ENVÍO A TODO EL MUNDO Y ENTREGA GRATUITA DE TODOS LOS COUCHMASTER DENTRO DE ALEMANIA

Data Protection Declaration

Data Protection Declaration

Unless stated otherwise, the provision of your personal data is neither legally nor contractually required, nor is it necessary for entering into a contract. You are not obliged to provide your data. Failure to provide it will have no consequences. This applies only insofar as no other information is provided in the subsequent processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
 
Server log files
You can visit our websites without providing any personal data.
Each time you access our website, usage data is transmitted by your internet browser and stored in log files (so-called server log files) by us or our web host/IT service provider. This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the provider from which the access originates. Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our legitimate interest in ensuring the trouble-free operation of our website and improving our offerings.
 
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. The EU Commission has issued an adequacy decision for Canada. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's standard contractual clauses.

Contact

Controller
Please contact us. Data controller: nerdytec GmbH, Dönhoffstraße 27, 51373 Leverkusen, Germany, +4922029276614, support@nerdytec.com



Customer-initiated contact via email
If you spontaneously contact us by e-mail for business purposes, we will collect the personal data (name, e-mail address, message text) you provide. Data processing is for the purpose of processing and answering your inquiries.
If your contact aims at pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If you contact us for other reasons, the data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and answering your inquiry. In this case, you have the right to object at any time to the processing of personal data concerning you, which is carried out on the basis of Art. 6(1)(f) GDPR, on grounds relating to your particular situation.
Your e-mail address will only be used to process your inquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
 
Collection and processing of data when using the contact form
We only collect the personal data (name, email address, message text) that you provide via the contact form. Data processing is for the purpose of establishing initial contact.
If your contact aims at pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If you contact us for other reasons, the data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and answering your inquiry. In this case, you have the right to object at any time to the processing of personal data concerning you, which is carried out on the basis of Art. 6(1)(f) GDPR, on grounds relating to your particular situation.
Your e-mail address will only be used to process your inquiry. Your data will then be deleted, unless you have consented to further processing and use.
 
Collection and processing of data when using the withdrawal button
If you have concluded a contract via our website, we provide a withdrawal function (withdrawal button) through which you can immediately submit your declaration of withdrawal.
When using the withdrawal function, we only collect your personal data (name, e-mail address, data for identifying the contract or the part of the contract you wish to withdraw from, as well as the date and time of sending the declaration of withdrawal) to the extent you have provided it. Data processing is for the purpose of providing you with the legally required option to withdraw from your contract and to duly process your withdrawal.
If the contact relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR. Otherwise, data processing is carried out on the basis of Art. 6(1)(c) GDPR, as we are legally obliged to provide you with a withdrawal function on our online presence.
We only use your e-mail address to process your declaration of withdrawal. Afterwards, your data will be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
 
Disclosure to third parties (use of plugins)
For the technical implementation and management of the withdrawal function on our website, we use a software solution from an external provider, Händlerbund Legal GmbH, Kohlgartenstraße 11-13, 04315 Leipzig, within the framework of order processing.


For sending the confirmation email, we also use the service of the external provider Scaleway SAS (8, rue de la Ville-l'Évêque, 75008 Paris, France). For this purpose, your email address, the subject of the message, and the email status are transmitted to this service.
Further information on the collection and use of data by the external provider, as well as your rights, can be found in Scaleway's privacy policy at https://www.scaleway.com/en/privacy-policy/.
 
The collected personal data is transferred to the servers of the aforementioned third parties when the withdrawal function is used.

The processing of your personal data is for the purpose of legally secure fulfillment of the legal requirements for the design of the withdrawal function and is carried out on the basis of Art. 6(1)(c) GDPR. This data processing is also carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in being able to offer you a user-friendly withdrawal option. In this case, you have the right to object at any time to the processing of personal data concerning you, which is carried out on the basis of Art. 6(1)(f) GDPR, on grounds relating to your particular situation.
 
Collection and processing of application data via email
Page visitors can apply for vacant positions advertised on our website via email if interested. We collect your personal data only to the extent you provide it. This includes your contact information (e.g., name, email address, phone number), information about your professional qualifications and schooling, information about further education and specific performance certificates.
Data processing serves the purpose of making contact and deciding on the establishment of an employment relationship with you. The provision of data is necessary to carry out the application process. The processing of your personal data is based on Art. 6(1)(b) GDPR in conjunction with Section 26(1) BDSG for the implementation of pre-contractual measures (conducting the application process as an initiation of an employment contract).
To the extent you have given us your consent for the processing of personal data for inclusion in our applicant pool, for example, by checking a checkbox, the processing is based on Art. 6(1)(a) GDPR. You can revoke consent at any time without affecting the legality of the processing carried out on the basis of the consent until revocation. To the extent special categories of personal data within the meaning of Art. 9(1) GDPR, such as information on severe disability, are requested from applicants, this is done on the basis of Art. 9(2)(b) GDPR, so that we can exercise the rights arising from employment law and social security law and social protection and fulfill our obligations in this regard.
We will store your personal data for as long as necessary to make a decision about your application. Your data will then be deleted unless you consent to further processing and use. Should an employment relationship arise after the application process, the data provided will be processed on the basis of Art. 6(1)(a) GDPR in conjunction with Section 26(1) BDSG for the purpose of carrying out the employment relationship and subsequently transferred to the personnel file.

 
WhatsApp Business
For business contacts via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "WhatsApp"). If you are based outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
Data processing is for the purpose of processing and answering your inquiries. For this purpose, we collect and process your WhatsApp mobile number, your name (if provided), and other information you provide. For this service, we use a mobile device whose address book only stores data of users who have contacted us via WhatsApp. Under no circumstances will personal data be transmitted to WhatsApp without your prior consent to WhatsApp.
Your data will be sent by WhatsApp to servers of Meta Platforms Inc. in the USA.
For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has certified itself under the TADPF and has thereby committed to complying with European data protection principles.
If your contact aims at pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If you contact us for other reasons, the data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in providing a quick and easy contact option and in answering your inquiry. In this case, you have the right to object at any time to the processing of personal data concerning you, which is carried out on the basis of Art. 6(1)(f) GDPR, on grounds relating to your particular situation.
Your personal data is used to process your inquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
For more information on the terms of use and privacy policy of WhatsApp, please visit https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.
 

Customer Account Order

Customer Account
When you open a customer account, we collect the personal data you share in the process. Data processing is intended to improve your shopping experience and simplify order processing. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the authorization up to the time of revocation. Your customer account will then be deleted.
 
Collection, processing and transmission of personal data for orders
If you place an order, we will only collect and process your personal data to the extent necessary to fulfill and process your order, as well as to process your inquiries. The provision of the data is necessary for the conclusion of the contract. Otherwise, no contract can be concluded. The processing is carried out in accordance with Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.
Your data will be shared, for example, with shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing, and IT service providers. In all cases, we will strictly adhere to legal provisions. The scope of data transmission is limited to the minimum necessary.
 
Your data may be transferred to and processed in third countries outside the EU, particularly Canada and the USA. The European Commission has issued an adequacy decision for Canada. For the USA, there is an adequacy decision from the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place based on contractual obligations comparable to the European Commission's standard contractual clauses.


Advertising      

Use of your e-mail address for sending newsletters
We use your e-mail address to send you information and offers via newsletters, provided you have given your express consent. The processing of data is solely for advertising purposes. For this purpose, we process your e-mail address and any other data you voluntarily provided when registering for our newsletter.
Processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your e-mail address will be deleted from the distribution list. Despite deletion from the mailing list, we may continue to store your e-mail address in a so-called blacklist to prevent you from receiving future e-mails from us with the newsletter. This storage is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our legitimate interest and yours in preventing the reuse of your e-mail address for sending our newsletter. You have the right to object at any time to this processing of your personal data on grounds relating to your particular situation.


Use of e-mail address for direct advertising 
We use your e-mail address, which we have obtained through the sale of a good or service, for the electronic delivery of advertising for our own goods or services similar to those you previously purchased from us, provided you have not objected to it. Providing your e-mail address is necessary for the conclusion of the contract. Failure to provide it means that the contract cannot be concluded. Processing is based on Art. 6 (1) lit. f GDPR, our legitimate interest in direct advertising. You can object to this use of your e-mail address at any time by notifying us. You can find the contact details for notifying your objection in the impressum. You can also use the link provided for this purpose in the advertising e-mail. No costs other than the transmission costs according to basic rates will be incurred.
 
Use of Mailchimp
We use the service of Rocket Science Group LLC (675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308, USA; "Mailchimp") for sending newsletters as part of order processing.
We transmit the information you provide us during newsletter registration (e-mail address, first and last name, if applicable) to Mailchimp. The purpose of data processing is to send the newsletter and for statistical evaluation.
For the purpose of evaluating newsletter campaigns, the sent newsletters contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links. In this context, we collect your personal data such as IP address, browser and device type, as well as time. From this data, usage profiles can be created under a pseudonym. The collected data will not be used to identify you personally. The collected data is only used for statistical evaluation to improve newsletter campaigns.
Your data is generally transmitted to Mailchimp servers in the USA and stored there. For the United States, there is an adequacy decision from the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Mailchimp is
not certified under the TADPF. The data transfer takes place, among other things, on the basis of standard contractual clauses to provide sufficient guarantees for the protection of personal data. For more information, please visit the following link: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
Your personal data is processed on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in a targeted, effective and user-friendly newsletter system. For reasons arising from your particular situation, you have the right to object at any time to the processing of your personal data.
Further information and MailChimp's privacy policy can be found at: https://mailchimp.com/de/legal/data-processing-addendum/ and https://www.intuit.com/privacy/statement/.


Use of e-mail address for availability notifications
On our website, we offer an availability notification service. If an item is temporarily unavailable, you have the option to enter your e-mail address for the item in question and be informed by e-mail when it becomes available, provided you have given your consent. You will receive a single e-mail notification about the availability of the respective item once the goods are available. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can unsubscribe from the availability notification at any time by notifying us. Your e-mail address will be deleted from the distribution list.



Inventory Management      

Use of an external inventory management system
We use an inventory management system as part of order processing for contract execution. Your personal data collected during the order will be used for this purpose.
JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven, Germany 


Payment Service Providers      

Use of PayPal
On our website, we use the payment service PayPal from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). Data is processed to offer you this payment service. By selecting and using payment via PayPal, the data necessary for payment processing is transmitted to PayPal to fulfill the contract with you using the chosen payment method. Processing is based on Art. 6 (1) (b) GDPR.

All PayPal transactions are subject to the PayPal Privacy Policy. These can be found at https://www.paypal.com/es/webapps/mpp/ua/privacy-full


Use PayPal Plus
On our website, we use the payment service PayPal Plus from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). Data is processed to offer you this payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, the data necessary for payment processing is transmitted to PayPal to fulfill the contract with you using the selected payment method. Processing is based on Art. 6 (1) (b) GDPR.

For individual payment methods such as credit card via PayPal, direct debit via PayPal, PayPal reserves the right to obtain credit information based on mathematical-statistical procedures using credit agencies. For this reason, PayPal transmits the personal data necessary for a credit assessment to a credit agency and uses the information received about the statistical probability of a payment default for a weighted decision on the establishment, implementation, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognized mathematical and statistical methods, and in whose calculation, among other things, address data are included. Your rights will be respected in accordance with legal provisions. The data processing serves for creditworthiness verification for the initiation of a contract. Processing is based on Art. 6 (1) (f) GDPR of our predominant legitimate interest in protection against payment default, if PayPal makes advance payments.
For reasons arising from your particular situation, you have the right to exercise this right under Art. 6 (1) (f) GDPR to object to the processing of your personal data by notifying PayPal. The provision of data is necessary for the conclusion of the contract with your desired payment method. If not provided, the contract cannot be concluded with the payment method you have chosen.


Use of PayPal Express
On our website, we use the payment service PayPal Express from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; hereinafter "PayPal").
The data processing aims to enable you to pay via the PayPal Express payment service.
To establish a connection to this payment service, PayPal needs to collect, store, and analyze data when you access the website (e.g., IP address, device type, operating system, browser type, device location). Cookies may also be used for this purpose. Cookies enable the recognition of your browser. 
The use of cookies or similar technologies takes place on the basis of § 15 para. 3 p. 1 German Telemedia Act (TMG). The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our legitimate interest in providing a customer-oriented offering of different payment methods. For reasons arising from your particular situation, you have the right to object at any time to the processing of your personal data.
By selecting and using PayPal Express, the data necessary to process the payment is transmitted to PayPal to fulfill the contract with the chosen payment method. The legal basis for this data processing is Art. 6 para. 1 lit. b GDPR.
For more information about data processing when using the PayPal Express payment service, please refer to the corresponding Privacy Policy at the following link.
 
Use of PayPal Checkout
Our website uses the payment service PayPal Checkout from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The purpose of data processing is to offer you the option of paying via the payment service. When selecting and using the payment method via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data necessary for payment processing will be transmitted to PayPal to fulfill the contract with you using the selected payment method. This processing takes place on the basis of Art. 6 para. 1 lit. b GDPR.

It is possible that cookies are stored that allow your browser to be recognized. The resulting data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in a customer-oriented offering of various payment methods. For reasons arising from your particular situation, you have the right to object at any time to the processing of your personal data.

Credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal
For individual payment methods, such as credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, PayPal reserves the right to obtain credit information on the basis of mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default, in order to make a decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) obtained through scientifically recognized mathematical and statistical procedures, and whose calculations include, among other things, contact data. Your legitimate interests will be taken into account in accordance with legal provisions. The purpose of data processing is to verify creditworthiness for the initiation of a contract. Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR in our overriding legitimate interest in protection against non-payment, if PayPal pays in advance.
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data according to Art. 6 para. 1 lit. f GDPR by notifying PayPal. The data must be provided for the conclusion of the contract with the desired payment method. Otherwise, the contract cannot be concluded with the payment method you have chosen.

Local third-party providers
When paying via a payment method from a local third-party provider, the data necessary for payment processing will be transmitted to PayPal. This processing takes place on the basis of Art. 6 para. 1 lit. b GDPR. To process this payment method, PayPal transmits the data to the corresponding provider. This processing takes place on the basis of Art. 6 para. 1 lit. b GDPR. Examples of local third-party providers:

  • Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
  • Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

Direct Debit via PayPal
When paying via direct debit, the data required for processing the payment is first transmitted to PayPal. To process this payment method, PayPal transmits the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the chosen payment method. This processing takes place on the basis of Art. 6 (1) (b) GDPR. Ratepay may perform a credit check based on scientifically recognized mathematical and statistical procedures, using credit agencies as described above. The purpose of data processing is to verify creditworthiness for the initiation of a contract. The processing is carried out on the basis of Art. 6 (1) (f) GDPR in our overriding legitimate interest in the event of payment default, if Ratepay makes an advance payment. For more information about data protection and the credit agencies used by Ratepay, please visit the website https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

For more information about data processing when using PayPal, please refer to the corresponding privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.



Cookies
 
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is revisited.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are stored and decide individually whether to accept them or to prevent the storage of cookies and the transmission of the data contained therein. Cookies that have already been saved can be deleted at any time. However, we would like to point out that you may not be able to fully use all functions of this website.
The following links will show you how to manage (and deactivate) cookies in major browsers:

Technically necessary cookies
Unless otherwise specified in the data protection declaration below, we only use such technically necessary cookies in order to make our offer more user-friendly, effective and secure. In addition, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some features of our website cannot be offered without the use of cookies. For these services, it is necessary that the browser is recognized even after a page change.
The use of cookies or comparable technologies takes place on the basis of Section 25 (1) Sentence 1 of the TTDSG. The processing is based on Art. 6 (1) (f) GDPR from the legitimate interest in ensuring the optimal functionality of the website and making our offer effective and user-friendly.
For reasons arising from your particular situation, you have the right to object at any time to the processing of your personal data based on Article 6 (1) (f) GDPR.

 
Use of the Shopify Consent Tool (Shopify Privacy & Compliance)
We use the consent tool "Shopify Privacy & Compliance" from Shopify International Ltd (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Shopify is an affiliated company of Shopify Inc (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool allows you to give your consent to data processing via the website, in particular to the setting of cookies, and to exercise your right to withdraw consent already given. The purpose of the data processing is to obtain and document the necessary consent for data processing and thus to comply with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify.
Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. The European Commission has adopted an adequacy decision for Canada. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to the EU Commission's standard contractual clauses.
Data processing is carried out to fulfill a legal obligation on the basis of Art. 6 (1) (c) GDPR.
You can find more information about data protection at Shopify at https://www.shopify.com/de/legal/datenschutz.



Analysis Advertising Tracking


Use of Google Analytics 4
On our website, we use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
The data is processed for the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator.
Some of the data that may be collected includes: IP address, date and time of page visit, click path, information about the browser and device you are using, pages visited, the referrer URL (website from which you accessed our website), location data, purchasing activities. Google may link your data with other data, such as your search history, your personal accounts, your usage data from other devices, and any other information Google has about you.
 
Your IP address will first be truncated by us on our own servers. This way, Google only receives pseudonymized data.

Google uses technologies such as cookies, web storage in the browser, and tracking pixels, which allow your website usage to be analyzed. Cookies or similar technologies are used with your consent on the basis of Art. 25 (1) sentence 1 TTDSG in conjunction with Art. 6 (1) (a) GDPR.
 
The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. b GDPR. You can revoke your consent at any time, without this affecting the legality of the processing carried out on the basis of the consent until revocation.

The information generated about your use of this website is generally transmitted to a Google server in the USA and stored there. In the case of the United States, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has therefore committed to complying with European data protection principles. Both Google and US government agencies have access to your data.

For more information about terms of use and data protection, please visit the websites https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy?hl=de&gl=de.

Use of Shopify Analytics
We use the statistical and analytical functions of Shopify International Ltd. (Victoria Buildings,
2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of order processing. Shopify is an affiliated company of Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The purpose of data processing is to analyze this website and its visitors. For this purpose, data is stored for marketing and optimization purposes and prepared in reports, analyses, and statistics. Among other things, the following device information is collected and processed: Information about the web browser, IP address, time zone, and some of the cookies installed on your device. When you browse the website, information about the web pages or products you have accessed, the referrer URL (website from which you accessed our website), and information about how you interact with the website are also collected. Technologies such as cookies and web beacons, tags, and pixels (electronic files that collect information about how you browse the website) are used for this purpose.

Your data may be transferred to third countries outside the EU, particularly to Canada and the USA, and processed there. The European Commission has issued an adequacy decision for Canada. For the United States, there is an adequacy decision by the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to those of the European Commission's standard contractual clauses.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25, para. 1, sentence 1 TDDDG in conjunction with Art. 6, para. 1, lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6, para. 1, lit. a GDPR. You can revoke your consent at any time without affecting the legality of the authorization until the time of revocation.
More detailed information on Shopify's data protection can be found at https://www.shopify.com/de/legal/datenschutz, information on the order processing agreement at https://www.shopify.com/de/legal/dpa and information on the cookies used at https://www.shopify.com/de/legal/cookies.


Use of Meta Pixel
We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.
Meta and we are jointly responsible for the collection of your data when the service is integrated and for the transmission of this data to Meta. The basis for this is an agreement between us and Meta on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools. Accordingly, we are responsible, in particular, for fulfilling the information obligations in accordance with Art. 13, 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations in accordance with Art. 33, 34 GDPR, insofar as a breach of personal data protection affects our obligations under the joint processing agreement. Meta is responsible for enabling the rights of data subjects under Articles 15 - 20 GDPR, for complying with the security requirements of Article 32 GDPR with regard to the security of the Service, and for the obligations under Articles 33, 34 GDPR insofar as a violation of personal data protection affects Meta's obligations under the joint processing agreement.
The purpose of the application is to target website visitors with interest-based advertising on the social networks Facebook and Instagram. For this purpose, Meta's remarketing tag has been implemented on the website. This tag is used to establish a direct connection to Meta's servers when visiting the website. This tells Meta's server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, personalized ads based on your interests will then be shown to you.
The application also serves to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag and what actions are performed after being redirected to this website. However, we do not receive any information with which users can be personally identified.
Your data may be transferred to the USA. For the United States, there is an adequacy decision by the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and has therefore committed to complying with European data protection principles.
Your personal data is processed with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time, without this affecting the legality of the processing carried out on the basis of your consent until revocation.
You can deactivate the "Custom Audiences" remarketing function here. For more information about Meta's collection and use of data, your rights in this regard, and ways to protect your privacy, please refer to Meta's privacy policy at https://www.facebook.com/about/privacy/.


Use of Google Ads Conversion-Tracking
On our website, we use the online advertising program "Google Ads" and Conversion-Tracking (evaluation of visits). Google Conversion Tracking is an analytics service of
Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
If you click on an ad provided by Google, a conversion tracking cookie is stored on your computer. These cookies have a limited validity, do not contain personal data, and therefore do not perform any personal identification. If you visit certain pages of our website and the cookie has not expired, both Google and we can detect that you have clicked on the ad and have been redirected to this page. Each Google Ads customer receives a different cookie. Therefore, it is not possible to track cookies across Ads customer websites.
The information obtained with the help of the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a conversion tracking page. However, we do not receive any information that personally identifies users.
We use the extended implementation of consent mode (Advanced Consent Mode). In this case, user data is transmitted to Google in the form of "pings" even if consent has not been granted. These pings may contain, among other things, the following data: IP address to derive the IP country (the IP address is not recorded), date and time of page view, URL of visited pages, user agent, referrer URL (website from which you accessed our website), or information about the triggering of website events, such as a conversion. Based on this information, Google models user data to be able to carry out a comprehensive usage analysis despite the denial of consent.
Your data may be transmitted to Google LLC servers in the USA. In the case of the United States, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has therefore committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 15, para. 3, page 1 of the TDDDG in conjunction with Art. 6, para. 1, lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6, para. 1, lit. a GDPR. You can revoke your consent at any time without affecting the legality of the authorization until the moment of revocation.
Further information and Google's Privacy Policy can be found at: https://www.google.de/policies/privacy/

Use of Google AdSense
On our website, we use the AdSense function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
The purpose of data processing is to rent advertising space on the website and to deliberately target website visitors with advertising based on their interests.
This function will show website visitors personalized advertisements based on their interests from the Google Display Network. For this purpose, Google uses cookies that allow it to analyze website usage.
As a rule, the information generated by the cookie about your use of the website is transferred to a Google server in the USA, where it is stored. In the case of the United States, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has therefore committed to complying with European data protection principles. Google may transfer this information to third parties if required by law or if third parties are commissioned to process this information on behalf of Google. Google will never associate your IP address with other Google data.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25, para. 1, page 1 of the TDDDG in conjunction with Art. 6, para. 1, lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6, para. 1, lit. a GDPR. You can revoke your consent at any time without affecting the legality of the authorization until the time of revocation.
Further information and Google's Privacy Policy can be found at https://www.google.com/policies/technologies/ads/ and at https://www.google.de/policies/privacy/.


Use of Google Inc.'s Remarketing or "Similar Audiences" function
On our website, we use the Remarketing or "Similar Audiences" function of
Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
This function aims to analyze visitor behavior and interests.
Google uses cookies to analyze website usage, which forms the basis for creating interest-based ads. Cookies are used to record website visits and anonymized data on web usage. No personal data of website visitors is stored. If you visit another website on the Google Display Network, you will see ads that likely include previously viewed product categories and information.

Your data may be transmitted to Google LLC servers in the USA. In the case of the United States, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has therefore committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.
Further information on Google Remarketing and the associated data protection declaration can be found at https://www.google.com/privacy/ads/



Plug-ins

Use of Google Tag Manager
We use the Google Tag Manager service from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This function serves to manage the JavaScript and HTML tags used for the implementation of tracking and analysis tools in particular. The data processing serves the purpose of needs-based design and optimisation of this website. The use of Google Tag Manager does not lead to the activation of any cookies or the collection of personal data. Rather, it is a tool that triggers other tags, which in turn may collect and process data. Further information on the terms of use and data protection can be found at https://www.google.com/intl/de/tagmanager/use-policy.html


Use of Social Plug-ins
Social plug-ins from social networks are used on our website. The integration of social plug-ins and the associated data processing serves to optimize the advertising of our products.
When social plug-ins are integrated, a connection is established between your computer and the servers of the social network providers, and the plug-in is displayed on the website by notifying your browser, provided you have given your express consent. In this way, among other things, your IP address and the information you have visited on our website are transmitted to the provider's server. This applies regardless of whether you are registered or logged in to the social network. This is also transmitted for non-registered or non-logged-in users. If you are simultaneously logged in to one or more of your social media accounts, the information collected can also be associated with your corresponding profiles. By using the plug-in functions (e.g. clicking a button), this information is also transmitted to your user account. You can only prevent this assignment by logging out of the social media networks before visiting our website and before activating the buttons on your social media accounts.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.
The following social networks are integrated into our website via social plug-ins. For more information on the scope and purpose of data collection and use, your rights and ways to protect your privacy, please refer to the data protection declaration of the respective provider.

Facebook from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). Together with Meta Platforms Ireland, we are jointly responsible for the collection of your data that occurs when the service is integrated and for the transmission of this data to Facebook. The basis for this is an agreement concluded between us and Meta Platforms Ireland on the joint processing of personal data, in which the respective responsibilities are set out. The agreement can be viewed at the following link: https://www.facebook.com/legal/controller_addendum. According to this, we are primarily responsible for complying with the information obligations under Art. 13 and 14 GDPR, for complying with the security provisions of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Art. 33 and 34 GDPR, insofar as the personal data breach relates to our obligations under the joint processing agreement. Meta Platforms Ireland is responsible for ensuring the rights of data subjects under Art. 15 - 20 GDPR, for complying with the security provisions of Art. 32 GDPR with regard to the security of the service, and for complying with the obligations under Art. 33 and 34 GDPR, insofar as the personal data breach relates to Meta Platforms Ireland's obligations under the joint processing agreement.
Your data may be transferred to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta is certified under the TADPF and has thus committed to comply with European data protection principles.
Further information on data protection can be found at https://www.facebook.com/about/privacy/.
Instagram from Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
https://help.instagram.com/155833707900388
Your data may be transferred to third countries, such as the USA.
For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta is certified under the TADPF and has thus committed to comply with European data protection principles.
Use of hCaptcha
We use the hCaptcha service from Intuition Machines Inc. (1065 SW 8th St #704, Miami, FL 33130, USA; "hCaptcha") on our website as part of order processing.
HCaptcha serves to protect our website from spam and abuse by automated access (bots). By implementing hCaptcha, we ensure that certain actions on our website are only performed by real people, which guarantees the security and integrity of our online services.
When hCaptcha is used, the following data may be collected and processed: IP address of the user, information about the end device used (e.g. browser and operating system), mouse movements and interactions on the website, length of stay on the website, user input behaviour. Your data may be transferred to the USA. There is an adequacy decision by the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). HCaptcha has certified itself according to the TADPF and thus undertakes to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TDDDG i.V.m. Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing based on the consent before its revocation.
Further information on data processing and data protection at hCaptcha can be found at https://www.hcaptcha.com/gdpr.


Use of GoogleMaps
We use the embedding function of GoogleMaps on our website
Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
This function enables the display of geographical information and interactive maps. In doing so, Google collects, processes and uses data from website visitors when they visit pages where Google Maps maps are integrated.
If necessary, your data will also be transmitted to the USA.
For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thus committed to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.
For more information on the collection and use of data by Google, please refer to Google's privacy policy at https://www.google.com/privacypolicy.html. There you can also change your settings in the privacy center to manage and protect your data processed by Google.


Use of YouTube
We use the function for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter "YouTube") on our website. YouTube is a subsidiary of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google").
The function displays videos stored on YouTube in an iFrame on the website. The "extended data protection mode" option is activated. As a result, YouTube does not store any information about website visitors. Information is only transmitted to and stored on YouTube when you watch a video. If necessary, your data will be transmitted to the USA.
For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube is certified under the TADPF and has thus committed to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 15 para. 3 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.
For more information on the collection and use of data by YouTube and Google, your rights in this regard and ways to protect your privacy, please refer to YouTube's privacy policy (https://www.youtube.com/t/privacy).


Use of Vimeo
We use plugins from Vimeo Inc. (555 West 18th Street New York, New York 10011, USA; hereinafter "Vimeo") on our website to embed videos from the "Vimeo" platform.
If you open a page of our website that contains such a plugin, a connection is established with Vimeo's servers and, by notifying your browser, the "plugin" is displayed on the page. In this way, both your IP address and information about the sites you have visited on our website are transmitted to Vimeo's servers.
If you are registered with Vimeo at the same time, this page will assign this information to your personal account. By using the plugin functions (e.g. playing a video by pressing the corresponding button), this information is also transmitted to your Vimeo account.
If necessary, your data will be transmitted to the USA.
For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Vimeo is certified under the TADPF and has thus committed to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.
For more information on the purpose and scope of data collection, as well as further processing and use of data by Vimeo, your relevant rights and ways to protect your privacy, please refer to Vimeo's privacy policy: https://vimeo.com/privacy.
Use of Google Fonts
We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The purpose of the data processing is the uniform presentation of the fonts on our website. When calling up the site, a connection is established with Google's servers to load the fonts. In this context, various data, such as your IP address and other data about the browser used, are processed and transmitted to Google. This data is not linked to your Google account. If necessary, your data will be transmitted to the USA.
For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thus committed to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.
For more information on data processing and the privacy policy, please visit the following links: https://www.google.es/intl/es/policies/ and https://developers.google.com/fonts/faq.


Rights of Data Subjects and Storage Duration

Storage Duration
After completion of the contract, the data will first be processed for the warranty period, then stored taking into account statutory, commercial and tax retention periods, and finally deleted after the deadline, unless further processing and use has been agreed.
Data Subject Rights
You have the following rights according to Art. 15 to 20 GDPR, if the legal requirements are met: Right to information, rectification, erasure, restriction of processing, data portability.
In addition, in accordance with Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) GDPR and to processing for direct marketing purposes.
Right to lodge a complaint with the supervisory authority
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
Among other things, you can lodge a complaint with the supervisory authority responsible for us, which you can reach at the following contact details:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240
Fax: +49 211 38424999
E-Mail: poststelle@ldi.nrw.de

Right to object
Where we process personal data as described above on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation.
After your objection, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
 
If the processing of personal data is for the purpose of direct marketing, you may object to this processing at any time by notifying us. After your objection, we will cease processing the data concerned for direct marketing purposes.