Privacy Policy
Privacy Policy
1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data includes all data with which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is ZENTRYA – FZCO, IFZA Dubai Silicon Oasis, Dubai, UAE, e-mail: [email protected]. The controller of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
2) Data Collection When Visiting Our Website
2.1 When you use our website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website you visited
- Date and time at the moment of access
- Amount of data transmitted in bytes
- Source/referrer from which you accessed the website
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used in any other way. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser’s address bar.
3) Cookies
To make your visit to our website more attractive and to enable the use of certain functions, we use cookies – small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your device for a longer period and allow site settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.
If personal data is also processed by individual cookies we use, the processing takes place either in accordance with Art. 6(1)(b) GDPR for the performance of a contract, in accordance with Art. 6(1)(a) GDPR in the case of consent given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.
You can configure your browser to inform you about the setting of cookies and decide individually whether to accept them, or to exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Contact
4.1 Smartsupp
This website uses a live chat system from the following provider: smartsupp.com, s.r.o., Milady Horakove 13, 60200 Brno, Czech Republic.
The processing of personal data transmitted via the chat is carried out either in accordance with Art. 6(1)(b) GDPR, as it is necessary for the initiation or performance of a contract, or in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in effectively supporting our website visitors. The data you transmit in this way will be deleted, subject to statutory retention periods, once the matter in question has been conclusively resolved.
In addition, further information may be collected and analyzed by means of cookies for the purpose of creating pseudonymized usage profiles. However, this information does not serve to personally identify you and is not combined with other data sets. If this information is related to an individual, the processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization purposes.
The setting of cookies can be prevented by appropriate browser settings. However, this may restrict the functionality of our website. You may object to the collection and storage of data for the purpose of creating a pseudonymized user profile at any time with effect for the future.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
4.2 Superchat
This website uses a live chat system from the following provider: SuperX GmbH, Oranienburgerstraße 91, 10178 Berlin, Germany.
The processing of personal data transmitted via the chat is carried out either in accordance with Art. 6(1)(b) GDPR, as it is necessary for the initiation or performance of a contract, or in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in effectively supporting our website visitors. The data you transmit in this way will be deleted, subject to statutory retention periods, once the matter in question has been conclusively resolved.
In addition, further information may be collected and analyzed by means of cookies for the purpose of creating pseudonymized usage profiles. However, this information does not serve to personally identify you and is not combined with other data sets. If this information is related to an individual, the processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization purposes.
The setting of cookies can be prevented by appropriate browser settings. However, this may restrict the functionality of our website. You may object to the collection and storage of data for the purpose of creating a pseudonymized user profile at any time with effect for the future.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
4.3 ShopVote
For review reminders, we use the services of the following provider: Blickreif GmbH, Schulstraße 46, 80634 Munich, Germany.
Exclusively on the basis of your explicit consent in accordance with Art. 6(1)(a) GDPR, we transmit your email address and, if applicable, other customer data to the provider so that they can contact you by email with a review reminder.
You may revoke your consent at any time with effect for the future, either with us or with the provider.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
4.4 WhatsApp-Business
We offer visitors to our website the opportunity to contact us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called “business version” of WhatsApp.
If you contact us via WhatsApp in connection with a specific business matter (for example, a placed order), we store and use the mobile phone number you use on WhatsApp as well as – if provided – your first and last name, in accordance with Art. 6(1)(b) GDPR, for processing and responding to your request. On the same legal basis, we may ask you via WhatsApp to provide additional data (order number, customer number, address, or email address) in order to assign your inquiry to a specific transaction.
If you use our WhatsApp contact for general inquiries (e.g. about our range of services, availability, or our website), we store and use the mobile phone number you use on WhatsApp as well as – if provided – your first and last name, in accordance with Art. 6(1)(f) GDPR, based on our legitimate interest in providing the requested information efficiently and promptly.
Your data will only be used to respond to your inquiry via WhatsApp. It will not be shared with third parties.
Please note that WhatsApp Business gains access to the address book of the mobile device we use for this purpose and automatically transfers the phone numbers stored in the address book to a server of the parent company, Meta Platforms Inc., in the USA. For the operation of our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact details of users who have also contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact details are stored in our address book has, by accepting the WhatsApp terms of use upon first use of the app on their device, already consented in accordance with Art. 6(1)(a) GDPR to the transmission of their WhatsApp phone number from the address books of their chat contacts. The transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For information on the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your rights in this regard and settings options to protect your privacy, please refer to WhatsApp’s privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy
As part of the processing activities mentioned above, data may be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-U.S. Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
4.5 When contacting us (e.g. via contact form or email), personal data will be processed solely for the purpose of handling and responding to your inquiry, and only to the extent necessary for this purpose.
The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once it can be inferred from the circumstances that the matter in question has been conclusively resolved, provided that no statutory retention obligations conflict with this.
5) Comment Function
As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the commentator name you have chosen will be stored and published on this website. Furthermore, your IP address will be logged and stored. This storage of the IP address is carried out for security reasons and in the event that the person concerned violates the rights of third parties or posts unlawful content through a comment. We require your email address in order to contact you if a third party objects to your published content as being unlawful.
The legal bases for storing your data are Art. 6(1)(b) and (f) GDPR. We reserve the right to delete comments if they are objected to by third parties as unlawful.
Follow-up comments can be subscribed to by you as a user. You will receive a confirmation email to ensure that you are the owner of the specified email address (double opt-in procedure). The legal basis for data processing in the case of subscribing to comments is Art. 6(1)(a) GDPR. You can cancel ongoing comment subscriptions at any time with effect for the future; please refer to the confirmation email for more information on how to unsubscribe.
6) Data Processing When Opening a Customer Account
In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. The data required for opening the account can be found in the input fields of the corresponding form on our website.
You can delete your customer account at any time by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted provided that all contracts concluded through it have been fully processed, there are no statutory retention obligations to the contrary, and we have no legitimate interest in continuing to store the data.
7) Use of Customer Data for Direct Advertising
7.1 Subscribing to Our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive the newsletter once you have expressly confirmed your consent to receive it by clicking on a verification link sent to the specified email address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. In this context, we store the IP address assigned by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any potential misuse of your email address at a later date. The data collected by us when registering for the newsletter will be used strictly for the intended purpose.
You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller mentioned above. After you unsubscribe, your email address will be promptly deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is legally permitted and about which we inform you in this privacy policy.
7.2 Sending Email Newsletters to Existing Customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. For this purpose, we do not need to obtain separate consent from you in accordance with § 7(3) UWG. The data processing in this respect is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails.
You are entitled to object to the use of your email address for the above-mentioned advertising purpose at any time with effect for the future by notifying the controller mentioned at the beginning. For this, you will only incur transmission costs according to the basic rates. Upon receipt of your objection, the use of your email address for advertising purposes will be stopped without delay.
7.3 WhatsApp-Newsletter
If you subscribe to our WhatsApp newsletter, we will regularly send you information about our offers via WhatsApp. The only mandatory information required to send the newsletter is your mobile phone number.
To send the newsletter, save the mobile number we provide to the contacts on your mobile device and send us the message “Start” via WhatsApp. By sending this WhatsApp message, you give us your consent, in accordance with Art. 6(1)(a) GDPR, to use your personal data for the purpose of sending the newsletter. We will then add you to our newsletter distribution list.
The data collected by us when registering for the newsletter is processed exclusively for the purpose of promotional communication via the newsletter. You can unsubscribe from the newsletter at any time by sending us the message “Stop” via WhatsApp. After unsubscribing, your mobile phone number will be promptly deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is legally permitted and about which we inform you in this privacy policy
Please note that WhatsApp gains access to the address book of the mobile device we use for sending the newsletter and automatically transfers the phone numbers stored in the address book to a Facebook server in the USA.
For sending our WhatsApp newsletter, we therefore use a mobile device whose address book contains only the WhatsApp contact details of our newsletter recipients. This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, in accordance with Art. 6(1)(a) GDPR, to the transmission of their WhatsApp phone number from the address books of their chat contacts by accepting the WhatsApp terms of use upon first use of the app on their device. The transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For information on the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your rights in this regard and settings options to protect your privacy, please refer to WhatsApp’s privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy
As part of the processing activities mentioned above, data may be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-U.S. Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
7.4 Product Availability Notification by E-Mail
For items that are temporarily unavailable, you can register to receive e-mail notifications regarding product availability. In this case, we will send you a one-time e-mail informing you about the availability of the specific item you have selected. The only mandatory information required for sending this notification is your e-mail address. Providing additional data is voluntary and may be used to address you personally. For sending the e-mail, we use the so-called double opt-in procedure, which ensures that you will only receive a notification once you have explicitly confirmed your consent by clicking on a verification link sent to the specified e-mail address.
By activating the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6 (1) lit. a GDPR. In this context, we store the IP address assigned by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later point in time. The data collected by us during registration for our e-mail notification service regarding product availability will be used strictly for this purpose.
You may unsubscribe from the availability notifications at any time by sending a corresponding message to the controller named at the beginning. After unsubscribing, your e-mail address will be immediately removed from our distribution list created for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
7.5 Shopping Cart Reminders by E-Mail
In the event that you abandon your purchase with us before completing the order, you have the option to receive a one-time e-mail reminder of the contents of your virtual shopping cart.
The only mandatory information required for sending this reminder is your e-mail address. Providing additional data is voluntary and may be used to address you personally. For sending the e-mail, we use the so-called double opt-in procedure, which ensures that you will only receive a notification once you have explicitly confirmed your consent by clicking on a verification link sent to the specified e-mail address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) lit. a GDPR for the purpose of sending a shopping cart reminder. In this context, we store the IP address assigned by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later point in time. The data collected by us during registration for our e-mail notification service will be used strictly for this purpose.
You may unsubscribe from the shopping cart reminders at any time by sending a corresponding message to the controller named at the beginning. After unsubscribing, your e-mail address will be immediately removed from our distribution list created for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
7.6 Advertising by Postal Mail
On the basis of our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address and—where we have received these additional details from you in the context of our contractual relationship—your title, academic degree, year of birth, and your professional, industry or business designation, in accordance with Art. 6 (1) lit. f GDPR, and to use them for sending interesting offers and information about our products by postal mail.
You may object to the storage and use of your data for this purpose at any time by notifying us accordingly.
8) Data Processing for Order Fulfillment
8.1 Insofar as this is necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) lit. b GDPR.
If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided when placing the order (name, address, e-mail address) in order to personally inform you—within the legally prescribed period and via an appropriate means of communication (e.g., by post or by e-mail)—about upcoming updates in accordance with our statutory information obligations pursuant to Art. 6 (1) lit. c GDPR. Your contact details will be used strictly for the purpose of providing information about updates owed by us and will only be processed by us to the extent necessary for the respective notification.
For the processing of your order, we also cooperate with the service provider(s) listed below, who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.
8.2 In order to fulfill our contractual obligations to our customers, we work with external shipping partners. For the purpose of delivering goods, we forward your name and delivery address and, where necessary for delivery, your telephone number, exclusively in accordance with Art. 6 (1) lit. b GDPR, to a shipping partner selected by us.
8.3 Disclosure of Personal Data to Shipping Service Providers
Deutsche Post
As a transport service provider, we use the following company: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany.
We will forward your e-mail address and/or telephone number to the provider, in accordance with Art. 6 (1) lit. a GDPR, prior to the delivery of the goods for the purpose of coordinating a delivery date or for delivery notifications, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we will only forward the recipient’s name and delivery address to the provider in accordance with Art. 6 (1) lit. b GDPR. Data will only be shared to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification will not be possible.
Consent may be revoked at any time with effect for the future, either towards the controller named above or towards the provider.
-
DHL
As a transport service provider, we use the following company: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.
We will forward your e-mail address and/or telephone number to the provider, in accordance with Art. 6 (1) lit. a GDPR, prior to the delivery of the goods for the purpose of coordinating a delivery date or for delivery notifications, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we will only forward the recipient’s name and delivery address to the provider in accordance with Art. 6 (1) lit. b GDPR. Data will only be shared to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification will not be possible.
Consent may be revoked at any time with effect for the future, either towards the controller named above or towards the provider.
-
DHL Freight
As a transport service provider, we use the following company: DHL Freight GmbH, Godesberger Allee 102-104, 53175 Bonn, Germany.
We will forward your e-mail address and/or telephone number to the provider, in accordance with Art. 6 (1) lit. a GDPR, prior to the delivery of the goods for the purpose of coordinating a delivery date or for delivery notifications, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we will only forward the recipient’s name and delivery address to the provider in accordance with Art. 6 (1) lit. b GDPR. Data will only be shared to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification will not be possible.
Consent may be revoked at any time with effect for the future, either towards the controller named above or towards the provider.
-
DPD
As a transport service provider, we use the following company: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany.
We will forward your e-mail address and/or telephone number to the provider, in accordance with Art. 6 (1) lit. a GDPR, prior to the delivery of the goods for the purpose of coordinating a delivery date or for delivery notifications, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we will only forward the recipient’s name and delivery address to the provider in accordance with Art. 6 (1) lit. b GDPR. Data will only be shared to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification will not be possible.
Consent may be revoked at any time with effect for the future, either towards the controller named above or towards the provider.
-
GLS
As a transport service provider, we use the following company: General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1–7, 36286 Neuenstein, Germany.
We will forward your e-mail address and/or telephone number to the provider, in accordance with Art. 6 (1) lit. a GDPR, prior to the delivery of the goods for the purpose of coordinating a delivery date or for delivery notifications, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we will only forward the recipient’s name and delivery address to the provider in accordance with Art. 6 (1) lit. b GDPR. Data will only be shared to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification will not be possible.
Consent may be revoked at any time with effect for the future, either towards the controller named above or towards the provider.
-
UPS
As a transport service provider, we use the following company: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany.
We will forward your e-mail address and/or telephone number to the provider, in accordance with Art. 6 (1) lit. a GDPR, prior to the delivery of the goods for the purpose of coordinating a delivery date or for delivery notifications, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we will only forward the recipient’s name and delivery address to the provider in accordance with Art. 6 (1) lit. b GDPR. Data will only be shared to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification will not be possible.
Consent may be revoked at any time with effect for the future, either towards the controller named above or towards the provider.
8.4 Use of Payment Service Providers (Payment Services)
– Mollie
One or more online payment methods from the following provider are available on this website: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands.
If you select a payment method from the provider where you make an advance payment (such as credit card payment), the payment data you provided during the ordering process (including name, address, bank and card details, currency, and transaction number), as well as information about the contents of your order, will be passed on to the provider in accordance with Art. 6 (1) lit. b GDPR. In this case, your data will be shared solely for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
-
PayPal
One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
If you select a payment method from the provider that requires you to make an advance payment, the payment data you provided during the ordering process (including name, address, bank and card details, currency, and transaction number), as well as information about the contents of your order, will be transmitted to the provider in accordance with Art. 6 (1) lit. b GDPR. In this case, your data will be shared solely for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
If you select a payment method for which we make an advance payment, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number, and, if applicable, data relating to an alternative means of payment).
In such cases, in order to safeguard our legitimate interest in verifying your creditworthiness, these data are transmitted by us to the provider for the purpose of a credit check in accordance with Art. 6 (1) lit. f GDPR. Based on the personal data you have provided, as well as other data (such as shopping cart, invoice amount, order history, payment experience), the provider checks whether the payment option you have selected can be granted with regard to payment and/or default risks.
The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data.
You may object to the processing of your data at any time by sending us a message or by contacting the provider. However, the provider may still be entitled to process your personal data if this is necessary for the proper execution of the payment contract.
8.5 We reserve the right to forward your data to the debt collection service provider mediafinanz AG if our payment claim remains unpaid despite a prior reminder. In this case, the claim will be collected directly by the debt collection service provider.
The transfer of your data serves the fulfillment of the contract pursuant to Art. 6 (1) sentence 1 lit. b GDPR, as well as the protection of our overriding legitimate interests in the effective assertion and enforcement of our payment claim pursuant to Art. 6 (1) sentence 1 lit. f GDPR.
– Skrill
One or more online payment methods from the following provider are available on this website: Skrill Limited, 25 Canada Square, London E14 5LQ, United Kingdom.
If you select a payment method from the provider that requires an advance payment, the payment data you provided during the ordering process (including name, address, bank and card details, currency, and transaction number), as well as information about the contents of your order, will be transmitted to the provider in accordance with Art. 6 (1) lit. b GDPR. In this case, your data will be shared solely for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
If you select a payment method for which we make an advance payment, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number, and, if applicable, data relating to an alternative means of payment).
In such cases, we transmit this data to the provider for the purpose of a credit check in accordance with Art. 6 (1) lit. f GDPR, in order to safeguard our legitimate interest in verifying your creditworthiness. Based on the personal data you have provided, as well as other data (such as shopping cart, invoice amount, order history, payment experience), the provider checks whether the payment option you have selected can be granted with regard to payment and/or default risks.
The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data.
You may object to the processing of your data at any time by sending us a message or by contacting the provider. However, the provider may still be entitled to process your personal data if this is necessary for the proper execution of the payment contract.
9) Online-Marketing
9.1 Google AdSense
This website uses Google AdSense, an online advertising service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses so-called cookies, i.e., text files that are stored on your computer and enable an analysis of your use of the website. In addition, Google AdSense also uses so-called “web beacons” (small invisible graphics) to collect information, through which simple actions such as visitor traffic on the website can be recorded, collected, and evaluated. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. In this context, data may also be transferred to the servers of Google LLC in the USA.
Google uses the information obtained in this way to evaluate your usage behavior with regard to the AdSense ads. The IP address transmitted by your browser in the context of Google AdSense is not merged with other Google data. The information collected by Google may be transferred to third parties if required by law and/or if third parties process this data on behalf of Google.
All of the processing described above, in particular the reading of information on the device used via cookies and/or web beacons, will only take place if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR. Without this consent, Google AdSense will not be used during your visit to our website.
You may withdraw your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.
For data transfers to the USA, the provider has joined the EU-U.S. Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
Google’s privacy policy can be viewed here: https://www.google.de/policies/privacy/
9.2 Amazon
We participate in the affiliate program of the following provider: Amazon EU S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg.
In this context, we have placed links on our website that lead to offers on the provider’s websites or on third-party websites (“partner sites”).
To measure the success of an affiliate link, to analyze orders generated via such a link, and to account for commission payments, the provider uses cookies and/or similar technologies, which are generally set on the partner sites and for which we are therefore not responsible under data protection law. In this context, the provider regularly also processes the IP address and, where applicable, further device information.
All of the processing described above, in particular the reading or storing of information on the device you are using, will only take place if you have given your express consent pursuant to Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time with effect for the future by using the cookie consent management options provided on the partner sites.
9.3 CJ Affiliate
We participate in the affiliate program of the following provider: CJ Affiliate (Conversant Europe Limited), 1st Floor, 40 Dukes Place, London, EC3A 7NH.
In this context, we have placed links on our website that lead to offers on the provider’s websites or on third-party websites (“partner sites”).
To measure the success of an affiliate link, to analyze orders generated via such a link, and to account for commission payments, the provider uses cookies and/or similar technologies, which are generally set on the partner sites and for which we are therefore not responsible under data protection law. In this context, the provider regularly also processes the IP address and, where applicable, further device information.
All of the processing described above, in particular the reading or storing of information on the device you are using, will only take place if you have given your express consent pursuant to Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time with effect for the future by using the cookie consent management options provided on the partner sites.
In the case of data transfers to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
9.4 Own Affiliate Program
In connection with the product presentations on our website, we operate our own affiliate program. Within this program, we provide interested third-party website operators with partner links for placement on their websites, which lead to our offers. Cookies are used for the affiliate program, which are generally set on the partner site after clicking on a corresponding partner link, and for which we are therefore not responsible under data protection law. Cookies are small text files that are placed on your device to trace the origin of transactions (e.g., “sales leads”) generated via such links. In this way, we can recognize, among other things, that you clicked on the partner link and were redirected to our website. This information is required for payment processing between us and the affiliate partners. If the information also contains personal data, the described processing is carried out on the basis of our legitimate financial interest in handling commission payments pursuant to Art. 6 (1) lit. f GDPR.
If you wish to block the analysis of user behavior via cookies, you can configure your browser so that you are informed whenever a cookie is set and decide on a case-by-case basis whether to accept it, or exclude the acceptance of cookies in certain cases or generally.
10) Web Analytics Services
Google Optimize
This website uses “Google Optimize,” a service provided by the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Based on “Google Analytics,” the service enables statistical evaluation of the use of new functions and content on the website by displaying test variants to certain user groups. This makes it possible to determine which variants are preferred by users, in the interest of improving the attractiveness of our website.
For this purpose, Google Optimize uses cookies, i.e., small text files that are stored on your device and enable an analysis of your use of a website. The information collected by the cookies about your use of the website is generally transmitted to a Google server, where it is stored and processed. In this context, information may also be transferred to the servers of Google LLC, located in the USA, where it may be subject to further processing.
All of the processing described above, in particular the setting of cookies for storing and reading information on the device you use to access the website, will only take place if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR. Without your consent, Google Optimize will not be used during your visit to the website. You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service via the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-U.S. Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
11) Retargeting/ Remarketing und Conversion-Tracking
Meta Pixel
For bidding purposes, we use the “Meta Pixel” service provided by the following company: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”).
When a user clicks on an advertisement placed by us on Facebook and/or Instagram, the URL of our linked page is extended by a parameter using “Meta Pixel.” After redirection, this URL parameter is entered into the user’s browser via a cookie set by our linked page itself.
This enables Meta, on the one hand, to identify visitors to our online offering as a target group for the display of advertisements (“ads”). Accordingly, we use the service to ensure that the Facebook and/or Instagram ads we place are shown only to those users who have also shown an interest in our online offering, or who display certain characteristics (e.g., interests in specific topics or products determined on the basis of websites visited) that we transmit to Meta (“custom audiences”).
On the other hand, “Meta Pixel” can be used to track whether users were redirected to our website after clicking on an advertisement and what actions they perform there (so-called “conversion tracking”).
The data collected is anonymous to us, meaning it does not allow us to draw any conclusions about the identity of the users. However, the data is stored and processed by Meta, making it possible to link it to the respective user profile, and Meta may use the data for its own advertising purposes.
All of the processing described above, in particular the setting of cookies to read information on the device used, will only take place if you have given us your express consent pursuant to Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
The information generated by Meta is generally transmitted to a Meta server and stored there; in this context, data may also be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-U.S. Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
12) Site Functionalities
12.1 Facebook-Plugins
Plugins of the social network operated by the following provider are used on our website: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
These plugins enable direct interactions with content on the social network.
To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using the so-called “2-click” or “Shariff” solution.
This integration ensures that when you access a page of our website containing such plugins, no connection is established with the provider’s servers.
Only when you activate the plugins and thereby give your consent to the data transfer pursuant to Art. 6 (1) lit. a GDPR will your browser establish a direct connection to the provider’s servers. In this process, and regardless of whether you are logged into an existing user profile, certain information about your device (including your IP address), your browser, and your browsing history will be transmitted to the provider and may be further processed there.
If you are logged into an existing user profile on the provider’s social network, information about interactions carried out via the plugins will also be published there and shown to your contacts.
You may withdraw your consent at any time by deactivating the activated plugin again by clicking on it. However, the withdrawal does not affect data that has already been transmitted to the provider.
Data may also be transferred to: Meta Platforms Inc., USA.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-U.S. Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
12.2 Instagram-Plugins
Plugins of the social network operated by the following provider are used on our website: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
These plugins enable direct interactions with content on the social network.
To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using the so-called “2-click” or “Shariff” solution.
This integration ensures that when you access a page of our website containing such plugins, no connection is established with the provider’s servers.
Only when you activate the plugins and thereby give your consent to the transfer of data pursuant to Art. 6 (1) lit. a GDPR will your browser establish a direct connection to the provider’s servers. In this process, and regardless of whether you are logged into an existing user profile, certain information about your device (including your IP address), your browser, and your browsing history will be transmitted to the provider and may be further processed there.
If you are logged into an existing user profile on the provider’s social network, information about interactions carried out via the plugins will also be published there and shown to your contacts.
You may withdraw your consent at any time by deactivating the activated plugin again by clicking on it. However, the withdrawal does not affect data that has already been transmitted to the provider.
Data may also be transferred to: Meta Platforms Inc., USA.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-U.S. Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
12.3 X-Plugins
Plugins of the social network operated by the following provider are used on our website: Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
These plugins enable direct interactions with content on the social network.
To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using the so-called “2-click” or “Shariff” solution.
This integration ensures that when you access a page of our website containing such plugins, no connection is established with the provider’s servers.
Only when you activate the plugins and thereby give your consent to the transfer of data pursuant to Art. 6 (1) lit. a GDPR will your browser establish a direct connection to the provider’s servers. In this process, and regardless of whether you are logged into an existing user profile, certain information about your device (including your IP address), your browser, and your browsing history will be transmitted to the provider and may be further processed there.
If you are logged into an existing user profile on the provider’s social network, information about interactions carried out via the plugins will also be published there and shown to your contacts.
You may withdraw your consent at any time by deactivating the activated plugin again by clicking on it. However, the withdrawal does not affect data that has already been transmitted to the provider.
Data may also be transferred to: X Corp., USA.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For the transfer of data to the USA, the provider relies on the European Commission’s Standard Contractual Clauses, which are intended to ensure compliance with the European level of data protection.
12.4 Youtube
This website uses plugins for displaying and playing videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Data may also be transferred to: Google LLC, USA.
Your browser establishes a direct connection to the provider’s servers in order to load the plugin. In this process, certain information, including your IP address, is transmitted to the provider.
If the playback of embedded videos via the plugin is started, the provider also uses cookies to collect information about user behavior, generate playback statistics, and prevent abusive behavior.
When you click on a video, your data will be directly associated with your account. If you do not want this association with your account, you must log out before clicking the play button.
All of the processing described above, in particular the setting of cookies to read information on the device used, will only take place if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service via the “cookie consent tool” provided on the website.
For data transfers to the USA, the provider has joined the EU-U.S. Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
12.5 ShopVote Graphics
Graphic elements from the following provider are integrated on our website to display external customer reviews and/or an externally awarded quality seal: Blickreif GmbH, Schulstraße 46, 80634 Munich, Germany.
When you access a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider’s servers in order to load the elements correctly. In this process, certain browser information, including your IP address, is transmitted to the provider.
If personal data is processed in this context, it is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the optimal marketing of our offering and the appealing design of our website.
12.6 Google Customer Reviews (formerly Google Certified Shop Program)
We cooperate with Google as part of the “Google Customer Reviews” program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program gives us the opportunity to obtain customer reviews from users of our website. After making a purchase on our website, you will be asked whether you would like to participate in an e-mail survey conducted by Google.
If you give your consent pursuant to Art. 6 (1) lit. a GDPR, we will transmit your e-mail address to Google. You will then receive an e-mail from Google Customer Reviews asking you to rate your purchase experience on our website. The review you submit will subsequently be aggregated with our other reviews and displayed in our Google Customer Reviews logo as well as in our Merchant Center dashboard. In addition, your review will be used for Google Seller Ratings. In the context of using Google Customer Reviews, personal data may also be transferred to the servers of Google LLC in the USA.
You may withdraw your consent at any time by sending a message to the controller responsible for data processing or directly to Google.
For data transfers to the USA, the provider has joined the EU-U.S. Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
13) Tools and Miscellaneous
13.1 – DATEV
For accounting purposes, we use the cloud-based accounting software service of the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany.
The provider processes incoming and outgoing invoices as well as, where applicable, our company’s bank transactions in order to automatically record invoices, match them to transactions, and create financial accounting from this in a partially automated process.
Where personal data is processed in this context, the processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the efficient organization and documentation of our business operations.
13.2 Cookie-Consent-Tool
This website uses a so-called “cookie consent tool” to obtain valid user consent for cookies and cookie-based applications requiring consent. The “cookie consent tool” is displayed to users when they access the site in the form of an interactive user interface, where consent for certain cookies and/or cookie-based applications can be granted by checking boxes. By using the tool, all cookies/services requiring consent are only loaded if the respective user has given the corresponding consent by checking the relevant box. This ensures that such cookies are only placed on the user’s device if consent has been granted.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies, and thus in the legally compliant design of our website.
Another legal basis for the processing is Art. 6 (1) lit. c GDPR. As the controller, we are legally obliged to make the use of non-essential cookies dependent on the respective user’s consent.
Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
Further information about the provider and the configuration options of the cookie consent tool can be found directly in the corresponding user interface on our website.
14) Rights of the Data Subject
14.1 Under applicable data protection law, you are granted the following rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data. The specific conditions for exercising these rights are set out in the respective legal provisions referenced below:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent pursuant to Art. 7 (3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
14.2 Right to Object
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
15) Duration of the Storage of Personal Data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and – where applicable – also by the relevant statutory retention periods (e.g., commercial and tax law retention requirements).
Where personal data is processed on the basis of explicit consent pursuant to Art. 6 (1) lit. a GDPR, the data concerned will be stored until you withdraw your consent.
If statutory retention periods apply to data processed in connection with contractual or quasi-contractual obligations on the basis of Art. 6 (1) lit. b GDPR, such data will be routinely deleted after the retention periods have expired, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in continued storage.
Where personal data is processed on the basis of Art. 6 (1) lit. f GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
Where personal data is processed for direct marketing purposes on the basis of Art. 6 (1) lit. f GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21 (2) GDPR.
Unless otherwise specified in the information contained in this declaration regarding specific processing situations, stored personal data will otherwise be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.