Privacy policy

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data means all data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Dartgarage GmbH, Frikusweg 10, 8141 Premstätten bei Graz, Austria, Tel.: +436601807001, email: support@dartgarage.at. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data collection when visiting our website

2.1 When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the page server (so-called “server log files”). When you access our website, we collect the following data that is technically necessary for us to display the website to you:

Website visited by us
Date and time of access
Amount of data sent in bytes
Source/referrer from which you accessed the page
Browser used
Operating system used
IP address used (where applicable: in anonymized form)

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used in any other way. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries sent to us), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the padlock symbol in your browser’s address bar.

3) Hosting & Content Delivery Network

3.1 Amazon Web Services

For hosting our website and displaying the page content, we use the system of the following provider: AWS EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg

Data may also be transferred to: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA

All data collected on our website is processed on the provider’s servers. We have concluded a data processing agreement with the provider that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

3.2 Shopify

For hosting our website and displaying the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

Where data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

3.3 Cloudflare

We use a content delivery network provided by the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6 para. 1 lit. f GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

4) Cookies

To make visiting our website attractive and enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after the browser is closed (so-called “session cookies”), while others remain on your device for longer and enable page settings to be stored (so-called “persistent cookies”). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser.

If personal data is also processed through individual cookies used by us, such processing is carried out pursuant to Art. 6 para. 1 lit. b GDPR either for the performance of the contract, pursuant to Art. 6 para. 1 lit. a GDPR where consent has been given, or pursuant to Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly and effective design of the site visit.

You can configure your browser to notify you when cookies are set and decide individually whether to accept them, or exclude the acceptance of cookies in certain cases or generally.

Please note that if cookies are not accepted, the functionality of our website may be restricted.

5) Contact

5.1 Judge.me

For review reminders, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

Solely on the basis of your express consent pursuant to Art. 6 para. 1 lit. a GDPR, we transmit your email address and, where applicable, other customer data to the provider so that the provider can contact you by email with a review reminder.

You may revoke your consent at any time with effect for the future vis-à-vis us or the provider.

We have concluded a data processing agreement with the provider that ensures the protection of our page visitors' data and prohibits unauthorized disclosure to third parties.

In the event of a data transfer to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

5.2 Trusted Shops

For review reminders, we use the services of the following provider: Trusted Shops AG, Subbelrather Str. 15c, 50823 Cologne, Germany

You may revoke your consent at any time with effect for the future vis-à-vis us or the provider.

We are jointly responsible with the provider for the processing described above pursuant to Art. 26 GDPR. The agreement on joint controllership can be viewed here: https://help.etrusted.com/hc/de/articles/4402587369105-Agreement-%C3%BCber-die-gemeinsame-Verantwortlichkeit-nach-DSGVO

5.3 eDesk

To process customer inquiries, we use the email ticketing system of the following provider: xSellco Limited, Two Haddington Buildings, Haddington Road, Dublin 4, D04 HE94, Ireland.

If you submit contact inquiries by email via our website, these are stored and organized in the ticketing system to enable chronological processing and improve the service experience. You can always view the current status of the processing of your request using the individually assigned ticket number.

For the organization and processing of inquiries, personal data are collected according to the scope in which they are provided, but in any event the name, first name, and email address, transmitted to the provider, stored there, and accessed.

The legal basis for processing this data is our legitimate interest in efficiently structuring our customer service, responding to your request as quickly as possible, and optimizing our service offering pursuant to Art. 6 para. 1 lit. f GDPR.

We have concluded a data processing agreement with the provider that ensures the protection of our page visitors' data and prohibits unauthorized disclosure to third parties.

5.4 Zendesk

To process customer inquiries, we use the email ticketing system of the following provider: Zendesk International Ltd., 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland

We have concluded a data processing agreement with the provider that ensures the protection of our page visitors' data and prohibits unauthorized disclosure to third parties.

5.5 WhatsApp Business

We offer you the opportunity to contact us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called “Business version” of WhatsApp.

If you contact us via WhatsApp in connection with a specific transaction (for example, an order placed), we store and use the mobile telephone number you use on WhatsApp and - if provided - your first and last name pursuant to Article 6(1)(b) GDPR to process and respond to your request. On the same legal basis, we may ask you via WhatsApp to provide additional data (order number, customer number, address, or email address) so that we can assign your inquiry to a specific transaction.

If you use our WhatsApp contact service for general inquiries (such as regarding our range of services, availability, or our website), we store and use the mobile telephone number you use on WhatsApp and - if provided - your first and last name pursuant to Article 6(1)(f) GDPR, based on our legitimate interest in providing the requested information efficiently and promptly.

Your data is always used only to respond to your request via WhatsApp. No disclosure to third parties takes place.

Please note that WhatsApp Business obtains access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device in whose address book only the WhatsApp contact details of users who have also contacted us via WhatsApp are stored.

This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, upon first use of the app on their device, by accepting WhatsApp's Terms of Service, to the transmission of their WhatsApp telephone number from the address books of their chat contacts pursuant to Article 6(1)(a) GDPR. The transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

Please refer to WhatsApp's privacy notices for the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your related rights and settings options for protecting your privacy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

As part of the aforementioned processing activities, data may be transferred to servers of Meta Platforms Inc. in the USA.

5.6 When you contact us (e.g. via the contact form or by email), personal data is processed - exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your enquiry pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that no statutory retention obligations prevent this.

6) Data processing when opening a customer account

Pursuant to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide it to us when opening a customer account. You can find out which data is required to open the account from the input form for the relevant form on our website.

You may delete your customer account at any time by sending a message to the above-mentioned address of the controller. After your customer account has been deleted, your data will be deleted provided that all contracts concluded through it have been fully performed, no statutory retention periods prevent this, and we have no legitimate interest in retaining the data further.

7) Use of customer data for direct advertising

7.1 Registration for our email newsletter

If you register for our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive newsletters after expressly confirming your consent to receive the newsletter by clicking a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. In this context, we store the IP address assigned to you by your Internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data collected by us when you register for the newsletter will be used strictly for the specified purpose.

You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending an appropriate message to the controller named above. After unsubscribing, your email address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we have reserved the right to use your data beyond this for a purpose that is legally permitted and about which we inform you in this statement.

7.2 Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers by email for similar goods or services from our range to those already purchased. Pursuant to § 7(3) UWG, we do not have to obtain separate consent from you for this. The data processing in this respect is based solely on our legitimate interest in personalized direct advertising pursuant to Art. 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you emails.

You are entitled to object at any time, with effect for the future, to the use of your email address for the aforementioned advertising purpose by notifying the controller named at the beginning. You will only incur transmission costs at the basic rates for this. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued without delay.

7.3 Amazon SES

Our email newsletters are sent via this provider: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we disclose the data you provided when registering for the newsletter to this provider pursuant to Art. 6(1)(f) GDPR, so that the provider can send the newsletter on our behalf.

Subject to your express consent pursuant to Art. 6(1)(a) GDPR, the provider also carries out statistical analyses of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the newsletter content. Device information (e.g. the time of access, IP address, browser type and operating system) is also collected and evaluated, but is not combined with other data sets.

You may withdraw your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.

7.4 Hello Email

Our email newsletters are sent via this provider: Bergstein Media Ltd., Arch. Makariou III 55, Flat 102, 7550 Kiti, Cyprus

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we disclose the data provided when registering for the newsletter to this provider pursuant to Art. 6(1)(f) GDPR, so that the provider can send the newsletter on our behalf.

You may withdraw your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.

7.5 Product availability notification by email

For items that are temporarily unavailable, you can register to receive email product availability notifications. In this case, we will send you a one-time email notifying you of the availability of the item you selected. The only mandatory information required to send this notification is your email address. Providing further data is voluntary and may be used to address you personally. For sending emails, we use the so-called double opt-in procedure, which ensures that you receive a notification only after you have expressly confirmed your consent by clicking a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Article 6(1)(a) GDPR. In this context, we store the IP address registered by your Internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you register for our email product availability notification service is used strictly for the specified purpose.

You can unsubscribe from availability notifications at any time by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be deleted without delay from the distribution list established for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope where such use is legally permitted and we inform you about it in this declaration.

7.6 Shopping cart reminders by email

If you abandon your purchase with us before completing your order, you have the option of being reminded once by email of the contents of your virtual shopping cart.

The only mandatory information required to send this reminder is your email address. Providing further data is voluntary and may be used to address you personally. For sending emails, we use the so-called double opt-in procedure, which ensures that you receive a notification only after you have expressly confirmed your consent by clicking a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Article 6(1)(a) GDPR to send a cart reminder. For this purpose, we store the IP address registered by your Internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data collected by us when you register for our email notification service is used strictly for the specified purpose.

You may unsubscribe from cart reminders at any time by sending an appropriate message to the controller named above. After unsubscribing, your email address will be deleted from the distribution list established for this purpose without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, where such use is legally permitted and we inform you of it in this statement.

8) Data processing for order processing

8.1 Insofar as necessary for the performance of the contract for delivery and payment purposes, the personal data collected by us will be disclosed, pursuant to Article 6(1)(b) GDPR, to the commissioned transport company and the commissioned credit institution.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided when placing your order (name, address, email address) in order to inform you personally, by a suitable means of communication (such as by post or email), about upcoming updates within the period prescribed by law, in accordance with our statutory information obligations under Article 6(1)(c) GDPR. Your contact details are used strictly for the purpose of communicating updates owed by us and are processed by us for this purpose only to the extent necessary for the respective information.

To process your order, we also work with the following service provider(s), which support us in whole or in part in the performance of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

8.2 Disclosure of personal data to shipping service providers

- DACHSER SE

As a transport service provider, we use the following provider: DACHSER SE, Munich Logistics Center, European Logistics, Zamilastraße 11, 81677 Munich, Germany

In accordance with Article 6(1)(a) GDPR, we will provide your email address and/or telephone number to the provider before the goods are delivered for the purpose of arranging a delivery date or notifying you of the delivery, provided that you have expressly consented to this during the ordering process. Otherwise, pursuant to Article 6(1)(b) GDPR, we will provide the provider only with the recipient's name and delivery address for the purpose of delivery. The information will be disclosed only insofar as this is necessary for the delivery of the goods. In this case, it will not be possible to arrange the delivery date with the provider in advance or to notify you of the delivery.

Consent may be withdrawn at any time with effect for the future vis-à-vis the controller designated above or vis-à-vis the provider.
- DHL

We use the following provider as our transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

Consent may be withdrawn at any time with effect for the future vis-à-vis the controller designated above or vis-à-vis the provider.
- DHL Express

We use the following provider as our transport service provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany

Consent may be withdrawn at any time with effect for the future vis-à-vis the controller designated above or vis-à-vis the provider.
- DHL Express Austria

We use the following provider as our transport service provider: DHL Express (Austria) GmbH, Am Europlatz 2 (Objekt G), 1120 Vienna.

Consent may be withdrawn at any time with effect for the future vis-à-vis the controller designated above or vis-à-vis the provider.
- DHL Freight

We use the following provider as our transport service provider: DHL Freight GmbH, Godesberger Allee 102-104, 53175 Bonn, Germany

Consent may be withdrawn at any time with effect for the future vis-à-vis the controller designated above or vis-à-vis the provider.
- DPD

We use the following provider as our transport service provider: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany

Consent may be withdrawn at any time with effect for the future vis-à-vis the controller designated above or vis-à-vis the provider.
- DPD Austria

We use the following provider as our transport service provider: DPD Direct Parcel Distribution Austria GmbH, Arbeitergasse 46, Leopoldsdorf 2333, Austria

Consent may be withdrawn at any time with effect for the future vis-à-vis the controller designated above or vis-à-vis the provider.
- FedEx

We use the following provider as our transport service provider: FedEx Express Germany GmbH, Langer Kornweg 34 k, 65451 Kelsterbach, Germany

Consent may be withdrawn at any time with effect for the future vis-à-vis the controller designated above or vis-à-vis the provider.
- GLS

We use the following provider as our transport service provider: General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein, Germany

Consent may be withdrawn at any time with effect for the future vis-à-vis the controller designated above or vis-à-vis the provider.
- Kühne+Nagel

We use the following provider as our transport service provider: Kühne + Nagel AG & Co. KG, Wilhelm-Kaisen-Brücke 1, 28195 Bremen, Germany

Consent may be withdrawn at any time with effect for the future vis-à-vis the controller designated above or vis-à-vis the provider.
- Austrian Post

We use the following provider as our transport service provider: Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria

Consent may be withdrawn at any time with effect for the future vis-à-vis the controller designated above or vis-à-vis the provider.
- Schenker

We use the following provider as our transport service provider: Schenker Deutschland AG, Lyoner Straße 15, 60528 Frankfurt am Main, Germany

Consent may be withdrawn at any time with effect for the future vis-à-vis the controller designated above or vis-à-vis the provider.
- TNT

We use the following provider as our transport service provider: TNT Express GmbH, Haberstraße 2, 53842 Troisdorf, Germany

Consent may be withdrawn at any time with effect for the future vis-à-vis the controller designated above or vis-à-vis the provider.

8.3 Use of payment service providers (payment services)

- Apple Pay

If you choose the payment method „Apple Pay“ provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing takes place via the „Apple Pay“ function of your end device running iOS, watchOS or macOS by charging a payment card stored in „Apple Pay“. Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. Authorisation of a payment therefore requires you to enter a code previously specified by you and verification using the „Face ID“ or „Touch ID“ function of your end device.

For the purpose of processing the payment, the information you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay for processing the payment. Encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm that the payment was successful.

If personal data is processed in the transfers described, such processing shall be carried out exclusively for the purpose of processing payments pursuant to Art. 6 para. 1 lit. b GDPR.

Apple retains anonymised transaction data, including the approximate purchase amount, the approximate date and time, and an indication of whether the transaction was completed successfully. Anonymisation completely rules out any association with an individual. Apple uses the anonymised data to improve „Apple Pay“ and other Apple products and services.

If you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made through Safari on your Mac, the Mac and the authorisation device communicate via an encrypted channel on Apple’s servers. Apple does not process or store any of this information in a format that can identify you. You can disable the option to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac".

Further information on data protection when using Apple Pay can be found at the following website: https://support.apple.com/de-de/HT203027
- EPS bank transfer

One or more online payment methods provided by the following provider are available on this website: PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria

If you select a payment method offered by the provider under which you make an advance payment (such as credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) and information about the contents of your order will be transmitted to the provider pursuant to Art. 6 para. 1 lit. b GDPR. In this case, your data will be transmitted exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
- Google Pay

If you choose the payment method "Google Pay" of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment processing takes place via the "Google Pay" application on your mobile device running at least Android 4.4 ("KitKat") and equipped with NFC functionality, by charging a payment card stored in Google Pay or a payment system verified there (e.g. PayPal). To authorize a payment via Google Pay in excess of €25, your mobile device must first be unlocked using the verification method configured on it (such as facial recognition, a password, fingerprint or pattern).

For the purpose of processing payments, the information you provided during the ordering process, together with information about your order, will be transmitted to Google. Google then transmits your payment information stored in Google Pay to the originating website in the form of a one-time transaction number, which is used to verify that payment has been made. This transaction number does not contain any information about the actual payment details of your payment methods stored in Google Pay; instead, it is generated and transmitted as a numerical token valid only once. For all transactions via Google Pay, Google acts solely as an intermediary for processing the payment. The transaction is carried out exclusively between you and the originating website by charging the payment method stored in Google Pay.

If personal data is processed in the transfers described, such processing shall be carried out exclusively for the purpose of processing payments pursuant to Art. 6 para. 1 lit. b GDPR.

Google reserves the right to collect, store and analyze certain transaction-specific information for each transaction made via Google Pay. This includes the date, time and amount of the transaction, the merchant's location and description, a description of the purchased goods or services provided by the merchant, photos you have attached to the transaction, the name and email address of the seller and buyer or the sender and recipient, the payment method used, your description of the reason for the transaction and, where applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively pursuant to Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest in proper accounting, verification of transaction data, and optimization and maintenance of the functionality of the Google Pay service.

Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when using other Google services.

You can find the Google Pay terms of use here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

Further information on data protection regarding Google Pay can be found at the following Internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- iDeal

One or more online payment methods from the following provider are available on this website: Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands

One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

When selecting a payment method where the provider makes an advance payment (such as purchase on account or in instalments or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postcode, city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method).

In order to safeguard our legitimate interest in establishing the creditworthiness of our customers, we transmit this data to the provider pursuant to Art. 6 para. 1 lit. f GDPR for the purpose of a credit assessment. Based on the personal data you provide and other data (such as shopping cart contents, invoice amount, order history and payment experience), the provider checks whether the payment method you have selected can be granted with regard to the risks of payment default and/or non-payment of claims.

In addition to provider-internal criteria pursuant to Art. 6 para. 1 lit. f GDPR, identity and creditworthiness information from the following credit agencies may also be taken into account when deciding on the application:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit assessment may contain probability values (so-called score values). Where score values are included in the result of the credit assessment, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data.

You may object to this processing of your data at any time by sending us a message or contacting the provider. However, the provider may continue to be entitled to process your personal data if this is necessary for payment processing in accordance with the contract.
- Paypal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

When selecting a payment method provided by the provider for which you make advance payment, your payment data provided during the ordering process (including name, address, bank and payment card details, currency and transaction number) as well as information about the contents of your order will be forwarded to the provider pursuant to Art. 6 para. 1 lit. b GDPR. In this case, your data will be forwarded exclusively for the purpose of payment processing with the provider and only insofar as this is necessary for that purpose.

When selecting a payment method for which we make advance payment, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method).

In such cases, in order to safeguard our legitimate interest in determining your ability to pay, we will forward this data to the provider pursuant to Art. 6 para. 1 lit. f GDPR for the purpose of a credit assessment. On the basis of the personal data you provide and other data (such as shopping cart, invoice amount, order history and payment experience), the provider checks whether the payment method you have selected can be granted with regard to the risks of payment default and/or default on receivables.

This website uses PayPal Checkout, an online payment system provided by PayPal that consists of PayPal’s own payment methods and local payment methods provided by third parties.

When paying via PayPal, by credit card via PayPal, by direct debit via PayPal or - if offered - using “Pay Later” via PayPal, we will forward your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) as part of payment processing. The data is forwarded pursuant to Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal or - if offered - “Pay later” via PayPal, PayPal reserves the right to obtain a credit report. For this purpose, your payment data may be disclosed to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the creditworthiness check regarding the statistical probability of payment default to decide whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may remain entitled to process your personal data if this is necessary to process the payment in accordance with the contract.

If the PayPal payment method “Pay later by invoice” is available and selected, your payment data is initially transmitted to PayPal to prepare the payment, after which PayPal forwards it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin (“Ratepay”) to process the payment. The legal basis in each case is Art. 6 para. 1 lit. b GDPR. In this case, Ratepay carries out an identity and creditworthiness check in its own name to determine your ability to pay in accordance with the principle already mentioned above and, based on its legitimate interest in determining your ability to pay pursuant to Art. 6 para. 1 lit. f GDPR, discloses your payment data to credit agencies. A list of the credit agencies Ratepay may consult can be found here: https://www.ratepay.com/legal-payment-creditagencies/

When using a local third-party provider's payment method, your payment data is initially disclosed to PayPal to prepare the payment in accordance with Art. 6 para. 1 lit. b GDPR. Depending on your selection of an available local payment method, PayPal then transmits your payment data to the corresponding provider to process the payment in accordance with Art. 6 para. 1 lit. b GDPR:

Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2 1200 Vienna, Austria)
MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further information regarding data protection, please refer to PayPal's privacy policy: https://www.paypal.com/de/legalhub/paypal/privacy-full
- Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

One or more online payment methods from the following provider are available to you on this website: Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden

8.4 Electronic withdrawal function for distance contracts

Consumers who conclude contracts on this website for which a statutory right of withdrawal exists have the option of declaring their withdrawal via an electronic withdrawal function in accordance with the applicable withdrawal provisions.

To provide the electronic withdrawal function, we use a solution from the following provider: 401layers UG, Dorothea-Erxleben-Str. 1 a, D-40721 Hilden.

When using the withdrawal function, in addition to information identifying the contract to be withdrawn from, further personal information such as the consumer's first and last name and email address must be provided or confirmed.

This information is initially collected by the provider on the basis of our legitimate interest in a user-friendly, stable and process-optimized solution pursuant to Art. 6 para. 1 lit. f GDPR, then used to confirm receipt of the withdrawal statement by email on our behalf, and finally transmitted to us. We subsequently process the transmitted information for the proper handling of the withdrawal pursuant to Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. c GDPR on the basis of our legal obligation to maintain an electronic withdrawal function for consumer distance contracts for which payment is required.

The information collected by the provider is routinely deleted after final processing of a withdrawal, unless statutory retention obligations apply.

We have concluded a data processing agreement with the provider that protects data processed as part of the withdrawal function and prohibits unauthorized disclosure to third parties.

9) Web analytics services

9.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables analysis of your use of our website.

By default, Google Analytics 4 places cookies when you visit the website. These are small text files stored on your device that collect certain information. This information also includes your IP address, although Google truncates the final digits to prevent direct association with an individual.

The information is transferred to Google servers and further processed there. This may also involve transfers to Google LLC, based in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website use and Internet use. The IP address transmitted by your browser and truncated as part of Google Analytics is not combined with other data held by Google. The data collected as part of the use of Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, in particular the placement of cookies on the device used, takes place only if you have given us your express consent for this pursuant to Art. 6 para. 1 lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your visit to the site. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

Further legal information about Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de, and at https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google Analytics 4 uses the special “demographic characteristics” function and can use it to generate statistics containing information about the age, gender, and interests of visitors to the website. This is done by analyzing advertising and information from third parties. This makes it possible to identify target groups for marketing activities. However, the data collected cannot be attributed to any specific person and is deleted after being stored for a period of two months.

Google Signals
As an extension of Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google Account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6 para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including models relating to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the “Personalized advertising” function in your Google Account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de. Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

User IDs
As an extension of Google Analytics 4, the “User IDs” function may be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6 para. 1 lit. a GDPR, have created an account on this website, and log in to this account on different devices, your activities, including conversions, may be analyzed across devices.

9.2 Google Tag Manager

This website uses “Google Tag Manager”, a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).

Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analytics services, and for calibrating, controlling and making them subject to conditions via a uniform user interface. Google Tag Manager itself does not store or read any information on users’ devices. The service also does not perform any independent data analyses. However, when a page is accessed, Google Tag Manager transmits your IP address to Google and may store it there. Transmission to servers of Google LLC. in the USA is also possible.

This processing is carried out only if you have given us your express consent pursuant to Art. 6 para. 1 lit. a GDPR. Without this consent, Google Tag Manager will not be used during your visit to the website. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our page visitors' data and prohibits unauthorized disclosure to third parties.

Further legal information about Google Tag Manager can be found at https://policies.google.com/privacy?hl=de&gl=de.

9.3 Shopify Analytics

This website uses the web analytics service of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used, such as the IP address and browser information, in order to evaluate it for statistical analyses of user behavior on our website and to create pseudonymized usage profiles. This enables, among other things, the analysis of movement patterns (so-called heat maps), which show the duration of page visits and interactions with page content (e.g. text entries, scrolling, clicks and mouse-overs). Pseudonymization generally prevents direct attribution to an individual. The data is not combined with personally identifiable data about you collected in any other way.

All processing described above, in particular the reading or storage of information on the device used, is carried out only if you have given us your express consent to do so pursuant to Art. 6 para. 1 lit. a GDPR. You may revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.

Where data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

10) Retargeting/ Remarketing and conversion tracking

10.1 Meta Pixel

Within our online offering, we use the "Meta Pixel" service of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta").

If you click on an advertisement placed by us on Facebook and/or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel". Following the redirection, this URL parameter is then entered into the user's browser by a cookie set by our linked page itself.

This enables Meta, on the one hand, to determine visitors to our online offering as a target group for displaying advertisements (so-called "Ads"). Accordingly, we use the service to display the Facebook and/or Instagram Ads placed by us only to users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g. interests in certain topics or products, determined on the basis of the websites visited) that we transmit to Meta (so-called “Custom Audiences”).

On the other hand, the “Meta Pixel” can be used to track whether users were redirected to our website after clicking on an advertisement and what actions they take there (so-called “conversion tracking”).

The data collected is anonymous to us and therefore does not allow us to draw any conclusions about the identity of users. However, the data is stored and processed by Meta, meaning that it may be linked to the respective user profile and Meta may use the data for its own advertising purposes.

All processing described above, in particular the setting of cookies to read information on the device used, is carried out only if you have given us your express consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our page visitors' data and prohibits unauthorized disclosure to third parties.

The information generated by Meta is generally transmitted to and stored on a Meta server; in this context, it may also be transferred to servers of Meta Platforms Inc. in the USA.

10.2 Google Ads Remarketing

This website uses retargeting technology provided by the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

For this purpose, Google places a cookie in your browser that automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. Further data processing only takes place if you have consented to Google linking your Internet and app browsing history to your Google Account and using information from your Google Account to personalize the ads you view on the web. If you are logged in to Google while visiting our website in this case, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google to Google Analytics data in order to create audiences. As part of the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC in the USA.

All processing described above, in particular the setting of cookies to read information from the device used, is carried out only if you have given us your express consent pursuant to Art. 6 para. 1 lit. a GDPR. Without this consent, retargeting technology will not be used during your visit to the website.

You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website.

You can find details about the processing initiated by Google and Google's handling of data from websites here: https://policies.google.com/technologies/partner-sites

You can find more information about Google's data protection provisions here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

10.3 Microsoft Advertising

This website uses retargeting technology provided by the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

This enables visitors to our websites who have already shown an interest in our shop and products to be specifically addressed with personalized, interest-based advertising. The advertising materials are displayed on the basis of a cookie-based analysis of previous and current usage behavior.

In cases involving retargeting technology, a cookie is stored on your computer or mobile device in order to collect pseudonymized data about your interests and thus tailor advertising individually to the information stored. These cookies are small text files stored on your computer or mobile device. This enables you to be shown advertising that is highly likely to correspond to your product and information interests.

You may revoke the consent you have given at any time with effect for the future. To exercise your right of revocation, please deactivate this service in the “Cookie Consent Tool” provided on the website.

10.4 Google Ads Conversion Tracking

This website uses the online advertising program “Google Ads” and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google AdWords). We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. Our aim is to display advertising that is of interest to you, make our website more attractive to you, and achieve fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad served by Google. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages of this website while the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of Google Ads customers. The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page equipped with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.

Details of the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plugin available at the following link: https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de

Please note that certain functions of this website may not be available or may be available only to a limited extent if you have disabled the use of cookies. Google's privacy policy can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

10.5 Microsoft Advertising Universal Event Tracking

This website uses conversion tracking technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

For the use of Universal Event Tracking, a tag is embedded on every page of our website that interacts with the conversion cookie set by Microsoft. This interaction makes your user behavior on our website traceable and sends the information collected in this way to Microsoft. The purpose is to statistically record and evaluate certain predefined objectives, such as purchases or leads, in order to make the targeting and content of our offers more relevant to your interests. The tags are never used to personally identify users.

You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website.

11) Website functionalities

11.1 Youtube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC., USA

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers to load the plugin. In this process, certain information, including your IP address, is transmitted to the provider.

When playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent abusive behavior.

If you are logged into a user account with the provider during your visit to our website, your data will be directly assigned to your account when you click on a video. If you do not wish your data to be assigned to your account, you must log out before pressing the play button.

All of the aforementioned processing, in particular the placement of cookies to read information on the device being used, takes place only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw the consent you have given at any time with effect for the future by deactivating this service via the “Cookie Consent Tool” provided on the website.

11.2 Judge.me

Our website incorporates graphic elements from the following provider for displaying external customer reviews and/or an externally issued quality seal: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom.

When you access a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers in order to load the elements properly. In this process, certain browser information, including your IP address, is transmitted to the provider.

If personal data is also processed in this context, this is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in optimally marketing our offering and designing our website in an appealing manner.

We have concluded a data processing agreement with the provider that ensures the protection of our page visitors' data and prohibits unauthorized disclosure to third parties.

In the event of a data transfer to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

11.3 Trusted Shops Trustbadge

Our website incorporates graphic elements from the following provider for displaying external customer reviews and/or an externally issued quality seal: Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany.

In the event of an online order from us, further processing may take place.

Thus, subject to your express consent pursuant to Art. 6(1)(a) GDPR, after completion of an order, your order information (order total, order number, and, where applicable, purchased product) and your email address are transmitted to the provider in encrypted form via the Trustbadge in order to verify an existing registration for the provider's services (in particular, the "Buyer Protection") and, where applicable, to enable new registration.

If an existing registration is identified or if you register with the provider for its services (in particular buyer protection), your order information (order total, order number, purchased product) and your email address will be transmitted to the provider and further processed by it on the basis of the contractual agreement with the provider pursuant to Art. 6 para. 1 lit. b GDPR in order to provide the services (in particular buyer protection).

11.4 - hCaptcha

On this website, we use the CAPTCHA service of the following provider: Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA.

The service checks whether an input is submitted by a natural person or fraudulently through machine-based and automated processing, and blocks spam, DDoS attacks, and similar automated malicious access attempts. To ensure that an action is performed by a human and not by an automated bot, the provider collects the IP address of the device used, identifying data concerning the browser and operating system type used, as well as the date and duration of the visit, and transmits this data to the provider’s servers for analysis.

The legal basis is our legitimate interest in determining individual personal responsibility on the internet and preventing misuse and spam pursuant to Art. 6 para. 1 lit. f GDPR.

We have concluded a data processing agreement with the provider that ensures the protection of our site visitors’ data and prohibits its unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on the European Commission’s Standard Contractual Clauses, which are intended to ensure compliance with the European level of data protection.

11.5 Google Customer Reviews (formerly Google Certified Stores Program)

We cooperate with Google as part of the “Google Customer Reviews” program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program enables us to obtain customer reviews from users of our website. After making a purchase on our website, you will be asked whether you wish to participate in an email survey conducted by Google.

If you grant your consent in accordance with Art. 6 para. 1 lit. a GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchasing experience on our website. The rating you submit will then be combined with our other ratings and displayed in our Google Customer Reviews logo and our Merchant Center dashboard. In addition, your rating will be used for Google Seller Ratings. As part of the use of Google Customer Reviews, personal data may also be transmitted to the servers of Google LLC. in the USA.

You can withdraw your consent at any time by sending a message to the controller responsible for data processing or to Google.

Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/

12) Tools and Other

12.1 Cookie Consent Tool

This website uses a so-called “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications that require consent. The “cookie consent tool” is displayed to you when you visit the site in the form of an interactive user interface, on which you can grant consent for specific cookies and/or cookie-based applications by checking a box. When the tool is used, all cookies/services requiring consent are loaded only if you grant the corresponding consent by checking a box. This ensures that such cookies are set on your respective device only if consent has been granted.

The tool sets technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed in this process.

If, in individual cases, personal data (such as the IP address) is nevertheless processed for the purpose of storing, assigning or logging cookie settings, this is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and, consequently, in ensuring that our online presence is legally compliant.

Another legal basis for processing is Art. 6 para. 1 lit. c GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the user's consent.

Where required, we have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further information about the operator and the configuration options of the cookie consent tool can be found directly in the corresponding user interface on our website.

12.2 Judge.me

We use the services of the following provider to verify and publish customer reviews: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

If you submit a review on our website, your first and last name, email address, order date and number, as well as the name and international references (GTIN/ISDNF), are collected, transmitted to the provider and evaluated there in order to decide on the legitimacy of a customer review for a specific order. This processing is carried out pursuant to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in ensuring the authenticity of customer reviews by establishing their connection to a transaction and preventing review abuse. After the review has been checked and approved, the provider deletes the data.

In the event of a data transfer to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

13) Data subject rights

13.1 The applicable data protection law grants you the following data subject rights (rights of access and intervention) against us as the controller with regard to the processing of your personal data, whereby reference is made to the legal basis cited for the respective conditions for exercising these rights:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to be informed pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent given pursuant to Art. 7 para. 3 GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA IN ORDER TO CONDUCT DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) Period for which personal data are stored

The period for which personal data are stored is determined on the basis of the respective legal basis, the purpose of processing and - where applicable - additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data are processed on the basis of explicit consent pursuant to Article 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.

Where statutory retention periods exist for data processed in the context of legal transactions or obligations similar to legal transactions on the basis of Article 6(1)(b) GDPR, such data will be routinely deleted after the retention periods have expired, provided that they are no longer required for the performance or initiation of the contract and/or we no longer have a legitimate interest in retaining them.

Where personal data are processed on the basis of Article 6(1)(f) GDPR, such data will be stored until you exercise your right to object under Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data are processed for the purpose of direct marketing on the basis of Article 6(1)(f) GDPR, such data will be stored until you exercise your right to object under Article 21(2) GDPR.

Unless otherwise provided by the other information in this statement concerning specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.