Privacy Policy
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is the operator of this website named in the imprint. For any privacy-related question you can reach us at [email protected].
2. Processing for orders
To process your order we handle your master data (first and last name, delivery and billing address), contact data (email address, optionally phone number) and contract data (ordered items, prices, order number). The legal basis is Art. 6 (1) (b) GDPR (performance of a contract). No account registration is required - orders are placed as a guest.
3. Payment processing
We use the payment service provider Paytree to process payments. The data required for the payment (including name, email address, invoice amount and order reference) is transmitted to the payment provider. Full payment credentials such as card numbers are entered exclusively with the payment provider and are neither collected nor stored by us. The legal basis is Art. 6 (1) (b) GDPR.
4. Shipping
In order to deliver your order we pass your name and delivery address to the commissioned shipping company. The legal basis is Art. 6 (1) (b) GDPR.
5. Cookies and local storage
We only use strictly necessary cookies or comparable storage technologies, in particular to manage the cart, the wishlist and your session. These are essential for the operation of the shop; storage is based on § 25 (2) no. 2 TTDSG and the subsequent processing on Art. 6 (1) (f) GDPR (legitimate interest in fault-free operation). No consent banner is required for this. We do not use tracking or marketing cookies.
6. Server log files
The hosting provider automatically collects information transmitted by your browser (browser type and version, operating system, referrer URL, host name, time of the request, IP address). This data serves to ensure fault-free operation and to prevent abuse. The legal basis is Art. 6 (1) (f) GDPR. The data is deleted after a short period.
7. Live chat
We use the live chat service Smartsupp (Smartsupp.com, s.r.o., Czech Republic) to offer you direct support. When you open the website the chat script is loaded, which processes your IP address, device and browser information and - if you actively use the chat - your chat messages. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in efficient customer support). You are not obliged to use the chat or to provide personal data in it.
8. Newsletter
If you subscribe to our newsletter, we process your email address to send offers and news. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR. You may withdraw this consent at any time with effect for the future, for example via the unsubscribe link in every email or by contacting us.
9. Product reviews
If you submit a review, we process the name you provide, the rating and the review text for the purpose of publication. The legal basis is Art. 6 (1) (a) GDPR. Reviews are moderated before publication.
10. Processors and recipients
We use carefully selected service providers (hosting, payment processing, email delivery, shipping, live chat). Where they process personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.
For internal order handling we additionally send order data (order number, name, contact details, delivery address, ordered items and amount) as a notification to an internal staff chat on the messenger service Telegram (Telegram FZ-LLC, United Arab Emirates). The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in processing incoming orders promptly). This constitutes a transfer to a third country; see the following section.
11. Transfers to third countries
Personal data is transferred to countries outside the EU/EEA only where the requirements of Art. 44 et seq. GDPR are met - in particular on the basis of an adequacy decision of the European Commission or standard contractual clauses.
12. Retention period
We store personal data only for as long as necessary for the purposes stated. Statutory retention periods under commercial and tax law (§ 257 HGB, § 147 AO) of six and ten years respectively apply to contract and invoice data.
13. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21 GDPR). You may withdraw any consent given at any time with effect for the future. A message to [email protected] is sufficient to exercise these rights.
14. Right to lodge a complaint
Without prejudice to any other remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement.
15. No automated decision-making
Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place.