Privacy policy

Customer Account      Orders

Customer Account

When you open a customer account, we collect your personal data to the extent specified therein. Data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is carried out based on your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its revocation. Your customer account will subsequently be deleted.

Collection, processing, and disclosure of personal data for orders

When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Providing this data is necessary to conclude the contract; failure to provide it means that no contract can be concluded. Processing is carried out based on Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you. Your data is disclosed, for example, to the shipping companies and dropshipping providers you have selected, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly adhere to legal requirements. The scope of data transmission is limited to the minimum necessary.

Cancellation button

Processing when using the cancellation button or the electronic cancellation form

We use the “cancellation button” service from Visionz GmbH, Richthofenstr., to submit cancellation declarations electronically in accordance with Section 312k of the German Civil Code (BGB).29, 31137 Hildesheim. Customers can use the cancellation button to declare their cancellation online.

When using the cancellation form, the following personal data is processed:

First and last name

Email address

Order number

Reason for cancellation (optional)

Information on partial revocations (optional)

alternative email address (optional)

The processing serves the purpose of receiving, documenting and processing declarations of revocation, sending the legally required confirmation of receipt and the subsequent decision to accept or reject the revocation.

The legal basis is Art.6 Para.1 lit.c GDPR (fulfillment of a legal obligation in accordance with Section 312k BGB) and Art.6 Para.1 lit.b GDPR (contract processing).

Visionz GmbH processes the data as a processor in accordance with Art. 28 GDPR. A corresponding contract for order processing has been concluded with the provider.

The data will only be stored for as long as is necessary to process the revocation and to fulfill legal retention obligations.

Reviews      Advertising

Data collection when writing a comment or review

When you comment on or review an article or post, we collect your personal data (first name, email address, comment text) only to the extent provided by you. This processing serves the purpose of enabling comments/reviews and displaying them.

To verify your review or comment, we also collect the following data: first name and email address.

By submitting the comment or review, you consent to the processing of the transmitted data. Processing is carried out based on your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time by notifying us; this does not affect the lawfulness of processing based on consent prior to its revocation. Your personal data will subsequently be deleted.

When your comment or review is published, only the first name you provided is displayed. Your email address is not published and is used solely for verification purposes.

In addition, your IP address is stored when you submit a comment or review to prevent misuse of the commenting or review function and to ensure the security of our IT systems. This processing is carried out based on Art. 6(1)(f) GDPR, reflecting our overriding legitimate interest in IT security and the prevention of misuse. Your IP address will subsequently be deleted.

Review Reminder

Following your order, we would like to ask you to rate your purchase.
To this end, we use your personal data (name, email address, order details)—independently of the contract fulfillment process—to send you an email reminder to leave a review after your order has been placed, provided you have expressly consented to this.
Processing is carried out based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time by using the relevant link in the email or by notifying us; this does not affect the lawfulness of processing based on consent prior to its withdrawal.

Use of email address for sending newsletters

We use your email address—independently of contract fulfillment—exclusively for our own promotional purposes (sending newsletters), provided you have expressly consented to this. Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can unsubscribe from the newsletter at any time by using the link provided in the newsletter or by notifying us. Your email address will subsequently be removed from the mailing list.

Use of email address for sending direct marketing

We use the email address obtained during the sale of goods or services to send electronic marketing communications regarding our own goods or services that are similar to those you have already purchased from us, unless you have objected to such use. Processing is based on Art. 6(1)(f) GDPR, reflecting our overriding legitimate interest in direct marketing. You may object to this use of your email address at any time by notifying us. Contact details for submitting an objection can be found in the legal notice (Impressum). You may also use the dedicated link provided in the promotional email. No costs other than the transmission costs at basic rates will be incurred for this.

Use of Klaviyo

We use the services of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”) to send our newsletter, acting as a data processor on our behalf. We have entered into a data processing agreement with Klaviyo ensuring that Klaviyo processes our customers' data solely in accordance with our instructions and complies with European data protection standards. We transmit the information you provide when signing up for the newsletter (email address, and optionally your first and last name) to Klaviyo. The data is processed for the purpose of sending the newsletter and for statistical analysis.
Newsletters are sent based on your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future. To evaluate newsletter campaigns, the newsletters we send contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any embedded links. In this context, we collect personal data such as your IP address, browser type, device information, and the time of the interaction. Pseudonymized usage profiles may be created from this data. The collected data is not used to identify you personally but is used solely for statistical analysis to improve our newsletter campaigns.
Your personal data is processed based on Art. 6(1)(f) GDPR, reflecting our overriding legitimate interest in maintaining a targeted, effective, and user-friendly newsletter system. You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. Your data is stored only for as long as you remain subscribed to the newsletter. Once you unsubscribe, your data is deleted from the distribution list. As a rule, your data is transmitted to and stored on Klaviyo servers located in the USA. An adequacy decision by the EU Commission—the Trans-Atlantic Data Privacy Framework (TADPF)—is in place for the USA. Klaviyo has certified under the TADPF and has thereby committed to adhering to European data protection principles.
Further information regarding data protection at Klaviyo can be found at https://www.klaviyo.com/legal/privacy-notice and https://www.klaviyo.com/legal/data-processing-agreement.

Shipping Service Providers

Transfer of email address to shipping companies for shipment status notifications

We share your email address with the transport company as part of the contract fulfillment process, provided you have expressly consented to this during the ordering process. This transfer serves the purpose of notifying you of the shipment status via email. Processing is carried out based on your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time by notifying us or the transport company; this does not affect the lawfulness of processing carried out based on your consent prior to such revocation.

Payment Service Provider       Credit Check

Use of PayPal

We use the payment service PayPal, provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"), on our website. Data processing is carried out for the purpose of offering you payment via this service. When you select and use payment via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Article 6(1)(b) of the GDPR.

All PayPal transactions are subject to the PayPal Privacy Statement. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Express

We use the PayPal Express payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing is carried out for the purpose of offering you the option to pay via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, device location) when the website is accessed. Cookies may also be used for this purpose. These cookies enable your browser to be recognized.
The processing of your personal data is based on Article 6(1)(f) of the GDPR, reflecting our overriding legitimate interest in providing a customer-oriented range of payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.
When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR. Further information regarding data processing when using the PayPal Express payment service can be found in the relevant privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.

Use of PayPal Checkout

We use the PayPal Checkout payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing is carried out for the purpose of offering you payment via this service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) of the GDPR.

In this process, cookies may be stored that enable your browser to be recognized. The resulting data processing is based on Art. 6(1)(f) of the GDPR, reflecting our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.

Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal
For certain payment methods—such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal—PayPal reserves the right to obtain a credit report based on mathematical-statistical methods using credit reference agencies. To this end, PayPal transmits the personal data required for a credit check to a credit reference agency and uses the information received regarding the statistical probability of payment default to make a balanced decision concerning the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (scores) calculated using scientifically recognized mathematical-statistical methods, the calculation of which incorporates factors such as address data. Your interests worthy of protection are taken into account in accordance with statutory provisions. Data processing is carried out for the purpose of a credit check in preparation for a contract. Processing is based on Art. 6(1)(f) GDPR, reflecting our overriding legitimate interest in protection against payment default in cases where PayPal makes an advance payment. You have the right to object at any time—on grounds relating to your particular situation—to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR, by notifying PayPal. Providing the data is necessary to conclude the contract using your preferred payment method. Failure to provide the data means that the contract cannot be concluded using your chosen payment method.

Third-party providers
When paying via a third-party provider's payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Art. 6(1)(b) GDPR. To execute this payment method, the data may subsequently be passed on by PayPal to the respective provider. This processing is based on Art. 6(1)(b) GDPR. Examples of local third-party providers include:

Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)

Purchase on invoice via PayPal
When paying via the "purchase on invoice" method, the data required for payment processing is first transmitted to PayPal. To execute this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR. Ratepay may conduct a credit check using mathematical-statistical methods (probability or score values) and credit reference agencies, following the procedure described above. This data processing serves the purpose of assessing creditworthiness in preparation for a contract. Processing is carried out pursuant to Art. 6(1)(f) GDPR, based on our overriding legitimate interest in protecting against payment default in cases where Ratepay makes an advance payment. Further information regarding data protection and the credit reference agencies used by Ratepay can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

Further information on data processing when using PayPal can be found in the relevant privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Klarna Payment Options

We use the payment service provided by Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna") on our website. When you select and use Klarna as a payment method, the data required for payment processing is transmitted to Klarna in order to fulfill the contract with you using the chosen payment method. This processing is carried out on the basis of Article 6(1)(b) of the GDPR.

In this process, cookies may be stored that enable your browser to be recognized. The resulting data processing is based on Article 6(1)(f) of the GDPR, reflecting our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.

"Pay Later" (invoice), "Pay Now" (direct debit), "Financing" (installment purchase)
For certain payment methods such as "Pay Later" (invoice), "Pay Now" (direct debit), and "Financing" (installment purchase), Klarna reserves the right to obtain a credit report based on mathematical-statistical methods using credit reference agencies.
To this end, Klarna transmits the personal data required for a credit check—such as first and last name, address, gender, e-mail address, IP address, and data related to the order—to a credit reference agency for the purpose of identity and credit verification. Klarna then uses the information received regarding the statistical probability of a payment default to make a balanced decision concerning the establishment, execution, or termination of the contractual relationship. The credit report may contain probability values (score values) calculated using scientifically recognized mathematical-statistical methods, which incorporate data such as address details. Your interests worthy of protection are taken into account in accordance with statutory provisions. The data processing serves the purpose of credit assessment prior to the conclusion of a contract. Processing is carried out on the basis of Art. 6(1)(f) GDPR, reflecting our overriding legitimate interest in protection against payment default when Klarna provides services in advance of payment. You have the right to object at any time—on grounds relating to your particular situation—to the processing of your personal data based on Art. 6(1)(f) GDPR by notifying Klarna. Providing the data is necessary for concluding the contract using your preferred payment method. Failure to provide the data means that the contract cannot be concluded using your chosen payment method.
Further information, particularly regarding which credit reference agencies Klarna [shares] your personal data with... ...shares data can be found for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/credit_rating_agencies. General information about Klarna is available for Germany at https://www.klarna.com/de/ and for Austria at https://www.klarna.com/at/. Your personal data is processed by Klarna in accordance with applicable data protection regulations and as described in Klarna’s privacy policy for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.

Use of the payment service provider Stripe

We use the payment service Stripe (provided by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) on our website. Data processing is carried out for the purpose of offering you payment options via this service. When you select and use Stripe, the data required for payment processing is transmitted to Stripe to enable the fulfillment of the contract with you using your chosen payment method. This processing is based on Art. 6(1)(b) of the GDPR.
Stripe reserves the right to obtain a credit report based on mathematical-statistical methods using credit reference agencies. To this end, Stripe transmits the personal data required for a credit check to a credit reference agency and uses the information received regarding the statistical probability of payment default to make a balanced decision concerning the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (scores) calculated using scientifically recognized mathematical-statistical methods, incorporating factors such as address data. Your interests worthy of protection are taken into account in accordance with statutory provisions. Data processing serves the purpose of conducting a credit check prior to the conclusion of a contract. This processing is based on Art. 6(1)(f) of the GDPR, reflecting our overriding legitimate interest in protection against payment default in cases where Stripe makes an advance payment.
You have the right to object at any time—on grounds relating to your particular situation—to the processing of your personal data based on Art. 6(1)(f) of the GDPR by notifying Stripe. Providing this data is necessary for concluding the contract using your preferred payment method. Failure to provide the data means that the contract cannot be concluded using your chosen payment method.
All Stripe transactions are subject to the Stripe Privacy Policy. You can find these at https://stripe.com/de/privacy

Cookies

Our website uses cookies. Cookies are small text files that are stored on a user's computer system by the internet browser. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.
 
Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set, decide whether to accept them on a case-by-case basis, and prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, please note that doing so may prevent you from making full use of all the functions of this website.
 
You can find information on how to manage (including disable) cookies in the most common browsers at the following links:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies
Unless otherwise stated in the privacy policy below, we use only these technically necessary cookies for the purpose of making our service more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after you navigate to a different page and to offer you services. Certain functions of our website cannot be provided without the use of cookies. For these functions, it is necessary for the browser to be recognized again after a page change.
 
The use of cookies or similar technologies is based on Section 25 (2) of the TDDDG. The processing of your personal data is based on Article 6 (1) (f) of the GDPR, reflecting our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly, effective design of our service.
You have the right to object to this processing of personal data concerning you at any time, on grounds relating to your particular situation.

Use of Avada Cookie Consent

We use the consent management tool "Avada Cookie Consent" from Avada Commerce, Pte. Ltd. (Singapore: 1 Sophia Rd, Peace Centre, Singapore, 228149 / USA: 651 N Broad St, Suite 206, Middletown, DE 19709) on our website. This tool enables you to grant consent for data processing activities via the website—specifically the setting of cookies—and to exercise your right to withdraw consent that has already been given.
The purpose of this data processing is to obtain and document the necessary consents for data processing activities and thereby comply with legal obligations. Cookies may be used for this purpose. In the process, information such as the following may be collected and transmitted to Avada: anonymized IP address, date and time of consent, the URL from which the consent was sent, an anonymous/random/encrypted key, and consent status. This data is not shared with other third parties.
The data processing is carried out to fulfill a legal obligation pursuant to Art. 6 (1) (c) of the GDPR.
Further information regarding Avada’s terms of use and data protection policies can be found at: https://avada.io/privacy.html and https://avada.io/tos.html.

Analytics      Ad Tracking

Use of Google Analytics 4

We use the web analytics service Google Analytics, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"), on our website.
Data processing serves the purpose of analyzing this website and its visitors, as well as marketing and advertising purposes. To this end, Google will use the information obtained—on behalf of the website operator—to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator.
The following information may be collected, among other things: IP address, date and time of the page view, click path, information about the browser and device you use, pages visited, referrer URL (the website from which you accessed our site), location data, and purchasing activities. Google may link your data with other information, such as your search history, personal accounts, usage data from other devices, and any other data Google holds about you.

We shorten your IP address on our own servers beforehand. Consequently, Google receives only pseudonymized data.

Google uses technologies such as cookies, browser web storage, and tracking pixels to enable the analysis of your use of the website. The use of cookies or comparable technologies takes place with your consent, based on Section 25 (1) Sentence 1 of the TDDDG in conjunction with Art. 6 (1) (a) of the GDPR.

The processing of your personal data takes place with your consent, based on Art. 6 (1) (a) of the GDPR. You may revoke your consent at any time via the cookie settings (Avada Cookie Consent) on our website, without affecting the lawfulness of the processing carried out based on your consent prior to such revocation. In this context, we also use the Google Signals service. Google Signals enables cross-device tracking. This allows your data to be analyzed across devices if you have enabled "personalized advertising" in your account settings and your devices are linked to your Google account. This makes it possible to identify the device on which you search for products and then return to complete purchases on a different device, such as a tablet.

The cross-device reports generated in this context contain only aggregated data. Consequently, we receive only statistics generated via Google Signals. To prevent cross-device data collection and storage by Google Signals, you can disable the "personalized ads" feature in your Google account settings. Further information on this can be found at https://support.google.com/ads/answer/2662922?hl=en. 
For more detailed information regarding data processing and privacy in relation to Google Signals, please visit https://support.google.com/analytics/answer/7532985?hl=en.

We use the advanced implementation of Consent Mode (Advanced Consent Mode). With this method, user data is transmitted to Google in the form of "pings" even if consent has not been granted. These pings may contain information such as: IP address used to derive the IP country (the IP address itself is not logged), date and time of the page view, URL of the pages visited, user agent, referrer URL (the website used to access our site), or information regarding the triggering of website events, such as a conversion. Based on this information, Google models user data to enable comprehensive usage analysis despite the refusal of consent. The information generated in this way regarding your use of this website is generally transmitted to a Google server in the USA and stored there. An adequacy decision by the EU Commission—the Trans-Atlantic Data Privacy Framework (TADPF)—is in place for the USA. Google has certified itself under the TADPF and has thereby committed to complying with European data protection principles. Both Google and US government authorities have access to your data.

Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy?hl=de&gl=de.

Use of Shopify Analytics

We use the statistics and analytics functions provided by Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of a data processing arrangement. Shopify is an affiliate of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The data processing serves the purpose of analyzing this website and its visitors. To this end, data is stored for marketing and optimization purposes and made available in reports, analyses, and statistics. In the process, the following device information, among other things, is collected and processed: information regarding the web browser, IP address, time zone, and certain cookies installed on your device. As you navigate the website, information is also collected regarding the web pages or products viewed, the referrer URL (the website from which you accessed our site), and details of how you interact with the website. Technologies such as cookies, as well as web beacons, tags, and pixels (electronic files used to record information about how you navigate the website), are used for this purpose.
Your data may be transferred to and processed in third countries outside the EU, specifically Canada and the USA. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision by the EU Commission is in place: the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to the EU Commission’s Standard Contractual Clauses.
The use of cookies or similar technologies takes place with your consent pursuant to Section 25 (1) Sentence 1 of the TDDDG (Telecommunications-Telemedia Data Protection Act) in conjunction with Art. 6 (1) (a) of the GDPR. Your personal data is processed with your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time via the cookie settings (Avada Cookie Consent) on our website; this does not affect the lawfulness of processing based on consent before its withdrawal. You can find further information on data protection at Shopify at https://www.shopify.com/de/legal/datenschutz, information on the data processing agreement at https://www.shopify.com/de/legal/dpa, and information on the cookies used at https://www.shopify.com/de/legal/cookies.

Use of the Meta Pixel

We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.

Meta and we are joint controllers regarding the collection of your data and the transmission of that data to Meta that occurs when the service is integrated. This is based on an agreement between us and Meta regarding the joint processing of personal data, which defines our respective responsibilities. The agreement can be viewed at https://de-de.facebook.com/legal/terms/businesstools. Under this agreement, we are specifically responsible for fulfilling information obligations pursuant to Articles 13 and 14 of the GDPR, for complying with the security requirements of Article 32 of the GDPR regarding the correct technical implementation and configuration of the service, and for complying with obligations under Articles 33 and 34 of the GDPR insofar as a personal data breach affects our obligations under the joint processing agreement. Meta is responsible for enabling the exercise of data subject rights pursuant to Articles 15–20 of the GDPR, for complying with the security requirements of Article 32 of the GDPR regarding the security of the service, and for obligations under Articles 33 and 34 of the GDPR insofar as a personal data breach affects Meta's obligations under the joint processing agreement.
The application serves the purpose of targeting website visitors with interest-based advertising on the social networks Facebook and Instagram. To this end, Meta's remarketing tag has been implemented on the website. This tag establishes a direct connection to Meta's servers when the website is visited. This transmits information to the Meta server regarding which of our pages you have visited. Meta associates this information with your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you are then shown personalized, interest-based ads. Furthermore, the application is used to generate conversion statistics. This allows us to determine the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag, as well as the actions taken after being redirected to that website. However, we do not receive any information that would allow for the personal identification of users.
Your data may be transferred to the USA. An adequacy decision by the EU Commission—the Trans-Atlantic Data Privacy Framework (TADPF)—is in place for the USA. Meta has certified itself under the TADPF and has thereby committed to adhering to European data protection principles.
The processing of your personal data takes place with your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time via the cookie settings (Avada Cookie Consent) on our website; this does not affect the lawfulness of processing carried out based on your consent prior to its withdrawal. Additionally, you can deactivate the "Custom Audiences" remarketing feature in your Facebook or Instagram account settings. Further information regarding Meta’s data collection and usage, your related rights, and options for protecting your privacy can be found in Meta’s privacy policy at https://www.facebook.com/about/privacy/.

Use of Google Ads Conversion Tracking

We use the online advertising program "Google Ads" on our website, including its conversion tracking feature (analysis of visitor actions). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
When you click on an ad placed by Google, a conversion tracking cookie is stored on your computer. These cookies have a limited lifespan, do not contain personal data, and are therefore not used for personal identification. If you visit specific pages on our website and the cookie has not yet expired, both Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie. Consequently, it is not possible to track cookies across the websites of different Ads customers.
The information collected via the conversion cookie is used to generate conversion statistics. This allows us to determine the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag. However, we do not receive information that would allow us to personally identify users. We use the "Advanced Consent Mode" implementation. Under this mode, user data is transmitted to Google in the form of "pings" even if consent has not been granted. These pings may contain information such as: IP address used to derive the country of origin (the IP address itself is not logged), date and time of the page view, URL of the visited page, user agent, referrer URL (the website used to access our site), or information regarding the triggering of website events (e.g., a conversion). Based on this information, Google models user data to enable comprehensive usage analysis despite the refusal of consent.
Your data may be transmitted to Google LLC servers in the USA. An adequacy decision by the EU Commission—the Trans-Atlantic Data Privacy Framework (TADPF)—is in place for the USA. Google has certified itself under the TADPF and has thereby committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent pursuant to Section 25 (1) sentence 1 of the TDDDG in conjunction with Art. 6 (1) (a) of the GDPR. Your personal data is processed with your consent pursuant to Art. 6 (1) (a) of the GDPR. You may withdraw your consent at any time via the cookie settings (Avada Cookie Consent) on our website; this does not affect the lawfulness of processing carried out based on your consent prior to its withdrawal. Further information and Google’s privacy policy can be found at: https://www.google.de/policies/privacy/

Use of the Remarketing or "Similar Audiences" feature from Google Inc.

We use the remarketing or "Similar Audiences" feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This feature is used to analyze visitor behavior and interests. Google employs cookies to analyze website usage, which forms the basis for creating interest-based advertisements. These cookies record visits to the website as well as anonymized data regarding website usage. No personal data of website visitors is stored. If you subsequently visit another website within the Google Display Network, you may be shown advertisements that likely reflect product categories or information sections you previously viewed.
Your data may be transmitted to Google LLC servers in the USA. An adequacy decision by the EU Commission—the Trans-Atlantic Data Privacy Framework (TADPF)—exists for the USA. Google has certified itself under the TADPF and has thereby committed to adhering to European data protection principles.
The use of cookies or similar technologies takes place with your consent pursuant to Section 25 (1) Sentence 1 of the TDDDG in conjunction with Art. 6 (1) (a) of the GDPR. The processing of your personal data is carried out with your consent pursuant to Art. 6 (1) (a) of the GDPR. You may revoke your consent at any time via the cookie settings (Avada Cookie Consent) on our website; this does not affect the lawfulness of processing based on consent prior to its revocation. Further information on Google Remarketing and the associated privacy policy can be found at: https://www.google.com/privacy/ads/

Use of Microsoft Advertising

We use Microsoft Advertising, a service provided by Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; “Microsoft”), on our website.
Data processing serves marketing and advertising purposes, as well as the purpose of measuring the success of advertising campaigns (conversion tracking). We receive information on the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag. However, it is not possible to personally identify these users. Microsoft Advertising uses technologies such as cookies and tracking pixels to enable an analysis of your use of the website. When you click on an ad placed via Microsoft Advertising, a cookie for conversion tracking is stored on your computer. This cookie has a limited validity period and is not used for personal identification. If you visit specific pages on our website and the cookie has not yet expired, both Microsoft and we can recognize that you clicked on the ad and were redirected to that page. Information collected may include, among other things: IP address, identifiers assigned by Microsoft, information about the browser and device you are using, the referrer URL (the website from which you accessed our website), and the URL of our website.
Your data may be transferred to the USA. An adequacy decision by the EU Commission—the Trans-Atlantic Data Privacy Framework (TADPF)—exists for the USA. Microsoft has certified itself under the TADPF and has thereby committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent pursuant to Section 25 (1) Sentence 1 of the TDDDG in conjunction with Art. 6 (1) (a) of the GDPR. The processing of your personal data takes place with your consent pursuant to Art. 6 (1) (a) of the GDPR. You may withdraw your consent at any time via the cookie settings (Avada Cookie Consent) on our website, without affecting the lawfulness of processing based on consent before its withdrawal. Further information regarding data protection and the cookies used by Microsoft can be found here.

Use of TikTok Pixel

We use the TikTok Pixel from TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; “TikTok Ireland”) and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; “TikTok UK”) on our website. Both companies act as joint controllers for the data processing (hereinafter referred to as “TikTok”). The purpose of this data processing is to identify and analyze visits to our website by our customers, to improve customer engagement by displaying targeted advertisements, and to evaluate the effectiveness of advertisements on TikTok. To this end, TikTok uses technologies such as cookies and pixels that enable your browser to be recognized. In the process, information such as the date and time of the visit, details regarding the browser and device type you use, screen resolution, and IP address may be collected and transmitted to TikTok. TikTok may link this information to your personal TikTok user account. Usage profiles may be created from the data collected in this way using pseudonyms; however, this does not allow for the personal identification of users.
Your data may be transferred to third countries, such as the USA. An adequacy decision by the EU Commission—the Trans-Atlantic Data Privacy Framework (TADPF)—exists for the USA. TikTok is not certified under the TADPF. Data transfers to the USA and to third countries without an adequacy decision are carried out based on, among other things, Standard Contractual Clauses (SCCs) as appropriate safeguards for the protection of personal data; these can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de. Cookies or similar technologies are used with your consent pursuant to Section 25 (1) Sentence 1 of the TDDDG in conjunction with Art. 6 (1) (a) of the GDPR. Your personal data is processed with your consent pursuant to Art. 6 (1) (a) of the GDPR. You may withdraw your consent at any time via the cookie settings (Avada Cookie Consent) on our website, without affecting the lawfulness of the processing carried out based on your consent prior to such withdrawal. Further information on data protection can be found at https://www.tiktok.com/legal/page/eea/privacy-policy/de and https://ads.tiktok.com/i18n/official/policy/controller-to-controller.

Plug-ins and Other Features

Use of Google Tag Manager

We use Google Tag Manager, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"), on our website.
This application is used to manage JavaScript and HTML tags, which are employed to implement tracking and analytics tools, among other things. Data processing is carried out for the purpose of designing and optimizing our website to meet user needs.
Google Tag Manager itself does not store cookies, nor does it process personal data. However, it enables the triggering of other tags that may collect and process personal data. These tags are triggered only after you have provided your consent via the cookie settings (Avada Cookie Consent) on our website.
Further information regarding terms of use and data protection can be found here.

Use of Google reCAPTCHA

We use the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This check serves to distinguish whether input is made by a human or by automated, machine processing. To this end, your input is transmitted to Google and used there. Additionally, your IP address and any other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and may also be transmitted to Google LLC servers in the USA. An adequacy decision by the EU Commission—the Trans-Atlantic Data Privacy Framework (TADPF)—exists for the USA. Google has certified itself under the TADPF and has thereby committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent pursuant to Section 25 (1) Sentence 1 of the TDDDG in conjunction with Art. 6 (1) (a) of the GDPR. The processing of your personal data takes place with your consent pursuant to Art. 6 (1) (a) of the GDPR. You may revoke your consent at any time via the cookie settings (Avada Cookie Consent) on our website without affecting the lawfulness of processing based on consent before its revocation. Further information on Google reCAPTCHA and the associated privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.

Use of Google invisible reCAPTCHA

We use the invisible reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This service serves to distinguish between input made by a human and input made by automated, machine-based processing. In the background, Google collects and analyzes usage data, which invisible reCAPTCHA uses to differentiate regular users from bots. For this purpose, your input is transmitted to Google and processed there. Additionally, your IP address and—where applicable—other data required by Google for the invisible reCAPTCHA service are transmitted to Google.
This data is processed by Google within the European Union and may also be transmitted to Google LLC servers in the USA. An adequacy decision by the EU Commission—the Trans-Atlantic Data Privacy Framework (TADPF)—exists for the USA. Google has certified itself under the TADPF and has thereby committed to adhering to European data protection principles.
The use of cookies or comparable technologies takes place with your consent pursuant to Section 25 (1) Sentence 1 of the TDDDG in conjunction with Art. 6 (1) (a) of the GDPR. The processing of your personal data takes place with your consent pursuant to Art. 6 (1) (a) of the GDPR. You may revoke your consent at any time via the cookie settings (Avada Cookie Consent) on our website; this does not affect the lawfulness of processing carried out based on your consent prior to the revocation. Further information regarding Google reCAPTCHA and the associated privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy

Use of Cloudflare

We use the Cloudflare CDN content delivery network provided by Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; “Cloudflare”) on our website. This involves a distributed network of servers located in various data centers; our web server connects to this network, and specific content from our website is delivered via it.
The purpose of this data processing is to optimize our website's loading times and thereby make our service more user-friendly.
The information collected may include, among other things: IP address, system configuration information, and information regarding traffic to and from customer websites (so-called server log files).
Your data may be transferred to the USA. An adequacy decision by the EU Commission—the Trans-Atlantic Data Privacy Framework (TADPF)—is in place for the USA. Cloudflare has certified itself under the TADPF and has thereby committed to complying with European data protection principles.
The processing of your personal data is based on Art. 6(1)(f) GDPR, reflecting our overriding legitimate interest in designing the website to meet specific needs and objectives. You have the right to object at any time—on grounds relating to your particular situation—to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR.
Further information regarding data protection when using Cloudflare can be found at https://www.cloudflare.com/de-de/privacypolicy/.

Use of Google Fonts

We use Google Fonts, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”), on our website.
The purpose of this data processing is to ensure the uniform display of fonts on our website. To load the fonts, a connection to Google’s servers is established when the page is accessed. Cookies may be used in this process. In doing so, information such as your IP address and details about the browser you are using is processed and transmitted to Google. This data is not linked to your Google account.
Your data may be transferred to the USA. An adequacy decision by the EU Commission—the Trans-Atlantic Data Privacy Framework (TADPF)—is in place for the USA. Google has certified itself under the TADPF and has thereby committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent pursuant to Section 25 (1) Sentence 1 of the TDDDG in conjunction with Art. 6 (1) (a) of the GDPR. The processing of your personal data takes place with your consent pursuant to Art. 6 (1) (a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out based on your consent prior to the withdrawal.
Further information regarding data processing and data protection can be found at https://www.google.de/intl/de/policies/ and https://developers.google.com/fonts/faq.

Use of FontAwesome

We use Font Awesome, provided by Fonticons Inc. (307 S Main St., Suite 202, Bentonville, AR, 72712-9214 USA; "Font Awesome"), on our website. Data processing serves the purpose of ensuring the consistent display of fonts and icons on our website. To load the fonts, a connection to FontAwesome's servers is established when the page is accessed.
Cookies may be used in this process. In doing so, information such as your IP address and details regarding the browser you are using is processed and transmitted to Font Awesome. Your data may be transmitted to third countries, such as the USA. An adequacy decision by the EU Commission—the Trans-Atlantic Data Privacy Framework (TADPF)—exists for the USA. Font Awesome is not certified under the TADPF.
The use of cookies or comparable technologies takes place with your consent pursuant to Section 25 (1) Sentence 1 of the TDDDG in conjunction with Art. 6 (1) (a) of the GDPR. The processing of your personal data takes place with your consent pursuant to Art. 6 (1) (a) of the GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out based on your consent prior to the revocation.
Further information regarding data processing and data protection can be found at https://fontawesome.com/privacy and https://fontawesome.com/support.

Rights of Data Subjects and Storage Duration

Storage Duration

Following the complete processing of the contract, the data is initially stored for the duration of the warranty period. Subsequently, it is stored in compliance with statutory retention periods—particularly those under tax and commercial law—and deleted once these periods expire, unless you have consented to further processing and use.

Rights of the Data Subject

Provided the statutory requirements are met, you have the following rights under Articles 15 to 20 of the GDPR: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, and the right to data portability.
Furthermore, pursuant to Article 21(1) of the GDPR, you have the right to object to processing based on Article 6(1)(f) of the GDPR, as well as to processing for the purpose of direct marketing.

Right to Lodge a Complaint with a Supervisory Authority

In accordance with Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful.

You may lodge a complaint with, among others, the supervisory authority responsible for us, which can be reached via the following contact details:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein
Postfach 71 16
24171 Kiel
Tel.: +49 431 9881200
Fax: +49 431 9881223
E-mail: mail@datenschutzzentrum.de

Right to Object

If the processing of personal data described here is based on our legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to such processing at any time—with effect for the future—on grounds relating to your particular situation.
Upon your objection, we will cease processing the data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

If personal data is processed for direct marketing purposes, you may object to such processing at any time by notifying us. Upon your objection, we will cease processing the data concerned for direct marketing purposes.

Last updated: 18 June 2026