Privacy Policy

Unless stated otherwise below, the provision of your personal data is neither required by law or contract, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no other information is provided for the subsequent processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our websites without providing any personal information. Every time you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR from our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our services.

Contact

Initial Contact by the Customer via E-Mail

If you contact us proactively via e-mail for business purposes, we collect your personal data only to the extent provided by you. The data processing serves to handle and answer your contact request.

If the contact is made to carry out pre-contractual measures (e.g., consultation in the event of interest in a purchase) or concerns an already concluded contract, the legal basis is Art. 6 (1) lit. b GDPR. In other cases, processing is based on Art. 6 (1) lit. f GDPR.

Right of Objection: You have the right to object at any time, for reasons arising from your particular situation, to this processing based on Art. 6 (1) lit. f GDPR.

Collection and Processing when using the Contact Form

When using the contact form, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. The purposes and legal bases correspond to the e-mail contact mentioned above.

Use of the Withdrawal Button

If you have concluded a contract via our online presence, we offer you a withdrawal function. We collect data to identify the contract as well as the time of dispatch. Processing is carried out on the basis of Art. 6 (1) lit. c GDPR (legal obligation) and lit. f GDPR (user-friendliness).

WhatsApp Business

When contacting us via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited. Your data may be transmitted to servers of Meta Platforms Inc. in the USA. Meta is certified under the Trans-Atlantic Data Privacy Framework. We use a separate end device whose address book only contains data from users who have actively contacted us.

Customer Account & Orders

Customer Account

When opening a customer account, we collect your data on the basis of Art. 6 (1) lit. a GDPR (consent) in order to improve your shopping experience. You can revoke this consent at any time.

Data Collection for Orders

When you place an order, we collect and process your data only to the extent necessary to fulfill the contract (Art. 6 (1) lit. b GDPR). Data is passed on to shipping companies, payment service providers, IT service providers, and our ERP system plentysystems AG (Kassel).

Reviews & Advertising

Review Tools (Shopauskunft, Trustami, Google)

We use various tools to obtain and display reviews. The processing of your data for sending review reminders only takes place with your express consent (Art. 6 (1) lit. a GDPR).

Newsletter Distribution & rapidmail

When you register for the newsletter, we use your e-mail address for promotional purposes (consent). We use the service rapidmail (Freiburg) for this. To optimize our campaigns, we use tracking pixels to analyze opening and click rates (Art. 6 (1) lit. f GDPR).

Direct Marketing via E-Mail

We may use your e-mail address to advertise our own similar goods or services (Art. 6 (1) lit. f GDPR), provided you have not objected to this use.

Payment Service Providers

We use PayPal Express, PayPal Check-Out and Ratepay. When using these services, data for payment processing and, if applicable, credit checks are transmitted to the providers. Ratepay carries out risk analyses to protect itself against payment defaults (Art. 6 (1) lit. f GDPR).

Cookies & Analysis Tools

Our website uses cookies. Technically necessary cookies are used to ensure functionality (Section 25 (2) TDDDG). We only use analysis and marketing cookies with your consent (Section 25 (1) TDDDG).

Adobe Analytics & Google Analytics 4

We use these services for statistical evaluation of website usage. IP addresses are anonymized here. Through Google Signals, cross-device tracking can take place if you have activated this in your Google account.

Meta Pixel & Microsoft Advertising

We use these services for interest-based advertising on social networks and search engines (consent required).

uptain

For customer recovery (e.g., in the event of abandoned shopping carts), we use the plugin from uptain GmbH (Wuppertal).

Plugins & Others

We integrate Google Maps for location display, Google reCAPTCHA for protection against bots, and Google Fonts and Adobe Fonts for uniform font display. Furthermore, the logo of our partner idealo is integrated, whereby IP addresses are briefly stored in log files.

Your Rights

You are entitled to the following rights under Art. 15 to 20 GDPR:

• Right to information, rectification, and erasure
• Right to restriction of processing
• Right to data portability

In addition, you have a right of objection to processing based on legitimate interests and to direct marketing.

Right of Appeal to the Supervisory Authority

Responsible authority: Landesbeauftragte für den Datenschutz Baden-Württemberg, Königstrasse 10 a, 70173 Stuttgart, Germany.