Privacy Policy

1) INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

1.1
We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data includes all data that can personally identify you.

1.2
The controller for data processing on this website, as defined by the General Data Protection Regulation (GDPR), is **Shop Name**. The controller is the natural or legal person who alone or jointly decides on the purposes and means of processing personal data.

1.3
For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser bar.

2) DATA COLLECTION WHEN VISITING OUR WEBSITE

When you use our website for informational purposes only (i.e., without registering or otherwise transmitting information to us), we only collect the data your browser sends to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary to display the website:
- The website you visited
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (possibly anonymized)

The processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not shared or otherwise used. However, we reserve the right to review server log files retrospectively if there are concrete indications of unlawful use.

3) COOKIES

To make your visit to our website attractive and enable certain functions, we use cookies on various pages. These are small text files stored on your device. Some of the cookies we use are deleted after your browser session ends (session cookies). Others remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). Cookies collect and process certain user information, such as browser and location data as well as IP address values, to an individual extent. Persistent cookies are automatically deleted after a predefined period, which varies depending on the cookie.

Some cookies simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit). If personal data is processed by individual cookies, the processing is carried out in accordance with Art. 6(1)(b) GDPR for contract performance or Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best functionality of the website and a customer-friendly and effective website experience.

We may work with advertising partners to make our online offering more interesting for you. In this case, cookies from partner companies may be stored on your hard drive (third-party cookies). If we collaborate with advertising partners, you will be individually and separately informed about the use of such cookies and the scope of the collected data in the following sections.

You can configure your browser to inform you about cookie settings and decide individually whether to accept them or exclude cookies for specific cases or generally. Each browser differs in how it manages cookie settings. This is described in each browser's help menu, which explains how to change your cookie settings. You can find these for the respective browsers under the following links:
- Internet Explorer: (https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies)
- Firefox: (https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen)

- Chrome: (https://support.google.com/chrome/answer/95647?hl=de&hlrm=en)
- Safari: (https://support.apple.com/kb/ph21411?locale=de_DE)
- Opera: (https://help.opera.com/en/latest/web-preferences/#cookies)

Please note that disabling cookies may limit the functionality of our website.

4) CONTACTING US

When you contact us (e.g., via contact form or email), personal data is collected. The data collected in the case of a contact form is evident from the respective form. This data is stored and used solely to respond to your inquiry or for contact purposes and related technical administration. The legal basis for processing is our legitimate interest in responding to your inquiry under Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, the additional legal basis is Art. 6(1)(b) GDPR. Your data will be deleted after final processing of your inquiry, provided no statutory retention obligations apply.

5) DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PROCESSING

Under Art. 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide it to us for contract execution or when opening a customer account. The data collected is evident from the respective input forms. You can delete your customer account at any time by sending a message to the controller's address above. We store and use the data you provide for contract processing. After complete contract execution or deletion of your customer account, your data will be blocked, considering tax and commercial retention periods, and deleted after these periods expire unless you have expressly consented to further use or we reserve the right to further data use, which is legally permitted.

6) USE OF YOUR DATA FOR DIRECT MARKETING

6.1 Subscription to Our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and allows us to address you personally. We use the double opt-in procedure for sending the newsletter. This means we will only send you an email newsletter if you have expressly confirmed your consent. We will then send a confirmation email asking you to click a link to confirm your subscription.

By activating the confirmation link, you consent to the processing of your personal data under Art. 6(1)(a) GDPR. When subscribing, we store your IP address and the time of registration to prevent misuse. The data collected during registration is used exclusively for sending the newsletter. You can unsubscribe at any time via the link in the newsletter or by notifying the controller. After unsubscribing, your email address will be deleted unless you have expressly consented to further use or we reserve the right to further data use, which is legally permitted.

6.2 Sending the Email Newsletter to Existing Customers
If you provided your email address when purchasing goods or services, we reserve the right to send you regular offers for similar goods or services from our range via email. No separate consent is required for this. The data processing is based on our legitimate interest in personalized direct marketing under Art. 6(1)(f) GDPR. If you initially objected to the use of your email for this purpose, no emails will be sent. You can object to the use of your email for advertising purposes at any time by notifying the controller. Only transmission costs according to basic rates will apply. After receiving your objection, the use of your email for advertising will cease immediately.

7) DATA PROCESSING FOR ORDER PROCESSING

7.1
The personal data we collect is shared with the shipping company tasked with delivery, as far as necessary for delivering the goods. Your payment data is shared with the commissioned bank for payment processing, as far as necessary. If payment service providers are used, we will explicitly inform you below. The legal basis for data sharing is Art. 6(1)(b) GDPR.

7.2 Use of Payment Service Providers
- **PayPal**
For payments via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "Pay upon invoice" or "installment payment" via PayPal, we share your payment data with PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). The sharing is based on Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to conduct a credit check for certain payment methods. Your payment data may be shared with credit agencies under Art. 6(1)(f) GDPR based on PayPal's legitimate interest in determining your creditworthiness. The credit check may include probability values (score values). If score values are included, they are based on a scientifically recognized mathematical-statistical method. Address data may be included in the calculation. For more information, see PayPal's privacy policy: (https://www.paypal.com/de/webapps/mpp/ua/privacy-full).

You can object to this processing at any time by notifying PayPal. However, PayPal may still process your personal data if necessary for contractual payment processing.

- **SOFORT**
For payments via "SOFORT," the payment is processed by SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany ("SOFORT"). We share your order information with SOFORT under Art. 6(1)(b) GDPR, solely for payment processing. SOFORT is part of the Klarna Group. For more information, see SOFORT's privacy policy: (https://www.klarna.com/sofort/datenschutz).

8) CONTACT FOR REVIEW REMINDERS

Own Review Reminder (Not Sent via a Customer Review System)
We use your email address for a one-time reminder to submit a review of your order for our review system, provided you have given your explicit consent under Art. 6(1)(a) GDPR during or after your order.

You can revoke your consent at any time by notifying the controller.

9) USE OF SOCIAL MEDIA: SOCIAL PLUGINS

9.1 Facebook Plugins with Shariff Solution
Our website uses social plugins ("plugins") from Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook").

To enhance data protection, these buttons are not fully integrated as plugins but only via an HTML link. This ensures that no connection to Facebook's servers is established when visiting our website. Clicking the button opens a new browser window to Facebook's page, where you can interact with the plugins (after logging in, if applicable).

Facebook Inc. is certified under the US-EU Privacy Shield, ensuring compliance with EU data protection standards. For more information, see Facebook's privacy policy: (https://www.facebook.com/policy.php).

9.2 Google+ Plugins as Shariff Solution
Our website uses plugins from Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

The buttons are integrated via an HTML link to prevent automatic connections to Google+'s servers. Clicking the button opens Google+'s page in a new window.

Google LLC is certified under the Privacy Shield. For more information, see Google's privacy policy: (https://www.google.com/intl/de/policies/privacy/).

9.3 Instagram Plugin as Shariff Solution
Our website uses plugins from Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram").

The buttons are integrated via an HTML link. Clicking the button opens Instagram's page in a new window.

Instagram LLC is certified under the Privacy Shield. For more information, see Instagram's privacy policy: (https://help.instagram.com/155833707900388/).

10) ONLINE MARKETING

10.1 DoubleClick by Google
This website uses DoubleClick by Google, an online marketing tool by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick").

DoubleClick uses cookies to display relevant ads, improve campaign performance reports, or prevent repeated ad displays. Google collects which ads are shown in which browser via a cookie ID. The processing is based on our legitimate interest in optimal marketing under Art. 6(1)(f) GDPR.

DoubleClick may also track conversions related to ad requests. For example, if a user sees a DoubleClick ad and later visits the advertiser's website to make a purchase. Google states that DoubleClick cookies do not contain personal data.

Your browser automatically connects to Google's server. We have no control over the data collected by Google. By integrating DoubleClick, Google receives information that you visited our website or clicked an ad. If you are registered with Google, Google may associate your visit with your account. Even if you are not registered, Google may collect and store your IP address.

To opt out, disable cookies for conversion tracking via (https://www.google.de/settings/ads). Alternatively, visit the Digital Advertising Alliance at (www.aboutads.info) to manage cookie settings.

Google LLC is certified under the Privacy Shield. For more information, see DoubleClick's privacy policy: (https://www.google.de/policies/privacy/).

10.2 Google AdWords Conversion Tracking
This website uses Google AdWords and conversion tracking by Google LLC.

We use Google AdWords to advertise our offers via ads on external websites. We analyze campaign data to measure ad effectiveness. The processing is based on our legitimate interest in targeted advertising under Art. 6(1)(f) GDPR.

A conversion cookie is set when a user clicks an AdWords ad. The cookie expires after 30 days and does not personally identify the user. If the cookie is still valid when visiting our website, Google and we can track that the user clicked the ad and was redirected.

To opt out, disable conversion tracking cookies in your browser settings or install the browser plugin at (https://www.google.com/settings/ads/plugin?hl=de).

Google LLC is certified under the Privacy Shield. For more information, see Google's privacy policy: (https://www.google.de/policies/privacy/).

11) WEB ANALYTICS SERVICES

Google (Universal) Analytics
This website uses Google Analytics, a web analytics service by Google LLC.

Google Analytics uses cookies to analyze website usage. The information generated by the cookie (including your truncated IP address) is transmitted to and stored on Google's servers in the USA.

This website uses Google Analytics with the "_anonymizeIp()" extension, ensuring IP anonymization by truncating the IP address before transmission. Only in exceptional cases is the full IP address transmitted to Google's servers in the USA and truncated there.

Google uses this information on our behalf to evaluate website usage, compile reports, and provide other related services. The IP address transmitted by your browser is not merged with other Google data.

You can prevent cookie storage by adjusting your browser settings. However, this may limit website functionality. To prevent data collection by Google Analytics, download and install the browser plugin at (https://tools.google.com/dlpage/gaoptout?hl=de).

Alternatively, click the following link to set an opt-out cookie, preventing future data collection by Google Analytics on this website: **Disable Google Analytics**.

Google LLC is certified under the Privacy Shield.

This website also uses Google Analytics for cross-device analysis of visitor flows via a user ID. When a page is first accessed, a unique, permanent, and anonymized ID is assigned, which is set across devices. This allows interaction data from different devices and sessions to be linked to a single user. The user ID does not contain personal data and is not transmitted to Google.

You can object to data collection via the user ID at any time by disabling Google Analytics on all systems you use (e.g., in another browser or on your mobile device).

For more information on Universal Analytics, see (https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376).

12) RETARGETING/REMARKETING/RECOMMENDATION ADVERTISING

Facebook Custom Audience via the Pixel Method
This website uses the "Facebook Pixel" by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook").

With explicit consent, user behavior can be tracked after viewing or clicking a Facebook ad. This helps evaluate ad effectiveness for statistical and market research purposes and optimize future advertising.

The collected data is anonymous to us, meaning we cannot identify users. However, Facebook stores and processes the data, allowing linkage to user profiles. Facebook may use the data for its own advertising purposes under its data policy ((https://www.facebook.com/about/privacy/)).

Processing occurs only with explicit consent under Art. 6(1)(a) GDPR.

Consent for the Facebook Pixel can only be given by users aged 13 or older. If you are younger, please ask your parent or guardian for permission.

Facebook Inc. is certified under the Privacy Shield.

To disable cookies, adjust your browser settings or visit the Digital Advertising Alliance at (https://www.aboutads.info/choices/).

Google AdWords Remarketing
Our website uses Google AdWords Remarketing to advertise on Google search results and third-party websites.

Google sets a cookie in your browser, enabling interest-based advertising via a pseudonymous cookie ID based on visited pages. Processing is based on our legitimate interest in optimal marketing under Art. 6(1)(f) GDPR.

If you consented to Google linking your browsing history with your Google account, Google may use your data for personalized ads. If you are logged into Google while visiting our website, Google may combine your data with Google Analytics data to create cross-device remarketing audiences.

To permanently disable remarketing cookies, install the browser plugin at (https://www.google.com/settings/ads/onweb/).

Google LLC is certified under the Privacy Shield. For more information, see Google's advertising privacy policy: (https://www.google.com/policies/technologies/ads/).

13) RIGHTS OF THE DATA SUBJECT

13.1
Under applicable data protection law, you have the following rights regarding the processing of your personal data:
- **Right to access (Art. 15 GDPR)**: You can request confirmation of whether we process your personal data and access to such data, including processing purposes, categories of data, recipients, storage duration, and your rights.
- **Right to rectification (Art. 16 GDPR)**: You can request correction of inaccurate or incomplete data.
- **Right to erasure (Art. 17 GDPR)**: You can request deletion of your data unless processing is necessary for legal obligations, public interest, or legal claims.
- **Right to restriction of processing (Art. 18 GDPR)**: You can request restriction of processing if you contest data accuracy, processing is unlawful, or we no longer need the data but you require it for legal claims.
- **Right to data portability (Art. 20 GDPR)**: You can receive your provided data in a structured, commonly used, and machine-readable format or request transmission to another controller.
- **Right to withdraw consent (Art. 7(3) GDPR)**: You can withdraw consent at any time, affecting future processing.
- **Right to lodge a complaint (Art. 77 GDPR)**: You can complain to a supervisory authority if you believe processing violates the GDPR.

13.2 RIGHT TO OBJECT
IF WE PROCESS YOUR DATA BASED ON OUR LEGITIMATE INTERESTS (ART. 6(1)(F) GDPR), YOU CAN OBJECT TO PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU OBJECT, WE WILL STOP PROCESSING UNLESS WE DEMONSTRATE COMPELLING LEGITIMATE GROUNDS OVERRIDING YOUR INTERESTS OR PROCESSING IS FOR LEGAL CLAIMS.

IF WE PROCESS YOUR DATA FOR DIRECT MARKETING, YOU CAN OBJECT AT ANY TIME WITHOUT JUSTIFICATION.

14) DURATION OF PERSONAL DATA STORAGE

The storage period of personal data depends on statutory retention periods (e.g., commercial and tax laws). After expiry, data is routinely deleted unless required for contract fulfillment or initiation or if we have a legitimate interest in further storage.