Privacy policy

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data is any data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Sportstech Brands Holding GmbH, Karl-Liebknecht-Str. 7, 10178 Berlin, Germany, e-mail: [email protected]. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 The controller has appointed a data protection officer, who can be contacted as follows: “c/o TÜV SÜD Akademie GmbH, Westendstraße 160, 80339 Munich, Germany, e-mail: [email protected]”

2) Data collection when you visit our website

2.1 When you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Our website visited
Date and time of access
Amount of data sent in bytes
Source/referrer from which you reached the page
Browser used
Operating system used
IP address used (if applicable, in anonymised form)

The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the padlock symbol in your browser’s address bar.

3) Hosting and content delivery network

3.1 Shopify

For the hosting of our website and the display of page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider’s servers. We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

Where data is transferred to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

3.2 Cloudflare

We use a content delivery network of the following provider: Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when you close the browser (so-called “session cookies”), others remain on your device for longer and allow page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser.

Insofar as personal data is also processed by individual cookies used by us, the processing is carried out either in accordance with Art. 6(1)(b) GDPR for the performance of the contract, in accordance with Art. 6(1)(a) GDPR where consent has been given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the website visit.

You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them, or exclude the acceptance of cookies for certain cases or in general.

Please note that if cookies are not accepted, the functionality of our website may be limited.

5) Contacting us

5.1 Anthropic Claude

To provide autonomous customer support, we have integrated on this website an artificial intelligence software solution of the following provider: Anthropic Ireland Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland

Data may also be transferred to: Anthropic PBC, USA

Via an API-based integration, visitors can submit enquiries by text input about offers, website functionalities, orders placed and the exercise of contractual rights, which are then answered and processed by the provider’s language models.

For this purpose, the provider’s software may collect personal data of the enquirer in order to match it with the order history, to assign the input to a specific order, to examine the request automatically and then to resolve it by autonomously initiating processing procedures.

Personal data is collected and further processed exclusively for the purpose of handling the specific request. Processing of the website visitor’s input for the purpose of training and further developing the provider’s AI language models is expressly prevented.

The data processing is carried out on the basis of our legitimate interest in the effective support of our website visitors, the optimal marketing of our offer and the automation of customer support to relieve our operations in accordance with Art. 6(1)(f) GDPR.

Subject to statutory retention periods to the contrary, personal data collected is deleted when the provider’s software determines, by means of automated mathematical-statistical procedures, that the matter has been conclusively resolved.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

5.2 Our own review reminder

Exclusively on the basis of your express consent in accordance with Art. 6(1)(a) GDPR, we use your e-mail address to send you a one-time reminder to submit a review of our services after performance of the contract. You can withdraw your consent at any time by sending a message to the controller.

5.3 Klaviyo

For review reminders, we use the services of the following provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA

Exclusively on the basis of your express consent in accordance with Art. 6(1)(a) GDPR, we transmit your e-mail address and, where applicable, other customer data to the provider so that it can contact you by e-mail with a review reminder.

You can withdraw your consent at any time with effect for the future, either vis-à-vis us or vis-à-vis the provider.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

5.4 Reviews.io

For review reminders, we use the services of the following provider: REVIEWS.io 2020 GmbH, Skalitzer Str. 104, 10997 Berlin, Germany

You can withdraw your consent at any time with effect for the future, either vis-à-vis us or vis-à-vis the provider.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

5.5 Trustpilot

For review reminders, we use the services of the following provider: Trustpilot A/S, Pilestræde 58, 1112 Copenhagen, Denmark

You can withdraw your consent at any time with effect for the future, either vis-à-vis us or vis-à-vis the provider.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

5.6 Microsoft Bookings

To provide an online appointment booking function, we use the services of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

For the purpose of scheduling appointments, your first and last name and e-mail address (and, where applicable, your telephone number if a telephone appointment is requested) are collected in accordance with Art. 6(1)(b) GDPR and, in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in effective customer management and efficient appointment management, transmitted to the provider and stored there for the organisation of the appointment.

After the appointment has taken place or the agreed appointment period has expired, your data is deleted by the provider.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

5.7 Zendesk

To handle customer enquiries, we use the e-mail ticketing system of the following provider: Zendesk International Ltd., 55 Charlemont Place, Saint Kevin’s, Dublin D02 F985, Ireland

If you send us contact requests by e-mail via our website, these are stored and organised in the ticket system to enable chronological processing and to improve the service experience. Using the individually assigned ticket number, you can always see the current status of the processing of your request.

For the organisation and processing of enquiries, personal data is collected to the extent provided, but in any case your name, first name and e-mail address, transmitted to the provider, stored and read there.

The legal basis for the processing of this data is our legitimate interest in the efficient organisation of our customer service, in responding to your request as quickly as possible and in optimising our service offering in accordance with Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

5.8 WhatsApp Business

You can contact us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called “Business version” of WhatsApp.

If you contact us via WhatsApp in connection with a specific transaction (for example an order placed), we store and use the mobile phone number you use on WhatsApp and – if provided – your first and last name in accordance with Art. 6(1)(b) GDPR to process and respond to your request. On the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address or e-mail address) in order to assign your request to a specific transaction.

If you use our WhatsApp contact for general enquiries (for example about our range of services, availability or our website), we store and use the mobile phone number you use on WhatsApp and – if provided – your first and last name in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in providing the requested information efficiently and promptly.

Your data is only ever used to respond to your request via WhatsApp. It is not passed on to third parties.

Please note that WhatsApp Business obtains access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device in whose address book only the WhatsApp contact details of users who have also contacted us via WhatsApp are stored.

This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, in accordance with Art. 6(1)(a) GDPR, to the transfer of their WhatsApp telephone number from the address books of their chat contacts when first using the app on their device by accepting the WhatsApp terms of use. A transfer of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

For the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your rights in this regard and setting options to protect your privacy, please refer to WhatsApp’s privacy notice: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider which protects our website visitors’ data and prohibits disclosure to third parties.

In the context of the above-mentioned processing operations, data may be transferred to servers of Meta Platforms Inc. in the USA.

5.9 When you contact us (e.g. via contact form or e-mail), personal data is processed – exclusively for the purpose of processing and responding to your request and only to the extent necessary for this.

The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, Art. 6(1)(b) GDPR is an additional legal basis for the processing. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that no statutory retention obligations prevent this.

6) Data processing when opening a customer account

In accordance with Art. 6(1)(b) GDPR, personal data is further collected and processed to the extent necessary in each case when you provide it to us when opening a customer account. The data required to open an account can be found in the input mask of the corresponding form on our website.

You can delete your customer account at any time by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted provided that all contracts concluded via it have been fully processed, no statutory retention periods prevent this and we have no continuing legitimate interest in further storage.

7) Use of customer data for direct marketing

7.1 Subscription to our e-mail newsletter

If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. Providing further data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive newsletters once you have expressly confirmed your consent to receive the newsletter by clicking a verification link sent to the e-mail address provided.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6(1)(a) GDPR. In doing so, we store the IP address assigned by your internet service provider (ISP) and the date and time of subscription in order to be able to trace any possible misuse of your e-mail address at a later date. The data we collect when you subscribe to the newsletter is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter mailing list without delay, unless you have expressly consented to further use of your data or we reserve the right to use the data in a way that goes beyond this, which is permitted by law and about which we inform you in this notice.

7.2 Sending the e-mail newsletter to existing customers

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers by e-mail for goods or services from our range similar to those already purchased. For this, in accordance with Section 7(3) of the German Act against Unfair Competition (UWG) or – for customers in Belgium – in accordance with Art. XII.13 of the Belgian Code of Economic Law in conjunction with Art. 1 of the Royal Decree of 4 April 2003, we do not need to obtain separate consent from you. In this respect, the data processing is carried out solely on the basis of our legitimate interest in personalised direct marketing in accordance with Art. 6(1)(f) GDPR. If you initially objected to the use of your e-mail address for this purpose, we will not send you any e-mails.

You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller named at the beginning. You will only incur transmission costs according to the basic rates for this. Once your objection has been received, the use of your e-mail address for advertising purposes will cease without delay.

7.3 Klaviyo

Our e-mail newsletters and other promotional e-mail communications are sent via the following provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA

On the basis of our legitimate interest in effective and user-friendly e-mail marketing, we pass on the data you provided when subscribing to this provider in accordance with Art. 6(1)(f) GDPR so that it can send the e-mails on our behalf.

Subject to your express consent in accordance with Art. 6(1)(a) GDPR, the provider also carries out a statistical evaluation of the success of e-mail campaigns by means of web beacons or tracking pixels in the e-mails sent, which can measure opening rates and specific interactions with the content of the newsletter. Device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but not combined with other data sets.

You can withdraw your consent to e-mail tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider which protects our website visitors’ data and prohibits disclosure to third parties.

7.4 Shopping cart reminders by e-mail

If you abandon your purchase with us before completing the order, you have the option of receiving a one-time e-mail reminder of the contents of your virtual shopping cart.

The only mandatory information for sending this reminder is your e-mail address. Providing further data is voluntary and may be used to address you personally. For sending the e-mail, we use the so-called double opt-in procedure, which ensures that you only receive a notification once you have expressly confirmed your consent to this by clicking a verification link sent to the e-mail address provided.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6(1)(a) GDPR for sending a shopping cart reminder. In doing so, we store the IP address assigned by your internet service provider (ISP) and the date and time of subscription in order to be able to trace any possible misuse of your e-mail address at a later date. The data we collect when you subscribe to our e-mail notification service is used strictly for the intended purpose.

You can unsubscribe from shopping cart reminders at any time by sending a corresponding message to the controller named at the beginning. After unsubscribing, your e-mail address will be deleted without delay from the mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data in a way that goes beyond this, which is permitted by law and about which we inform you in this notice.

7.5 Advertising by post

On the basis of our legitimate interest in personalised direct marketing, we reserve the right to store your first and last name, your postal address and – insofar as we have received this additional information from you in the context of the contractual relationship – your title, academic degree, year of birth and your professional, industry or business designation in accordance with Art. 6(1)(f) GDPR and to use them to send you interesting offers and information about our products by post. You can object to the storage and use of your data for this purpose at any time by notifying us.

8) Data processing for order handling

8.1 Insofar as necessary for the performance of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6(1)(b) GDPR.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact details you provided when ordering in order to inform you personally within the scope of our statutory information obligations in accordance with Art. 6(1)(c) GDPR. Your contact details are used strictly for the purpose of communications about updates owed by us and are only processed by us for this purpose to the extent necessary for the respective information.

To process your order, we also work together with the following service provider(s), who support us in whole or in part in the performance of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

8.2 PlentyONE

For order processing, we use the following provider: PlentyONE GmbH, Johanna-Waescher-Straße 7, 34131 Kassel, Germany

Name, address and, where applicable, other personal data are passed on to the provider in accordance with Art. 6(1)(b) GDPR exclusively for the purpose of processing the online order. Your data is only passed on to the extent actually necessary for processing the order.

8.3 Odoo

For order processing, we use the following provider: Odoo S.A., Chaussée de Namur 40, 1367 Grand-Rosière, Belgium

Name, address and, where applicable, other personal data are passed on to the provider in accordance with Art. 6(1)(b) GDPR for the purpose of processing the online order. Your data is only passed on to the extent actually necessary for processing the order. The provider is also used for accounting. The provider thus processes incoming and outgoing invoices and, where applicable, our company’s bank transactions in order to record invoices automatically, match them to transactions and use this to prepare the financial accounts in a partially automated process.

Insofar as personal data is also processed in this context, the processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the efficient organisation and documentation of our business transactions.

8.4 Shopify Order Printer

For order processing, we use the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

8.5 Disclosure of personal data to shipping service providers

We use the following providers as transport service providers:

Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany
DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany
DHL Freight GmbH, Godesberger Allee 102-104, 53175 Bonn, Germany
DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany
General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein, Germany
Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg, Germany
Kühne + Nagel AG & Co. KG, Wilhelm-Kaisen-Brücke 1, 28195 Bremen, Germany
Post CH (Swiss Post Ltd, Wankdorfallee 4, 3030 Bern, Switzerland)
United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany

We pass on your e-mail address and/or telephone number to the provider in accordance with Art. 6(1)(a) GDPR before delivery of the goods for the purpose of arranging a delivery date or announcing the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6(1)(b) GDPR, we only pass on the name of the recipient and the delivery address to the provider. The data is only passed on to the extent necessary for the delivery of the goods. In this case, it is not possible to arrange the delivery date with the provider in advance or to announce the delivery.

Consent can be withdrawn at any time with effect for the future vis-à-vis the controller named above or vis-à-vis the provider.

Where data is transferred to the Post CH location in Switzerland, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

8.6 Anthropic Claude

To provide our services, we use artificial intelligence software of the following provider: Anthropic Ireland Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland

Information provided by you in the context of a contractual relationship may be fed into the provider’s software in order to organise, analyse, aggregate, modify, evaluate or prepare it for the provision of our services.

Information may also be transferred to: Anthropic PBC, USA

This information is collected and further processed strictly for the purpose of performing the contract. Processing for the purpose of training and further developing the provider’s AI language models is expressly prevented.

Insofar as the processing also involves personal data, it is carried out on the basis of our legitimate interest in the efficient design of our services and the optimal use of existing resources and technologies in accordance with Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider which ensures the protection of personal data processed via the provider and prohibits unauthorised disclosure to third parties.

8.7 Use of payment service providers

EPS bank transfer

One or more online payment methods of the following provider are available on this website: PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria

If you select a payment method of the provider for which you pay in advance (such as credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) and information about the content of your order will be passed on to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data is passed on exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this.

Klarna

One or more online payment methods of the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you select a payment method for which the provider pays in advance (such as purchase on account, instalment purchase or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postcode, town, date of birth, e-mail address, telephone number, where applicable data on an alternative means of payment).

In order to safeguard our legitimate interest in determining the creditworthiness of our customers, we forward this data to the provider in accordance with Art. 6(1)(f) GDPR for the purpose of a credit check. On the basis of the personal data you have provided and other data (such as shopping cart, invoice amount, order history, payment experience), the provider checks whether the payment option you have selected can be granted with regard to payment and/or default risks.

For the decision in the context of the application review, in addition to the provider’s internal criteria, identity and credit information from the following credit agencies may also be taken into account in accordance with Art. 6(1)(f) GDPR: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain entitled to process your personal data if this is necessary for processing the payment in accordance with the contract.

PayPal

One or more online payment methods of the following provider are available on this website: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method of the provider for which you pay in advance, your payment data provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) and information about the content of your order will be passed on to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data is passed on exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this.

If you select a payment method for which we pay in advance, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postcode, town, date of birth, e-mail address, telephone number, where applicable data on an alternative means of payment).

In order to safeguard our legitimate interest in determining your creditworthiness in such cases, we forward this data to the provider in accordance with Art. 6(1)(f) GDPR for the purpose of a credit check. On the basis of the personal data you have provided and other data (such as shopping cart, invoice amount, order history, payment experience), the provider checks whether the payment option you have selected can be granted with regard to payment and/or default risks.

PayPal Checkout

This website uses PayPal Checkout, an online payment system of PayPal consisting of PayPal’s own payment methods and local payment methods of third-party providers.

When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “Pay Later” via PayPal, we pass on your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) in the course of processing the payment. The data is passed on in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for processing the payment.

For the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “Pay Later” via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6(1)(f) GDPR on the basis of PayPal’s legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check with regard to the statistical probability of default for the purpose of deciding whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may remain entitled to process your personal data if this is necessary for processing the payment in accordance with the contract.

If the PayPal payment method “Purchase on account” is available and selected, your payment data will first be transmitted to PayPal to prepare the payment, whereupon PayPal will forward it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin, Germany (“Ratepay”) to execute the payment. The legal basis in each case is Art. 6(1)(b) GDPR. In this case, Ratepay carries out an identity and credit check in its own name to determine creditworthiness in accordance with the principle already described above and passes on your payment data to credit agencies on the basis of its legitimate interest in determining creditworthiness in accordance with Art. 6(1)(f) GDPR. A list of the credit agencies that Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/

When using the payment method of a local third-party provider, your payment data will first be passed on to PayPal to prepare the payment in accordance with Art. 6(1)(b) GDPR. Depending on your choice of an available local payment method, PayPal then transmits your payment data to the corresponding provider to execute the payment in accordance with Art. 6(1)(b) GDPR:

Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
iDEAL (Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands)
Bancontact (Bancontact Payconiq Company, Rue d’Arlon 82, 1040 Brussels, Belgium)
BLIK (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria)
MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further data protection information, please refer to PayPal’s privacy statement: https://www.paypal.com/be/legalhub/paypal/privacy-full

Shopify Payments

One or more online payment methods of the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Unzer

One or more online payment methods of the following provider are available on this website: Unzer Luxembourg S.A., 18 - 20 Rue Gabriel Lippmann, 5365 Munsbach, Luxembourg

SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany
CRIF GmbH, Diefenbachgasse 35, 1150 Vienna, Austria
CRIF AG, Hagenholzstrasse 81, 8050 Zurich, Switzerland
CRIF GmbH, Leopoldstraße 244, 80807 Munich, Germany
KSV1870 Information GmbH, Wagenseilgasse 7, 1100 Vienna, Austria
Creditreform Boniversum GmbH, Hellersbergstr. 11, 41460 Neuss, Germany
infoscore Consumer Data GmbH, Rheinstrasse 99, 76532 Baden-Baden, Germany
ProfileAddress Direktmarketing GmbH, Altmannsdorfer Strasse 311, 1230 Vienna, Austria
Emailage LTD, 1 Fore Street Ave, London, EC2Y 5EJ, United Kingdom
ThreatMetrix, The Base 3/F, Tower C, Evert van de Beekstraat 1, 1118 CL Schiphol, Netherlands
payolution GmbH, Columbuscenter, Columbusplatz 7-8, 1100 Vienna, Austria
Universum Business GmbH, Hanauer Landstr. 164, 60314 Frankfurt am Main, Germany

8.8 Electronic withdrawal function for distance contracts

Consumers who conclude contracts on this website for which there is a statutory right of withdrawal have the option of declaring their withdrawal via an electronic withdrawal function in accordance with the applicable withdrawal provisions.

When using the withdrawal function, in addition to information identifying the contract to be withdrawn from, further personal information such as the consumer’s first and last name and e-mail address must be provided or confirmed.

This information is collected and transmitted to us in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for the proper processing of the withdrawal. Also on the basis of Art. 6(1)(b) GDPR, the personal data provided is used to confirm receipt of the withdrawal by e-mail. A further legal basis for the processing is Art. 6(1)(c) GDPR. We are legally obliged to provide an electronic withdrawal function for consumer distance contracts subject to payment.

9) Online marketing

9.1 AWIN Performance Advertising Network (affiliate)

We participate in the affiliate programme of the following provider: AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany

In this context, we have placed links on our website that lead to offers on websites of the provider or third parties (“partner sites”).

To measure the success of an affiliate link, to evaluate orders generated via such a link and to settle the corresponding commission payments, the provider uses cookies and/or comparable technologies, which are generally set on the partner sites and for which we are not responsible under data protection law in this respect. The provider usually also processes the IP address and, where applicable, other device information.

All of the processing described above, in particular the reading or storing of information on the device you use, only takes place if you have given your express consent to this in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by using the cookie consent management options on the partner sites.

9.2 Sovendus Sales

For our voucher offers, we use the services of the following provider: Sovendus GmbH, Hermann-Veit-Str. 6, 76135 Karlsruhe, Germany

The provider operates a voucher network through which participating partner shops can post vouchers and distribute them to their customers. For this purpose, the data required to issue your voucher is forwarded by us to the provider in encrypted form. The data is only forwarded to the provider if you have completed your purchase and clicked on the voucher banner. This data is passed on exclusively to pre-fill the fields for issuing the voucher.

The described processing of data is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in advertising addressed to you by advertising third parties, whose discounts you can benefit from by redeeming the vouchers.

10) Web analytics services

10.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies, which are stored on your device as small text files and collect certain information. This information also includes your IP address, which, however, is shortened by Google by the last digits in order to exclude direct personal identification.

The information is transmitted to Google servers and further processed there. Transfers to Google LLC, based in the USA, are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services related to website and internet use. The shortened IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. The data collected in the course of using Google Analytics 4 is stored for two months and then deleted.

All of the processing described above, in particular the setting of cookies on the device used, only takes place if you have given us your express consent to this in accordance with Art. 6(1)(a) GDPR. Without your consent, Google Analytics 4 will not be used during your visit to the website. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service via the “cookie consent tool” provided on the website.

We have concluded a data processing agreement with Google which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/en/privacy/, https://policies.google.com/privacy?hl=en and https://policies.google.com/technologies/partner-sites

Demographics: Google Analytics 4 uses the special “demographics” function and can use it to compile statistics about the age, gender and interests of website visitors. This is done by analysing advertising and information from third-party providers. This makes it possible to identify target groups for marketing activities. However, the data collected cannot be attributed to a specific person and is deleted after being stored for two months.

Google Signals: As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have activated personalised ads and linked your devices to your Google account, Google can, subject to your consent to the use of Google Analytics in accordance with Art. 6(1)(a) GDPR, analyse your usage behaviour across devices and create database models, including on cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the “Personalised ads” function in the settings of your Google account. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=en Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=en

User IDs: As an extension to Google Analytics 4, the “User IDs” function may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6(1)(a) GDPR, have set up an account on this website and log in to this account on different devices, your activities, including conversions, can be analysed across devices.

Collection of user-provided data: In order to improve the analysis results for users whose contact details we have received in the context of business or business-like relationships, we use the “user-provided data collection” function. Subject to your express consent in accordance with Art. 6(1)(a) GDPR, we transmit one or more files with customer data aggregated about you (mainly e-mail address and telephone number) electronically to Google as part of this function. Google does not obtain access to plain-text data but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to match it to existing Google accounts set up by the data subjects. The processing serves to refine measurement data, improves cross-device user tracking and enables the integration of analysis results into Google Ads ad personalisation and conversion tracking functions. You can withdraw your consent at any time with effect for the future by notifying us. Further information on Google’s data protection measures regarding the transmission of customer data can be found here: https://support.google.com/google-ads/answer/6334160?hl=en

10.2 Google Tag Manager

This website uses “Google Tag Manager”, a service of the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).

Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analytics services, and for calibrating, controlling and linking them to conditions via a uniform user interface. Google Tag Manager itself does not store or read any information on users’ devices. Nor does the service carry out any independent data analysis. However, when a page is accessed, Google Tag Manager transmits your IP address to Google, where it may be stored. A transfer to servers of Google LLC in the USA is also possible.

This processing only takes place if you have given us your express consent to this in accordance with Art. 6(1)(a) GDPR. Without this consent, Google Tag Manager will not be used during your visit to the website. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the “cookie consent tool” provided on the website.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

Further legal information on Google Tag Manager can be found at https://business.safety.google/intl/en/privacy/ and https://policies.google.com/privacy?hl=en

10.3 Microsoft Clarity

This website uses the web analytics service of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymised visitor data, including information about the device used such as the IP address and browser information, in order to evaluate it for statistical analyses of usage behaviour on our website and to create pseudonymised usage profiles. Among other things, this enables the evaluation of movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g. text input, scrolling, clicks and mouse-overs). Pseudonymisation generally rules out direct personal identification. There is no merging with plain-text data about you collected in other ways.

All of the processing described above, in particular the reading or storing of information on the device used, only takes place if you have given us your express consent to this in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

10.4 Varify Software GmbH

This website uses the web analytics service of the following provider: Varify Software GmbH, Südliche Münchner Straße 55, 82031 Grünwald, Germany

The service enables a statistical evaluation of the use of new functions and content of the website by displaying test variants to certain user groups. In the interest of making our website more attractive, this makes it possible to see which variants users prefer. For this purpose, the service uses cookies, i.e. small text files that are stored on your device and enable an analysis of your use of a website. The information about your use of the website collected by cookies is usually transmitted to a server of the provider and stored and processed there.

All of the processing described above, in particular the setting of cookies for storing and reading information on the device you use to access the website, only takes place if you have given us your express consent to this in accordance with Art. 6(1)(a) GDPR. Without your consent, the service will not be used while you are using the website. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service via the “cookie consent tool” provided on the website.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

11) Retargeting/remarketing and conversion tracking

11.1 Meta Pixel with advanced matching

Within our online offering, we use the “Meta Pixel” service of the following provider in advanced matching mode: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”)

If a user clicks on an advertisement placed by us on Facebook or Instagram, “Meta Pixel” adds a parameter to the URL of our linked page. After redirection, this URL parameter is then entered in the user’s browser by a cookie set by our linked page itself. In addition, this cookie records specific customer data, such as the e-mail address, which we collect on our website linked to the Facebook or Instagram ad during processes such as purchases, account logins or registrations (advanced matching). The cookie is then read and enables the transmission of the data, including the specific customer data, to Meta.

We use “Meta Pixel” with advanced matching to make our advertisements (so-called “ads”) on Facebook and/or Instagram more effective and to ensure that they correspond to users’ interests or have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) which we transmit to Meta (so-called “custom audiences”).

We also analyse the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an advertisement (conversion). Compared to the standard version of “Meta Pixel”, the advanced matching function helps us to better measure the effectiveness of our advertising campaigns by recording more attributed conversions.

All transmitted data is stored and processed by Meta so that it can be assigned to the respective user profile and Meta can use the data for its own advertising purposes in accordance with Meta’s data policy (https://www.facebook.com/about/privacy/). The data may enable Meta and its partners to place advertisements on and off Facebook.

All of the processing described above, in particular the setting of cookies for reading information on the device used, only takes place if you have given us your express consent to this in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

The information generated by Meta is usually transmitted to a Meta server and stored there; in this context, data may also be transferred to servers of Meta Platforms Inc. in the USA.

11.2 idealo Performance Tracking

We use a tracking technology of Ingenious Technologies AG, Französische Straße 48, 10117 Berlin, Germany, to establish the connection between a user’s click on an advertising medium or the display of an advertising medium (touchpoint) and an action by you (e.g. a purchase in the online shop or a newsletter registration). At each touchpoint, your browser sends an HTTP request to the Ingenious server, transmitting certain information.

This information includes the URL of the website on which the advertising medium is placed (referrer URL), the browser identifier (user agent) of the device (including information about the device type and operating system), the IP address of the device (this IP address is anonymised by Ingenious before storage), HTTP headers (data packet automatically transmitted by your browser containing various technical information), the time of the request and, if previously stored on the device, the cookie with its entire content.

A cookie is a small data packet that is exchanged between your browser and the server. Information relevant to the web application, e.g. the contents of a virtual shopping cart, can be stored and transmitted in this data packet.

The tracking technology stores cookies on your device to document actions. The cookie stores information about the last touchpoints (i.e. when a particular advertising medium was displayed or clicked on a device). In addition, a cookie ID generated by Ingenious is stored in the cookie. Ingenious stores the data on the touchpoints and information on your actions under this cookie ID. The stored touchpoints can, where applicable, be combined into a sequence (user journey).

In the case of an action request, the order number and shopping cart value of your order are usually also transmitted and stored by Ingenious. In addition, the following values may be transmitted and stored: your customer number, new customer indicator, your age and gender, and the information you provided in a customer survey.

The information transmitted to Ingenious and the cookies serve exclusively the purpose of correctly attributing the success of an advertising medium and the corresponding billing.

Alternatively, the collection and processing of tracking data can also be deactivated by accessing the tracking opt-out page below: https://marketing.net.idealo-partner.com/ts/95886/tsv?settrackingoptout

When you access the tracking opt-out page, a special cookie is written which deactivates tracking in the current web browser of the device. However, tracking will be reactivated as soon as you delete the tracking opt-out cookie.

We inform you below which cookies are used by our tracking technology in detail:

The cookie named “tsv” is written when an advertising medium is displayed. This cookie contains a cookie ID and a list of data on the last view touchpoints, consisting of time, referrer URL and admedia code (unique identification of an advertising medium containing information about the sales channel, publisher, publisher’s website and advertising medium).

The cookie named “tsc” is written when an advertising medium is clicked. This cookie contains a cookie ID and a list of data on the last click touchpoints, consisting of time, referrer URL, ID of the page in the customer’s shop system and admedia code (unique identification of an advertising medium containing information about the sales channel, publisher, publisher’s website and advertising medium).

The cookie named “trackingoptout” is written when the opt-out link is clicked, so that tracking is deactivated for the current web browser of this device.

11.3 Criteo

This website uses retargeting technology of the following provider: Criteo SA, 32 Rue Blanche, 75009 Paris, France

This makes it possible to target visitors to our websites who have already shown an interest in our shop and our products with personalised, interest-based advertising. The advertising media are displayed on the basis of a cookie-based analysis of previous and current usage behaviour.

In the case of retargeting technology, a cookie is stored on your computer or mobile device in order to collect pseudonymised data about your interests and thus to tailor the advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. You will thus be shown advertising that is very likely to correspond to your product and information interests.

All of the processing described above, in particular the setting of cookies for reading information on the device used, only takes place if you have given us your express consent to this in accordance with Art. 6(1)(a) GDPR. Without this consent, retargeting technology will not be used during your visit to the website.

You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the “cookie consent tool” provided on the website.

11.4 Google Ads Remarketing

This website uses retargeting technology of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you have visited. The information obtained in this way generally also includes your IP address.

Any further data processing only takes place if you have agreed with Google that your web and app browsing history will be linked by Google to your Google account and that information from your Google account will be used to personalise ads that you view on the web. If, in this case, you are logged in to Google during your visit to our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data in order to form target groups. In the course of using Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC in the USA.

All of the processing described above, in particular the setting of cookies for reading information on the device used, only takes place if you have given us your express consent to this in accordance with Art. 6(1)(a) GDPR. Without this consent, retargeting technology will not be used during your visit to the website.

You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the “cookie consent tool” provided on the website.

Details of the processing initiated by Google and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/en/privacy/ and https://policies.google.com/privacy?hl=en

11.5 Microsoft Advertising

This website uses retargeting technology of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

All of the processing described above, in particular the setting of cookies for reading information on the device used, only takes place if you have given us your express consent to this in accordance with Art. 6(1)(a) GDPR. Without this consent, retargeting technology will not be used during your visit to the website.

You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the “cookie consent tool” provided on the website.

11.6 billiger.de Sales Tracking

This website uses the conversion tracking technology of the following provider: solute.de GmbH, Zeppelinstraße 15, 76185 Karlsruhe, Germany

If you have reached our website from an advertisement on the provider’s domain, the success of the advertisement can be tracked using cookies and/or comparable technologies (tracking pixels, web beacons, pings or HTTP requests).

For this purpose, certain device and browser information, including your IP address where applicable, is read via the tracking technology in order to record and evaluate user actions predefined by us (e.g. completed transactions, leads, searches on the website, views of product pages). This makes it possible to compile statistics on usage behaviour on our website after redirection from an advertisement, which help us to optimise our offering.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

11.7 Google Ads conversion tracking

This website uses the online advertising programme “Google Ads” and, in the context of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

We use Google Ads to draw attention to our offers on external websites by means of advertising media (so-called Google AdWords). In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie, which also includes your IP address, is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

In the course of using Google Ads, personal data may also be transferred to the servers of Google LLC in the USA.

Details of the processing initiated by Google Ads conversion tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link: https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=en

In order to address users whose data we have received in the context of business or business-like relationships with advertising that is even more tailored to their interests, we use a customer matching function within Google Ads. For this purpose, we transmit one or more files with aggregated customer data (mainly e-mail addresses and telephone numbers) electronically to Google. Google does not obtain access to plain-text data but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to match it to existing Google accounts set up by the data subjects. This enables personalised advertising to be delivered across all Google services linked to the respective Google account.

Customer data is only transmitted to Google if you have given us your express consent to this in accordance with Art. 6(1)(a) GDPR. You can withdraw this consent at any time with effect for the future by notifying us. Further information on Google’s data protection measures regarding the customer matching function can be found here: https://support.google.com/google-ads/answer/6334160?hl=en Google’s privacy policy can be viewed here: https://business.safety.google/intl/en/privacy/ and https://policies.google.com/privacy?hl=en For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

11.8 Google Ads conversion tracking without cookies

This website uses Google Ads conversion tracking exclusively without cookies, which means that the service never sets cookies on your device.

Instead, the local storage of your browser is used to store an individual ID assigned by Google, which enables an analysis of your use of the website. For this purpose, certain user information, including your IP address, is processed via the ID.

The ID is set when a user clicks on an ad placed by Google. If the user visits certain pages of this website, Google and we can recognise that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Google Ads customers. The information obtained in this way is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag.

However, they do not receive any information that can be used to personally identify users. In the course of using Google Ads, personal data may also be transferred to the servers of Google LLC in the USA. Details of the processing initiated by Google Ads conversion tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

Insofar as the information collected relates to a person, the processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the statistical evaluation of the success of our advertising campaigns. Google’s privacy policy can be viewed here: https://business.safety.google/intl/en/privacy/ and https://policies.google.com/privacy?hl=en

11.9 Microsoft Advertising Universal Event Tracking

This website uses conversion tracking technology of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

For the use of Universal Event Tracking, a tag is stored on every page of our website which interacts with the conversion cookie set by Microsoft. This interaction makes user behaviour on our website traceable and sends the information thus collected to Microsoft. The purpose of this is to enable certain predefined goals, such as purchases or leads, to be statistically recorded and evaluated in order to make the focus and content of our offers more interest-based. The tags are never used to identify users personally.

All of the processing described above, in particular the setting of cookies for reading information on the device used, only takes place if you have given us your express consent to this in accordance with Art. 6(1)(a) GDPR. Without this consent, retargeting technology will not be used during your visit to the website.

You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the “cookie consent tool” provided on the website.

In order to better identify users whose data we have received in the context of business or business-like relationships as part of the statistical evaluation, we use a customer matching function within Microsoft Advertising. For this purpose, we transmit one or more files with aggregated customer data (mainly e-mail addresses and telephone numbers) electronically to Microsoft. Microsoft does not obtain access to plain-text data but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Microsoft to match it to existing Microsoft accounts set up by the data subjects. This enables user interactions to be tracked across all services and devices linked to the respective Microsoft account.

Customer data is only transmitted to Microsoft if you have given us your express consent to this in accordance with Art. 6(1)(a) GDPR. You can withdraw this consent at any time with effect for the future by notifying us.

11.10 Microsoft Advertising Universal Event Tracking

This website uses conversion tracking technology of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

All of the processing described above, in particular the setting of cookies for reading information on the device used, only takes place if you have given us your express consent to this in accordance with Art. 6(1)(a) GDPR. Without this consent, retargeting technology will not be used during your visit to the website.

You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the “cookie consent tool” provided on the website.

11.11 Snap Pixel (Snapchat)

This website uses the conversion tracking technology of the following provider: Snap Inc., 63 Market Street, Venice, CA 90291, USA

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

11.12 TikTok Pixel

This website uses the conversion tracking technology of the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

12) Website functionalities

12.1 Google Maps

This website uses an online map service of the following provider: Google Maps (API) of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service for displaying interactive maps in order to present geographical information visually. Using this service shows you our location and makes it easier for you to find us.

As soon as you access the subpages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; this may also involve a transfer to the servers of Google LLC in the USA. This takes place regardless of whether Google provides a user account via which you are logged in or whether a user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be assigned to your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.

The collection, storage and evaluation are carried out in accordance with Art. 6(1)(f) GDPR on the basis of Google’s legitimate interest in displaying personalised advertising, market research and/or designing Google websites in line with requirements. You have a right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree with the future transfer of your data to Google in connection with the use of Google Maps, you can also completely deactivate the Google Maps web service by switching off JavaScript in your browser. Google Maps, and therefore the map display on this website, can then no longer be used.

Insofar as legally required, we have obtained your consent to the processing of your data described above in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please follow the option to object described above.

Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/en/privacy/

12.2 hCaptcha

On this website, we use the CAPTCHA service of the following provider: Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA

The service checks whether an input is made by a natural person or abusively by machine and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. To ensure that an action is performed by a human and not by an automated bot, the provider collects the IP address of the device used, identification data of the browser and operating system type used, and the date and duration of the visit, and transmits these to the provider’s servers for evaluation.

The legal basis is our legitimate interest in establishing individual personal responsibility on the internet and in preventing abuse and spam in accordance with Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

12.3 Google Customer Reviews (formerly Google Trusted Stores programme)

We work with Google in the context of the “Google Customer Reviews” programme. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This programme gives us the opportunity to obtain customer reviews from users of our website. After you have used our services, you will be asked on our website whether you would like to take part in an e-mail survey by Google.

If you give your consent in accordance with Art. 6(1)(a) GDPR, we will transmit your e-mail address to Google. You will receive an e-mail from Google Customer Reviews asking you to rate your purchase experience on our website. The rating you submit is then combined with our other ratings and displayed in our Google Customer Reviews badge and in our Merchant Center dashboard. Your rating is also used for Google seller ratings. In the course of using Google Customer Reviews, personal data may also be transferred to the servers of Google LLC in the USA.

You can withdraw your consent at any time by sending a message to the controller or to Google.

Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/en/privacy/

12.4 Microsoft Teams

To hold online meetings, video conferences and/or webinars, we use this provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

The provider processes various data, the scope of which depends on the data you provide before or during participation in an online meeting, video conference or webinar. Your data as a communication participant is processed and stored on the provider’s servers. This may include in particular your login data (name, e-mail address, telephone number (optional) and password) and session data (topic, participant IP address, device information, description (optional)).

In addition, image and sound contributions of the participants as well as voice input in chats may be processed. For the processing of personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary to carry out pre-contractual measures), Art. 6(1)(b) GDPR serves as the legal basis. Insofar as you have given us consent to the processing of your data, the processing is carried out on the basis of Art. 6(1)(a) GDPR. You can withdraw any consent given at any time with effect for the future. Otherwise, the legal basis for data processing when holding online meetings, video conferences or webinars is our legitimate interest in accordance with Art. 6(1)(f) GDPR in the effective conduct of the online meeting, webinar or video conference.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

12.5 Microsoft Forms

To conduct surveys or for online forms, we use the services of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

The provider enables us to design and evaluate surveys and online forms. In addition to the personal data you enter in the forms, information about your operating system, browser, date and time of your visit, referrer URL and your IP address is also collected, transmitted to the provider and stored on the provider’s servers.

The information you enter in the forms is stored with password protection to ensure that third-party access is excluded and that only we can evaluate the data for the purpose specified in the respective form.

For the processing of personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary to carry out pre-contractual measures), Art. 6(1)(b) GDPR serves as the legal basis. If you have given us consent to the processing of your data, the processing is carried out on the basis of Art. 6(1)(a) GDPR. Any consent given can be withdrawn at any time with effect for the future.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

12.6 Online applications via a form

On our website, we advertise current vacancies in a separate section, for which interested parties can apply via a corresponding form.

Applicants must provide all personal data required for a well-founded assessment, including general information such as name, address and contact details, as well as evidence of their qualifications and, where applicable, health-related information. Details of the application can be found in the job advertisement.

When the form is submitted, the applicant data is transmitted to us in encrypted form in accordance with the state of the art, stored by us and evaluated exclusively for the purpose of processing the application. The processing is carried out on the basis of Art. 6(1)(b) GDPR (or Section 26(1) of the German Federal Data Protection Act, BDSG), within the meaning of which going through the application procedure is considered to be the initiation of an employment contract.

Insofar as special categories of personal data within the meaning of Art. 9(1) GDPR (e.g. health data such as information on a recognised disability) are requested from applicants in the course of the application procedure, the processing is carried out in accordance with Art. 9(2)(b) GDPR so that we can exercise the rights and fulfil our obligations arising from employment law and social security and social protection law.

Cumulatively or alternatively, the processing of the special categories of data may also be based on Art. 9(2)(h) GDPR if it is carried out for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the applicant, for medical diagnosis, the provision of health or social care or treatment, or the management of health or social care systems and services.

If an applicant is not selected or withdraws their application prematurely, the data transmitted via the form and all electronic correspondence, including the application e-mail, will be deleted after a corresponding notification no later than 6 months. This period is based on our legitimate interest in answering any follow-up questions regarding the application and, where applicable, in being able to comply with our obligations to provide evidence under the regulations on the equal treatment of applicants.

In the case of a successful application, the data provided will be processed on the basis of Art. 6(1)(b) GDPR (for processing in Germany in conjunction with Section 26(1) BDSG) for the purpose of carrying out the employment relationship.

13) Tools and miscellaneous

13.1 DATEV

For bookkeeping, we use the cloud-based accounting software of the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany

The provider processes incoming and outgoing invoices and, where applicable, our company’s bank transactions in order to record invoices automatically, match them to transactions and use this to prepare the financial accounts in a partially automated process.

Insofar as personal data is also processed in this context, the processing is carried out on the basis of our legitimate interest in the efficient organisation and documentation of our business transactions in accordance with Art. 6(1)(f) GDPR.

13.2 Cookie consent tool

To obtain valid user consent for cookies and cookie-based applications that require consent, this website uses a so-called “cookie consent tool”. The “cookie consent tool” is displayed to users when they access the page in the form of an interactive user interface on which consent for certain cookies and/or cookie-based applications can be given by ticking boxes. Through the use of the tool, all cookies/services requiring consent are only loaded if the respective user gives the corresponding consent by ticking the boxes. This ensures that such cookies are only set on the respective user’s device if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed in this context.

If, in individual cases, personal data (such as the IP address) is nevertheless processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.

A further legal basis for the processing is Art. 6(1)(c) GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user’s consent.

Where necessary, we have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

Further information on the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

13.3 Channable

For the integration and synchronisation of databases and web applications, we use the services of the following provider: ProductImpulse BV, Kromme Nieuwegracht 66, 3512 HL Utrecht, Netherlands

In this context, our processing operations are automated and various workflows are established in order to efficiently manage and execute internal processes in our processing system. Insofar as personal data is also processed in this context, this is done in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in optimising our internal organisation.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

14) Rights of the data subject

14.1 Under the GDPR, you have the following rights vis-à-vis us:

Access to the data processed by us (Art. 15 GDPR)
Rectification of inaccurate or completion of incomplete data (Art. 16 GDPR)
Erasure of your data (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Notification of recipients regarding rectification, erasure or restriction (Art. 19 GDPR)
Data portability (Art. 20 GDPR)
Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
Complaint to a supervisory authority (Art. 77 GDPR)

14.2 In particular, you may lodge a complaint with the supervisory authority of your habitual residence, your place of work or the place of the alleged infringement. In Belgium, this is the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Rue de la Presse 35 / Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be. Our lead supervisory authority is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59-61, 10555 Berlin, Germany.

14.3 Right to object

If we process your personal data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21(1) GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

If we process your data for direct marketing purposes, you may object to this at any time without giving reasons (Art. 21(2) GDPR). We will then no longer process your data for this purpose.

15) Storage period

The storage period depends on the respective legal basis, the purpose of processing and, where applicable, statutory retention periods, such as retention periods under commercial and tax law (up to ten years pursuant to Section 147 of the German Fiscal Code (Abgabenordnung, AO) and Section 257 of the German Commercial Code (Handelsgesetzbuch, HGB)).

Where processing is based on consent, we store the data until you withdraw your consent. Where processing is for the performance of a contract, we store the data until the contract has been fully performed and beyond that insofar as statutory retention periods apply. Where processing is based on a legitimate interest, we store the data until you effectively object. In the case of direct marketing, we store the data until you object. Otherwise, we delete the data as soon as it is no longer required for the purpose.

Name
E-Mail
Bestellnummer
Alternative E-Mail
Grund (freiwillig)
Zurückzugebende Artikel

Privacy policy

1) Introduction and contact details of the controller

2) Data collection when you visit our website

3) Hosting and content delivery network

4) Cookies

5) Contacting us

6) Data processing when opening a customer account

7) Use of customer data for direct marketing

8) Data processing for order handling

9) Online marketing

10) Web analytics services

11) Retargeting/remarketing and conversion tracking

12) Website functionalities

13) Tools and miscellaneous

14) Rights of the data subject

15) Storage period

Producten

Service

Over ons