Privacy Policy

1) Introduction and contact details of the person responsible

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we will inform you about how your personal data is handled when you use our website. Personal data is all data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is PURIDAL S.L.U., Carrer de la Turera 10, Bloc B, 4-1, AD300 Ordino - Sornàs, Andorra, Tel.: +49 3221 322 210 0, E-Mail: info@puridal.com. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

2) Data collection when visiting our website

2.1 If you only use our website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the website server (so-called “server log files“). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

The website we visited
Date and time of access
Amount of data sent in bytes
Source/reference from which you accessed the site
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

The processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

For hosting our website and displaying the page content, we use the following provider: OVH US LLC, 11950 Democracy Drive, Suite 300, Reston, VA 20190, USA.

All data collected on our website is processed on this provider's servers in Hillsboro, Oregon, USA, unless otherwise stated below for specific processing operations. In addition, a backup copy is kept in a data centre of the provider in Vinthill, Virginia, USA.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider is affiliated to the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision of the European Commission.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for longer and allow you to save page settings (so-called "persistent cookies"). In the latter case, you can find out how long they are stored for in the overview of your web browser's cookie settings.

If personal data is also processed by individual cookies we use, the processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either to execute the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the event of consent being given, or in accordance with Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.

4.1 Cookie settings and consent

For cookies and similar technologies that are not technically necessary, we obtain your consent via our cookie banner. The banner is our shop's own solution; no external provider is involved. You decide per category: technically necessary cookies are always active. Convenience functions (embedded videos, wishlist) are switched on by default and only start when you use them; you can switch them off at any time. We only use statistics and marketing with your consent. You can see which cookies and services belong to which category, with provider, purpose and storage period, in the cookie table on this page and in the cookie settings.

4.2 Storage of your selection and proof of consent

We store your selection in your browser in the cookie "dfc_consent" for 12 months; after that, we will ask you again. So that we can demonstrate that and how you have decided (Art. 7 Para. 1 GDPR), we log each decision on our server: a randomly generated identifier from this cookie, the time, sales channel and language, the country determined from your IP address, the device type (smartphone, tablet, computer), the version of the banner and its wording, your selection per category and the type of decision (for example consent, refusal, withdrawal). We do not store your IP address or your browser identification in the process. The identifier is not linked to your customer account, your orders or partner codes. We delete these records after 24 months. The data is stored with our hosting provider (Section 3), which processes it on our behalf.

The legal basis is Art. 6 Para. 1 lit. c GDPR in conjunction with Art. 7 Para. 1 GDPR. Storing your selection in your browser is strictly necessary for this purpose (Section 25 Para. 2 No. 2 TDDDG).

4.3 Counting banner displays

So that we can see how often the banner is displayed, your browser sends a request to our server each time it is displayed, without an identifier and without a cookie. From this we only store daily totals per sales channel, language, country and device type. For this purpose we briefly derive the country and device type from your IP address and your browser identification; we do not store either of them. The legal basis is Art. 6 Para. 1 lit. f GDPR; our legitimate interest lies in designing the banner in a clear and user-friendly way.

4.4 Changing your selection and withdrawing consent

You can change your selection or withdraw your consent at any time with effect for the future via the "Cookie settings" link at the bottom of every page. If you withdraw your consent, we delete the cookies of the category concerned, insofar as our shop has set them.

Please note that if you do not accept cookies, the functionality of our website may be restricted.

5) Contacting us

5.1 AI chatbot “Argos”

This website uses the AI-assisted chatbot “Argos”, through which you can ask questions about products, orders and shipping.

We process the entries you make in the chat window, the time of the message and the language selected. If you are logged in to your customer account, your name and email address are processed as well, so that our service team can allocate your enquiry.

The chat does not set its own cookie. When you open the chat window, it only stores a note in your browser's session storage that the window is open, so that it stays open when you move to another page. The note contains no personal data, is removed when you close the chat window and is deleted automatically when you close the browser tab. This is strictly necessary for the service you have requested (Section 25 (2) No. 2 TDDDG). In order to limit the number of requests per visitor, a hash value of your existing session identifier is stored, which does not allow any conclusions to be drawn about you as a person.

In order to generate the answers, your entries are transmitted to Anthropic Ireland Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland, which acts as our processor. The actual processing and storage take place on servers of Anthropic PBC, USA, which acts as a sub-processor and is therefore the recipient of the data in the USA. All transfers to Anthropic PBC described below take place via this route. If you are logged in to your customer account, your first name is also transmitted so that the chatbot can address you by name. Your surname and email address are not transmitted. The transfer is based on a data processing agreement concluded with the provider.

If you ask a question about an order as a logged-in customer, your order number, order date, delivery status, tracking number and payment status for your most recent orders are also processed and likewise transmitted to Anthropic PBC in order to answer your question. The invoice amount and payment method are not transmitted.

If you are logged in to your customer account, the details you have stored there about your dogs (name, breed, weight, age) are also processed and transmitted to Anthropic PBC so that the chatbot can advise you appropriately.

If you are logged in to your customer account and ask a question about bonus points or rewards, your points balance, your bonus level, the free-shipping threshold that applies to you and the available rewards are also processed and transmitted to Anthropic PBC so that the chatbot can answer your question. Your points history is not transmitted.

If you are logged in to your customer account and ask a question about a credit or voucher, the remaining value of your credits, the number of vouchers with a remaining balance and any expiry date are also processed and transmitted to Anthropic PBC so that the chatbot can answer your question. The voucher codes themselves are not transmitted.

If you are logged in to your customer account and ask a question about a subscription, the subscribed product, the quantity, your delivery interval, the next delivery date, the status of the subscription and the discount granted are also processed and transmitted to Anthropic PBC so that the chatbot can answer your question. Your payment method and the amounts paid are not transmitted.

If you are logged in to your customer account and ask a question about your supply or how long a product will last, the products you have most recently purchased, the respective quantity and the dispatch date are also processed and transmitted to Anthropic PBC so that the chatbot can calculate how long your supply will last. Prices and invoice amounts are not transmitted.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

After a conversation has ended, the complete transcript is transmitted to our service team (service@dog-fit.com) and processed there in our ticket system. This happens automatically and also if you have not filled in a contact form. Conversations in which you have not written a message yourself are not transmitted.

The purposes of processing are handling your enquiry and reviewing and improving the quality of the answers.

Processing takes place pursuant to Art. 6 (1) lit. b GDPR where it is necessary for entering into or performing a contract, and otherwise pursuant to Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in providing effective support to visitors to our website.

Transcripts are deleted 90 days after the end of the conversation. Messages you send via the chat contact form are deleted after 180 days. The retention periods of the ticket system apply there. Statutory retention obligations remain unaffected.

5.2 WhatsApp Business

We offer our business customers (B2B) the opportunity to communicate with us via the WhatsApp messaging service. WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "business version" of WhatsApp.

This contact channel is available to business customers only. We do not offer it to consumers.

If you contact us via WhatsApp in connection with a specific transaction (for example, an order you have placed), we will save and use the mobile phone number you use with WhatsApp and - if provided - your first and last name in accordance withArt. 6 Para. 1 lit. b. GDPR to process and answer your request. On the basis of the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address or email address) in order to be able to assign your request to a specific process.

If you use our WhatsApp contact for general inquiries (e.g. about the range of services, availability or our website), we will save and use the mobile phone number you use for WhatsApp and - if provided - your first and last name in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in the efficient and timely provision of the information you require.

Your data will always only be used to answer your request via WhatsApp. No data will be passed on to third parties.

Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp business account, we use a mobile device in whose address book only the WhatsApp contact details of those users who have contacted us via WhatsApp are stored.

This ensures that every person whose WhatsApp contact details are stored in our address book has consented to the transmission of their WhatsApp telephone number from the address books of their chat contacts in accordance with Art. 6 Para. 1 lit. a GDPR by accepting the WhatsApp terms of use when using the app on their device for the first time. A transfer of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

The purpose and scope of data collection and the further processing and use of the data by WhatsApp as well as your rights and setting options to protect your privacy can be found in WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

As part of the processing mentioned above, data may be transferred to Meta Platforms Inc. servers in the USA.

5.3 When you contact us (e.g. via contact form or email), personal data is processed - exclusively for the purpose of processing and answering your request and only to the extent necessary for this purpose.

The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention periods to the contrary.

6) Comment function

As part of the comment function on this website, in addition to your comment, information on the time the comment was created and the commentator name you chose will be saved and published on this website. Your IP address will also be logged and saved. This IP address is saved for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content through a comment. We need your email address to contact you if a third party complains that your published content is unlawful.

The legal basis for storing your data is Art. 6 Para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are complained about as unlawful by third parties.

7) Data processing when opening a customer account

According to Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent required if you provide it to us when opening a customer account. Which data forThe information required to open an account can be found in the input mask of the corresponding form on our website.

Your customer account can be deleted at any time by sending a message to the above-mentioned address of the person responsible. After your customer account has been deleted, your data will be deleted provided that all contracts concluded through it have been fully processed, there are no statutory retention periods to the contrary and we have no legitimate interest in continuing to store the data.

8) Use of customer data for direct advertising

8.1 Registration for our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing further data is voluntary and will be used to be able to address you personally. We use the so-called double opt-in procedure to send newsletters, which ensures that you only receive newsletters once you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 Paragraph 1 Letter a of GDPR. We store your IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data we collect when you register for the newsletter is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the person responsible named above. After unsubscribing, your email address will be immediately deleted from our newsletter mailing list unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we inform you in this declaration.

8.2 We send the newsletter via our own newsletter system in the shop. For delivery, we use the email service Amazon Simple Email Service (Amazon SES) of Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. The processing takes place on servers in Frankfurt am Main. Based on our legitimate interest in reliable newsletter delivery, we pass on your email address and the content of the newsletters to this provider in accordance with Art. 6 Para. 1 lit. f GDPR so that they can handle the delivery on our behalf. We have concluded a data processing agreement with the provider. A transfer to the parent company in the USA cannot be ruled out. For data transfers to the USA, the provider is affiliated to the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision of the European Commission.

With your express consent in accordance with Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 of the German Telecommunications Digital Services Data Protection Act (TDDDG), we evaluate whether and when you open our newsletters and which links you click on in them. For this purpose, the emails contain a tracking pixel and links with a personal identifier. End device information (e.g. time of access, IP address, browser type and operating system) is also collected in the process. We assign this information to your email address in order to tailor the newsletter to your interests and to build up the sending gradually. We do not merge it with your customer account or your orders. You can revoke your consent to newsletter tracking at any time with effect for the future, by unsubscribing from the newsletter or by sending a message to the person responsible named above. When you unsubscribe, we also delete this information. After that, we only store your email address in a blocklist so that we no longer send you any newsletters; the legal basis is our legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR in permanently respecting your objection.

We send emails confirming your registration and other individual emails via our own mail server at our hosting provider (see Section 3).

8.3 Advertising by post
Based on our legitimate interest in personalized direct advertising, we reserve the right to use your first and last name, your postal address and - if we have received this additional information from you as part of the contractual relationship - your title, academic degree, year of birth and your job, industry or business name. in accordance with Art. 6 Para. 1 lit. f GDPR and to use it to send you interesting offers and information about our products by post.
You can object to the storage and use of your data for this purpose at any time.

8.4 Email advertising without newsletter registration
If we have received your email address in connection with the purchase of goods, we use it on the basis of our legitimate interest in direct advertising in accordance with Art. 6 Para. 1 lit. f GDPR and Section 7 Para. 3 of the German Act against Unfair Competition (UWG) to inform you by email about our own similar products, provided that you have not objected to this. You can object to this use at any time, via the link in every email or by sending a message to the person responsible named above. Section 8.2, paragraph 1 applies accordingly to the sending of these emails. We do not evaluate in a personally identifiable manner whether you open these emails or click on links.

9) Data processing for order processing

9.1 If necessary for contract processing for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b GDPR.

If we send you updates for goods with digital elements on the basis of a corresponding contractn or for digital products, we process the contact details you provided when ordering (name, address, email address) in order to inform you personally about upcoming updates within the legally stipulated period via a suitable communication channel (e.g. by post or email) within the scope of our statutory information obligations in accordance with Art. 6 Paragraph 1 Letter c GDPR. Your contact details will be used strictly for the purpose of notifications about updates owed by us and will only be processed by us for this purpose to the extent that this is necessary for the respective information.

To process your order, we also work with the following service provider(s), who support us in whole or in part in the implementation of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

9.2 Afterbuy

We use the following provider to process orders: VIA Online GmbH, Kimplerstrasse 296, 47807 Krefeld, Germany

Name, address and any other personal data will be passed on to the provider in accordance with Art. 6 Paragraph 1 Letter b of GDPR solely for the purpose of processing the online order. Your data will only be passed on if this is actually necessary to process the order.

9.3 We use the following provider to process orders: dataform dialogservices GmbH, Feuchtwanger Str. 7, 90574 Roßtal

Name, address and any other personal data will be passed on to the provider in accordance with Art. 6 Para. 1 lit. b GDPR exclusively for the purpose of processing the online order. Your data will only be passed on if this is actually necessary for processing the order.

9.4 Transfer of personal data to shipping service providers

- Deutsche Post

We use the following provider as a transport service provider: Deutsche Post AG, Charles-de-Gaulle-Strasse 20, 53113 Bonn, Germany

We will pass on your e-mail address and/or telephone number to the provider in accordance with Art. 6 Paragraph 1 Letter a of GDPR before delivery of the goods for the purpose of coordinating a delivery date or to announce the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we will pass on your data to the provider for the purpose of delivery in accordance with Art. 6 Paragraph 1 Letter a of GDPR. Art. 6 Para. 1 lit. b GDPR only the name of the recipient and the delivery address are passed on to the provider. The data is only passed on if this is necessary for the delivery of the goods. In this case, a prior coordination of the delivery date with the provider or the delivery notification is not possible.

The consent can be revoked at any time with effect for the future to the person responsible named above or to the provider.
- DHL

We use the following provider as a transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We pass on your e-mail address and/or telephone number in accordance with Art. 6 Para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or to announce the delivery, provided that you have given your express consent for this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, it is not possible to agree on the delivery date with the provider in advance or to announce the delivery.

You can revoke your consent at any time with future effect to the person responsible named above or to the provider.

9.5 Use of payment service providers (payment services)

- Apple Pay

If you choose the payment method "Apple Pay" of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment will be processed via the "Apple Pay" function of your iOS, watchOS or macOS device by charging a payment card stored with "Apple Pay". Apple Pay uses security features that are integrated into the hardware and software of your device to protect your transactions. To authorize a payment,It is necessary to enter a code previously specified by you and to verify it using the "Face ID" or "Touch ID" function of your device.

For the purpose of processing the payment, the information you provided during the ordering process, along with information about your order, is passed on to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to carry out the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the source website to confirm the success of the payment.

If personal data is processed during the transmissions described, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.

Apple stores anonymized transaction data, including the approximate purchase amount, the approximate date and time, and information about whether the transaction was completed successfully. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve "Apple Pay." and other Apple products and services.

When you use Apple Pay on iPhone or Apple Watch to complete a purchase made in Safari on Mac, your Mac and authorization device communicate over an encrypted channel on Apple servers. Apple does not process or store any of this information in a format that can identify you. You can turn off the ability to use Apple Pay on your Mac in your iPhone's settings. Go to Wallet & Apple Pay" and deactivate "Allow payments on Mac".

You can find further information on data protection with Apple Pay at the following Internet address: https://support.apple.com/de-de/HT203027

- Google Pay

If you choose the payment method "Google Pay" of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment is processed via the "Google Pay" application of your mobile device running at least Android 4.4 ("KitKat") and equipped with an NFC function, by charging a payment card stored in Google Pay or a payment system verified there (e.g. PayPal). To authorise a payment via Google Pay exceeding €25, your mobile device must first be unlocked by the verification method set up in each case (e.g. facial recognition, password, fingerprint or pattern).

For the purpose of payment processing, the information you provide during the ordering process together with the information about your order is passed on to Google. Google then transmits the payment information stored in Google Pay to the originating website in the form of a one-off transaction number with which a payment made is verified. This transaction number does not contain any information on the real payment data of the payment methods stored in your Google Pay account, but is created and transmitted as a single-use numerical token. In all transactions via Google Pay, Google acts merely as an intermediary for processing the payment. The transaction is carried out exclusively between the user and the originating website by charging the payment method stored in Google Pay.

Insofar as personal data is processed in the transfers described, the processing takes place exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.

Google reserves the right to collect, store and evaluate certain transaction-specific information for each transaction made via Google Pay. This includes the date, time and amount of the transaction, the merchant location and description, a description of the goods or services purchased provided by the merchant, photos you have attached to the transaction, the name and email address of the seller and buyer or of the sender and recipient, the payment method used, your description of the reason for the transaction and, where applicable, the offer associated with the transaction.

According to Google, this processing takes place exclusively in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of the legitimate interest in proper invoicing, the verification of transaction data and the optimisation and functional maintenance of the Google Pay service.

Google further reserves the right to combine the processed transaction data with further information collected and stored by Google during the use of other Google services.

The terms of use of Google Pay can be found here: https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=en

Further information on data protection at Google Pay can be found at the following internet address: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en

- EPS transfer

One or more online payment methods from the following provider are available on this website: PSA Payment Services Austria GmbH, Handelskai 92, Gate 2,1200 Vienna, Austria

If you select a payment method from the provider for which you pay in advance (such as credit card payment), your payment data provided during the order process (including name, address, bank and Payment card information, currency and transaction number) as well as information about the content of your order in accordance with Art. 6 Paragraph 1 Letter b of GDPR. In this case, your data will be passed on exclusively for the purpose of processing the payment with the provider and only to the extent that it is necessary for this purpose.

- Klarna

One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you select a payment method from the provider that requires you to pay in advance (such as credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to them in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data will only be passed on for the purpose of processing the payment with the provider and only to the extent that it is necessary for this purpose.

If you select a payment method for which the providerr makes advance payments (e.g. purchase on account or instalments or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postcode, city, date of birth, email address, telephone number, and if applicable, data on an alternative means of payment) during the ordering process.

In order to protect our legitimate interest in determining the ability of our customers to pay, we will forward this data to the provider for the purpose of a credit check in accordance with Art. 6 (1) (f) GDPR. Based on the personal data you have provided and other data (such as shopping cart, invoice amount, order history, payment experience), the provider checks whether the payment option you have selected can be granted with regard to payment and/or default risks.

In addition to provider-internal criteria, the decision as part of the application review may be based on: Art. 6 Para. 1 lit. f GDPR also includes identity and credit information from the following credit agencies:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual payment processing.

- Mollie

One or more online payment methods from the following provider are available on this website: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands

If you select a payment method from the provider for which you make an advance payment (such as credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to them in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data will only be passed on for the purpose of processing the payment with the provider and only to the extent that it is necessary for this purpose.

- Paypal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from the provider for which you make an advance payment, your payment data provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to them in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data will only be passed on for the purpose of processing the payment with the provider and only to the extent that it is necessary for this purpose.

If you select a payment method for which we make advance payments, you will also be asked to provide certain personal data (first and last name, street, house number, postcode, city, date of birth, email address, telephone number, and if necessary, data on an alternative payment method) during the ordering process.

In order to protect our legitimate interest in determining your ability to pay in such cases, we will forward this data to the provider for the purpose of a credit check in accordance with Art. 6 (1) (f) GDPR. The provider checks on the basis of the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment experience) whether the payment option you have selected can be granted with regard to payment and/or default risks.

- Paypal Checkout

This website uses PayPal Checkout, an online payment system from PayPal that consists of PayPal's own payment methods and local payment methods from third parties.

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "Pay later" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The data will be passed on in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent that this is necessary for the payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "Pay later" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check in relation to the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment processing.

If the PayPal payment method "purchase on account" is available and selected, your payment data will first be transmitted to PayPal to prepare the payment, whereupon PayPal will forward it to Ratepay GmbH, Franklinstrasse 28-29, 10587 Berlin ("Ratepay") to carry out the payment. The legal basis in each case is Art. 6 Para. 1 lit. b GDPR. In this case, RatePay carries out an identity and credit check in its own name to determine your ability to pay in accordance with the principle already mentioned above and passes your payment data on to credit agencies due to the legitimate interest in determining your ability to pay in accordance with Art. 6 Paragraph 1 Letter f of GDPR. A list of the credit agencies that Ratepay can use can be found here: https://www.ratepay.com/legal-payment-creditagencies/

If you use the payment method of a local third-party provider, your payment data will first be checked in accordance with Art. 6 Paragraph 1 Letter f of GDPR to prepare the payment. Art. 6 Para. 1 lit. b GDPR to PayPal. Depending on your selection of an available local payment method, PayPal will then transmit your payment data to carry out the payment in accordance with Art. 6 Para. 1 lit. b GDPR to the corresponding provider:

- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further information on data protection, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

9.6 We reserve the right to pass on your data to the debt collection service provider mediaFinanz GmbH, Weiße Breite 5, 49084 Osnabrück, if our payment claim has not been settled despite a previous reminder. In this case, the claim will be collected directly by the debt collection service provider.

The passing on of your data serves the purpose of fulfilling the contract in accordance with Art. 6 Paragraph 1 Clause 1 Letter b of GDPR and the safeguarding of our overriding legitimate interests in the effective assertion or enforcement of our payment claims in accordance with the balancing of interests; Art. 6 Para. 1 Clause 1 Letter f GDPR.

10) Online Marketing

10.1 ADCELL Partner Program

We participate in the affiliate program of the following provider: Firstlead GmbH, Rosenfelder St. 15-16, 10315 Berlin, Germany

In this context, we have placed links on our website that lead to offers on websites of the provider or third parties ("partner sites").

To measure the success of an affiliate link, evaluate orders generated via such a link and bill commission payments accordingly, the provider uses cookies and/or similar technologies that are generally placed on the partner sites and for which we are responsible under data protection law. are not responsible. The provider also regularly processes the IP address and, if applicable, other end device information.

All processing described above, in particular reading or saving information on the end device you use, only takes place if you have given your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. You can revoke your consent at any time with effect for the future by using the cookie consent management options on the partner sites.

10.2 TradeTracker Partner Program

We participate in the affiliate program of the following provider: TradeTracker Deutschland GmbH, Uhlandstraße 26, 22087 Hamburg, Germany

In this context, we have placed links on our website that lead to offers on websites of the provider or third parties ("partner sites").

11) Web analysis services

11.1 Google Analytics 4

This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies that are stored as small text blocks on your device and collect certain information. The scope of this information also includes your IP address, which is however shortened by Google by the last digits in order to exclude direct personal reference.

The information is transferred to Google servers and processed there. Transmission to Google LLC based in the USA is also possible.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports &uto compile reports on website activities for us and to provide other services related to website and internet usage. The IP address transmitted and shortened by your browser as part of Google Analytics will not be merged with other Google data. The data collected as part of the use of Google Analytics 4 will be stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the end device used, will only take place if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please change your selection via the "Cookie settings" link at the bottom of every page.

We have concluded a data processing agreement with Google that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

You can find further legal information on Google Analytics 4 at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google Analytics 4 uses the special function "demographic characteristics" and can create statistics that make statements about the age, gender and interests of site visitors. This is done by analyzing advertising and information from third parties. This allows target groups to be identified for marketing activities. However, the data collected cannot be assigned to a specific person and is deleted after being stored for a period of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have activated personalized ads and have linked your devices to your Google account, Google can analyze your usage behavior across devices and create database models, including for cross-device conversions, subject to your consent to use Google Analytics in accordance with Art. 6 Paragraph 1 Letter a of GDPR. We do not receive any personal data from Google, only statistics. If you would like to stop the cross-device analysis, you can deactivate the "Personalized advertising" function in the settings of your Google account. To do so, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de For more information about Google Signals, see the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the "UserIDs" function can be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 (1)(a) GDPR, have set up an account on this website and log in with this account on different devices, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision of the European Commission.

11.2 Google Tag Manager

This website uses the "Google Tag Manager", a service of the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").

The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and calibrating, controlling and linking them to conditions via a uniform user interface. The Google Tag Manager itself does not store any information on user devices or read it. The service also does note independent data analyses. However, when you visit the site, the Google Tag Manager transmits your IP address to Google and may store it there. Transmission to servers of Google LLC in the USA is also possible.

This processing will only be carried out if you have given us your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. Without this consent, Google Tag Manager will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please change your selection via the "Cookie settings" link at the bottom of every page.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

12) Retargeting/Remarketing and Conversion Tracking

12.1 Meta Pixel with extended data comparison

Within our online offering, we use the "Meta Pixel" service from the following provider in the extended data matching mode: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta")

If a user clicks on an ad we have placed on Facebook or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel". This URL parameter is then entered into the user's browser after forwarding by a cookie that our linked page itself sets. In addition, this cookie records specific customer data such as the email address that we collect on our website linked to the Facebook or Instagram ad during processes such as purchases, account registrations or registrations (extended data matching). The cookie is then read out and enables the data, including the specific customer data, to be transmitted to Meta.

We use "Meta Pixel" with advanced data matching to make our advertisements (so-called "Ads") on Facebook and/or Instagram more effective and to ensure that they correspond to the interests of users or have certain characteristics (e.g. interests in certain topics or products determined based on the websites visited) that we transmit to Meta (so-called "Custom Audiences").

In addition, we analyze the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an advertisement (conversion). Compared to the standard version of "Meta Pixel" the enhanced data matching feature helps us better measure the effectiveness of our advertising campaigns by recording more attributed conversions.

All transmitted data is stored and processed by Meta so that it can be assigned to the respective user profile and Meta can use the data for its own advertising purposes in accordance with Meta's data usage guidelines (https://www.facebook.com/about/privacy/). The data can enable Meta and its partners to place ads on and outside of Facebook.

All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. You can revoke your consent at any time with effect for the future by changing your selection via the "Cookie settings" link at the bottom of every page.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

The information generated by Meta is usually transferred to a Meta server and stored there; in this context, it may also be transferred to Meta Platforms Inc. servers in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which is based onis an adequacy decision of the European Commission that ensures compliance with the European level of data protection.

12.2 Google Ads Remarketing

This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

For this purpose, Google places a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Any further data processing will only take place if you have given Google your consent to link your internet and app browsing history to your Google account and to use information from your Google account to personalize ads you view on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To do this, Google will temporarily link your personal data to Google Analytics data to create target groups. When using Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC. in the USA.

All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. Without this consent, retargeting technology will not be used during your visit to the site.

You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please change your selection via the "Cookie settings" link at the bottom of every page.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision of the European Commission.

12.3 Microsoft Advertising

This website uses retargeting technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

This makes it possible to target visitors to our website with personalized, interest-based advertising that has already interested in our shop and our products. The advertising material is displayed based on a cookie-based analysis of previous and current usage behavior, but no personal data is stored. In the case of retargeting technology, a cookie is stored on your computer or mobile device in order to collect pseudonymized data about your interests and thus tailor the advertising to the information stored. These cookies are small text files that are stored on your computer or mobile device. You will thus be shown advertising that is highly likely to correspond to your product and information interests.

All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, retargeting technology will not be used during your visit to the site.

You can revoke your consent at any time with effect for the future. To exercise your revocation, please change your selection via the "Cookie settings" link at the bottom of every page.

12.4 Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads". and within the framework of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

We use the Google Ads service to draw attention to our attractive offers with the help of advertising materials (so-called Google Adwords) on external websites.en. We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.

The cookie for conversion tracking is set when a user clicks on an Ads ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

If you have consented to marketing and complete an order, we additionally transmit your e-mail address, telephone number, name and address to Google in encrypted (hashed) form ("enhanced conversions") so that Google can attribute the order to an ad. The legal basis is your consent (Art. 6 Para. 1 lit. a GDPR).

When using Google Ads, personal data may also be transferred to the servers of Google LLC. in the USA.

Details on the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

All processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by changing your selection via the "Cookie settings" link at the bottom of every page.

You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in from Google available at the following link:
https://www.google.com/settings/ads/plugin?hl=de

In order to target users whose data we have received as part of business or business-like relationships with advertising that is even more tailored to their interests, we use a customer matching function as part of Google Ads. To do this, we send one or more files with aggregated customer data (primarily email addresses and telephone numbers) to Google electronically. Google does not receive access to clear data, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to assign it to existing Google accounts that the data subjects have set up. This enables personalized advertising to be displayed across all Google services linked to the respective Google account.

Customer data will only be sent to Google if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future. Further information on Google's data protection measures in relation to the customer matching function can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Google's data protection regulations can be viewed here: https://www.google.de/policies/privacy/

For data transfers in the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision of the European Commission.produces.

12.5 Microsoft Advertising Universal Event Tracking

This website uses conversion tracking technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

For the use of Universal Event Tracking, a tag is stored on each page of our website that interacts with the conversion cookie set by Microsoft. This interaction makes user behavior on our website traceable and sends the information collected in this way to Microsoft. The purpose of this is that certain predefined goals such as purchases or leads can be statistically recorded and evaluated in order to make the orientation and content of our offers more tailored to your interests. The tags are never used to personally identify users.

All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. Without this consent, retargeting technology will not be used during your visit to the site.

You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please change your selection via the "Cookie settings" link at the bottom of every page.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

12.6 Pinterest Tag Conversion Tracking

This website uses the conversion tracking technology of the following provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland

If you have accessed our website from an advertisement on the provider's domain, cookies and/or similar technologies can be used to (Tracking pixels, web beacons, pings or HTTP requests) to track the success of the advertisement.

For this purpose, certain device and browser information, including possibly your IP address, is read out via the tracking technology in order to record and evaluate user actions predefined by us (e.g. completed transactions, leads, search queries on the website, visits to product pages). This enables us to create statistics on user behavior on our website after being redirected from an advertisement, which we use to optimize our offer.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by changing your selection via the "Cookie settings" link at the bottom of every page.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

12.7 Twitter Conversion Tracking

This website uses the conversion tracking technology of the following provider: Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland

If you have accessed our website from an advertisement on the provider's domain, the success of the advertisement can be tracked using cookies and/or comparable technologies (tracking pixels, web beacons, pings or HTTP requests).

For this purpose, certain end device and browser information, including possibly your IP address, is read out via the tracking technology. to record and evaluate user actions predefined by us (e.g. completed transactions, leads, search queries on the website, visits to product pages). This enables us to create statistics on user behavior on our website after being redirected from an advertisement, which we use to optimize our offer.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effecting for the future by changing your selection via the "Cookie settings" link at the bottom of every page.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

13) Page functionalities

13.1 Facebook plugins

Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins enable direct interaction with content on the social network.

In order to increase the protection of your data when you visit our website, the plugins are initially deactivated using so-called “2-click“ or "Shariff" solution is integrated into the page.

This integration ensures that when you access a page on our website that contains such plugins, no connection is established with the provider's servers.

If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plug-ins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plug-in by clicking on it again. However, the revocation has no influence on the data that has already been transferred to the provider.

Data can also be transferred to: Meta Platforms Inc., USA

We have concluded a data processing agreement with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized transfer to third parties.

13.2 Instagram plugins

Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland

These plugins enable direct interaction with content on the social network.

In order to increase the protection of your data when you visit our website, the plugins are initially deactivated using a so-called "2-click" or "Shariff" solution.

This integration ensures that when you access a page on our website that contains such plugins, no connection is established with the provider's servers.

Only when you activate the plugins and thus agree to the terms of use, Art. 6 Para. 1 lit. a GDPR, your browser establishes a direct connection to the provider's servers. In this case, regardless of whether you log into an existing user profile, a certain amount of information about the device you are using (including your IP address), your browser and your page history is transmitted to the provider and may be further processed there.

If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plug-ins is also published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plug-in by clicking on it again. However, the revocation has no influence on the data that has already been transferred to the provider.

Data can also be transferred to: Meta Platforms Inc., USA

We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorized transfer to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which is based onan adequacy decision of the European Commission ensures compliance with the European data protection level.

13.3 Pinterest plugins

Our website uses plugins from the social network of the following provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland

These plugins enable direct interaction with content on the social network.

In order to increase the protection of your data when you visit our website, the plugins are initially deactivated using the so-called "2-click" or "Shariff" solution in the page integrated.

This integration ensures that when you access a page on our website that contains such plugins, no connection is established with the provider's servers.

Only when you activate the plugins and thereby give your consent to the data transfer in accordance with Art. 6 Para. 1 lit. a GDPR, does your browser establish a direct connection to the provider's servers. In this case, regardless of whether you log into an existing user profile, a certain amount of information about the device you are using (including your IP address), your browser and your page history will be transmitted to the provider and may be further processed there.

If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plug-ins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plug-in by clicking on it again. However, the revocation has no influence on the data that has already been transferred to the provider.

Data can also be transferred to: Pinterest Inc., USA

We have concluded a data processing agreement with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized transfer to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

13.4 X-Plugins

Our website uses plugins from the social network of the following provider: Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland

These plugins enable direct interaction with content on the social network.

In order to increase the protection of your data when you visit our website, the plugins are initially deactivated and integrated into the page using a so-called "2-click" or "Shariff" solution.

This integration ensures that when you access a page on our website that contains such plugins, no connection is established with the provider's servers.

Only when you activate the plugins and thus agree to the terms and conditions, Art. 6 Para. 1 lit. a GDPR, your browser establishes a direct connection to the provider's servers. In this case, regardless of whether you log into an existing user profile, a certain amount of information about the device you are using (including your IP address), your browser and your page history is transmitted to the provider and may be further processed there.

If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plug-ins is also published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plug-in by clicking on it again. However, the revocation has no influence on the data that has already been transferred to the provider.

Data can also be transferred to: X Corp., USA

We have concluded a data processing agreement with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized transfer to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

13.5 YouTube videos

On some pages we show videos from our own YouTube channel. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Data may also be transferred to: Google LLC, USA.

The videos are embedded using a so-called "two-click" solution. When you open such a page, you first only see a preview image that is loaded from our own server. At this point no connection to the provider's servers is established and no data is transmitted to the provider.

Only when you click on the preview image, thereby giving your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG), does your browser load the video from the provider's servers via the domain www.youtube-nocookie.com ("privacy-enhanced mode"). In doing so, information about your device (including your IP address), your browser and the page you are visiting is transmitted to the provider. Once playback starts, the provider may store and read cookies or similar technologies on your device in order to compile playback statistics, analyse usage and prevent abuse.

If you are logged into a user account with the provider during your visit, the provider can assign the playback to your account. If you do not want this, log out of your account with the provider before clicking.

Your consent applies only to the video you start. You can withdraw it at any time with effect for the future by not starting any further video. The lawfulness of the processing carried out until the withdrawal remains unaffected.

13.6 Trusted Shops Trustbadge

Our website includes graphic elements from the following provider to display external customer reviews and/or an externally awarded quality mark: Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany

If you access a page on our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers in order to load the elements correctly. Certain browser information, including your IP address, is transmitted to the provider.

If personal data is also processed, this is done in accordance with Art. 6 Paragraph 1 Letter f of GDPR on the basis of our legitimate interest in the optimal marketing of our offer and the attractive design of our website.

In the case of an online order from us, further processing may take place.

Depending on your express consent in accordance with Art. 6 Para. 1 lit. a GDPR, after completing an order, your order information (order total, order number, product purchased if applicable) and your email address are transmitted in encrypted form to the provider via the Trustbadge in order to check an existing registration for the provider's services (in particular the "buyer protection") and, if necessary, to enable a new registration.

In the event of an existing registration being identified or in the event of a new registration with the provider for its services (in particular the buyer protection), your order information (order total, order number, product purchased) and your email address will be transmitted to the provider in accordance with the contractual agreement with the provider in accordance with Art. 6 Para. 1 lit. a GDPR Art. 6 Para. 1 lit. b GDPR and further processed by them in order to guarantee the services (in particular buyer protection).

We are jointly responsible with the provider for the processing described above in accordance with Art. 26 GDPR. The contract on joint responsibility can be viewed here: https://help.etrusted.com/hc/de/articles/4402587369105-Vertrag-%C3%BCber-die-gemeinsame-Verantwortlichkeit-nach-DSGVO

13.7 Google Maps API

In order to enable certain entries in the address form of our web shop's ordering process to be checked for input errors in real time, we use the services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC., USA

The services used for this are “Google Maps” and “Google Address Validation”. The provider validates the address entered, verifies the spelling and, where applicable, completes missing data. In the case of ambiguous addresses, correct alternative suggestions are displayed. For this purpose, the address data you have entered is transmitted to the provider, stored there and evaluated.

This processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in the proper recording of the customer's correct address data for the conscientious fulfilment of our contractual delivery obligations and for the prevention of problems in the performance of the contract.

The provider processes the data concerned separately, does not combine it with other data sets and deletes it as soon as its status or correctness has been confirmed, but no later than after 30 days.

Further information on Google's data protection provisions can be found here: https://business.safety.google/intl/en/privacy/

13.8 DHL location check for parcel stations and post offices

If you enter a DHL Packstation or a post office as your delivery address, we use the location interface of the following provider to check whether the station specified actually exists under the postcode given: DHL AG, Charles-de-Gaulle-Str. 20, 53113 Bonn, Germany

Only the number of the station and the postcode are transmitted. Your name, your post number and the remaining order data are not transmitted.

This processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in recording deliverable delivery addresses and in preventing delivery problems. A parcel station that does not exist under the postcode given would otherwise result in a shipment that cannot be delivered.

We store the result of the check with your address so that the same address does not have to be checked again with every order.

14) Tools and Others

14.1 Cookie banner

Our cookie banner and the storage of your selection are described in Section 4.

15) Rights of the data subject

15.1 The applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis the responsible party with regard to the processing of your personal data, whereby the respective exercise requirements are based on the cited legal basis is referred to:

Right to information in accordance with Art. 15 GDPR;
Right to rectification in accordance with Art. 16 GDPR;
Right to erasure in accordance with Art. 17 GDPR;
Right to restriction of processing in accordance with Art. 18 GDPR;
Right to information in accordance with Art. 19 GDPR;
Right to data portability in accordance with Art. 20 GDPR;
Right to withdraw consent in accordance with Art. 7 Para. 3 GDPR;
Right to lodge a complaint in accordance with Art. 77 GDPR.

15.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION. HOWEVER, WE REMAIN RESERVED THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA IN ORDER TO CARRY OUT DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

16) Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing and - if applicable - also by the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of an express consent in accordance with Art. 6 Para. 1 lit. a GDPR, the data in question will be stored until you revoke your consent.

If there are statutory retention periods for data that are processed within the framework of legal or similar obligations on the basis of Art. 6 Para. 1 lit. b GDPR, these data will be routinely deleted after the retention periods have expired, provided that they are no longer required to fulfill or initiate a contract and/or we have no legitimate interest in continuing to store them.

When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, these data will be stored until you exercise your right of objection in accordance with Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct advertising on the basis of Art. 6 Para. 1 lit. f GDPR, these data will be stored until you exercise your right of objection in accordance with Art. 21 Para. 2 GDPR.

Unless the other information in this declaration on specific processing situations indicates otherwise, stored personal data will be deleted if they are no longer necessary for the purposes for which they were collected or otherwise processed are no longer necessary.

17) Subscription system

Within the scope of our subscription system, we process the following additional personal data:

Data processed: name, e-mail address, delivery address, payment data (credit card/PayPal), selected product, delivery interval, order history of the subscription.

Purpose: handling and administration of recurring orders (subscriptions), automatic payment processing, sending of reminder and confirmation e-mails.

Legal basis: Article 6(1)(b) GDPR (performance of a contract).

Payment service providers: for processing subscription payments we use Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands (mollie.com) as well as PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg. These service providers process payment data and store payment mandates for subsequent debits. The respective privacy policies of the providers apply.

Storage period: subscription data is stored for the duration of the subscription and beyond in accordance with the statutory retention periods.

Your rights: you can end your subscription and the associated data processing at any time by cancelling the subscription.

18) Electronic withdrawal function

If you use our electronic withdrawal function, we process the data you enter in the form: name, order or customer number, email address and – optionally – a reason for withdrawal provided by you. In addition, we store the date and time of receipt, the wording of your withdrawal declaration and your IP address.

Purposes: processing and documentation of your withdrawal, sending the legally required confirmation of receipt, as well as verifiability and prevention of misuse.

Legal bases: Art. 6 Para. 1 lit. c GDPR (fulfilment of our legal obligation under Section 356a of the German Civil Code (BGB)) and Art. 6 Para. 1 lit. f GDPR (legitimate interest in verifiability and protection against misuse).

Recipients: The information is processed internally; our email/hosting service provider is involved in sending the confirmation of receipt and the internal notification.

Storage duration: We store the withdrawal data for as long as is necessary to provide evidence and to comply with statutory retention and limitation periods, and delete it thereafter.

19) Electronic cancellation option

Consumers who have entered into contracts for continuing obligations subject to payment (such as subscription contracts) on this website have the option of cancelling them via an electronic button in accordance with the applicable notice periods.

Pressing the button leads to a confirmation page on which the consumer can provide further details of the cancellation, identify themselves unambiguously and subsequently declare their cancellation electronically.

The collection of personal data and its transmission to us takes place in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent necessary for the proper processing of the cancellation. Also on the basis of Art. 6 Para. 1 lit. b GDPR, the personal data provided is used to confirm receipt of the declaration of cancellation and the time of cancellation electronically in text form. A further legal basis for the processing is Art. 6 Para. 1 lit. c GDPR. We are legally obliged to provide an electronic cancellation option for consumer contracts concluded by electronic means regarding continuing obligations subject to payment.