Privacy policy

As the data controller within the meaning of applicable data protection laws and regulations we hereby provide you with information about the processing of your personal data.

Personal data, in simple terms, is all information that relates to you personally as the data subject. For definitions of the term "personal data" and other important terms used in the applicable data protection laws and regulations, please refer to Article 4 GDPR (General Data Protection Regulation).

A controller is, in simple terms, a natural or legal person or entity which, alone or jointly with others, determines the purposes and means of the processing of personal data. The name and contact details of the controller (and as far as a data protection officer has been appointed, the contact details of the data protection officer) can be found in our provider identification / company and legal information.

We process your personal data as part of our activities for the following purposes in accordance with the legal bases specified.

· where the processing is necessary to take steps at your request prior to entering into a contract, your personal data will be processed on the basis of your consent in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (b) GDPR.
· where the processing is necessary for the purposes of our legitimate interests in responding to requests and taking any other action that may be needed based on your request, your personal data will be processed on the basis of your consent in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (f) GDPR.
· where the processing is necessary for the performance of a contract to which you are party, your personal data will be processed on the basis of your consent in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (b) GDPR.
· where the processing is necessary for advertising purposes, your personal data will be processed on the basis of your consent in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (f) GDPR.
· where the processing is necessary for the purposes of our legitimate interests in preserving the proper functioning of our website, the provision of user-friendly functions and in the analysis of the use of our website, your personal data will be processed in accordance with Article 6 (1) (f) GDPR.
· where the processing is necessary for the purposes of our legitimate interests in the enforcement of our rights and the defence of claims made against us, your personal data will be processed in accordance with Article 6 (1) (f) GDPR.

Taking into account the state of the art, we implement appropriate technical and organisational measures to secure our systems and protect your personal data against unauthorised access, alteration or disclosure, loss or destruction.
For information on the processing of your personal data for each processing purpose, please refer to the relevant section of this privacy policy.

Where this is necessary to achieve the purpose of processing your personal data, we will transfer your personal data to third parties to the extent permitted or required by law. For more detailed information on the transmission of your personal data to third parties for the specific processing purposes, please refer to the relevant section of this privacy policy. Where your personal data is transmitted to third parties, the amount of data transmitted is limited to the necessary minimum.

In the following, we provide detailed information about the processing of your personal data for the various processing purposes.
Your personal data will be erased if it is no longer necessary in relation to the purposes for which the data was collected, unless we are entitled to process the data for a different purpose to the extent permitted or required by law and in accordance with the information provided in this privacy policy.

If you visit our websites without providing us with information, we will only process your personal data that your browser transmits to our server. These are the following types of data, which are technically necessary for us to display our website to you and to ensure its stability:

· the visited page
· date and time of access
· amount of data transferred
· source or link used to access the page
· information about your browser
· information about your operating system
· your IP address

The legal basis for the processing of your personal data which is necessary for the purposes of our legitimate interests in preserving the proper functioning of our website is Article 6 (1) (f) GDPR.
Your personal data will be erased after 6 months, unless the data is needed for the establishment, exercise or defence of legal claims due to measures preventing the proper functioning of our website. In this case, the data will be erased promptly once the relevant proceedings have been completed.

If you contact us with a query or request we will process the personal data and information/documents you provide in this context. Irrespective of the way in which you submit your query or request to us, this information may include:

· date and time of contact
· name data
· contact details
· data relating to the query/request
· transmitted information/documents

The processing of your personal data and the information/ documents provided will be based - depending on the content of your query or request - on your consent given in accordance with Article 6 (1) (a) GDPR to obtain a response to your query or request or on Article 6 (1) (b) GDPR, where the processing is necessary to take steps prior to entering into a contract or for the performance of a contract to which you are party or on Article 6 (1) (f) GDPR, where the processing is necessary for the purpose of our legitimate interests in responding to queries/requests and in carrying out other measures in connection with processing these queries/requests.

Where we provide a contact form and you use this contact form to contact us, by sending your message you consent to the following content, which you will be informed about separately in the contact form: "I hereby give my consent to the processing of my email address and other personal data provided for the purpose of responding to my message. I can withdraw this consent at any time and without stating any reasons with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal."
You can withdraw your consent at any time and without stating reasons with effect for the future. All you need to do is to send a message to the data controller, whose contact details can be found under controller's contact details. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Where this is necessary to process your query/request, we will transfer your personal data to third parties to the extent permitted or required by law. Where your personal data is transmitted to third parties, the amount of data transmitted is limited to the necessary minimum.
Your personal data will be erased if your query/request has been processed, unless we are entitled to process the data for a different purpose to the extent permitted or required by law and in accordance with the information provided in this privacy policy.

If you provide us with personal data for the purpose of concluding a contract or in connection with the creation of a customer account, we will process the data you have provided for the performance of the contract. This includes your customer data (e.g. your name and address) and the contract data (e.g. information on the contractual products as well as payment and delivery information).
The legal basis for processing of your personal data for the purpose of performance of a contract to which you are party is Article 6 (1) (b) GDPR.
Where this is necessary for the performance of a contract, we will transfer your personal data to third parties to the extent permitted or required by law. We transfer data to providers involved in the performance of the contract. These are the providers of the processing tools we use as well as transport and payment service providers.
If you use the payment service provider PayPal to process your payment transactions, we expressly point out that PayPal's privacy policy applies to all PayPal transactions: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
Where your personal data is transmitted to third parties, the amount of data transmitted is limited to the necessary minimum.
Your personal data will be erased at the end of the statutory retention periods stipulated by the commercial and tax laws of 6 or 10 years, unless we are entitled to process the data for a different purpose to the extent permitted or required by law and in accordance with the information provided in this privacy policy.

When you subscribe to our newsletter, we process the email address and other personal data you may provide to send you information about our products and promotional offers by email. If you wish to receive our newsletter, the only mandatory information we require is your email address. If you voluntarily submit additional personal data, we process this data, e.g. to address you in the newsletter more personally.
If you register for our newsletter, you provide consent as per the following:"I agree to be informed by email about interesting offers and therefore consent to the processing of my email address and any other personal data I may provide for the purpose of sending the newsletter. I can withdraw this consent at any time and without stating any reasons with effect for the future.The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal."
The subscription to our newsletter takes place in a so-called double opt-in procedure. This means that after you subscribe, you will receive an email with a message about the subscription to the newsletter and a request to confirm your subscription. Your confirmation of subscription is required to demonstrate that you have given the necessary consent to receive the newsletter and to identify any misuse of third-party email addresses to subscribe to the newsletter. In connection with the subscription to the newsletter and the confirmation, we record the IP address and the date and time to demonstrate consent in accordance with the legal and regulatory requirements.
The legal basis for the processing of your personal data is your consent given in accordance with Article 6 (1) (a) GDPR.
You can withdraw your consent at any time and without stating reasons with effect for the future. All you need to do is to send a message to the data controller, whose contact details can be found under controller's contact details. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
If you withdraw your consent or unsubscribe from our newsletter, your email address and any other personal data provided will be erased without undue delay, unless we are entitled to process the data for a different purpose to the extent permitted or required by law and in accordance with the information provided in this privacy policy.

We process your personal data comprising your name, surname and address, where applicable, to send you information about our offers by post.
The legal basis for the processing of your personal data which is necessary for the purposes of our legitimate interests in carrying out promotional activities in accordance with Article 6 (1) (f) GDPR.
You have the right to object at any time to the processing of your personal data for the purpose of sending promotional materials by post. All you need to do is to send a message to the data controller, whose contact details can be found under controller's contact details.
If you object to the processing of your personal data for the purpose of sending promotional materials by post, we will erase the personal data you have provided to us comprising your name, surname and address without undue delay, unless we are entitled to process the data for a different purpose to the extent permitted or required by law and in accordance with the information provided in this privacy policy.

We use cookies on our website. Cookies are small text files that are stored on your device which we use to transmit specific information to us. We use cookies on our website to make our website more user-friendly and to enable the use of certain functions.
Some of the cookies we use are deleted at the end of the browser session, i.e. as soon as you close your browser (so-called session cookies). Other cookies remain on your device even after the end of the browsing session, i.e. after you close your browser, and allow us or our affiliates (third-party cookies) to recognise you when you return to our website (so-called persistent cookies).
Some of the cookies we use are technically necessary to enable you to use certain functions and features, e.g. to store information about the items you put into your shopping cart. The legal basis for the processing of your personal data is Article 6 (1) (b) GDPR where the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request as a data subject prior to entering into a contract or Article 6 (1) (f) GDPR where the processing is necessary for the purposes of the pursuit of our legitimate interests in providing functions that are as user-friendly as possible. Where we or our partner companies use cookies to measure reach or for marketing purposes, for more detailed information, please refer to the relevant section of this privacy policy.
You can prevent cookies from being stored by changing the relevant browser settings. If you need help to change your settings, please refer to the help feature of your browser software. Please note that if you do this, you may not be able to use all the functions and features of our website in full. For details, please refer to the following information provided by the most popular browsers:
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera: http://help.opera.com/Windows/10.20/de/cookies.html
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Safari: https://support.apple.com/kb/ph21411?locale=de_DE

Where required, we process your personal data for the purpose of our legitimate interests in enforcing our rights and defending against claims.
In this case, the legal basis for processing of your personal data is Article 6 (1) (f) GDPR.
Where this is necessary to pursue our legitimate interests, we may transfer your personal data to third parties to the extent permitted or required by law. This may include debt collection services or our legal representatives.
Where your personal data is transmitted to third parties, the amount of data transmitted is limited to the necessary minimum.
Your personal data will be erased at the end of the proceedings but not before the end of the statutory retention periods stipulated by the commercial and tax laws of 6 or 10 years, unless we are entitled to process the data for a different purpose to the extent permitted or required by law and in accordance with the information provided in this privacy policy.

Your personal data will be erased if it is no longer necessary in relation to the purposes for which the data was collected, unless we are entitled to process the data for a different purpose to the extent permitted or required by law and in accordance with the information provided in this privacy policy. For information about the envisaged period for which your personal data will be stored or the criteria used to determine that period, please refer to the information on processing of your personal data for the various purposes as laid down in this privacy policy.

In order to ensure fair and transparent processing of personal data, you as the data subject have the following rights under applicable data protection laws and regulations:

· right of access under Article 15 GDPR,
· right to rectification under Article 16 GDPR,
· right to erasure under Article 17 GDPR,
· right to restriction of processing under Article 18 GDPR,
· right to data portability under Article 20 GDPR,
· right to withdraw consent at any time under Article 7 (3) GDPR,
· right to object to processing under Article 21 GDPR; for further details, please refer to the separate section below
· and the right to lodge a complaint with the supervisory authority pursuant to Article 77 GDPR; for further details, please refer to the separate section below.

In accordance with Article 6 (1) (f) GDPR, the processing of personal data is lawful if the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
You as the data subject have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 (1) (f) GDPR, including profiling based on those provisions.
If you make use of this right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as a data subject or for the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes, you as the data subject have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you as the data subject object to processing for direct marketing purposes, your personal data shall no longer be processed for such purposes.

Without prejudice to any other administrative or judicial remedy, you as the data subject have the right to lodge a complaint with a supervisory authority, in particular, in the member state of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the provisions of GDPR.

If you wish to conclude a contract with us or to contact us with a query or request, we need your personal data to conclude the contract or to process your query or request. While you are not under any obligation to provide us with your personal data, we will not be able to enter into a contract with you or process your query or request without it.