Privacy Policy

Thank you for your interest and visit to our website. The protection of your personal data is a special concern for us at every stage of cooperation. Therefore, the following explains which data from your visit is processed for which purposes. "Personal data" means all information relating to an identified or identifiable natural person.

Responsible party and contact for the data protection officer

The person responsible for data processing is:

SUND Digital GmbH + Co. KG

Victoriaallee 1
22143 Hamburg
Germany
Phone: +49 40 53 80 96-0
Fax: +49 40 53 80 96-2158

Email: info@sund-group.com

You can reach our data protection officer at our postal address with the addition "Data Protection Officer" or by email at datenschutz@sund.net

Use of Shopify

For the provision and operation of our webshop, we use the e-commerce platform Shopify. The provider of Shopify is the Canadian company Shopify, 150 Elgin Street 8th Floor Ottawa, ON K2P 1L4 Canada. Responsible for data subjects in the EU is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, hereinafter "Shopify."

Shopify is the e-commerce software through which we offer and design our online shop. All data processing described in the following sections related to our webshop – in particular order processing, customer account management, payment processing, shipping, creation of usage statistics, and conversion measurement – is technically handled via the Shopify platform; the information about Shopify in this section applies additionally.

As part of using Shopify, personal data is processed and stored on Shopify servers, also outside the EU/EEA. We have concluded a data processing agreement (DPA) with Shopify in accordance with Art. 28 GDPR (https://www.shopify.com/legal/dpa).

Recipients of the data may include, among others:

Shopify Inc., Canada
Shopify Commerce Singapore Pte. Ltd., Singapore
Shopify Global Inc., USA
Shopify Payments (USA) Inc.

A complete list of all Shopify subcontractors can be found at: https://help.shopify.com/de/manual/privacy-and-security/privacy/subprocessors

Third-country transfer

Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. For data transfers to Canada, there is an adequacy decision by the EU Commission. For international transfers to countries that do not ensure an adequate level of data protection within the meaning of European data protection laws, Shopify also uses the standard contractual clauses of the EU Commission.

Further information on international data transfers by Shopify can be found at:

https://help.shopify.com/de/manual/privacy-and-security/privacy/international-data-transfers/onward-transfers

Further information on data processing by Shopify can also be found at:

https://help.shopify.com/de/manual/privacy-and-security/privacy

https://www.shopify.com/de/legal/datenschutz

General data processing when accessing our website

When using the website for informational purposes only, i.e., if you do not provide us with personal data via our contact form or otherwise transmit information to us, we only collect the data your browser transmits to our server. The following data is collected in this case:

Customer activities in your shop(s), including displayed and/or added-to-cart products.
Customer preference signals, including Global Privacy Control (“GPC”), opt-out and opt-in signals.
Device data from customers for the device(s) used when visiting your shop(s), including IP address, browser, and network activity.

This data is technically required to display the website to you and ensure the security of our website. We evaluate this data exclusively for statistical purposes to fix possible technical errors and, if necessary, identify and defend against attacks and security risks.

The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Since the collection of data for providing the website and storing it in log files is essential for its operation and protection against misuse, our legitimate interest in data processing prevails here. To the extent that absolutely necessary access to information stored in the user's end device takes place, the legal basis is also § 25 para. 2 no. 2 TDDDG.

Contests

When you participate in contests, we collect data necessary for conducting the contest. These usually include an individual contest entry (e.g., a comment or a photo), as well as name and contact details.

Data processing and data sharing may vary depending on the contest. Mandatory information is marked in the forms/participation conditions. Specific details (e.g., recipients, duration, publications, platform specifics) are described in the respective participation conditions.

Participation in the contest and the associated data collection is voluntary; it serves the execution of the contest, determination and notification of the winners, shipping/delivery of the prize, and, if applicable, documentation for proof/compliance reasons.

Depending on the setup, we base the processing on Art. 6 para. 1 lit. b GDPR (contractual execution of the contest according to the participation conditions), on Art. 6 para. 1 lit. a GDPR (consents, e.g., for publication of names/images or marketing purposes), as well as on Art. 6 para. 1 lit. f GDPR (legitimate interest in fair processing, fraud/abuse prevention).

If you have given consent, you can revoke it at any time with effect for the future.

If necessary, we transmit data of contest winners to partners such as shipping/logistics companies. If the contest is conducted via third-party platforms (e.g., social media), these also process your data. The privacy notices of the respective providers also apply.

The announcement of winners (e.g., first name, abbreviated last name, place of residence) or the use of submitted content/photos for marketing purposes only takes place based on your consent and according to the terms and conditions.

The determination of winners can be technically automated; this does not entail any legal effect or significant impact within the meaning of Art. 22 GDPR.

We store your data for the duration of the contest and its processing. Afterwards, they are deleted or blocked unless legal retention obligations (e.g., commercial/tax law for non-cash prizes) or legitimate proof interests oppose this (usually until the expiration of statutory limitation periods).

Initiated contact by email or via our contact form

If you initiate business contact with us by email, we collect your personal data (name, email address, message text) only to the extent you provide it. Providing this information is voluntary and initiated by you. If this concerns communication channels (e.g., email address, phone number), we will use these channels to contact you according to your request. The purpose of data processing is to handle and respond to your inquiry.

If the contact serves the purpose of pre-contractual measures (e.g., consultation regarding purchase interest, offer preparation) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR.

If contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.

If applicable, we may then not be able to fully process your request.

We delete the data collected in this context once storage is no longer necessary, or we restrict processing if legal retention obligations exist.

Customer Account - Orders

Customer Account

You have the option to register on our website and create a customer account. Data processing serves the purpose of improving your shopping experience and simplifying order processing.

For registration, we process the following data from you (mandatory):

Email (username)

Optionally, the following can also be stored:

First name
Last name
Address (ZIP code, city, country). Date of birth
Additional / Company
Telephone
Fax

We use the so-called double opt-in procedure for registration, meaning your registration is only complete when you confirm your registration by entering a 6-digit verification code that we send you by email for this purpose. If you do not confirm, your registration will be automatically deleted from our database after 1 day. After successful registration, you will receive a personal, password-protected access and can view and manage the data you have stored. Registration is voluntary but may be required to use certain of our services.

We store the data necessary to fulfill the contract, including payment method details if applicable, until you delete your customer account or the data stored there, or request us to delete your account, unless statutory retention periods prevent deletion. These may arise, for example, from tax and commercial law retention periods and can last up to 10 years.

The legal basis for this data processing is Art. 6 para. 1 lit. a and b GDPR. You can revoke your consent at any time with effect for the future and delete your customer account.

Guest orders

If you order as a guest in our shop, we only collect and process the personal data necessary to process and fulfill your order. Data processing for guest orders is carried out in the same way as described in the following section "Data processing for orders."

The legal basis for processing your data is Art. 6 para. 1 lit. b GDPR.

Data processing for orders

When you place an online order in our webshop, we collect the data necessary for concluding the contract. The data will be stored for the duration of the contract and thereafter, taking into account warranty periods as well as legal retention periods, especially tax and commercial law retention periods. These can be up to 10 years.

If we receive your email address as part of the order, we may use it for direct advertising purposes. The legal basis is Art. 6 para. 1 lit. f GDPR. You can object to the use of your data for advertising via electronic mail at any time without incurring any costs other than the transmission costs according to the basic tariffs.

As part of order and payment processing via our website, we use service providers who directly receive your inputs and are thus recipients of your personal data collected in connection with the order process. The legal basis is Art. 6 para. 1 lit. b GDPR. Further information about the service providers involved in the order process can be found in the following section: "Data recipients or categories of recipients"

Data recipients or categories of recipients

Shipping service provider - inventory management

Disclosure of the email address to the shipping company to inform about the shipping status

We pass on your email address to the shipping company as part of contract processing, provided you have explicitly consented to this during the ordering process. The transfer serves the purpose of informing you by email about the shipping status. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the shipping company without affecting the legality of the processing carried out based on the consent until the revocation.

Use of an external inventory management system

We use an inventory management system for contract processing within the scope of order processing. For this purpose, your personal data collected during the order is transmitted to

Billbee GmbH, Arolser Str. 10, 34477 Twistetal transmits.

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is based on Art. 6 para. 1 lit. b GDPR.

Management of pre-orders

To manage pre-orders in our Shopify webshop, we use the integration of the company Vicify, based in Długa 29, 00-238 Warsaw, Poland. Vicify provides us with functionalities for the separate management and processing of pre-orders. For this purpose, Vicify only receives read-only data access. Your data therefore always remains with us.

Payment service provider - credit check

Use of PayPal Express

We use the payment service PayPal Express from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you payment via the PayPal Express payment service.

To integrate this payment service, it is necessary for PayPal to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable the recognition of your browser.

The use of cookies or similar technologies is based on your consent according to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out based on the consent until the revocation.

By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR.

Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS

Use of PayPal Check-Out

We use the PayPal Check-Out payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of enabling you to make payments via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR.

Cookies may be stored in this process that enable the recognition of your browser. The data processing that takes place is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in offering a customer-oriented selection of various payment methods. You have the right to object at any time to this processing of your personal data for reasons arising from your particular situation.

Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal

For certain payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical methods using credit agencies if necessary. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, which incorporate address data among other factors. Your legitimate interests are taken into account in accordance with legal provisions. The data processing serves the purpose of credit checking for contract initiation. The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when PayPal advances payment.

You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR by notifying PayPal. Providing the data is necessary for concluding the contract with the payment method you have chosen. Failure to provide the data will result in the contract not being concluded with the payment method you selected.

Third-party providers

When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Art. 6 para. 1 lit. b GDPR. To carry out this payment method, the data may then be passed on by PayPal to the respective provider. This processing is based on Art. 6 para. 1 lit. b GDPR. Local third-party providers may include:

Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)

Invoice payment via PayPal

When paying via the invoice payment method, the data required for payment processing is initially transmitted to PayPal. To carry out this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR. Ratepay may conduct a credit check based on mathematical-statistical procedures (probability or score values) using credit agencies as described above. The data processing serves the purpose of credit assessment for contract initiation. The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when Ratepay advances payment. Further information on data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

For more information on data processing when using PayPal, please refer to the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Klarna Payment Options

We use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna") on our website. By selecting and using payment via Klarna, the data required for payment processing is transmitted to Klarna in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR.

"Pay Later" (invoice), "Pay Now" (direct debit payment), "Financing" (installment purchase)

For certain payment methods such as "Pay Later" (invoice), "Pay Now" (direct debit payment), and "Financing" (installment purchase), Klarna reserves the right to obtain a credit report based on mathematical-statistical methods using credit agencies if necessary.

For this purpose, Klarna transmits the personal data required for a credit check, such as first and last name, address, gender, email address, IP address, as well as data related to the order, to a credit agency for the purpose of identity and creditworthiness verification and uses the received information about the statistical probability of payment default to make a balanced decision regarding the initiation, execution, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, which incorporate address data among other factors. Your legitimate interests are taken into account in accordance with legal provisions. The data processing serves the purpose of credit checking for contract initiation. The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when Klarna advances payment. You have the right to object at any time to this processing of your personal data based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation by notifying Klarna. Providing the data is necessary for concluding the contract with the payment method you have chosen. Failure to provide the data will result in the contract not being concluded with the payment method you selected.

Further information, especially about which credit agencies Klarna shares your personal data with, can be found for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/credit_rating_agencies

General information about Klarna is available for Germany at: https://www.klarna.com/de/ and for Austria at https://www.klarna.com/at/. Your personal data is processed by Klarna in accordance with applicable data protection regulations and according to Klarna’s privacy policies for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.

Use of the email address for sending newsletters

You can subscribe to our email newsletter on our website. We inform you about our latest news, offers, and promotions. If you actively register, the sending is based on your consent (Art. 6 para. 1 lit. a GDPR in conjunction with § 7 para. 2 no. 3 UWG). As part of the newsletter dispatch, your data is also passed on to our service provider rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg im Breisgau.

For registrations, we use the double opt-in procedure. After entering your email, you will receive a confirmation email. Without confirmation, the registration will be automatically deleted after 3 days. For newsletter registration, we need your email address and your first name for personal addressing. Providing your last name is optional. After confirmation, we store your email address for the purpose of sending the newsletter until you revoke your consent. To provide proof, we log the time of registration and confirmation as well as the IP address used at the time of registration.

We can measure whether a newsletter is opened and which links are clicked to optimize content. This is done using tracking pixels embedded in the email and individual IDs. In this context, we collect, for example, IP address, browser type and device, as well as the time. From this data, usage profiles can be created under a pseudonym. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG).

More information about data processing by rapidmail GmbH can be found at: https://www.rapidmail.de/hilfe/kategorie/statistiken .

You can revoke your consent at any time with effect for the future. Use the unsubscribe link in every email or contact the above-mentioned contact details.

Cookies

Our website uses cookies. Cookies are data stored on your computer by a website you visit and allow your browser to be reassigned. Cookies can store various information, such as your language preference, the duration of your visit to our website, or the inputs you made there. This prevents, for example, having to re-enter required form data every time you use the site. The information stored in cookies can also be used to recognize preferences and tailor content to areas of interest.

There are different types of cookies: Session cookies are data sets that are only temporarily stored in the working memory and deleted when you close your browser. Persistent or permanent cookies are automatically deleted after a predetermined period, which can vary depending on the cookie. The information for this type of cookie can also be stored in text files on your computer. However, you can also delete these cookies at any time via your browser settings. First-party cookies are set by the website you are currently visiting. Only this website is allowed to read information from these cookies. Third-party cookies are set by organizations that are not operators of the website you are visiting. These cookies are used, for example, by marketing companies.

The cookies used on this website are:

The legal bases for possible processing of personal data using cookies and their storage duration may vary. If you have given us consent, the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR, § 25 para. 1 TDDDG. If the data processing is based on our overriding legitimate interests / the use of cookies is considered absolutely necessary, the legal basis is § 25 para. 2 TDDDG, Art. 6 para. 1 lit. c or lit. f GDPR.

You can delete cookies already stored on your device at any time and revoke your consent by clicking on the "Cookie Consent" tab below and changing your selection. You also have the option to prevent the storage of cookies through your internet browser settings. For more information, please refer to the instructions for your respective browser. Alternatively, you can install so-called ad blockers. Please note that some functions of our website may not work if you have disabled the use of cookies.

Cookiebot

Cookiebot is a consent management platform that informs you about the use of cookies and fingerprinting technologies on our website and gives you the option to decide whether you agree to their use or not. Cookiebot enables us to obtain and manage user consents.

"Cookiebot" is an offering of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark

If the visitor consents to the use of cookies, the following data is automatically logged:

The user's IP address in anonymized form (the last three digits are set to '0').
Date and time of consent
User agent of the end user's browser
The URL from which the consent was sent.
The end user's consent status, which serves as proof of consent.
An anonymous, random, and encrypted key.

The encrypted key and the consent status are stored on the user's device via a cookie to establish the corresponding consent status on future visits. This cookie is automatically deleted after 12 months.

The legal basis is Art. 6 para. 1 lit. f GDPR, § 25 para. 2 TDDDG. Our legitimate interest and the necessity of use lie in the user-friendliness of the website and compliance with the legal requirements of the GDPR.

You can prevent or stop the installation and storage of the cookie and thus the consent status at any time by adjusting your browser settings accordingly. You can access the Cookiebot settings by clicking on the "Cookie Consent" tab below and changing your selection.

Further information about Cookiebot can be found at:

https://www.cookiebot.com/de/privacy-policy/

Reviews - Advertising

Use of Opinew

We use the tool Opinew on this website, a service provided by Shop Circle LTD, Northcliffe House, 29 Farm Street, London, W1J5RL, United Kingdom.

Using Opinew, we can manage product reviews from orders via email, SMS, and QR codes, optimally integrate them into the design of our website, and automatically display top reviews. For this purpose, the tool accesses personal data from you such as name, email address, IP address, and order information.

In this context, personal data is transferred to the United Kingdom. The European Commission has issued an adequacy decision stating that the United Kingdom provides a level of data protection equivalent to that of the General Data Protection Regulation.

We have also concluded a data processing agreement with the service provider pursuant to Art. 28 para. 3 GDPR.

The legal basis for data processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, § 25 para. 1 TDDDG.

You can revoke your consent to the processing of personal data at any time. Please note that the revocation only takes effect for the future.

More information about the scope of data processing by the provider can be found at: https://www.opinew.com/privacy

Google Customer Reviews via the app "easy Google Customer Reviews"

We use the "Google Customer Reviews" program on our website to collect and display verified reviews from our customers. For users with habitual residence in the European Economic Area or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is the provider of the program. For the technical integration of the program into our shop, we use the app "easy Google Customer Reviews" from the provider Union Works Ltd., 86-90 Paul Street, London, EC2A 4NE, based in the United Kingdom.

Purpose and legal basis of data processing:

After your purchase in our shop, you can decide via an opt-in module whether you want to give your consent to participate in the program. If you consent to participate in the program, we transmit your email address to Google. You will then receive an email from Google asking you to rate your shopping experience on our website. Your survey responses are aggregated and used to create a merchant rating for our website. This rating appears in search ads and shopping ads and is displayed on our "Google Customer Reviews" logo. When using the program via the app, your email address, order and transaction information (e.g., billing country, order number) collected on our website, as well as technical data such as your IP address, browser, and device information, are processed.

The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG.

Data transfers and recipients of the data:

If personal data is also transferred to Google LLC in the USA, Google relies on certification under the EU-US Data Privacy Framework (DPF). This framework ensures an adequate level of data protection in accordance with the requirements of the GDPR. For more information, please visit: https://www.dataprivacyframework.gov/list.

In cases where data transfer is not covered by an adequacy decision, Google uses EU Standard Contractual Clauses. For more information, please refer to Google's privacy policy: https://policies.google.com/privacy/frameworks.

Data transmission to Union Works Limited is based on an adequacy decision, as the United Kingdom (UK) is recognized by an EU Commission decision as a country with an adequate level of data protection.

Revocation of your consent:

You can revoke your consent at any time by sending a message to us or to Google with effect for the future.

Further information on data protection in connection with the Google Customer Reviews program can be found at:

https://policies.google.com/privacy?hl=de

Basics of Google Customer Reviews - Google Merchant Center Help

Information about data processing by Union Works Ltd. can be found at

https://unionworks.co.uk/pages/privacy-policy

Google Customer Reviews app for Shopify | Shopify App Store

Analysis - advertising tracking

Use of Google Analytics 4

If you have given your consent, Google Analytics 4, a web analytics service from Google LLC, is used on this website. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Type and purpose of processing
Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected via the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.

We use Google Signals. This allows Google Analytics to collect additional information about users who have enabled personalized ads (interests and demographic data), and ads can be delivered to these users in cross-device remarketing campaigns.

In Google Analytics 4, IP address anonymization is enabled by default. Due to IP anonymization, your IP address is shortened by Google within member states of the European Union or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

During your website visit, your user behavior is recorded in the form of "events." Events can include:

Page views
First-time visit to the website
Session start
Visited web pages
Your "click path," interaction with the website
Scrolls (whenever a user scrolls to the bottom of the page (90%))
Clicks on external links
Internal search queries
Interaction with videos
File downloads
Viewed / clicked ads
Language settings
Additionally, the following is recorded:
your approximate location (region)
date and time of the visit
your IP address (in shortened form)
technical information about your browser and the devices you use (e.g., language settings, screen resolution)
your internet provider
the referrer URL (which website/which advertising medium you came to this website from)

On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and to compile reports on website activities. The reports provided by Google Analytics serve to analyze the performance of our website and the success of our marketing campaigns.

Recipients of the data are/can be

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor according to Art. 28 GDPR)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Google LLC, based in California, USA, and possibly US authorities can access the data stored by Google.

Third-country transfer
Google LLC is certified under the EU-US Data Privacy Framework. Since Google servers are distributed worldwide and transfer to third countries cannot be completely excluded, we have also concluded the EU Standard Contractual Clauses with the provider.

Storage duration
The data we send and link to cookies are automatically deleted after 14 months. The maximum lifespan of Google Analytics cookies is 2 years. Data deletion after the retention period is automatically carried out once a month.

Legal basis
The legal basis for this data processing is your consent according to Art. 6 para. 1 sentence 1 lit. a GDPR, § 25 para. 1 TDDDG.

Withdrawal
You can revoke your consent at any time with effect for the future by clicking on the "Cookie Consent" tab below and changing your selection. The legality of the processing carried out based on the consent until the revocation remains unaffected.

You can also prevent the storage of cookies from the outset by adjusting the settings of your browser software accordingly. However, if you configure your browser to reject all cookies, some functionalities on this and other websites may be limited. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by

a. do not give your consent to the setting of the cookie or
b. download and install the browser add-on to deactivate Google Analytics HERE.

Further information on the terms of use of Google Analytics and data protection at Google can be found at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.

Matomo

Our website uses the open-source web analytics service Matomo, a service of "InnoCraft Ltd," a company based at 150 Willis St, 6011 Wellington, New Zealand. Since InnoCraft is located outside the EU, it has appointed a representative in the EU (privacy@innocraft.com). According to a decision by the EU Commission, New Zealand has an adequate level of data protection. Matomo uses cookies that enable analysis of website usage. For this purpose, the usage information collected in the cookie (including your shortened IP address) is transmitted to Matomo's servers located in the EU and stored for usage analysis purposes. No data is transmitted to servers outside our control with Matomo. Your IP address is immediately anonymized during this process so that you are not identifiable as a user to us. The collected information about your use of this website is not shared with third parties. We use the collected data for statistical analysis of user behavior to optimize the functionality and stability of the website and for marketing purposes. Our interest and purpose in data processing lie in optimizing our website, adapting content, and improving our offerings. The interests of users are sufficiently protected by anonymization.

We store the analysis data only as long as the purpose of data processing requires, but for a maximum of 6 months. You can prevent the setting of (individual or all) cookies by adjusting your browser settings accordingly; however, in this case, you may not be able to use all functions of this website fully.

The legal basis is your consent according to Art. 6 para. 1 a GDPR, § 25 para. 1 TDDDG. You can revoke this consent at any time via the cookie banner by clicking on the "Cookie Consent" tab below and changing your selection.

Use of Shopify Statistics

We use the statistics and analysis functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of order processing. Shopify is an affiliated company of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).

The data processing serves the purpose of analyzing this website and its visitors. For this purpose, data is stored for marketing and optimization purposes and provided in reports, analyses, and statistics. Among other things, the following device information is collected and processed: information about the web browser, IP address, time zone, and some of the cookies installed on your device. When you navigate the website, information about visited web pages or products, the referrer URL (the website from which you accessed our website), and information about how you interact with the website are also collected. Technologies such as cookies, web beacons, tags, and pixels (electronic files used to collect information about how you navigate the website) are used for this.

The use of cookies or similar technologies is based on your consent according to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time by clicking on the "Cookie Consent" tab below and changing your selection.

Use of Google Ads

We use the online advertising program "Google Ads" from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. Within this framework, we use Google Remarketing, Conversion Tracking (visitor action evaluation), and Ads Remarketing Lists for search ads.

Ads and Remarketing

The ads are displayed based on search queries on websites within the Google advertising network. Through these services, we have the ability to combine our ads with specific search terms or show ads to previous visitors promoting services they viewed on our website. This allows us to show interest-based advertising to users of our website on other sites within the Google advertising network (as a "Google ad" within Google Search or on other websites). Remarketing lists also enable us to customize search ad campaigns for users who have previously visited our website.

Cookies and Conversion Tracking

An analysis of online user behavior is necessary for interest-based offers. Google uses cookies to perform this analysis. When you click on an ad served by Google or visit our website, a cookie is set on your computer by Google. These cookies have a lifespan of 90 days. Each Google Ads customer receives a different cookie. Therefore, it is not possible for cookies to be tracked across the websites of Ads customers.

The information collected via the respective cookies is used to specifically address the visitor during a later search query and to create conversion statistics. With the help of this technology, Google and we receive information that a user clicked on an ad and was redirected to our websites. The statistics provided to us by Google include the total number of users who clicked on one of our ads and, if applicable, whether they were redirected to a page on our website marked with a conversion tag. Based on these statistics, we can track which search terms led to frequent clicks on our ads and which ads resulted in user contact via the contact form. However, we do not receive any information that would allow us to personally identify users.

Your data may be transmitted to the servers of Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework.

The use of cookies or similar technologies is based on your consent according to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time by clicking on the "Cookie Consent" tab below and changing your selection.

You can prevent processing by adjusting your browser's cookie settings or by visiting the Network Advertising Initiative opt-out tool.

More information about data protection in the context of Google Ads and Google's privacy policy can be found at:

https://policies.google.com/technologies/ads?hl=de

https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de

https://www.google.de/policies/privacy/

Use of Microsoft Advertising

Microsoft Advertising is an online advertising service for placing ads by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. The responsible entity for users in the EU/EEA and Switzerland is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521 Ireland.

We use the Microsoft Advertising service (formerly Bing Ads) to place advertisements through the Microsoft network and its associated search engines (e.g., Bing, Yahoo!, Ecosia, etc.).

As part of Microsoft Advertising, we also use the associated conversion tracking. A prerequisite for conversion tracking is the implementation of the UET tag (Universal Event Tracking Tag), which we have integrated on our website. If you come to our website via an ad placed by us, a cookie is set on your computer. Microsoft and we can thus recognize that someone clicked on an ad, was redirected to our website, and performed a previously specified action on the website (conversion). Through this data, we can significantly better tailor our website, our ads, and our offers to your needs. In addition, we use remarketing lists for our ads to present interest-based ads to website visitors within the Microsoft advertising network. Detailed information about data and cookies can be found at https://help.ads.microsoft.com/#apex/ads/de/53056/2-500.

We use the information obtained exclusively for statistical evaluation to optimize ads. We are not able to identify the visitor through the collected data. The statistics provided to us by Microsoft include the total number of users who clicked on one of our ads and whether they were redirected to a website tagged with a conversion tag. We also learn whether a specific action predefined by us on the website was performed (e.g., whether and how many registrations for an event took place), through which keyword or ad you came to us, what you click on our website, how many people visit our website via Microsoft Advertising, and how long they stay on our website.

Microsoft uses the data to optimize its own advertising offerings and other services. If you have a Microsoft account yourself, the collected data can be linked to your account. It is also possible that Microsoft recognizes and stores your IP address. The retention period for data collected by UET is 390 days. Microsoft cookies have an expiration date of 13 months.

You have the option, via the ad settings, https://account.microsoft.com/privacy/ad-settings/signedout?ru=https:%2F%2Faccount.microsoft.com%2Fprivacy%2Fad-settings to select the types of Microsoft ads or to deactivate interest-based ads on Microsoft.

The legal basis for the described data processing is your consent, Art. 6 para. 1 sentence 1 lit. a GDPR § 25 para. 1 TTDSG. You can revoke a given consent at any time with effect for the future by clicking on the "Cookie Consent" tab below and changing your selection.

Recipients of the data used within Microsoft Advertising may also include Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. For data transfers to the USA, Microsoft has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

More information about data protection within Microsoft Advertising can be found at: https://www.microsoft.com/de-de/privacy/privacystatement

Plugins and others

Use of Google Tag Manager

For reasons of transparency, we point out that we use the Google Tag Manager service from the provider Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The service provider for users in the EU, EEA, and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

The Google Tag Manager makes it easier for us to integrate, centrally manage, and time-control our tags. Tags are script codes or code sections that can trigger different functionalities, for example, measuring the success of our advertisements (Google Ads). The Google Tag Manager itself does not collect personal data but may transmit the IP address to Google.

The legal basis for this data processing is your consent according to § 25 para. 1 TDDDG. You have the option to revoke a once given consent with effect for the future by clicking on the "Cookie Consent" tab below and changing your selection. The legality of the data processing up to the revocation remains unaffected.

If Google stores personal data, this data is stored on the Google servers. The storage duration for the data processed by the individual tracking tools can be found in our individual privacy notices for the respective tools.

For more information about Google Tag Manager, see: https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/.

Use of hCaptcha

We use the hCaptcha service on our website to protect our online offerings from abusive use, especially from automated programs ("bots") and spam. The provider is Intuition Machines Inc., 1065 SW 8th St #704, Miami, FL 33130, USA.

We use hCaptcha to ensure the security and functionality of our website and to prevent abuse. hCaptcha checks whether access is made by a natural person or an automated program. For this purpose, a verification element (e.g., image puzzle) may be displayed to you or an analysis may take place in the background. The following data are processed in particular:

IP address
Information about browser and device (e.g., operating system, language, screen resolution)
Date and time of access, referrer URL
Mouse movements, clicks, scrolling behavior, and possibly the solutions to the hCaptcha tasks

hCaptcha uses cookies or similar technologies that store a unique identifier per user and enable recognition across different websites with hCaptcha.

The legal basis is our legitimate interest according to Art. 6 para. 1 lit. f GDPR. As far as information is stored on or read from your device, the legal basis is § 25 para. 2 no. 2 TDDDG.

As part of hCaptcha, data is transmitted to Intuition Machines Inc. in the USA. There is an adequacy decision by the EU Commission for the USA based on the EU–US Data Privacy Framework (DPF); Intuition Machines Inc. is certified under the DPF.

Use of the "Essential Sticky Add to Cart" function (Shopify app)

In our online shop, we use the so-called "Sticky Add to Cart" function, which is provided via an app integrated into Shopify. Depending on the currently viewed product page, this function permanently displays a button to add the respective product to the shopping cart, thus facilitating the ordering process.

The "Sticky Add to Cart" app for Shopify improves the user experience by creating a persistent, customizable bar that follows the user's scrolling and remains visible and accessible at all times. This allows customers to easily add items to the cart or buy directly, regardless of where they are on the page. This feature helps increase conversion rates and simplify the checkout process.

The following data are processed in particular when using this function:

Information about visited pages and viewed products
Content and status of your shopping cart (e.g., added items, quantity, subtotal)
Interaction data with the button (e.g., clicks, times, used device and browser type, each in anonymized or shortened form)

Pure shopping cart interactions, such as adding product or variant IDs, are not considered personal data as long as no additional assignment to the user takes place, for example through further identification features.

Technically caused information generated during the delivery of online content is generally not processed as personal data, since, for example, IP addresses are not stored permanently.

The processing of this data is carried out to perform pre-contractual measures and to fulfill the purchase contract (Art. 6 para. 1 lit. b GDPR) as well as based on our legitimate interest in a user-friendly and sales-promoting design of our online shop (Art. 6 para. 1 sentence 1 lit. f GDPR).

As far as cookies or similar technologies are used to provide the "Sticky Add to Cart" function that are strictly necessary for technical operation, their use is only based on a legal basis (Art. 6 para. 1 lit. f GDPR in conjunction with § 25 TDDDG).

The "Sticky Add to Cart" function is provided via a third-party app in the Shopify App Store. The provider of this app processes the mentioned data partly on our behalf as a data processor according to Art. 28 GDPR and gains access to the shop and usage data stored in Shopify as far as necessary to provide and optimize the function. Further information on data processing by Shopify itself can be found in the section "Use of the Shopify platform" of this privacy policy.

The personal data processed in connection with the "Sticky Add to Cart" function is only stored as long as necessary to provide the function. Afterwards, the data is deleted or anonymized.

Use of the "EU Withdrawal Button" (Shopify App)

In our online shop, we use the "EU Withdrawal Button" app integrated into Shopify. This function integrates the legally required EU withdrawal button directly into our shop and allows customers to exercise their withdrawal at any time. No customer account is required to use the EU Withdrawal Button. After submitting the withdrawal, a confirmation email is automatically sent.

The following data are processed in particular when using this function:

Personal master data: first name, last name, customer ID
Contact data: email address, delivery and billing address
Order data: order number, order date, withdrawn items, quantity of items, purchase price, withdrawal date, items, delivery conditions
Communication data: Contents from the withdrawal form (e.g., reason for withdrawal, messages from free text fields)
Usage data: IP address, timestamp (date and time of button use), user agent, and technical identifiers to secure the form

The processing is carried out to fulfill our legal obligations related to the electronic withdrawal function for distance contracts (Art. 6 para. 1 lit. c GDPR) as well as based on our legitimate interest in a user-friendly and transparent handling of withdrawals (Art. 6 para. 1 lit. f GDPR). If the function requires absolutely necessary access to information stored on the user's end device, this is done on the basis of § 25 para. 2 no. 2 TDDDG.

The "EU Withdrawal Button" function is provided via a third-party app from 401layers UG (limited liability) in the Shopify App Store, which acts as a data processor for us according to Art. 28 GDPR. Further information on data processing by Shopify itself can be found in the section "Use of the Shopify platform" of this privacy policy.

Data collected via the "EU Withdrawal Button" function will be deleted by the provider after 6 months. We store data related to the EU Withdrawal Button only as long as necessary to process the withdrawal, to fulfill legal retention and documentation obligations (especially commercial and tax law requirements), and to assert, exercise, or defend legal claims.

Duration of storage:

Rights of the data subject

General rights

You have the following rights under Art. 15 to 20 GDPR, provided the legal requirements are met: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability.

If processing is based on your consent, you have the right to withdraw it with effect for the future.

Rights regarding data processing based on legitimate interest

According to Art. 21(1) GDPR, you have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(e) GDPR (processing in the public interest) or Art. 6(1)(f) GDPR (processing for the purposes of legitimate interests); this also applies to profiling based on these provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

Rights regarding direct marketing

If we process your personal data for direct marketing, you have the right under Art. 21(2) GDPR to object at any time to the processing of your personal data for such advertising purposes; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

Right to complain to the supervisory authority

According to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You can file a complaint, among other places, with the supervisory authority responsible for us, which you can reach at the following contact details:

Hamburg Commissioner for Data Protection and Freedom of Information

Ludwig-Erhard-Str 22, 7th floor

20459 Hamburg

Tel.: +49 40 428544040

Fax: +49 40 428544000

Email: mailbox@datenschutz.hamburg.de

Last updated: May 12, 2026