Privacy policy

Unless stated otherwise below, the provision of your personal data is neither legally nor contractually mandatory, nor required for the conclusion of a contract. You are not obliged to provide the data. Failure to provide data has no consequences. This only applies insofar as no other information is given in the subsequent processing operations.

"Personal data" means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our websites without providing any personal information.

Every time you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in protocol data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.

The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website as well as improving our offer.

Your data may be transmitted to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations that are comparable to the standard contractual clauses of the EU Commission.

Contact

Controller

Contact us if you wish. The controller responsible for data processing is: Kevin Müller, Zwischen den Wegen 34, 89081 Ulm Germany, +49 152 026271722, info@chincheckgermany.com

Unsolicited contact by the customer via e-mail

If you initiate business contact with us via e-mail, we only collect your personal data (name, e-mail address, message text) to the extent provided by you. The data processing serves the purpose of processing and answering your contact request.

If the contact serves to carry out pre-contractual measures (e.g. consultation in case of interest in purchasing, preparation of an offer) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6 (1) lit. b GDPR.

If the contact occurs for other reasons, this data processing takes place on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in processing and answering your inquiry. In this case, you have the right to object to this processing of your personal data based on Art. 6 (1) lit. f GDPR at any time for reasons arising from your particular situation.

We only use your e-mail address to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When using the contact form, we only collect your personal data (name, e-mail address, message text) to the extent provided by you. The data processing serves the purpose of establishing contact.1

If the contact serves to carry out pre-contractual measures (e.g. consultation in case of interest in purchasing, preparation of an offe2r) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6 (1) lit. b GDPR.34

If the contact occurs for other reasons, this data processing takes place on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in processing and answering 5your inquiry. In this case, you have the right to o6bject to this processing of your personal data based on Art. 6 (1) lit. f GDPR at any time for reasons arising from your particular situation.

Customer account Orders

Customer account

When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation. Your customer account will subsequently be deleted.

Collection, processing and transfer of personal data in orders

When you place an order, we collect and process your personal data only insofar as this is necessary for the fulfillment and processing of your order and for processing your inquiries. The provision of data is necessary for the conclusion of the contract. Failure to provide data means that no contract can be concluded. The processing is carried out on the basis of Art. 6 (1) lit. b GDPR and is necessary for the fulfillment of a contract with you.

Your data is transferred, for example, to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal requirements. The scope of data transfer is limited to a minimum.

Reviews Advertising

Google Customer Reviews rating tool

We use the rating tool for Google Customer Reviews of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") for our website.

After your order, we would like to ask you to rate and comment on your purchase with us. For this purpose, we will contact you by e-mail, using the survey opt-in module from Google. In doing so, the following information, among others, may be processed and transmitted to Google: order details (e.g. order ID, country of delivery, estimated delivery date, GTIN of the ordered products) as well as your e-mail address.

Your data may be transmitted to the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and is thus committed to complying with European data protection principles.

The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent, provided you have expressly agreed to the transfer of your data and the receipt of the rating request. You can revoke your consent at any time with effect for the future without a7ffect8ing the lawfulness of the processing carried out on the basis of the consent up to the revocation.

Further information on terms of use and data protection when using Google Customer Reviews can be found at https://www.google.com/shopping/customerreviews/static/tos/en/1_01_tos.html as well as at https://policies.google.com/privacy?hl=en

Review reminder

After your order, we would like to ask you to rate your purchase with us.

For this purpose, we use your personal data (name, e-mail address, information about the order) independently of the contract processing in order to send you a review reminder by e-mail after an order has been placed, provided you have expressly consented to this.

The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by using the corresponding link in the e-mail or by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.

Use of the e-mail address for sending newsletters

We use your e-mail address independently of contract processing exclusively for our own advertising purposes for sending newsletters, provided you have expressly consented to this. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the distribution list.

Use of Klaviyo

We use the service of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; "Klaviyo") for sending newsletters as part of a data processing agreement.

We pass on the information provided by you during the newsletter registration (e-mail address, possibly first and last name) to Klaviyo. The data processing serves the purpose of sending newsletters and their statistical analysis.

To evaluate newsletter campaigns, the sent newsletters contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links. In this context, we collect your personal data such as IP address, browser type and device as well as the time. From this data, usage profiles can be created under a pseudonym. The collected data is not used to identify you personally. The collected data is only used for statistical analysis to improve newsletter campaigns.

Your data is generally transmitted to Klaviyo servers in the USA and stored there. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo is certified under the TADPF and is thus committed to complying with European data protection principles.

The processing of your personal data takes place on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in a targeted, effective and user-friendly newsletter system. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.

Further information on data protection at Klaviyo can be found at https://www.klaviyo.com/legal/privacy-notice as well as at https://www.klaviyo.com/legal/data-processing-agreement.

Use of the mobile phone number for sending SMS advertising

We use your mobile phone number independently of contract processing exclusively for our own advertising purposes for sending SMS advertising, provided you have expressly consented to this.

The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation. Your mobile phone number will then be removed from the distribution list.

Use of the e-mail address for availability notifications

We offer the service of notification of goods availability on our website. Should an item be temporarily unavailable, you have the possibility to enter your e-mail address for the respective item and to be informed by us via e-mail when it becomes available, provided you have consented to this. Upon availability of the goods, you will receive a one-time notification by e-mail about the availability of the respective item. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation. You can unsubscribe from the availability notification at any time by notifying us. Your e-mail address will subsequently be removed from the distribution li9st.10

Shipping service providers¹¹

Disclosure of the12 e-mail address to shipping companies for information on shipping status

We pass on your e-mail address to the transport company within the framework of contract processing, provided you have expressly agreed to this in the ordering process. The transfer serves the purpose of informing you by e-mail about the shipping status. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company, without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.

Payment service providers

Use of PayPal

We use the payment service PayPal of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, the data required for payment processing is transmitted to PayPal in order to be able to fulfill the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.

All PayPal transactions are subject to the PayPal privacy policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE

Use of PayPal Plus

We use the payment service PayPal Plus of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, the data required for payment processing is transmitted to PayPal in order to be able to fulfill the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.

For individual payment methods such as credit card via PayPal, direct debit via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a default on payment for a balanced decision on the establishment, implementation or termination of the contractual relationship. The credit report may contain probability values (score values) which are calculated on the basis of scientifically recognized mathematical-statistical procedures and in whose calculation address data, among other things, is included. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The data processing serves the purpose of the credit check for a contract initiation. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protection against payment default if PayPal makes advance payments.

You have the right to object to this processing of your personal data based on Art. 6 (1) lit. f GDPR at any time by notifying PayPal for reasons arising from your particular situation. The provision of the data is necessary for the conclusion of the contract with the payment method you requested. Failure to provide data means that the contract cannot be concluded with the payment method you selected.

Use of PayPal Express

We use the payment service PayPal Express of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service PayPal Express. For the integration of this payment service, it is necessary that PayPal collects, stores and analyzes data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable the recognition of your browser.

The processing of your personal data is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.

By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to be able to fulfill the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE#Updated_PS.

Use of PayPal Check-Out

We use the payment service PayPal Check-Out of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to be able to fulfill the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.

Cookies may be stored here, which enable the recognition of your browser. The data processing taking place thereby is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.

Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal

For individual payment methods such as credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a default on payment for a balanced decision on the establishment, implementation or termination of the contractual relationship. The credit report may contain probability values (score values) which are calculated on the basis of scientifically recognized mathematical-statistical procedures and in whose calculation address data, among other things, is included. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The data processing serves the purpose of the credit check for a contract initiation. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protection against payment default if PayPal makes advance payments.

Third-party providers

When paying via the payment method of a third-party provider, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR. To carry out this payment method, the data may then be passed on by PayPal to the respective provider. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR. Local third-party providers can be, for example:

Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)

Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)13

Purchase on account via PayPal14

When paying via the payment method purchase on account, the data required for payment processing is first transmitted to15 PayPal. To carry out this payment method, the data is then transmitted by PayPal to Rat16epay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to be able to fulfill the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR. Ratepay may carry out a credit check on the basis of mathematical-statistical procedures (probability or score values) using credit agencies according to the procedure already described above. The data processing serves the purpose of the credit check for a contract initiation. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protection against payment default if Ratepay makes advance payments. Further information on data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

Further information on data processing when using PayPal can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE.

Use of Amazon Payments

We use the payment service Amazon Payments of Amazon Payments Europe s.c.a. (38 avenue John F. Kennedy, L-1855 Luxembourg; "Amazon Payments") on our website.

The data processing serves the purpose of being able to offer you payment via the payment service Amazon Payments.

To integrate this payment service, it is necessary that Amazon Payments collects, stores and analyzes data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable the recognition of your browser.

By selecting and using "Amazon Payments", the data required for payment processing is transmitted to Amazon Payments in order to be able to fulfill the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.

Further information on data processing when using the Amazon Payments payment service can be found in the associated privacy policy at: https://pay.amazon.com/de/help/201212490

Use of Klarna payment options

We use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna") on our website. By selecting and using payment via Klarna, the data required for payment processing is transmitted to Klarna in order to be able to fulfill the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.

"Pay Later" (Invoice), "Pay Now" (Payment via direct debit, credit card, Sofort transfer), "Financing" (Installment purchase)

For individual payment methods such as "Pay Later" (Invoice), "Pay Now" (Payment via direct debit, credit card, Sofort transfer), "Financing" (Installment purchase), Klarna reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies.

For this purpose, Klarna transmits the personal data required for a credit check, such as first and last name, address, gender, e-mail address, IP address and data related to the order, to a credit agency for the purpose of identity and credit checking and uses the information received about the statistical probability of a default on payment for a balanced decision on the establishment, implementation or termination of the contractual relationship. The credit report may contain probability values (score values) which are calculated on the basis of scientifically recognized mathematical-statistical procedures and in whose calculation address data, among other things, is included. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The data processing serves the purpose of the credit check for a contract initiation. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protection against payment default if Klarna makes advance payments. You have the right to object to this processing of your personal data based on Art. 6 (1) lit. f GDPR at a17ny time by notifying Klarna for reasons arising from your particular situation. The provision of the data is necessary for the conclusion of the contract with the payment method you requested. Failure to provide data means that the contract cannot be concluded with the payment method you selected.

Further information, in particular to which credit agencies Klarna passes on your personal data, can be found at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_gb/credit_rating_agencies.

General information on Klarna can be found at: https://www.klarna.com/international/. Your personal data is handled by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna's privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_gb/privacy.

Use of the payment service provider Stripe

We use the payment service Stripe of Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using Stripe, the data required for payment processing is transmitted to Stripe in order to be able to fulfill the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.

Stripe reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, Stripe transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a default on payment for a balanced decision on the establishment, implementation or termination of the contractual relationship. The credit report may contain probability values (score values) which are calculated on the basis of scientifically recognized mathematical-statistical procedures and in whose calculation address data, among other things, is included. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The data processing serves the purpose of the credit check for a contract initiation. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protection against payment default if Stripe makes advance payments.

You have the right to object to this processing of your personal data based on Art. 6 (1) lit. f GDPR at any time by notifying Stripe for reasons arising from your particular situation. The provision of the data is necessary for the conclusion of the contract with the payment method you requested. Failure to provide data means that the contract cannot be concluded with the payment method you selected.

All Stripe transactions are subject to the Stripe privacy policy. You can find this at https://stripe.com/en/privacy

Use of the payment service provider Mollie

We use the payment service provider Mollie B.V. (Keizersgracht 313, 1016 EE Amsterdam, Netherlands; "Mollie") for payment processing on our website. The data processing serves the purpose of being able to offer you various payment methods through payment processing via the payment service provider Mollie. If you have decided on one of the payment options of the payment service provider Mollie, the data required for payment processing will be transmitted to Mollie. This includes your payment data (e.g. bank account number or credit card number), your IP address, your internet browser and device type as well as in some cases your first and last name, your address data and information about the product or service you purchased from us. This data processing takes place on the basis of Art. 6 (1) lit. b GDPR. Further information on data processing when using the payment service provider Mollie can be found in the associated privacy policy https://www.mollie.com/en/privacy

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. If a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic character string that enables the browser to be uniquely identified when the website is called up again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually on their acceptance as well as prevent the storage of cookies and transmission of the data contained therein. Cookies that have already been saved can be deleted at any time. However, we would like to point out that you may then not be able to use all functions of this website to their full extent.

You can find out how to manage (including deactivate) cookies in the most important browsers at the links below:

Chrome: https://support.google.com/accounts/answer/61416?hl=de

Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

Mozilla Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox

Safari: https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless other information is given below in the data protection declaration, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

The use of cookies or comparable technologies takes place on the basis of Section 25 (2) TDDDG. The processing of your personal data takes place on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer.

You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.

Use of Cookiebot

We use the consent management tool Cookiebot of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark; "Cookiebot") on our website.

The tool allows you to grant consent to data processing via the website, in particular the setting of cookies, and to make use of your right of withdrawal for consent already granted. The data processing serves the purpose of obtaining and documenting necessary consents to data processing and thus complying with legal obligations.

Cookies may be used for this purpose. The following information, among others, may be collected and transmitted to Cookiebot: anonymized IP address, date and time of consent, URL from which consent was sent, anonymous, random, encrypted key, consent st18atus. This data is not passed on to other third parties.19

T20he data processing is carried out to fulfill a legal obligation on the basis of Art. 6 (1) lit. c GDPR.

Further information on data protection at Cookiebot can be found at: https://www.cookiebot.com/en/privacy-policy/

Analysis Advertising tracking Communication

Use of Google Analytics 4

We use the web analysis service Google Analytics of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities and to provide other services relating to website activity and internet usage to the website operator.

The following information, among others, may be collected: IP address, date and time of the page view, click path, information about the browser you are using and the device you are using, visited pages, referrer URL (website via which you accessed our website), location data, purchase activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and all other data that Google has about you.

Your IP address is shortened by us on our own servers beforehand. Google thus only receives pseudonymized data.

Google uses technologies such as cookies, web storage in the browser and tracking pixels that enable an analysis of your use of the website. The use of cookies or comparable technologies takes place with your consent on the basis of Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR.

The processing of your personal data takes place with your consent on the basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on ²¹the basis of the consent up to²² the revocation.

We use the advanced implementation of Consent Mode. In this case, user data is transmitted to Google in the form of "pings" even if consent is not granted. These pings may contain the following information, among others: IP address for deriving the IP country (logging of the IP address does not take place), date and time of the page view, URL of the visited pages, user agent, referrer URL (website via which our website was accessed) or information about the triggering of website events such as a conversion. Based on this information, Google models usage data in order to be able to carry out a comprehensive usage analysis despite the refusal of consent.

The information generated thereby about your use of this website is generally transmitted to a Google server in the USA and stored there. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and is thus committed to complying with European data protection principles. Both Google and US government authorities have access to your data.

Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites and at https://policies.google.com/privacy?hl=en&gl=en.

Use of Shopify statistics

We use the statistics and analysis functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of a data processing agreement. Shopify is an affiliate of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).

The data processing serves the purpose of analyzing this website and its visitors. For this purpose, data is stored for marketing and optimization purposes and made available in reports, analyses and statistics. In doing so, the following device information, among others, is collected and processed: information about the web browser, the IP address, the time zone and some of the cookies installed on your device. When you navigate the website, information is also collected about accessed websites or products, the referrer URL (website via which you accessed our website), as well as information about how you interact with the website. For this purpose, technologies such as cookies as well as web beacons, tags and pixels (electronic files for collecting information about how you navigate the website) are used.

The use of cookies or comparable technologies takes place with your consent on the basis of Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.

You can find more information on data protection at Shopify at https://www.shopify.com/legal/privacy, information on the data processing agreement at https://www.shopify.com/legal/dpa as well as information on the cookies used at https://www.shopify.com/legal/cookies.

Use of Meta Pixel

We use the Meta Pixel of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.

Meta and we are joint controllers for the collection of your data occurring during the integration of the service and the transmission of this data to Meta. The basis for this is an agreement between us and Meta on the joint processing of personal data, in which the respective responsibilities are defined. The agreement can be accessed at https://www.facebook.com/legal/terms/businesstools. According to this, we are particularly responsible for fulfilling the information obligations pursuant to Art. 13, 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service and for complying with the obligations under Art. 33, 34 GDPR, insofar as a violation of the protection of personal data affects our obligations under the agreement on joint processing. Meta is responsible for enabling the rights of data subjects pursuant to Art. 15 - 20 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the security of the service and the obligations under Art. 33, 34 GDPR, insofar as a violation of the protection of personal data affects Meta's obligations under the agreement on joint processing.

The application serves the purpose of addressing visitors to the website in a targeted manner with interest-based advertising in the social networks Facebook and Instagram. For this purpose, the remarketing tag from Meta was implemented on the website. Via this tag, a direct connection to the Meta servers is established when visiting the website. This transmits to the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will then be shown personalized, interest-based ads.

The application also serves the purpose of creating conversion statistics. Here we learn the total number of users who clicked on one of our ads and were redirected to a page provided with a conversion tracking tag as well as which actions are taken after redirection to this website. Ho23wever, we do not receive any information with which users can be personally identified.

Your data may be transmitted to the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta is certified under the TADPF and is thus committed to complying with European data protection principles.

You can deactivate the "Custom Audiences" remarketing function here. Further information on the collection and use of data by Meta, your rights in this regard and options for protecting your privacy can be found in Meta's privacy policy at https://www.facebook.com/about/privacy/.

Use of Google Ads Conversion Tracking

We use the online advertising program "Google Ads" and, in this context, conversion tracking (visit action evaluation) on our website. Google Conversion Tracking is an analysis service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).

If you click on an ad placed by Google, a cookie for conversion tracking is placed on your computer. These cookies have limited validity, do not contain any personal data and therefore do not serve for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Every Google Ads customer receives a different cookie. Thus, there is no possibility that cookies can be tracked via the websites of Ads customers.

The information obtained using the conversion cookie serves the purpose of creating conversion statistics. Here we learn the total number of users who clicked on one of our ads and were redirected to a page provided with a conversion tracking tag. However, we do not receive any information with which users can be personally identified. We use the advanced implementation of Consent Mode. In this case, user data is transmitted to Google in the form of "pings" even if consent is not granted. These pings may contain the following information, among others: IP address for deriving the IP country (logging of the IP address does not take place), date and time of the page view, URL of the visited pages, user agent, referrer URL (website via which our website was accessed) or information about the triggering of website events such as a conversion. Based on this information, Google models usage data in order to be able to carry out a comprehensive usage analysis despite the refusal of consent.

Your data may be transmitted to the servers of Google LLC in the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and is thus committed to complying with European data protection principles.

Further information as well as Google's privacy policy can be found at: https://www.google.de/policies/privacy/

Use of Google AdSense

We use the AdSense function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of renting out advertising space on the website and targeting visitors to the website with interest-based advertising on these spaces. By means of this function, personalized, interest-based advertising ads from the Google Display Network are shown to visitors to the provider's website. Google uses cookies for this purpose, which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and is thus committed to complying with European data protection principles. Google may transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. Google will in no case associate your IP address with other Google data.

Further information as well as Google's privacy policy can be found at: https://www.google.com/policies/technologies/ads/ and https://www.google.de/policies/privacy/

Use of Pinterest Tag

We use the Pinterest Tag of Pinterest Europe Limited (Palmerston House, 2nd, Fenian Street, Floor, Dublin 2, Ireland "Pinterest") on our website.

The application serves the purpose of addressing visitors to the website in a targeted manner with interest-based advertising in the social network Pinterest. For this purpose, the conversion tag from Pinterest was implemented on the website. Via this tag, a direct connection to the Pinterest servers is established when visiting the website. This transmits to the Pinterest server which of our pages you have visited. Pinterest assigns this information to your personal Pinterest user account if you are logged into the social network. When you visit Pinterest, you will then be shown personalized, interest-based Pinterest ads.

If you reach our website via a pin on the social network Pinterest, a cookie for conversion tracking is placed on your computer. These cookies have limited validity, do not contain any personal data and therefore do not serve for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Pinterest and we can recognize that you clicked on the pin and were redirected to this page. The information obtained using the conversion cookie serves the purpose of creating conversion statistics and thus optimizing our website. The following information, among others, may be processed: total number of users who clicked on one of our pins and were redirected to our website, subpages visited on our website (e.g. category or product pages), search queries on our website, your shopping cart contents, completed transactions.

Your data may be transmitted to the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, viewable at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.2425

The use of cookies or comparable technologies takes place with your consent on the basis of Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processin26g of your pers27onal data takes place with your consent on the basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.

Further information on the collection and use of data by Pinterest, your rights in this regard and options for protecting your privacy can be found in Pinterest's privacy policy at https://policy.pinterest.com/en/privacy-policy.

Use of TikTok Pixel

We use the TikTok Pixel of TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; "TikTok Ireland") and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; "TikTok UK") on our website. Both companies are joint controllers for data processing (hereinafter "TikTok").

The data processing serves the purpose of identifying and analyzing website access by our customers as well as for better customer targeting by placing targeted advertisements and evaluating the effectiveness of advertisements on TikTok. For this purpose, TikTok uses technologies such as cookies and pixels that enable your browser to be recognized. The following information, among others, may be collected and transmitted to TikTok: date and time of the visit, information about the browser and device type you are using, screen resolution, IP address. TikTok can assign this information to your personal TikTok user account. Usage profiles can be created from the data collected in this way using pseudonyms. However, personal identification of the users is not possible.

Your data may be transmitted to third countries, such as the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). TikTok is not certified under the TADPF. The data transfer to the USA and to third countries without an adequacy decision takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, viewable at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

Further information on data protection can be found at https://www.tiktok.com/legal/page/eea/privacy-policy/en and https://ads.tiktok.com/i18n/official/policy/controller-to-controller.

Use of Shopify Inbox

We use the live chat system Shopify Inbox of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of a data processing agreement. Shopify is an affiliate of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).

The data processing serves the purpose of direct and efficient communication between you and us as the provider. Data is stored and processed for the operation of the system and for the purpose of optimizing the service.

Cookies may be used to operate the live chat system, which enable the recognition of the browser. The following information may be collected and processed: IP address and personal data provided by you when using the chat system.

You can find more information on data protection at Shopify at https://www.shopify.com/legal/privacy and https://www.shopify.com/legal/dpa.

Plug-ins and Other

Use of Google Tag Manager

We use the Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

This application manages JavaScript tags and HTML tags that are used in particular to implement tracking and analysis tools. The data processing serves the purpose of designing our website in line with requirements and optimizing it.

The Google Tag Manager itself does not store cookies nor does it process personal data. However, it enables the triggering of other tags that may collect and process personal data.

Further information on terms of use and data protection can be found here.

Use of Social Plug-ins

We use plug-ins from social networks on our website. The integration of social plug-ins and the data processing taking place thereby serves the purpose of optimizing advertising for our products.

When integrating social plug-ins, a link is established between your computer and the servers of the social network providers and the plug-in is displayed on the page by notifying your browser, provided you have expressly consented to this. In doing so, both your IP address and the information about which of our pages you have visited are transmitted to the provider servers. This applies regardless of whether you are registered or logged in to the social network. Transmission also takes place for users who are not registered or not logged in. If you are connected to one or more of your social network accounts at the same time, the collected information can also be assigned to your corresponding profiles. When using the plug-in functions (e.g. by pressing the button), this information is also assigned to your user account. You can prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons.

The social networks named below are integrated into our website by means of a social plug-in. Further information on the scope and purpose of the collection and use of data as well as your rights in this regard and options for protecting your privacy can be found in the linked privacy policies of the providers.

Instagram of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):

https://help.instagram.com/155833707900388

Use of Social Plug-ins using "Shariff"

We use plug-ins from social networks on our website. To ensure you retain control over your data, we use the privacy-safe "Shariff" buttons.

No connections are established to the servers of the social networks and consequently no data is transmitted without your express consent.

"Shariff" is a development by the specialists of the computer magazine c’t. It enables more privacy on the net and replaces the usual "Share" buttons of social networks. More information on the Shariff project can be found here https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.

When you click on the buttons, a pop-up window appears in which you can log in with your data at the respective provider. Only after this active login by you is a direct connection to the social networks established.

By logging in, you give your consent to the transmission of your data to the respective social media provider. Among other things, both your IP address and the information about which of our pages you have visited are transmitted. If you are connected to one or more of your social network accounts at the same time, the collected information is also assigned to your corresponding profiles. You can only prevent this assignment by lo28gging out of your social media accounts before visiting our website and before activating the buttons. The social networks named below are integrated by means of the "Shariff" function.

Further information on the scope and purpose of the collection and use of data as well as your rights in this regard and options for protecting your privacy can be found in the linked privacy policies of the providers.

Instagram of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland) https://help.instagram.com/155833707900388.

Use of YouTube

We use the function for embedding YouTube videos of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is an affiliate of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").

The function displays videos stored on YouTube in an iFrame on the website. The "Extended Data Protection Mode" option is activated. This means that YouTube does not store any information about visitors to the website. Only when you watch a video is information about it transmitted to YouTube and stored there. Your dat29a may be transmitted 30to the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube is certified under the TADPF and is thus committed to complying with European data protection principles.

Further information on the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy can be found in YouTube's privacy policy at https://www.youtube.com/t/privacy.

SoundCloud Audio Player

We use the SoundCloud Audio Player of SoundCloud Global Limited & Co. KG (Rheinsberger Str. 76/77, 10115 Berlin; "SoundCloud") on our website. YouTube is an affiliate of SoundCloud Inc. (71 5th Avenue, New York, NY 10003, USA).

With the function, audio files stored on SoundCloud can be played directly on the website. This establishes a direct connection to SoundCloud servers and personal data, such as your IP address, is transmitted to SoundCloud servers and stored there.

If you are logged in to your user account at SoundCloud at the same time as using the function on our website, SoundCloud can merge the information obtained with your user account.

SoundCloud uses cookies that enable the recognition of your browser.

Your data may be transmitted to the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Soundcloud is not certified under the TADPF. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, viewable at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

Further information on data protection at SoundCloud can be found at https://soundcloud.com/pages/privacy.

Use of Google Fonts

We use Google Fonts of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

The data processing serves the purpose of the uniform presentation of fonts on our website. To load the fonts, a connection to Google servers is established when the page is called up. Cookies may be used here. Among other things, your IP address and information about the browser you are using are processed and transmitted to Google. This data is not linked to your Google account.

Further information on data processing and data protection can be found at https://www.google.de/intl/en/policies/ as well as at https://developers.google.com/fonts/faq.

Rights of the data subject and storage duration

Duration of storage

After complete contract processing, the data is initially stored for the duration of the warranty period, then taking into account statutory, in particular tax and commercial retention periods, and then deleted after the period has expired, unless you have consented to further processing and use.

Rights of the data subject

If the legal requirements are met, you have the following rights according to Art. 15 to 20 GDPR: Right to information, to correction, to deletion, to restriction of processing, to data portability.

In addition, according to Art. 21 (1) GDPR, you have a right of objection to processing based on Art. 6 (1) f GDPR, as well as against processing for the purpose of direct advertising.

Right of appeal to the supervisory authority

According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint with the supervisory authority responsible for us, among others, which you can reach at the following contact details:

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg

Königstrasse 10 a

70173 Stuttgart

Tel.: +49 711 6155410

Fax: +49 711 61554115

E-Mail: poststelle@lfdi.bwl.de

Right of objection

If the personal data processing listed here is based on our legitimate interest in accordance with Art. 6 (1) lit. f GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation.

After an objection has been made, the processing of the data concerned will be terminated unless we can prove compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims.

Last update: 22.10.2024

Privacy policy

Sign up for our newsletter

Your cart is empty

Your cart is empty

Country/Region

Language

Country/Region

Language

Privacy policy

Sign up for our newsletter