Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are not obligated to provide the data. Failure to provide the data has no consequences. This applies only insofar as no other statement is made in the following processing operations.
“Personal data” means any information relating to an identified or identifiable natural person.
Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our services.
Contact
Controller
You may contact us upon request. The controller responsible for data processing is: Sven Barthel, Emsdettener Str. 10 - c/o Postflex #8949, 48268 Greven, Germany, 056432060790, [email protected]
Data processing when using the reporting system pursuant to the TCO Regulation (Regulation (EU) 2021/784) and the Digital Services Act (Regulation (EU) 2022/2065)
If you transmit information to us by email, contact form, or other electronic means provided by us regarding alleged terrorist content or other unlawful content, we collect your personal data (email address, name, message text) only to the extent provided by you. Data processing serves the purpose of carrying out a reporting procedure in accordance with the aforementioned regulations.
Processing is carried out to fulfill a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR in conjunction with Art. 15 TCO Regulation as well as Art. 6 para. 1 lit. c GDPR in conjunction with Arts. 11, 12, and 16 of the Digital Services Act.
Your data will subsequently be deleted in accordance with statutory retention periods.
Customer-initiated contact by email
If you initiate business contact with us by email, we collect your personal data (name, email address, message text) only to the extent provided by you. Data processing serves the purpose of processing and responding to your inquiry.
If the contact serves pre-contractual measures (e.g. advice in case of purchase interest, preparation of offers) or concerns an existing contract between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR.
If contact is made for other reasons, data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to this processing of your personal data based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.
We use your email address solely to process your inquiry. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. Data processing serves the purpose of contacting you.
If the contact serves pre-contractual measures or concerns an existing contract, processing is based on Art. 6 para. 1 lit. b GDPR.
Otherwise, processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to this processing of your personal data based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.
Your email address is used solely to process your inquiry. Your data will then be deleted in accordance with statutory retention periods unless you have consented to further processing.
Customer Account Orders
Customer account
When opening a customer account, we collect your personal data to the extent specified therein. Data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You may revoke your consent at any time by notifying us, without affecting the lawfulness of processing carried out prior to revocation. Your customer account will then be deleted.
Payment Service Providers
Use of PayPal
We use the PayPal payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). Data processing serves the purpose of enabling payment via PayPal. By selecting and using PayPal, the data required for payment processing is transmitted to PayPal to fulfill the contract with you. Processing is based on Art. 6 para. 1 lit. b GDPR.
All PayPal transactions are subject to PayPal’s privacy policy, available at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of PayPal Checkout
We use the PayPal Checkout payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. Processing serves the purpose of enabling payment via PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal. Required payment data is transmitted to PayPal to fulfill the contract. Processing is based on Art. 6 para. 1 lit. b GDPR.
Cookies may be stored to enable browser recognition. Processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in offering customer-oriented payment options. You have the right to object at any time to this processing for reasons arising from your particular situation.
Credit card via PayPal, direct debit via PayPal & “Pay Later” via PayPal
For certain payment methods, PayPal may obtain a credit check using mathematical-statistical procedures. PayPal transmits the necessary personal data to credit agencies and uses the obtained information to assess payment default risk. Processing is based on Art. 6 para. 1 lit. f GDPR due to our legitimate interest in preventing payment default.
You have the right to object at any time to this processing by notifying PayPal.
Providing the data is required for contract conclusion with the selected payment method.
Third-party providers
When paying via a third-party payment method, required data is transmitted to PayPal and possibly forwarded to the respective provider. Processing is based on Art. 6 para. 1 lit. b GDPR.
Examples include:
- Apple Pay (Apple Distribution International Ltd., Cork, Ireland)
- Google Pay (Google Ireland Limited, Dublin, Ireland)
Invoice purchase via PayPal
For invoice payments, data is transmitted to PayPal and then to Ratepay GmbH to fulfill the contract. Ratepay may conduct a credit check. Processing is based on Art. 6 para. 1 lit. b and lit. f GDPR.
Further information is available at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
Further information on PayPal data processing is available at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use of Stripe
We use the payment service Stripe provided by Stripe Payments Europe Ltd., Dublin, Ireland. Processing serves the purpose of enabling payment via Stripe. Data is transmitted to Stripe to fulfill the contract. Processing is based on Art. 6 para. 1 lit. b GDPR.
Stripe may conduct a credit check. Processing is based on Art. 6 para. 1 lit. f GDPR.
You have the right to object at any time by notifying Stripe.
Stripe transactions are subject to Stripe’s privacy policy at https://stripe.com/de/privacy.
Cookies
Our website uses cookies. Cookies are small text files stored on your device. They enable browser recognition on subsequent visits.
You have full control over cookies. You can configure your browser settings to notify you before cookies are set, decide individually, or prevent storage and transmission. Stored cookies can be deleted at any time. However, this may limit website functionality.
Browser information:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
We use only technically necessary cookies to make our services user-friendly, effective, and secure. Processing is based on § 25 para. 2 TDDDG and Art. 6 para. 1 lit. f GDPR. You have the right to object at any time.
Storage duration
After complete contract processing, data is stored for warranty periods and statutory retention periods, then deleted unless further consent was given.
Rights of the data subject
You have rights under Arts. 15–20 GDPR (access, rectification, erasure, restriction, data portability) and the right to object under Art. 21 GDPR.
Right to lodge a complaint
You may lodge a complaint with the supervisory authority if you believe processing is unlawful.
Right to object
If processing is based on legitimate interest, you may object at any time with effect for the future.
Last updated: 22.10.2024