, 80339 Munich. If you use this service, Sofort GmbH will send us confirmation of the successful placement of the transfer order for your order. This includes the data from the remittance form (name, account number, bank code, subject, remittance amount) as well as the date (with time) and the transaction identification chosen by us (e.g. order number). For SEPA transfers and if, depending on your bank, BIC and IBAN are required to set up the transfer to your online banking account, the confirmation sent to us will also contain BIC and IBAN. In principle, we can also take these data from our bank statement. Sofort GmbH does not transmit further personal data to us. We process the received data for the purpose of contract implementation on the legal basis of Article 6 paragraph 1 letter b) DSGVO.

For the rest, Sofort GmbH processes the data on its own responsibility.

Further information on data protection at Sofort GmbH can be found at the address https://www.klarna.com/sofort/kundenservice/erfahre-mehr-ueber-den-datenschutz-bei-sofort-gmbh-a-klarna-group-company/.

6. customer account
You have the possibility to create a user account. For this purpose we will collect your first and last name. In addition, you must enter an e-mail address and assign a password. We also process the other information you add to your user profile. After successful registration, you can log in to the protected customer area with your e-mail address and password. If you have forgotten your password, we will use the e-mail address provided to send you an e-mail to reset your password.

The customer account allows you to view your order history at any time. In addition, you can manage your addresses, which are available for pre-selection when ordering. The creation of a user account is voluntary. The website can also be used as a guest.

The processing of personal data is based on the legal basis of article 6 paragraph 1 letter b) DSGVO.

7. search in the webshop
To offer you the search function on our website, we process the IP address used and the search query. The processing serves to protect our legitimate interest in enabling visitors to our website to use the website easily and is based on the legal basis of Art. 6 Para. 1 Letter f) DSGVO.

8. product recommendations
In order to be able to show you product recommendations on our site that are specially tailored to you, we process your IP address and the product pages you have already visited. For this purpose, we work together with our contracted service provider LimeSpot Solutions Inc. (LimeSpot). LimeSpot also processes the data on services of Micosoft Azure Plattfom. This may involve the transfer of data to the USA or Canada. If this is the case, Microsoft is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK) for transfer to the USA. The transfer of data to Canada is based on an adequacy decision of the European Commission in accordance with Art. 45 DSGVO (https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32002D0002&from=en.

9. customer satisfaction analysis
a. Satisfaction analysis with order
When you order a product in our shop, we will ask you to rate your satisfaction with your order by e-mail. To send you this request, we will use the e-mail address you have provided us with. We also process your name, the IP address and IP geolocation used and information about your order. The data processing within the framework of this customer satisfaction survey is based on the legal basis of Art. 6, Paragraph 1, Letter f) DSGVO. The processing serves the purpose of direct advertising and our legitimate interest in checking the quality of our offer. In order to carry out the survey, we are working with the service provider Nice Reply s.r.o., which we commissioned. (Štefanovičova 2971/8, 811 04 Bratislava, Slovak Republic).

You can object to the processing and in particular to the use of your e-mail address for this purpose at any time in accordance with Art. 21 Par. 2 DSGVO, without incurring any costs other than the transmission costs according to the basic tariffs.

b. Satisfaction analysis for support requests
If you contact us as part of a customer enquiry, we will also ask you to evaluate your satisfaction with the processing of your enquiry by us in the support mail. The data processing within the framework of this customer satisfaction survey is based on the legal basis of Art. 6 Para. 1 letter f) DSGVO. The processing serves our legitimate interest in checking the quality of our offer. In order to carry out the survey, we work with Enchant, the service provider commissioned by us from the Canadian company Senvee Inc. (45 Broadbridge Dr Toronto, ON M1C 3K5). The data transfer to Canada is based on an adequacy decision of the European Commission according to Art. 45 DSGVO (https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32002D0002&from=en).

10. Newsletter
a. Customer information
If you provide us with your e-mail address when placing an order in our shop, we will use this e-mail address to inform you about our products and offers in the future. We will only inform you about products that we offer ourselves and in which you might be interested. We process personal data such as your e-mail address and your name to protect our legitimate interest in informing our existing customers about our products and offers. The legal basis for data processing is Art. 6 Para. 1 letter f) DSGVO in conjunction with § 7 paragraph 3 UWG. 
You can object to this processing at any time in accordance with Art. 21 Para. 2DSGVO, for example by using the corresponding link in a received e-mail or by contacting us via the above-mentioned channels.

b. Newsletter
On our website we offer the possibility to register for our newsletter. After registration we will inform you regularly about the latest news about our offers. A valid e-mail address is required to register for the newsletter. To verify the e-mail address, you will first receive a registration e-mail, which you must confirm via a link (double opt-in). If you subscribe to the newsletter on our website, we process personal data such as your e-mail address and your name on the basis of the consent you have given. The processing is based on the legal basis of article 6 paragraph 1 letter a) DSGVO.

You can revoke the consent you have given at any time with effect for the future, for example by clicking on the "unsubscribe" link in the newsletter or by contacting us via the above-mentioned channels. The legality of the data processing operations already carried out remains unaffected by the revocation.

When registering for the newsletter, we also save the IP address and the date and time of registration. The processing of this data is necessary to prove that you have given your consent. The legal basis is derived from our legal obligation to document your consent (Art. 6 para. 1 letter c) in conjunction with Art. 7 para. 1 DSGVO).

c. Analysis
We also analyse the reading behaviour of the recipients of our e-mails and the opening rates with regard to the messages sent. For this purpose, we collect and process pseudonymised usage data, which we do not combine with your e-mail address or IP address.

The legal basis for this analysis is Art. 6 para. 1 letter f) DSGVO and the processing serves our legitimate interest in optimising the content of our e-mails. You can object to this at any time by contacting one of the contact channels mentioned above.

d. Service provider Mailchimp
For the management of subscribers, sending of messages and analysis we use the service MailChimp of The Rocket Science Group LLC d/b/a MailChimp (675 Ponce De Leon Ave NE, Suite 5000 Atlanta, Georgia 30308, USA, "MailChimp"). Your e-mail address will therefore be transmitted by us to MailChimp. The processing is done on our behalf and is based on the legal basis of article 6 letter f) DSGVO. It serves our legitimate interest in the optimisation and economic sending of our e-mails. If you do not want your data to be processed by MailChimp, you cannot subscribe to or unsubscribe from the newsletter or as our customer object to the above described use of your e-mail address.

The Rocket Science Group LLC d/b/a MailChimp is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG)

11. whatsapp newsletter and chat function via Whappodo
You can subscribe to a Whatsapp newsletter on our website. After registering, we will regularly inform you about the latest news on our offers. To subscribe to the newsletter you need to enter your telephone number. If you subscribe to the newsletter on our website, we process other personal data such as your name in addition to your telephone number on the basis of the consent you have given us. The processing is based on the legal basis of article 6 paragraph 1 letter a) DSGVO.

You can revoke the consent you have given at any time with effect for the future, for example by contacting us via the above-mentioned channels. The legality of the data processing operations already carried out remains unaffected by the revocation.

When registering for the newsletter, we also save the IP address and the date and time of registration. The processing of this data is necessary to prove that you have given your consent. The legal basis is derived from our legal obligation to document your consent (Art. 6 para. 1 letter c) in conjunction with Art. 7 para. 1 DSGVO).

In addition, you can send contact requests directly to us via Whatsapp. If your enquiry is directed at the conclusion or execution of a contract with us, Art. 6 para. 1 letter b) DSGVO is the legal basis for data processing. Otherwise, we process the data on the basis of our legitimate interest in getting in contact with requesting persons. The legal basis for data processing is then Art. 6 para. 1 letter f) DSGVO.

For the administration of the subscribers and the management of enquiries we use the service of the provider Whappodo.COM! GmbH (Walter-Kolb-Str. 5-7, 60594 Frankfurt, Germany). Further information on data protection at Whappodo.COM! GmbH can be found at https://www.whappodo.com/de/datenschutz.

12. Event Tickets
You can register on our website for special events offered by us. To do so, it is necessary that you provide us with your name and e-mail address. We also process information about the event when you register.

The processing of the data is based on the legal basis of Art. 6Abs. 1 letter b) DSGVO.

The processing of the data is carried out by the service provider Kable, based in Canada and commissioned by us. If you use this service, personal data will be transferred to Canada. The European Commission has determined in an adequacy finding pursuant to Art. 45 DSGVO that the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) provides an adequate level of data protection. The Adequacy Decision can be found at https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32002D0002&from=EN

13. applications
You have the possibility to apply for a job via our website. For this purpose, we collect personal data from you, which includes in particular your name, curriculum vitae, letter of application and other contents provided by you

Your personal application data will be collected, stored, processed and used exclusively for purposes related to your interest in current or future employment with us and the processing of your application. Your online application will only be processed and taken note of by the relevant contact persons at our company. All employees entrusted with data processing are obliged to maintain the confidentiality of your data.

If we are unable to offer you employment, we will keep the data you provide for up to six months after completion of the application process for the purpose of answering questions in connection with your application and rejection. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence or if you have expressly agreed to longer storage.

The legal basis for the collection of data is § 26 para. 1 sentence 1 BDSG. Should we store your applicant data for a period of six months and you have expressly consented to this, we would like to point out that this consent can be freely revoked at any time in accordance with Art. 7 Para. 3 DSGVO. Such revocation does not affect the lawfulness of the processing which has taken place until revocation on the basis of the consent.

14. affiliate sales
If you reached our website via a link created by one of our partners as part of our referral program (affiliate link), we process certain information about your further orders on our website. The purpose of this processing is to determine the commission for our partner.

The processing serves our legitimate interest in marketing through a referral programme and to determine the basis for the commission of our partners. It is based on the legal basis of article 6 paragraph 1 letter f) DSGVO.

15. cookies
Cookies are small pieces of information that the website stores in the persistent memory of your computer, tablet or smartphone. Please note that HTML5 has introduced the Web Storage feature, which is similar to cookies, and for this reason we refer to it below as a cookie.

Cookies contain information that the website uses to improve the efficiency of communication between you and your web browser. Cookies identify your computer or device and not you as a specific user.

We use session cookies and permanent cookies. Session cookies are temporary. They are deleted when you close your web browser. Permanent cookies and HTML5 localStorage objects are stored for a longer period of time and remain on your device until they are deleted or expire.

We distinguish between functional cookies, which are absolutely necessary for the use of the website (e.g. for login or checkout) and optional cookies for tracking and analysis purposes as well as for marketing purposes.

Data processing via functional cookies is based on the legal basis of Art. 6 Para. 1 letter f) DSGVO. These cookies are necessary for the basic functions of the website and the processing thus serves our legitimate interest in offering a functional website.

Data processing via the optional cookies is only carried out with your consent and is based on the legal basis of Art. 6 para. 1 letter a) DSGVO. You can declare your consent under the item "Cookie settings" on our website.

In order to document the declaration of consent and to be able to provide proof of this, we store the IP address used and a timestamp in addition to the declaration. This processing serves our legitimate interest in being able to prove your declaration of consent and is based on the legal basis of Art. 6 para. 1 letter f) DSGVO.

You can prevent the storage of cookies by Google Analytics via a corresponding setting in your browser software. You can also object to the setting of optional cookies on our website under the item "Cookie settings".

Cookies are used for the following purposes:

Generation of statistics: to measure website traffic, such as the number of visitors to the website, the domain from which visitors come, the pages they visit on the website and the geographical areas in which visitors are located.
Monitoring website performance and your use of our website: to monitor website performance, our applications and infrastructure and how you use our website.
Enabling shopping cart and checkout: cookies are used to store the information you enter when you purchase products on the website and thus support the purchasing process.
Registration procedures and improving the functionality of our website: to optimise the user experience on the website, including a reminder function for the login status when you revisit the website and a reminder function for your browser and preferred settings (e.g. your preferred language).
16. content management
We only set and process certain cookies for analysis, performance and marketing purposes if we have your consent. In order to give you the opportunity to give your consent when you visit our website and to be able to prove that you have given your consent at a later date, we use a technical solution provided by the provider Civic Computing (12 South Charlotte Street, Edinburgh, Scotland, EH2 4AX). In order to be able to provide proof of consent, we store the IP address used and a digital timestamp.

This processing serves our legitimate interest in providing you with a technical solution to declare your consent - this is documented. It is based on the legal basis of Art. 6 para. 1 letter f) DSGVO.

17. analysis of our website with Google Analytics
We use the Google Analytics service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") or, if you are resident in the EU, Google Ireland Limited, (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") to evaluate our website visits. Google uses cookies that enable an analysis of your use of our website. Personal data in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers and information about your interaction with our website are processed. The information generated by the cookie about the use of our website by the user is usually transferred to a Google server in the USA and stored there. Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within our website and to provide us with further services associated with the use of our website and the use of the Internet. The processed data can be used to create pseudonymous user profiles of the users.

We only use Google Analytics with activated IP anonymisation. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. The IP address transmitted by the user's browser is not combined with other data from Google.

We use the variant Google Universal Analytics. This enables us to assign interaction data from different devices and from different sessions to a unique user ID. This enables us to put individual user actions into context and analyse long-term relationships.

The data on user actions is stored for a period of 14 months and then automatically deleted. The deletion of data whose storage period has expired is automatically carried out once a month.

We also use the Google Analytics advertising functions. This function enables us to display advertisements in a more targeted manner in order to present users with advertisements that match their interests. Remarketing is used to show users ads and products that are of interest to other websites in the Google network. We may also link Google Analytics to other Google services such as Google Ads. For these linked services, Google Analytics will then collect data for advertising purposes. For this purpose, Google cookies for advertising preferences and anonymous identifiers are used to collect further data on access.

You can find information on the cookies used by Google at https://policies.google.com/technologies/types?hl=de.

You can prevent the storage of cookies by Google Analytics via a corresponding setting in your browser software. You can also prevent the collection of information generated by the cookie by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout. You can also object to the setting of cookies on our website under "Cookie settings".

The legal basis for the data processing in connection with the Google Analytics service is Art. 6 para. 1 letter a) DSGVO and the processing serves the legitimate interest of the analysis of user behaviour on our website and the possible needs-based design.

When using Google Analytics, we cannot exclude the possibility that the processed data may be transmitted by us to Google LLC based in the USA. Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI).

18. tracking & retargeting
a. Google Ads
We use the online advertising program Google Ads of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") or, if you are an EU resident, Google Ireland Limited, (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") through which we display ads on the Google search engine. When you access our website via a Google ad, Google places a cookie on your device ("conversion cookie"). A different conversion cookie is associated with each Google Ads customer, so that the cookies are not tracked across the websites of different ads customers. The information collected through the cookie is used to compile conversion statistics. This allows us to know the total number of users who have clicked on any of our Google ads. However, we do not receive any information that can be used to identify users personally.

If personal data is processed in this process, this is done for the purpose of marketing our offer and for direct advertising. The processing is only carried out with your consent and is based on the legal basis of article 6 paragraph 1 letter a) DSGVO. You can prevent the inclusion in the conversion tracking by preventing the setting of cookies via your browser settings.

We cannot exclude the possibility that the processed data may be transmitted to Google LLC, a company based in the USA. Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI).

b. Facebook Pixel (Conversion and Custom Audience)
Within our internet presence we use the Facebook pixel" of Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

The Facebook pixel enables us to track the behaviour of users after they have clicked on a Facebook advertisement to be redirected to the provider's website ("conversion"). We may also use it to measure the effectiveness of the Facebook Ads for statistical and market research purposes. The data collected in this way is anonymous to us, which means that we do not see the personal data of individual users. However, this data is stored and processed by Facebook, which we will inform you about according to our state of knowledge. Facebook can link this data to your Facebook account and also use it for its own advertising purposes, in accordance with the Facebook Data Usage Policy https://www.facebook.com/about/privacy/. You can enable Facebook and its partners to place advertisements on and outside of Facebook. A cookie can also be stored on your computer for these purposes.

The Facebook pixel is triggered by Facebook when you call up our website and can store a so-called cookie, i.e. a small file, on your device. If you then log in to Facebook or visit Facebook when logged in, the visit to our online offer will be noted in your profile. The data collected about you is still anonymous for us, so we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and can be used by Facebook as well as for our own market research and advertising purposes.

This processing is done for the purpose of obtaining information about the effectiveness of Facebook Ads. It takes place exclusively with your consent and is based on the legal basis of Art. 6 para. 1 letter a) DSGVO.

You can revoke your consent by clicking on "Cookie settings" on our website and withdraw your consent.

You can also object to the collection by the Facebook pixel and the use of your data to display Facebook ads at the following address: https://www.facebook.com/settings?tab=ads.

We also use the Custom Audience service through the Facebook pixel. Here, Facebook records the visitors to our website via the integrated pixel and can use their data as the basis for ads (Facebook Ads). General information about the browser session is transferred to Facebook through the pixel, as well as a non-reversible and non-personal checksum (hash value), which is generated from your Facebook ID. Details on how Facebook handles your data, as well as your rights and setting options for the protection of your personal data, can be found in Facebook's privacy policy at https://www.facebook.com/privacy/explanation.

This processing is carried out for the purpose of marketing our offers via the target-group-specific display of advertising and is carried out with your consent. It is based on the legal basis of article 6 paragraph 1 letter a) DSGVO.

You can revoke your consent by withdrawing it under the item "Cookie settings" on our website.

If you also wish to object ("opt out") of the use of Facebook Website Custom Audiences for the future, you can do so at https://www.facebook.com/ads/website_custom_audiences.

Facebook is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC).

19 Included third party services and content
We use on our website services, features and content provided by third parties (hereinafter collectively referred to as "Content"). For such integration, it is technically necessary to process your IP address so that the content can be sent to your browser. Your IP address is therefore transmitted to the respective third party providers.

Such third parties are in particular so-called Content Delivery Networks (CDN)

Unless otherwise stated in the following explanations, these data processing operations are carried out in each case to safeguard our legitimate interests in the optimisation and economic operation of our website and are based on the legal basis of Art. 6 para. 1 letter f) DSGVO.

You can object to this data processing at any time by changing the settings of the browser used or certain browser extensions. One such extension is the matrix-based firewall uMatrix for the browsers Firefox and Google-Chrome. Please note that this may result in functional restrictions on the website.

We have incorporated into our website content from the following services provided by third parties:

Services provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google")

"Google Maps" for the display of maps;

"Google Web Fonts" for the display of fonts

"Google Cloud Platform" to display content

When using Google services, we cannot exclude the possibility that the processed data may be transferred to Google LLC, which is based in the USA. Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI).

"YouTube" of YouTube LLC (901 Cherry Ave., San Bruno, CA 94066, USA; "YouTube") for the display of videos. We have integrated YouTube videos into our website using the so-called two-click solution. When using the two-click solution, no connection to the third party provider is established, but a placeholder is first loaded from our own server. Only when you click on the placeholder will the video content be loaded from a third server. The data processing required for this is thus carried out with your consent and is based on the legal basis of Art. 6 Para. 1 letter a) DSGVO. YouTube is certified as a subsidiary of Google under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI).

Amazon Cloudfront" of the third-party provider Amazon Web Services, Inc. (410 Terry Avenue North, Seattle WA 98109, USA; "Amazon") for the provision of content. Amazon is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4).

A script from the provider Shopgate GmbH, which enables the integration of our online shop into our mobile shopping app.

III. data processing via our Mobile Shopping App
1. download the app from the App Store
When downloading the app from Apple's App Store (iTunes Store) or Google (Google Play), some data is transferred to the store operators. This data includes in particular the user name, e-mail address or customer number, time of download and the individual device identification number. However, we have no influence on this data collection and are not responsible for it. We process the data provided to the extent necessary for downloading the app.

2. execution of an order
If you place an order via our Mobile Shopping App, you will be redirected directly to the web shop on our website. Please refer to the information on our website regarding data processing when placing an order.

IV. Data processing via our Facebook fan page
When you visit our Facebook page, through which we present our company or individual products from our range, certain information about you is processed. The sole responsible party for this processing of personal data is Facebook Ireland Ltd (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, "Facebook"). Further information about the processing of personal data by Facebook can be found at https://www.facebook.com/privacy/explanation.

1. processing of page views
Facebook provides us with statistics and insights for our Facebook page in anonymous form, which help us to gain knowledge about the types of actions that people take on our page (so-called "page insights"). These Page-Insights are created on the basis of certain information about people who have visited our site. This processing of personal data is carried out by Facebook and us as jointly responsible parties. The processing serves our legitimate interest in evaluating the types of actions taken on our site and improving our site based on this information. The legal basis for this processing is Art. 6, paragraph 1, letter f) DSGVO. Under no circumstances will we assign the information obtained via the Page Insights to a specific Facebook profile via the reference to "Like" information for our Page.

We have entered into an agreement with Facebook on processing as jointly responsible party, which defines the distribution of data protection obligations between us and Facebook. Details of the processing of personal data to create Page Insights and the agreement between us and Facebook can be found at https://www.facebook.com/legal/terms/information_about_page_insights_data.

2. processing of data, which is communicated to us via our site
We also process information that you have provided to us via our Facebook page. Such information may be the Facebook name, contact details or a message to us. We only process this personal data if we have expressly asked you to provide us with this information beforehand, for example in the context of a survey or a competition. We process these data as the sole responsible party. The processing is based on the legal basis of article 6 paragraph 1 letter f) DSGVO and serves our legitimate interest in interacting with the users of our fan page via the Facebook platform.

If you have given us the information because you have taken part in a competition, we only process this information in order to be able to send you a prize if necessary. We will delete the data after delivery of the prize or if you have not won. The legal basis for the processing is Art. 6 Par. 1 letter b) DSGVO.

Status: May 2019

You have successfully subscribed!
This email has been registered