Privacy policy


Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide your data. Failure to provide the data will have no consequences. This only applies insofar as no other information is provided in the processing operations described below. “Personal data” means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our website without providing any personal information.

Whenever our website is accessed, usage data is transmitted to us or to our web host / IT service provider by your Internet browser and stored in log files (so-called server log files). The data stored includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.

The processing is based on Art. 6(1)(f) GDPR and our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our services.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. An adequacy decision by the European Commission exists for Canada. For the USA, an adequacy decision by the European Commission is in place, namely the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the European Commission’s Standard Contractual Clauses.

Contact

Controller

If you wish to contact us, the controller responsible for data processing is: Barbara Krienen, Hombergen 101, 41334 Nettetal, Germany, +49 2163 9586343, info@interosa.de

Customer-Initiated Contact by Email

If you contact us by email on your own initiative, we collect your personal data (name, email address, message text) only to the extent provided by you. The processing of the data serves to process and respond to your contact request.

If the contact is made in connection with the performance of pre-contractual measures (e.g. advice regarding a potential purchase or preparation of an offer) or concerns an existing contract between you and us, the processing of this data is based on Art. 6(1)(b) GDPR.

If the contact is made for other reasons, the processing is based on Art. 6(1)(f) GDPR and our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(f) GDPR.

We use your email address solely to process your request. Your data will subsequently be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Collection and Processing When Using the Contact Form

When using our contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The processing of the data serves the purpose of contacting you.

If the contact is made in connection with the performance of pre-contractual measures (e.g. advice regarding a potential purchase or preparation of an offer) or concerns an existing contract between you and us, the processing is based on Art. 6(1)(b) GDPR.

If the contact is made for other reasons, the processing is based on Art. 6(1)(f) GDPR and our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(f) GDPR.

We use your email address solely to process your request. Your data will subsequently be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Collection and Processing When Using the Withdrawal Button

If you have concluded a contract via our website, we provide you with a withdrawal function (withdrawal button), which allows you to submit your declaration of withdrawal directly.

When using the withdrawal function, we collect your personal data (name, email address, information identifying the contract or part of the contract you wish to withdraw from, as well as the date and time the declaration of withdrawal was submitted) only to the extent provided by you. The processing of the data serves the purpose of providing you with the legally required option to withdraw from your contract and to properly process your withdrawal.

If the contact concerns an existing contract between you and us, the processing is based on Art. 6(1)(b) GDPR. Otherwise, the processing is based on Art. 6(1)(c) GDPR in order to fulfil our legal obligation to provide a withdrawal function on our website.

We use your email address solely to process your declaration of withdrawal. Your data will subsequently be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

The processing of your personal data also serves the purpose of ensuring compliance with the legal requirements governing the design of the withdrawal function and is based on Art. 6(1)(c) GDPR. This processing is additionally based on Art. 6(1)(f) GDPR and our overriding legitimate interest in providing you with a user-friendly withdrawal option. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(f) GDPR.

Collection and Processing When Using the Cancellation Button

If you cancel a subscription contract concluded via our website using the legally required cancellation button, we process the data you enter in the confirmation form.

When using the cancellation button, we collect your personal data (name, email address, telephone number, if applicable, information identifying the contract you wish to cancel, as well as the date and time the cancellation declaration was submitted) only to the extent provided by you. The processing serves the purpose of providing you with the legally required option to cancel your continuing contractual relationship and to properly process your cancellation.

If the contact concerns an existing contract between you and us, the processing is based on Art. 6(1)(b) GDPR. Otherwise, the processing is based on Art. 6(1)(c) GDPR, as we are legally required to provide a cancellation button on our website.

We use your email address solely to process your cancellation declaration. Your data will subsequently be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

WhatsApp Business

If you contact us via WhatsApp for business purposes, we use the WhatsApp Business version provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).

The processing of the data serves to process and respond to your contact request. For this purpose, we collect and process the mobile phone number associated with your WhatsApp account, your name if provided, and any other data you provide.

We use a mobile device whose address book contains exclusively data of users who have contacted us via WhatsApp. Accordingly, personal data is not disclosed to WhatsApp without you having already consented to this with WhatsApp.

Your data is transferred by WhatsApp to servers operated by Meta Platforms Inc. in the USA. An adequacy decision by the European Commission exists for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. is certified under the TADPF and has therefore committed to complying with European data protection principles.

If the contact is made in connection with the performance of pre-contractual measures (e.g. advice regarding a potential purchase or preparation of an offer) or concerns an existing contract between you and us, the processing is based on Art. 6(1)(b) GDPR.

If the contact is made for other reasons, the processing is based on Art. 6(1)(f) GDPR and our overriding legitimate interest in providing a fast and convenient means of contact and responding to your request. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(f) GDPR.

We use your personal data solely to process your request. Your data will subsequently be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Further information on the terms of use and data protection when using WhatsApp can be found at:

https://www.whatsapp.com/legal/#terms-of-service

https://www.whatsapp.com/legal/#privacy-policy

Customer Account / Orders

Customer Account

When opening a customer account, we collect your personal data to the extent specified there. The processing of the data serves the purpose of improving your shopping experience and simplifying order processing. The processing is based on Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent prior to its withdrawal. Your customer account will then be deleted.

Collection, Processing and Disclosure of Personal Data When Placing Orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to handle your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing is based on Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data may be disclosed, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, service providers involved in order processing and IT service providers. In all cases, we strictly comply with the statutory requirements. The scope of data transferred is limited to what is necessary.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. An adequacy decision by the European Commission exists for Canada. For the USA, an adequacy decision by the European Commission is in place, namely the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the European Commission’s Standard Contractual Clauses.

Reviews / Advertising

Data Collection When Posting a Comment or Review

When commenting on or reviewing an article or post, we collect your personal data (name, email address, comment text) only to the extent provided by you. The processing serves the purpose of enabling comments/reviews and displaying them.

By submitting a comment/review, you consent to the processing of the data provided. The processing is based on Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent prior to its withdrawal. Your personal data will subsequently be deleted.

When your comment/review is published, only the name you have provided will be displayed.

Use of Email Address for Sending Newsletters

We use your email address to send information and offers by newsletter, provided that you have expressly consented to this. The data processing serves exclusively the purpose of sending promotional communications. For this purpose, we process your email address and, if applicable, additional information that you voluntarily provided when subscribing to our newsletter.

The processing is based on Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.

You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us.

Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address on a so-called blacklist to prevent future newsletter emails from being sent to you. This storage is based on Art. 6(1)(f) GDPR and our legitimate interest, as well as yours, in preventing the renewed use of your email address for sending our newsletter. You have the right to object at any time, on grounds relating to your particular situation, to this processing.

Use of Mobile Phone Number for Sending SMS Advertising

We use your mobile phone number, independently of the contractual processing, exclusively for our own advertising purposes by sending SMS advertising, provided that you have expressly consented to this.

The processing is based on Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent prior to its withdrawal. Your mobile phone number will then be removed from the mailing list.

Use of Email Address for Availability Notifications

We offer a product availability notification service on our website. If an item is temporarily unavailable, you have the option of entering your email address on the relevant product page and receiving an email notification when the item becomes available, provided that you have consented to this. You will receive a one-time email notification when the product becomes available. The processing is based on Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent prior to its withdrawal. You may unsubscribe from the availability notification service at any time by notifying us. Your email address will then be removed from the mailing list.

Inventory Management

Use of an External Inventory Management System

For contract processing, we use an inventory management system as part of order processing on our behalf. For this purpose, the personal data collected as part of your order is transmitted to easybill GmbH, Düsselstr. 21, 41654 Kaarst, Germany.

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is based on Art. 6(1)(b) GDPR.

Payment Service Providers / Credit Checks

Use of PayPal

We use the PayPal payment service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; “PayPal”) on our website. The processing of data serves the purpose of offering you payment via PayPal. When you select and use PayPal as a payment method, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.

All PayPal transactions are subject to PayPal’s Privacy Statement, which can be found at:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Plus

We use the PayPal Plus payment service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; “PayPal”) on our website. When you select and use PayPal, credit card via PayPal or direct debit via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.

For individual payment methods such as credit card via PayPal and direct debit via PayPal, PayPal reserves the right, where applicable, to obtain a credit report based on mathematical-statistical procedures using credit reference agencies. For this purpose, PayPal transmits the personal data required for the credit assessment to a credit reference agency and uses the resulting information regarding the statistical probability of payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (score values) calculated using scientifically recognised mathematical-statistical procedures, which may include address data.

Your legitimate interests are taken into account in accordance with statutory requirements. The processing of the data serves the purpose of credit assessment for initiating a contract. The processing is based on Art. 6(1)(f) GDPR and our overriding legitimate interest in protecting against payment defaults where PayPal makes advance payment.

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data by PayPal based on Art. 6(1)(f) GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract using the payment method you have selected. Failure to provide the data means that the contract cannot be concluded using your chosen payment method.

Use of PayPal Express

We use the PayPal Express payment service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; “PayPal”) on our website. In order to integrate this payment service, PayPal must collect, store and analyse data (e.g. IP address, device type, operating system, browser type and device location) when the website is accessed. Cookies may also be used for this purpose. The cookies enable your browser to be recognised.

The processing of your personal data is based on Art. 6(1)(f) GDPR and our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.

When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.

Further information on data processing when using PayPal Express can be found in PayPal’s Privacy Statement at:

www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de

_

DE#Updated

PS.

_

Use of PayPal Checkout

We use the PayPal Checkout payment service provided by PayPal (Europe) S.à r.l. et Cie (22-24 Boulevard Royal, L-2449 Luxembourg; “PayPal”) on our website. The processing of data serves the purpose of offering you payment via this service. When you select and use PayPal, credit card via PayPal, direct debit via PayPal or “Pay Later” via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR. Cookies may be stored to enable recognition of your browser. The resulting data processing is based on Art. 6(1)(f) GDPR and our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.

Credit card via PayPal, direct debit via PayPal & “Pay Later” via PayPal

For individual payment methods such as credit card via PayPal, direct debit via PayPal or “Pay Later” via PayPal, PayPal reserves the right, where applicable, to obtain a credit report based on mathematical-statistical procedures using credit reference agencies. For this purpose, PayPal transmits the personal data required for the credit assessment to a credit reference agency and uses the resulting information regarding the statistical probability of payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (score values) calculated using scientifically recognised mathematical-statistical procedures, which may include address data. Your legitimate interests are taken into account in accordance with statutory requirements. The processing of the data serves the purpose of credit assessment for initiating a contract. The processing is based on Art. 6(1)(f) GDPR and our overriding legitimate interest in protecting against payment defaults where PayPal makes advance payment.

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data by PayPal based on Art. 6(1)(f) GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract using the payment method you have selected. Failure to provide the data means that the contract cannot be concluded using your chosen payment method.

Third-Party Providers

When paying via a payment method provided by a third party, the data required for payment processing is transmitted to PayPal.

This processing is based on Art. 6(1)(b) GDPR. To process this payment method, the data may subsequently be forwarded by PayPal to the respective provider. This processing is based on Art. 6(1)(b) GDPR. Local third-party providers may include:

Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)

Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

Purchase on account via PayPal

When paying by purchase on account, the data required for payment processing is first transmitted to PayPal. To process this payment method, PayPal then transmits the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin, Germany) in order to fulfil the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR. Ratepay may obtain a credit report based on mathematical-statistical procedures (probability or score values) using credit reference agencies, following the procedure described above. The processing of the data serves the purpose of credit assessment for initiating a contract. The processing is based on Art. 6(1)(f) GDPR and our overriding legitimate interest in protecting against payment defaults where Ratepay makes advance payment.

Further information on data protection and the credit reference agencies used by Ratepay can be found at:

https://www.ratepay.com/legal-payment-dataprivacy/

https://www.ratepay.com/legal-payment-creditagencies/

Further information on data processing when using PayPal can be found in the corresponding Privacy Statement at:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of Klarna Payment Options

We use the payment service provided by Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; “Klarna”) on our website.

When you select and use payment via Klarna, the data required for payment processing is transmitted to Klarna in order to fulfil the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.

Cookies may be stored to enable recognition of your browser. The resulting data processing is based on Art. 6(1)(f) GDPR and our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.

“Pay Later” (invoice), “Pay Now” (direct debit, credit card, instant bank transfer), “Financing” (instalment purchase)

For individual payment methods such as “Pay Later” (invoice), “Pay Now” (direct debit, credit card, instant bank transfer) or “Financing” (instalment purchase), Klarna reserves the right, where applicable, to obtain a credit report based on mathematical-statistical procedures using credit reference agencies.

For this purpose, Klarna transmits the personal data required for the credit assessment, such as first and last name, address, gender, email address, IP address and data relating to the order, to a credit reference agency for the purpose of identity and credit assessment. Klarna uses the resulting information regarding the statistical probability of payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (score values) calculated using scientifically recognised mathematical-statistical procedures, which may include address data. Your legitimate interests are taken into account in accordance with statutory requirements.

The processing of the data serves the purpose of credit assessment for initiating a contract. The processing is based on Art. 6(1)(f) GDPR and our overriding legitimate interest in protecting against payment defaults where Klarna makes advance payment. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(f) GDPR by notifying Klarna. The provision of the data is necessary for the conclusion of the contract using the payment method you have selected. Failure to provide the data means that the contract cannot be concluded using your chosen payment method.

Further information, including the credit reference agencies to which Klarna discloses your data, can be found for Germany at:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

and for Austria at:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/credit_rating_agencies

General information about Klarna is available for Germany at:

https://www.klarna.com/de/

and for Austria at:

https://www.klarna.com/at/

Your personal data is processed by Klarna in accordance with applicable data protection regulations and as described in Klarna’s Privacy Statement for Germany at:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

and for Austria at:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy

Cookies

Our website uses cookies. Cookies are small text files that are stored in or by your Internet browser on your computer system. When a user visits a website, a cookie may be stored on the operating system of the user’s device. This cookie contains a characteristic string that enables unique identification of the browser when the website is visited again.

Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your Internet browser, you can be notified before cookies are set and decide whether to accept them individually, as well as prevent the storage of cookies and the transmission of the data contained therein. Cookies already stored can be deleted at any time. However, please note that you may then not be able to use all functions of this website to their full extent.

You can find information on how to manage cookies in the most common browsers (including how to deactivate them) via the following links:

Chrome: https://support.google.com/accounts/answer/61416?hl=de

Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically Necessary Cookies

Unless otherwise stated in this Privacy Policy, we use only technically necessary cookies for the purpose of making our services more user-friendly, effective and secure. In addition, cookies enable our systems to recognise your browser after a page change and provide you with services. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary for the browser to be recognised again after a page change.

The use of cookies or comparable technologies is based on Section 25(2) TDDDG. The processing of your personal data is based on Art. 6(1)(f) GDPR and our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our services.

You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data.

Analytics / Advertising / Tracking / Communication

Use of Google Analytics 4

We use the web analytics service Google Analytics provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).

The processing of data serves the purpose of analysing this website and its visitors and for marketing and advertising purposes. Google uses the information collected on behalf of the website operator to evaluate your use of the website, compile reports on website activity and provide other services related to website activity and Internet usage.

The following information may be collected, among other things: IP address, date and time of page access, click path, information about the browser and device used, pages visited, referrer URL (the website from which you accessed our website), location data and purchase activity. Google may combine your data with other data, such as your search history, personal accounts, usage data from other devices and any other data Google has about you.

Your IP address is shortened by us on our own servers beforehand. Google therefore receives only pseudonymised data. Google uses technologies such as cookies, browser storage and tracking pixels to analyse your use of the website. The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR.

The processing of your personal data is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.

In this context, we also use the Google Signals service. Google Signals enables cross-device tracking. Your data may therefore be analysed across multiple devices if you have enabled “personalised advertising” in your account settings and linked your devices to your Google account. This makes it possible to recognise which device you use to search for products and later return to complete purchases on another device, such as a tablet.

The cross-device reports created in this context contain only aggregated data. We therefore receive only statistics generated using Google Signals. To prevent data collection and storage by Google Signals across devices, you can disable the “personalised ads” function in your Google account settings. Further information can be found at:

https://support.google.com/ads/answer/2662922?hl=de

Further information on data processing and data protection relating to Google Signals can be found at:

https://support.google.com/analytics/answer/7532985?hl=de

We use the advanced implementation of Consent Mode (Advanced Consent Mode). In this process, user data is also transmitted to Google in the form of “pings” even when consent has not been given. These pings may contain information such as the IP address for deriving the IP country (the IP address itself is not logged), the date and time of the page visit, the URL of the page visited, the user agent, the referrer URL (the website from which our website was accessed) or information about website events such as a conversion. Based on this information, Google models user data in order to perform comprehensive usage analysis despite consent being refused.

The information generated about your use of the website is generally transmitted to a Google server in the USA and stored there. An adequacy decision by the European Commission exists for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore committed to complying with European data protection principles. Both Google and US authorities have access to your data.

Further information on terms of use and data protection can be found at:

https://policies.google.com/technologies/partner-sites

https://policies.google.com/privacy?hl=en&gl=de

https://business.safety.google/privacy/

Use of Shopify Analytics

We use the statistics and analytics functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) as part of a data processing agreement. Shopify is an affiliated company of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).

The processing of data serves the purpose of analysing this website and its visitors. For this purpose, data is stored for marketing and optimisation purposes and provided in reports, analyses and statistics. The following device information may be collected and processed, among other things: web browser information, IP address, time zone and some of the cookies installed on your device. When you navigate the website, information about pages or products accessed, the referrer URL (the website from which you accessed our website), and information about how you interact with the website are also collected. Technologies such as cookies, web beacons, tags and pixels (electronic files used to collect information about how you navigate the website) are used for this purpose.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. An adequacy decision by the European Commission exists for Canada. For the USA, an adequacy decision by the European Commission is in place, namely the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the European Commission’s Standard Contractual Clauses.

The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.

Further information on data protection at Shopify can be found at:

https://www.shopify.com/de/legal/datenschutz

Information on the data processing agreement can be found at:

https://www.shopify.com/de/legal/dpa

Information on the cookies used can be found at:

https://www.shopify.com/de/legal/cookies

Use of Google Ads Conversion Tracking

We use the online advertising programme “Google Ads” and, in this context, conversion tracking (visit action evaluation). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).

When you click on an advertisement served by Google, a cookie for conversion tracking is placed on your computer. These cookies have a limited validity period, do not contain personal data and therefore do not serve to personally identify users.

If you visit certain pages of our website while the cookie has not yet expired, Google and we can recognise that you clicked on the advertisement and were redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of Ads customers.

The information collected using the conversion cookie is used to create conversion statistics. We learn the total number of users who clicked on our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users. Your data may be transferred to Google LLC servers in the USA. An adequacy decision by the European Commission exists for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore committed to complying with European data protection principles.

The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.

Further information and Google’s Privacy Policy can be found at:

https://www.google.de/policies/privacy/

or

https://business.safety.google/privacy/

Use of Google AdSense

We use the AdSense function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”). The processing of data serves the purpose of renting advertising space on the website and displaying personalised, interest-based advertising to visitors to the website. Through this function, visitors to the provider’s website are shown personalised, interest-based advertisements from the Google Display Network.

Google uses cookies that enable analysis of your use of the website. The information generated by the cookie about your use of the website is generally transmitted to a Google server in the USA and stored there. An adequacy decision by the European Commission exists for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore committed to complying with European data protection principles.

Google may transfer this information to third parties where required by law or where third parties process the information on Google’s behalf. Google will not combine your IP address with other Google data.

The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.

Further information can be found at:

https://www.google.com/policies/technologies/ads/

https://www.google.de/policies/privacy/

https://business.safety.google/privacy/

Use of Shopify Inbox

We use the live chat system Shopify Inbox provided by Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) as part of a data processing agreement. Shopify is an affiliated company of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).

The processing of data serves the purpose of enabling direct and efficient communication between you and us as the provider. Data may be stored and processed for operating the system and optimising the service.

Cookies may be used to operate the live chat system and enable recognition of the browser. The following information may be collected and processed: IP address and personal data you provide when using the chat system.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. An adequacy decision by the European Commission exists for Canada. For the USA, an adequacy decision by the European Commission is in place, namely the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the European Commission’s Standard Contractual Clauses.

The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is based on consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.

Further information on data protection at Shopify can be found at:

https://www.shopify.com/de/legal/datenschutz

and

https://www.shopify.com/de/legal/dpa

Plug-ins and Other

Use of Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).

This application manages JavaScript tags and HTML tags used in particular to implement tracking and analytics tools. The processing of data serves the purpose of designing and optimising our website according to customer needs.

Google Tag Manager itself neither stores cookies nor processes personal data. However, it enables other tags to be triggered that may collect and process personal data.

Further information on terms of use and data protection can be found here.

Data Subject Rights and Storage Period

Storage Period

After the contract has been fully processed, the data is initially stored for the duration of the statutory warranty period and subsequently, taking into account statutory retention periods, in particular under tax and commercial law, and then deleted after the retention period has expired unless you have consented to further processing and use.

Rights of the Data Subject

Where the legal requirements are met, you have the following rights under Articles 15 to 20 GDPR: the right of access, rectification, erasure, restriction of processing and data portability.

In addition, pursuant to Art. 21(1) GDPR, you have the right to object to processing based on Art. 6(1)(f) GDPR and to processing for the purposes of direct marketing.

Right to Lodge a Complaint with a Supervisory Authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful.

You may lodge a complaint, among others, with the supervisory authority responsible for us at the following address:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia

P.O. Box 20 04 44

40102 Düsseldorf

Germany

Tel.: +49 211 384240

Fax: +49 211 38424999

Email: poststelle@ldi.nrw.de

Right to Object

Where the processing of personal data listed here is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing with effect for the future.

Following an objection, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.