Data protection
Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither legally nor
contractually prescribed, nor necessary for the conclusion of a contract. You are not obliged to provide the data.
Failure to provide your personal data will have no consequences. This only applies if no other information is provided during subsequent processing operations.
is made.
"Personal data" means any information relating to an identified or identifiable natural person.
Server log files
You can visit our websites without providing any personal information.
Every time you access our website, usage data is sent to us or our web host / IT service provider through your Internet browser
and stored in protocol data (so-called server log files). This stored data includes, for example, the name of the accessed
Page, date and time of access, IP address, amount of data transferred and the requesting provider.
The processing is carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in the
To ensure the smooth operation of our website and to improve our offering.
Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there.
For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission
The Trans-Atlantic Data Privacy Framework (TADPF) is in place. Shopify is not certified under the TADPF. This data transfer
is based on contractual obligations comparable to those of the EU Commission’s standard contractual clauses.
contact
Person responsible
Please contact us if you wish. The person responsible for data processing is: Dennis Gersdorf, Auenland 13, 25336 Klein
Nordend Germany , 015257250020, Connor.Gersdorf@web.de
Customer's proactive contact via email
If you initiate business contact with us via email, we will collect your personal data (name, email address,
Message text) only to the extent provided by you. The data processing serves to process and answer your
Contact request.
If the contact serves to carry out pre-contractual measures (e.g. advice in case of purchase interest, preparation of an offer)
or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit.
b GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) (f) GDPR from
our legitimate interest in processing and answering your request. In this case, you have the right to
for reasons arising from your particular situation, at any time to this processing based on Art. 6 (1) (f) GDPR
to object to the processing of personal data concerning you.
We will only use your email address to process your request. Your data will then be processed in accordance with legal
Retention periods will be deleted unless you have consented to further processing and use.
Customer account orders
Customer account
When you open a customer account, we collect your personal data to the extent specified therein. Data processing
serves the purpose of improving your shopping experience and simplifying order processing. Processing is based on the
Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us, without
The legality of the processing carried out on the basis of the consent until the revocation is affected. Your customer account will then
deleted.
Collection, processing and transfer of personal data when placing orders
When you place an order, we only collect and process your personal data to the extent necessary to fulfil and process your order.
and to process your inquiries. The provision of data is necessary for the conclusion of the contract.
Failure to provide this data will result in no contract being concluded. Processing is based on Art. 6 (1) (b) GDPR.
GDPR and is necessary to fulfill a contract with you.
Your data will be passed on, for example, to shipping companies, dropshipping or fulfillment providers,
Payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal
Specifications. The scope of data transmission is limited to a minimum.
Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there.
For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission
The Trans-Atlantic Data Privacy Framework (TADPF) is in place. Shopify is not certified under the TADPF. This data transfer
is based on contractual obligations comparable to those of the EU Commission’s standard contractual clauses.
Reviews
Using Judge.me
We use the rating system "Judge.me" from Judge.me Ltd (c/o Buckworths 2nd Floor, 1-3 Worship Street,
London, England, EC2A 2AB; "Judge.me").
Judge.me enables us to collect customer reviews and display them on our website to give you an insight into the
To offer quality of our services.
After placing an order, you may receive an invitation to submit a review from us or Judge.me and then
Submit a review. The following data may be processed by us or Judge.me: email address, name, telephone number,
Address, information about your device (IP address, information about your web browser and the operating system used),
Information about the purchased product or service used (order number, product details), the content of your
Review and the star rating you gave, your product photos or videos (if you have included them with your product review
This data may also be used to verify your review.
Judge.me uses technologies such as cookies.
Your data may be transferred outside the EU to the United Kingdom. An adequacy decision from the EU Commission exists for the United Kingdom.
Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission exists,
the Trans-Atlantic Data Privacy Framework (TADPF). Judge.me is not certified under the TADPF. This data transfer takes place on
Based on special contracts approved for use in the United Kingdom, which provide the same protection as
have personal data in the United Kingdom.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) (s) 1 TDDDG in conjunction with
Art. 6 (1) (a) GDPR. Your personal data will be processed with your consent on the basis of Art. 6 (1) (a) GDPR.
a GDPR, provided that you have expressly consented to the transfer of your data and to receiving the request for evaluation. You can
withdraw your consent at any time, without affecting the legality of the processing carried out on the basis of your consent until the withdrawal.
is touched.
For more information about data protection when using Judge.me, please visit: https://judge.me/privacy .
Payment service providers
Using PayPal Check-Out
We use the PayPal Check-Out payment service from PayPal (Europe) S.à.rl et Cie, SCA (22-24 Boulevard
Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of offering you payment via the payment service
By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay later" via PayPal
The data required for payment processing will be transmitted to PayPal in order to fulfil the contract with you using the selected payment method
This processing is carried out on the basis of Art. 6 (1) (b) GDPR.
Cookies may be stored that enable the recognition of your browser. The resulting
Data processing is carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in
customer-oriented offer of various payment methods. You have the right, for reasons related to your particular situation,
to object to this processing of personal data concerning you at any time.
Credit card via PayPal, direct debit via PayPal & “Pay later” via PayPal
For individual payment methods such as credit card via PayPal, direct debit via PayPal or “Pay later” via PayPal, PayPal reserves the right to
reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies.
PayPal transmits the personal data required for a credit check to a credit agency and uses the information received
Information on the statistical probability of a payment default for a balanced decision on the justification,
Execution or termination of the contractual relationship. The credit report may contain probability values (score values) that
are calculated on the basis of scientifically recognized mathematical-statistical methods and in whose calculation, among other things,
Address data will be included. Your legitimate interests will be taken into account in accordance with the legal provisions.
Data processing serves the purpose of credit checks for the initiation of a contract. Processing is carried out on the basis of Art. 6 (1) GDPR.
1 lit. f GDPR due to our overriding legitimate interest in protecting against payment default if PayPal makes advance payments.
You have the right to object to this processing at any time for reasons arising from your particular situation, based on Article 6 (1) (f).
GDPR-based processing of personal data concerning you by notifying PayPal .
Provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide this data will result in
The consequence is that the contract cannot be concluded using the payment method you have chosen.
Third-party providers
When paying using a third-party payment method, the data required for payment processing will be transmitted to PayPal.
This processing is carried out on the basis of Art. 6 (1) (b) GDPR. To carry out this payment method, the data may then be
by PayPal to the respective provider. This processing is based on Art. 6 (1) (b) GDPR. Local
Third-party providers can be, for example:
Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
Purchase on account via PayPal
When paying by invoice, the data required for payment processing will first be sent to PayPal
To process this payment method, the data will then be transferred by PayPal to Ratepay GmbH (Franklinstraße 28-29,
10587 Berlin; "Ratepay") in order to fulfill the contract with you using the selected payment method. This processing is carried out on
Basis of Art. 6 (1) (b) GDPR. Ratepay may conduct a credit check based on mathematical-statistical procedures
(Probability or score values) using credit agencies according to the procedure described above.
Data processing serves the purpose of credit checks for the initiation of a contract. Processing is carried out on the basis of Art. 6 (1) GDPR.
1 lit. f GDPR due to our overriding legitimate interest in protecting against payment default if Ratepay makes advance payments.
Further information on data protection and which credit agencies use Ratpay can be found at https://www.ratepay.com/legal-
payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/ .
Further information on data processing when using PayPal can be found in the associated privacy policy at
https://www.paypal.com/de/webapps/mpp/ua/privacy-full .
Use of the payment service provider Mollie
For payment processing on our website, we use the payment service provider Mollie BV (Keizersgracht 313, 1016 EE
Amsterdam, Netherlands; “Mollie”). The data processing serves the purpose of being able to offer you various payment methods through the
Payment processing via the payment service provider Mollie. If you choose one of the payment options of the payment service provider Mollie
If you have chosen to use the payment method, the data required for payment processing will be transmitted to Mollie. This includes your payment details (for example,
Example: bank account number or credit card number), your IP address, your internet browser and device type and in some cases your first
and surname, your address details and information about the product or service you have purchased from us. This
Data processing is carried out on the basis of Art. 6 (1) (b) GDPR. Further information on data processing when using the
Payment service provider Mollie can be found in the associated privacy policy https://www.mollie.com/de/privacy
Cookies
Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on the
When a user visits a website, a cookie can be stored on the user’s operating system.
This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting
By making appropriate technical settings in your Internet browser, you can be notified before cookies are set and informed about
decide individually whether to accept cookies and prevent the storage of cookies and the transmission of the data contained therein.
Stored cookies can be deleted at any time. However, we would like to point out that you may then not be able to use all
can fully use the functions of this website.
The links below will tell you how to manage cookies in the main browsers (including
deactivate):
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-
2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablassen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
Unless otherwise stated in the privacy policy below, we only use the technically necessary
Cookies to make our service more user-friendly, effective and secure. Furthermore, cookies enable
our systems to recognize your browser even after you change pages and to offer you services. Some functions of our
The website cannot be offered without the use of cookies. These require that the browser is
page change is recognized.
The use of cookies or similar technologies is based on Section 25 (2) TDDDG. The processing of your
personal data is processed on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in the
Ensuring optimal functionality of the website as well as a user-friendly and effective design of our offering.
You have the right to object to the processing of personal data concerning you at any time, for reasons related to your particular situation.
to object to the processing of personal data.
Rights of data subjects and storage period
Duration of storage
After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, then taking into account
statutory retention periods, in particular those under tax and commercial law, and then deleted after expiry of the retention period, provided that you
have not consented to further processing and use.
Rights of the data subject
If the legal requirements are met, you have the following rights under Articles 15 to 20 GDPR: Right to information, to
Correction, erasure, restriction of processing, data portability.
In addition, according to Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) (f) GDPR
based, as well as against processing for direct marketing purposes.
Right to lodge a complaint with the supervisory authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing
Your personal data is not processed lawfully.
You can lodge a complaint with the supervisory authority responsible for us, which you can contact using the following contact details
to reach:
Independent State Center for Data Protection Schleswig-Holstein
PO Box 71 16
24171 Kiel
Phone: +49 431 9881200
Fax: +49 431 9881223
Email: mail@datenschutzzentrum.de
Right of objection
Are the personal data processing operations listed here based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR?
f GDPR, you have the right to object to this processing at any time with effect
to object in the future.
After objection has been made, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds
for the processing which override your interests, rights and freedoms, or if the processing is necessary to assert,
Exercise or defense of legal claims.