Privacy Policy

Unless stated otherwise below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no other information is given in the processing operations described below.
"Personal data" means any information relating to an identified or identifiable natural person.


Server log files
You can visit our website without providing any personal information. 
Each time you access our website, usage data is transmitted by your internet browser to us or to our web host / IT service provider and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing is carried out on the basis of Art. 6 (1) (f) GDPR on the grounds of our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our offering. 
 
In doing so, your data may be transferred to third countries outside the European Union for which an adequacy decision of the EU Commission exists. Where no adequacy decision of the EU Commission exists, as for example for transfers to the USA, the data transfers are based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de

Contact

Controller
Please contact us if you wish. The contact details of the controller responsible for data processing can be found in our legal notice (Impressum).

Customer-initiated contact by email
If you contact us by email on your own initiative for business purposes, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves to handle and respond to your contact request.
If the contact serves the implementation of pre-contractual measures (e.g. advice in the event of purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) (b) GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) (f) GDPR on the grounds of our overriding legitimate interest in handling and responding to your request. In this case you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you which is based on Art. 6 (1) (f) GDPR.
We use your email address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

 


Customer account Orders      

Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You may revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until its revocation. Your customer account will then be deleted.


Collection, processing and disclosure of personal data for orders
When you place an order, we collect and process your personal data only insofar as this is necessary to fulfill and process your order and to handle your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Art. 6 (1) (b) GDPR and is necessary for the performance of a contract with you. 
Your data is disclosed, for example, to the shipping companies and dropshipping providers you have chosen, payment service providers, service providers for order processing and IT service providers. In all cases we strictly observe the legal requirements. The scope of data transfer is limited to a minimum.
 
In doing so, your data may be transferred to third countries outside the European Union for which an adequacy decision of the EU Commission exists. Where no adequacy decision of the EU Commission exists, as for example for transfers to the USA, the data transfers are based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de


Reviews      

Data collection when writing a comment
When you comment on an article or post, we collect your personal data (name, email address, comment text) only to the extent provided by you. The processing serves the purpose of enabling comments and displaying them. By submitting the comment, you consent to the processing of the transmitted data. The processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You may revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until its revocation. Your personal data will then be deleted.


When your comment is published, the name you provided and the email address you provided will be published.


Rights of data subjects and storage period

Storage period
After complete processing of the contract, the data is initially stored for the duration of the warranty period, then in consideration of statutory retention periods, in particular under tax and commercial law, and is deleted after expiry of these periods, unless you have consented to further processing and use.


Rights of the data subject
Where the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: the right of access, to rectification, to erasure, to restriction of processing, and to data portability.
In addition, under Art. 21 (1) GDPR you have the right to object to processing based on Art. 6 (1) (f) GDPR and to processing for the purposes of direct marketing.


Right to lodge a complaint with the supervisory authority
Under Art. 77 GDPR you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.


Right to object
If the processing of personal data listed here is based on our legitimate interest under Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time with effect for the future, on grounds relating to your particular situation.
Once an objection has been made, the processing of the data concerned will cease, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.


Last updated: 27 October 2020