We attach maximum
importance to protecting your data and safeguarding your privacy.
Therefore, we provide the information below regarding collection and use
of personal data while using our website.
Unless stated otherwise
below, the provision of your personal data is neither legally nor
contractually obligatory, nor required for conclusion of a contract. You
are not obliged to provide your data. Not providing it will have no
consequences. This only applies as long as the processing procedures
below do not state otherwise.
“Personal data” is any information relating to an identified or identifiable natural person.
(1) Server log files
can use our websites without submitting personal data.
Every time our website is accessed, user data is transferred
to us or our web hosts/IT service providers by your internet browser and stored
in server log files. This stored data includes for example the name of the site
called up, date and time of the request, the IP address, amount of data
transferred and the provider making the request. The processing is carried out
on the basis of Article 6 (1) f) GDPR due to our legitimate interests in ensuring
the smooth operation of our website as well as improving our services.
Customer account Orders (2) Customer
account When you open a
customer account, we will collect your personal data in the scope given there.
The data processing is for the purpose of improving your shopping experience
and simplifying order processing. The processing will be carried out on the
basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your
consent at any time by contacting us without affecting the legality of the
processing carried out with your consent up to the withdrawal. Your customer
account will then be deleted. (3) Collection, processing, and transfer of personal data in orders
When you submit an
order we only collect and use your personal data insofar as this is necessary
for the fulfilment and handling of your order as well as processing of your
queries. The provision of data is necessary for conclusion of a contract.
Failure to provide it will prevent the conclusion of any contract. The
processing will occur on the basis of art. 6 (1) lit. b GDPR and is required
for the fulfilment of a contract with you.
Your data is
transferred here for example to the shipping companies and dropshipping
providers, payment service providers, service providers for handling the order
and IT service providers that you have selected. We will comply strictly with
legal requirements in every case. The scope of data transmission is restricted
to a minimum.
Contact Newsletter (4) Collection and processing when using the contact form
When you use the contact form we will
only collect your personal data (name, email address, phone number, message
text) in the scope provided by you. The data processing is for the purpose of
making contact. By submitting your message, you agree to the processing of your
transmitted data. Processing will be carried out on the basis of art. 6 (1)
lit. a GDPR with your consent.
You can withdraw your consent at any
time by contacting us without affecting the legality of the processing carried
out with your consent up to the withdrawal. We will only use your email address
to process your request. Finally, your data will be deleted, unless you have
agreed to further processing and use.
(5) Use of your email address for mailing of newsletters
We use your email address outside of contractual
processing exclusively to send you a newsletter for our own marketing purposes,
if you have explicitly agreed to this. The processing will be carried out on
the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your
consent at any time without affecting the legality of the processing carried
out with your consent up to the withdrawal. You can unsubscribe from the
newsletter at any time using the relevant link in the newsletter or by contacting
us.You will find the contact details in our imprint. Your email
address will then be removed from the distributor.
Your data will be forwarded to a service provider for email
marketing in the course of order processing. It will not be forwarded to other
We use MailChimp, the technical service provider of The Rocket Science
Group, LLC, located at 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308,
USA. (http://www.mailchimp.com/ )
The transfer of your data takes place in accordance with Art. 6 (1) lit. f GDPR
and serves our legitimate interest in the use of a promotional, secure and
user-friendly newsletter system. Essentially, the use of MailChimp ensures that
emails are sent reliably and, more importantly, that they do not end up in your
Please note that your data will be transmitted to and stored by MailChimp
in a third country, the USA. An adequacy decision of the European Commission is
available for this third country.
MailChimp uses this
information for sending and statistical evaluation of the newsletter on our
behalf. For the evaluation, the emails sent include so-called web beacons or
tracking pixels, which represent one-pixel image files stored on our website.
This way it can be determined if a newsletter message has been opened and which
links have been clicked on. In addition, technical information is collected
(e.g., time of retrieval, IP address, browser type and operating system). The
data are collected exclusively pseudonymized and are not linked to your other
personal data, a direct personal reference is excluded. This data is for
statistical analysis of newsletter campaigns only. The results of these
analyzes can be used to better tailor future newsletters to the interests of
If you want to object to
the data analysis for statistical evaluation purposes, you must unsubscribe
from the newsletter. Furthermore, MailChimp may use this data in accordance
with Art. 6 (1) lit. f GDPR itself for its own legitimate
interest in the needs-based design and optimization of the service as well as
for market research purposes, for example, to determine from which countries
the recipients come. However, MailChimp does not use the data of our newsletter recipients in
order to contact you or to pass them on to third parties. To protect your data
in the US, we have a data processing agreement with MailChimp based on the
standard contractual clauses of the European Commission to enable the
transmission of your personal data to MailChimp. If you are interested, this
data processing contract can be viewed if interested.
The Rocket Science Group,
LLC as operator of MailChimp is also certified under the EU-US. Privacy Shield
Framework (EU-US Data Protection Agreement) and the Swiss-U.S. Privacy Shield
framework (Switzerland-US Data Protection Agreement), providing a guarantee to
(6) Use of your email address for mailing of direct marketing
We use your email
address, which we obtained in the course of selling a good or service, for the
electronic transmission of marketing for our own goods or services which are
similar to those you have already purchased from us, unless you have objected
to this use. You must provide your email address in order to conclude a
contract. Failure to provide it will prevent the conclusion of any contract.
The processing will be carried out on the basis of art. 6 (1) lit. f GDPR due
to our justified interest in direct marketing. You can object to this use of
your email address at any time by contacting us. You will find the contact
details for exercising your right to object in our imprint. You can
also use the link provided in the marketing email. This will not involve any
costs other than transmission costs at basic tariffs.
Shipping companies Merchandies management (7) Forwarding of your email address to shipping companies for information on shipping status
We forward your email address to the shipping
company in the course of contractual processing, if you have explicitly agreed
to this in the order process. The forwarding is for the purpose of informing
you by email on the shipping status of your order. The processing will be
carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can
withdraw your consent at any time by contacting us or the transport company
without affecting the legality of the processing carried out with your consent
up to the withdrawal. (8) Use
of an external merchandise management system
We use a merchandise
management system in the course of order processing for the purposes of contractual
processing. For this purpose your personal data as collected in the course of
the order will be sent to Shopfront from 79Pixel, Steffen Ottow, Schulstraße
21, D-38315 Gielde.
Payment service providers Credit check (9) Using PayPal
All PayPal transaction are covered by the PayPal Data Privacy
Statement. You can found this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en (10) Data collection
and processing when paying by credit card, direct debit and invoice as well as
SOFORT via secupay AG
We have integrated the components secupay.Lastschrift (direct
debit), secupay.Rechnungskauf (payment by invoice) and secupay.Kreditkarte
(credit card) as well as SOFORT via secupa by secupay AG (Goethestr. 6, 01896
Pulsnitz; “secupay”) into our website. Secupay is a payment institute in the
sense of the Zahlungsdiensteaufsichtsgesetz (Payment Services Supervision Act –
ZAG) registered with the Federal Financial Supervisory Authority
(Graurheindorfer Str. 108, 53117 Bonn; “BaFin”) (register number:126737) and
facilitates cashless payment for products and services online.
Secupay forms a
procedure allowing the claim for the purchase price to be assigned to secupay.
This allows a retailer to deliver goods, services or downloads to the customer
immediately after the order is placed.
If you choose “direct
debit”, “payment by invoice” or “credit card” or “SOFORT” via secupay when
ordering from us, your data will automatically be transmitted to secupay. By choosing
one of these payment options you agree to transmission of your personal data as
necessary for handling the payment.
Processing is carried
out on the basis of art. 6 (1) lit. a GDPR with your consent. You may revoke
your consent at any time by notifying us without affecting the legality of the
processing carried out on the basis of your consent until revocation. In the
case of payment processing with "direct debit", "payment by
invoice" or "credit card" via secupay, your payment method data
is transmitted to secupay. Secupay then carries out a technical check on the
risk of payment default. The online retailer is then automatically notified
that the financial transaction has been carried out.
The personal data
exchanged with seucupay includes first name, last name, address, email address,
IP address, phone number and other data which is required for handling the
payment. Data is transmitted in order to process your payment and prevent
fraud. We will also transmit other personal data to secupay if there is a
justified interest in doing so. Processing
is carried out on the basis of art. 6 (1) lit. f GDPR. The personal data exchanged between us and
secupay may be transmitted by secupay to credit agencies. This transmission is
for the purpose of identity and credit checking.
Secupay may forward the
personal data to affiliated companies and service providers or subcontractors
where this is necessary for the fulfilment of contractual obligations or the
data is to be processed on its behalf. You have the option of withdrawing your
consent for secupay to handle your data at any time. Withdrawal will not affect
personal data which have to be processed, used or transmitted for
(contractually compliant) payment processing. Secupay’s applicable data
protection provisions can be found at https://www.secupay.com/en/privacy-policy
When paying with Sofort
via secupay, the online payment system of SOFORT GmbH, Theresienhöhe 12,
D-80339 Munich, Germany, the data provided by you in the course of the ordering
process is entered into the digital transfer form provided by SOFORT GmbH and
transmitted by SOFORT GmbH together with your online banking data (PIN and TAN)
in encrypted form to your bank for execution of the transfer. Your online
banking data will neither be stored by the person responsible for processing,
secupay, nor by SOFORT GmbH. SOFORT GmbH is part of the Klarna Group (Klarna
Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden). The following link
will take you to the data protection declaration: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_en/privacy
Cookies (11) Cookies
saved in a user’s internet browser or by the user’s internet browser on their
computer system. When a user calls up a website, a cookie may be saved on the
user’s operating system. This cookie contains a characteristic character string
which allows the browser to be clearly identified when the website is called up
We use these cookies to make our offering more user-friendly,
effective and secure. Cookies also allow our systems to recognize your browser
after a page change and to offer you services. Some functions of our website
browser to be recognized again after a page change.
Processing is carried out on the basis of art. 6
(1) lit. f GDPR due to our largely justified interest in ensuring the optimal
functionality of the website as well as a user-friendly and effective design of
our range of services.
Cookies will be stored on your computer. You
technical setting in your internet browser you can be notified before the
setting of cookies and you can decide whether to accept this setting in each
individual case as well as prevent the storage of cookies and transmission of
the data they contain. Cookies which have already been saved may be deleted at
any time. We would, however, like to point out that this may prevent you from
making full use of all the functions of this website.
the links below, you can find out how to manage cookies (or deactivate them,
among other things) in major browsers:
Chrome Browser:https://support.google.com/accounts/answer/61416?hl=en Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies Mozilla Firefox:https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
The data processing described subsequently in this section, especially
the setting of cookies, will be carried out on the basis of art. 6 (1) lit. f
GDPR due to our largely justified interest.
the needs-based and target-oriented design of our website, for example, with
tools for analysis and statistics.
You have the right
to veto this processing of your personal data according to art. 6 (1) lit. f
GDPR, for reasons relating to your personal situation. (12) Use of Google Analytics
Our website uses the web analysis service Google Analytics by
Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
Google Ireland Limited (Gordon House, Barrow Street, Dublin 4,
Ireland) is the data controller responsible for your data if you have your
habitual residence in the European Economic Area or Switzerland. Google Ireland
Limited is therefore the company affiliated with Google which is responsible
for processing your data and for compliance with applicable data protection
The processing of data serves to analyze this website and its
visitors. Google will use this information on behalf of the operator of this
website to evaluate your use of the website, to compile reports on website
activity and to provide other services to the website operator relating to
website and internet use. The IP address communicated by your browser as part
of Google Analytics is not associated with any other data held by Google.
your use of the website. The information generated by the cookie regarding your
use of this website is usually transferred to a Google server in the USA and
stored there. IP anonymization is activated on this website. Google uses this to
shorten your IP address beforehand within Member States of the European Union
or in other signatories to the Agreement on the European Economic Area. Only in
exceptional cases will the full IP address be transferred to a Google server in
the USA and shortened there. Your data may be transmitted to the USA. Following
the US-EU Data Protection Agreement, Google has become “Privacy Shield”
certified and is therefore obliged to observe European data protection laws.
You can prevent collection of the data (including your IP address)
generated by the cookies and related to your use of the website by Google as
well as the processing of this data by Google by downloading and installing the
browser plug-in available at the following link [https://tools.google.com/dlpage/gaoptout?hl=en].
You can set an opt-out cookie to prevent collection by Google
Analytics across devices. Opt-out cookies prevent the future collection of your
data when you visit this website. You need to opt-out on all systems and
devices in use for this to work comprehensively. If you click here on the link,
you will get to a page of google where you can download the opt-out cookie Disable Google Analytics.
Our website uses the
function for the embedding of YouTube videos provided by Google Ireland Limited
(Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”). YouTube is an
affiliated company of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA
94043, USA; “Google”).
This feature shows
YouTube videos in an iFrame on the website. The option “advanced privacy mode”
is enabled here. This prevents YouTube from storing information on visitors to
the website. It is only if you watch a video that information is transmitted to
and stored by YouTube.
Your data may also be
transmitted to the USA. Following the US-EU Data Protection Agreement, Google
has become “Privacy Shield” certified and is therefore obliged to observe
European data protection laws.
on the data collected and used by YouTube and Google, your rights and privacy
Rights of persons affected and storage duration (14) Duration of storage
processing has been completed, the data is initially stored for the duration of
the warranty period, then in accordance with the retention periods prescribed
by law, especially tax and commercial law, and then deleted after the period
has elapsed, unless you have agreed to further processing and use.
(15) Rights of the affected person
If the legal
requirements are fulfilled, you have the following rights according to art. 15
to 20 GDPR: Right to information, correction, deletion, restriction of
processing, data portability. You also have a right of objection against
processing based on art. 6 (1) GDPR, and to processing for the purposes of
direct marketing, according to art. 21 (1) GDPR.
us at any time. Our contact details can be found in our imprint.
(16) Right to complain to the regulatory authority
have the right to complain to the regulatory authority according to art.
77 GDPR if you believe that your data is not being processed legally (17) Right to object
the data processing outlined here is based on our legitimate interests
in accordance with Article 6 (1) f) GDPR, you have the right for reasons
arising from your particular situation to object at any time to the
processing of your data with future effect. If the objection is
successful, we will no longer process the personal data, unless we can
demonstrate compelling legitimate grounds for the processing that
outweigh your interests or rights and freedoms, or the processing is
intended for the assertion, exercise of defense of legal claims. If
personal data is being processed for the purposes of direct advertising,
you can object to this at any time by notifying us. If objection is
successful, we will no longer process the personal data for the purposes
of direct advertising.