Privacy
Privacy Statement
and Information On Consent You May Have Given Us
As Controller in the sense of the data protection regulations we would like to herewith inform
you about the processing of your personal data.
I. The Term Personal Data And Other Important Terms
In simple terms, personal data is all information regarding you personally as the data subject.
The determination of what “personal data” means and what other important terms mean for
the following information on data protection can be found in Art. 4 GDPR (General Data
Protection Regulation).
II. Name And Contact Data Of The Controller; Contact Data Of The Data Protection
Officer
In simple terms, the Controller is the person who, solely or together with others, decides on
the purposes and means of processing personal data. Name and contact data of the
Controller (and those of the data protection officer if there is one) can be found in our
provider identification/imprint.
III. Purpose Of The Processing Of Your Personal Data; Legal Basis For Processing
We process your personal data within the scope of our activities and for the purposes listed
below in accordance with the corresponding legal foundations mentioned.
1. To complete pre-contractual measures arising from your enquiry your personal data is
processed on the basis of your consent pursuant to Art. 6 (1) point (a) or Art. 6(1), point
(b) GDPR.
2. To protect our legitimate interest in replying to queries and in carrying out other measures
arising from your enquiry, your personal data is processed on the basis of your consent
pursuant to Art. 6(1), point (a) or Art. 6(1), point (f) GDPR.
3. To fulfil your contract with us your personal data is processed on the basis of your
consent pursuant to Art. 6 (1) point (a) or Art. 6(1), point (b) GDPR.
4. To carry out advertising measures your personal data is processed either on the basis of
your consent pursuant to Art. 6(1), point (a) or Art. 6(1), point (f) GDPR.
5. To protect our legitimate interests in maintaining the proper operation of our website, in
the provision of the most user-friendly functions and in the analysis of usage of our
website your personal data is processed on the basis of Art. 6(1), point (f) GDPR.
6. To protect our legitimate interests in the enforcement of our rights and in the defence of
claims made against us your personal data is processed on the basis of Art. 6(1), point (f)
GDPR.
Our systems are technically up-to-date and are secured by technical and organisational
measures to protect your data from access, alteration or disclosure by unauthorised
parties and from loss or destruction.
Information on the processing of your personal data and the individual processing
purposes can be found in the respective additional information provided in this privacy
statement.
IV. Transfer Of Your Personal Data To Third Parties; Categories Of Recipients Of
Your Personal Data
If necessary for the purpose of processing your personal data we may transfer your personal
data, within the statutory provisions, to third parties. Detailed information on the transfer of
your personal data to third parties and the specific processing purposes can be found in the
respective additional information provided in this privacy statement. In the event of your
personal data being transferred to third parties the scope of the transferred data is kept to the
required minimum.
V. Scope Of The Processing Of Your Personal Data For The Specific Processing
Purposes
In the following, we would like to inform you about the processing of your personal data for
the different purposes.
Your personal data is erased when it is no longer required for the specific purpose of
processing, unless we are permitted to keep processing the data for another purpose within
the scope of the statutory provisions and in accordance with the information provided in this
privacy statement.
1. Gathering Information On Our Website
If you visit our website without transferring information to us we only process your personal
data which is transferred by your browser to our server. This relates to the following data
which is technically necessary to display our website and to guarantee its stability and
security:
the page you have accessed
date and time of the enquiry
amount of data transferred
source or link you accessed our website from
browser you use
operating system you use
your IP address
Your personal data is processed on the basis of Art. 6(1), point (f) GDPR to protect our
legitimate interests in maintaining the proper operation of our website.
Your personal data is erased after 6 months unless they continue to be needed for the
assertion of rights or for the enforcement of claims based on measures against the proper
operation of our website. In this event erasure will be carried out immediately after
conclusion of the respective proceedings.
2. Processing Enquiries
If you approach us with an enquiry or an issue we will process your personal data and
information/documents you provided us with. Irrespective of how you raise your enquiry
or issue, this includes:
date and time of contact
name data
contact data
data on enquiry/issue
information/documents provided
Your personal data and the information/documents provided are processed -depending on
the content of your enquiry or issue - on the basis of your consent pursuant to Art. 6(1), point
(a) GDPR to answer your enquiry, or pursuant to Art.6(1), point (b) GDPR to carry-out precontractual
measures, or pursuant to Art. 6(1), point (b) GDPR to fulfil the contract you have
signed, or pursuant to Art. 6(1), point (f) GDPR to protect our legitimate interest in the
answering of queries/issues and the execution of other measures in connection with the
answering on queries/issues.
As far as we have provided a contact form and you use it to contact us you are thus
providing your consent to the following content, which the contact form also informs you of:
“I agree to the processing of my email address and the additional personal data provided for
the purpose of answering my message. I can withdraw this consent with future effect at any
time and without giving reasons. In the event of withdrawal, the lawfulness of processing
which was already carried out before withdrawal remains unaffected.”
You can withdraw your consent with future effect at any time and without providing reasons.
You only need to send a message to the Controller; contact details can be found in the
information on the Controller. In the event of withdrawal, the lawfulness of processing which
was already carried out before withdrawal remains unaffected.
If necessary for the purpose of answering your enquiry/issue we may transfer your personal
data, within the statutory provisions, to third parties. In the event of your personal data being
transferred to third parties the scope of the transferred data is kept to the required minimum.
Your personal data is erased when your enquiry/issue was solved, unless we are permitted
to keep the data for another processing purpose within the scope of the statutory provisions
and in accordance with the information provided in this privacy statement.
3. Fulfilling Contracts
If you transfer your personal data to us to enter into contract with us or in connection with the
setting up of a customer account, we will process your personal data to fulfil the contract.
This is your customer data (e.g. your name and address) and the contractual data (e.g.
information on the contracted products as well as information on payment and shipping).
Your personal data is processed on the basis of Art. 6(1), point (b) GDPR to fulfil the contract
you are party to.
We will transfer your personal data to third parties within the framework of the statutory
provisions if it is required in order to fulfil the contract you are party to. Transfer is to the
service providers involved within the scope of implementing the contract. These are the
providers of the processing tools we use. Furthermore, the companies contracted for
shipping. Additionally, these are the payment service providers contracted by us to handle
payments.
If the payment service provider PayPal is used for financial transactions, we would like to
explicitly state that the PayPal Privacy Statement is effective for all PayPal transactions:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
In the event of transfer of your personal data to third parties the scope of the transferred data
is restricted to the required minimum.
Your personal data are erased upon expiry of the retention periods of 6 or 10 years as
defined in fiscal and commercial law, unless we are permitted to keep processing your data
for another purpose within the scope of the statutory provisions and in accordance with the
information in this privacy statement.
4. Advertising in Newsletters
If you subscribe to our newsletter we process your email address and if you transfer
additional personal data we process these too, to email you information on our offers.
Therefore, only the provision of your email address is compulsory. As far as you volunteer us
additional personal data we also process these to address you personally in our newsletter.
When you subscribe to our newsletter you consent to the following content: “I agree to being
sent interesting offers by email and therefore agree to the processing of my email address
and the additional personal data provided for the purpose of sending me the newsletter. I can
withdraw this consent with future effect at any time and without giving reasons. In the event
of withdrawal, the lawfulness of processing which was already carried out before withdrawal
remains unaffected.”
Subscription to our newsletter involves the so-called double-opt-in-procedure. This means
that you will receive an email after subscribing with a message about your subscription to the
newsletter and a request to confirm subscription. Your confirmation is necessary to
document the consent required to send the newsletter and to recognise subscriptions by
third-party email addresses. In connection with the subscription to the newsletter and the
confirmation, the IP address and the date and time are logged to provide evidence of
consent, in accordance with statutory provisions.
Your personal data is processed on the basis of your consent pursuant to Art. 6(1), point (a)
GDPR.
You can withdraw your consent with future effect at any time and without providing reasons.
You only need to send a message to the Controller; contact details can be found in the
information on the Controller. In the event of withdrawal, the lawfulness of processing which
was already carried out before withdrawal remains unaffected.
If you withdraw your consent or unsubscribe from our newsletter, your email address and any
additional personal data are immediately erased unless we are permitted to keep the data for
another processing purpose within the scope of the statutory provisions and in accordance
with the information provided in this privacy statement.
5. Postal Advertising
We process your personal data regarding your first and last name and address to inform you
of our offers by post, if applicable.
Your personal data is processed on the basis of Art. 6(1), point (f) GDPR to protect our
legitimate interest in carrying out postal advertising.
You may withdraw your consent to the processing of your data for postal advertising at any
time. You only need to send a message to the Controller; contact details can be found in the
information on the Controller.
If you object to your data being processed for the purpose of advertising by post, your
personal data, regarding first and last name and address, will be immediately erased, unless
we are permitted to keep the data for another processing purpose within the scope of the
statutory provisions and in accordance with the information provided in this privacy
statement.
6. Using Cookies
On our website we use so-called cookies. These are small files which are stored on your
device and which transfer certain information to us. Using cookies serves to enable you to
use specific functions and to make our offer generally more user-friendly.
Some of the cookies we use are deleted after you have ended your browser session, thus
after closing your browser (so-called session cookies). Other cookies remain on your device
after you have ended your browser session therefore after closing your browser and enable
us or our partner companies (third party cookies) to recognise you on your next visit to our
website (so-called persistent cookies).
Some of the cookies we use are technically required to enable you to use specific functions.
For example, this is the case when data entries are stored when the shopping basket
function is used. Your personal data are processed on the basis of Art. 6(1), point (b) GDPR
to carry out pre-contractual measures arising from your enquiry as data subject or on the
basis of Art. 6(1), point (b) GDPR to fulfil a contract you are party to or on the basis of Art.
6(1), point (f) GDPR to protect our legitimate interest in the provision of functions which are
as user-friendly as possible. In so far as we or our partner companies use cookies for
audience measurement or for marketing purposes, we have provided detailed information in
the respective additional information within the scope of this privacy statement.
You can change the settings in your browser software to prevent cookies from being stored.
Please consult the programme support for your browser on how to make the respective
adjustment. We would like to draw your attention to the fact that you may not be able to fully
use all the functions of our website in this case. You may consult the information on the
following standard browsers:
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internetexplorer-
delete-manage-cookies
Safari:https://support.apple.com/kb/ph21411?locale=de_DE
7. Enforcement Of Our Rights And Defence Of Claims Made Against Us
If necessary, we process your personal data to protect our legitimate interest in enforcing our
rights and defending ourselves from claims.
In this event your personal data is processed on the basis of Art. 6(1), point (f) GDPR.
In as far as this is necessary for the protection of our legitimate interests we transfer your
personal data to third parties within the scope of the statutory provisions. This transfer is
either to the collection service providers involved or to our lawyers.
In the event of transfer of your personal data to third parties the scope of the transferred data
is restricted to the required minimum.
Your personal data is erased upon conclusion of the proceedings or upon expiry of the
retention periods of 6 or 10 years at the earliest as defined in fiscal and commercial law,
unless we are permitted to keep processing your data for another purpose within the scope
of the statutory provisions and in accordance with the information in this privacy statement.
VI. Time Limit For The Storage Of Your Personal Data Or Criteria For Determining
The Time Limit
Your personal data is erased when it is no longer required for the respective processing
purpose, unless we are permitted to keep the data for another processing purpose within the
scope of the statutory provisions and in accordance with the information provided in this
privacy statement. Information on the time period your personal data is stored for and on the
criteria for determining this time period can be found in the information on the processing of
your personal data for the individual processing purposes in this privacy statement.
VII. Your Rights
1. Overview
To ensure that personal data is processed fairly and transparently you, as the data subject,
have the following rights pursuant to the data protection provisions:
The right of access pursuant to Article 15 GDPR,
The right to rectification pursuant to Article 16 GDPR,
The right to erasure pursuant to Article 17 GDPR,
The right to restriction of processing pursuant to Article 18 GDPR,
The right to data portability pursuant to Article 20 GDPR,
The right to withdraw consent at any time pursuant to Article 7(3) GDPR,
The right to object to processing pursuant to Article 21 GDPR, of which we will separately
inform you in the following
The right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR of
which we will separately inform you in the following.
2. Your Right To Object To Processing
THE PROCESSING OF PERSONAL DATA IS PERMITTED IF THE PROCESSING IS
NECESSARY FOR THE PURPOSES OF THE LEGITIMATE INTERESTS PURSUED BY
THE CONTROLLER OR BY A THIRD PARTY, EXCEPT WHERE SUCH INTERESTS ARE
OVERRIDDEN BY THE INTERESTS OR FUNDAMENTAL RIGHTS AND FREEDOMS OF
THE DATA SUBJECT WHICH REQUIRE PROTECTION OF PERSONAL DATA, IN
PARTICULAR WHERE THE DATA SUBJECT IS A CHILD, ART 6(1), POINT (F) GDPR.
YOU, AS THE DATA SUBJECT SHALL HAVE THE RIGHT TO OBJECT, ON GROUNDS
RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO THE PROCESSING
OF YOUR PERSONAL DATA WHICH IS BASED ON ARTICLE 6(1), POINT (F);
INCLUDING PROFILING BASED ON THOSE PROVISIONS.
IF YOU EXERCISE YOUR RIGHT TO OBJECT WE SHALL NO LONGER PROCESS
YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING
LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR
INTERESTS, RIGHTS AND FREEDOMS AS THE DATA SUBJECT OR FOR THE
ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES,
YOU SHALL HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF
YOUR PERSONAL DATA FOR SUCH MARKETING, WHICH INCLUDES PROFILING IF IT
IS RELATED TO SUCH DIRECT MARKETING. IF YOU AS DATA SUBJECT OBJECT TO
PROCESSING FOR DIRECT MARKETING PURPOSES, YOUR PERSONAL DATA SHALL
NO LONGER BE PROCESSED FOR SUCH PURPOSES.
3. Your Right To Lodge A Complaint With The Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you as data subject shall
have the right to lodge a complaint with a supervisory authority, in particular in the member
state of your habitual residence, place of work or place of the alleged infringement if you
consider that the processing of your personal data infringes the provisions of the GDPR.
VIII. Information About The Requirements To Access Your Personal Data
If you wish to enter into contract with us or if you send us an enquiry we require your
personal data to conclude a contract or to process your enquiry. You are not obliged to
provide your personal data. However, if you do not provide your personal data we cannot
enter into contract with you or answer your enquiry.