1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data means any data by which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Sneated (Kocoglu, Burak & Poyraz, Salih) GbR, Eisenstraße 28a, 45327 Essen, Germany, Tel.: ., Email: info@sneated.com. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
2) Data Collection When Visiting Our Website
2.1 If you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we collect only the data that your browser transmits to the website server (“server log files”). When you access our website, we collect the following data, which is technically necessary in order to display the website to you:
- The page of our website visited
- Date and time of access
- Amount of data transmitted in bytes
- Source/referrer from which you reached the page
- Browser used
- Operating system used
- IP address used (where applicable, in anonymised form)
Processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or otherwise used. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content, such as orders or enquiries addressed to the controller, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the padlock symbol in your browser’s address bar.
3) Hosting & Content Delivery Network
Shopify
For the hosting of our website and the display of its content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).
Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.
All data collected on our website is processed on the provider’s servers. We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
4) Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after you close your browser (“session cookies”), while others remain on your device for a longer period and allow page settings to be saved (“persistent cookies”). In the latter case, you can find the storage period in the cookie settings overview of your web browser.
Where personal data is also processed by individual cookies used by us, processing is carried out in accordance with Article 6(1)(b) GDPR for the performance of a contract, in accordance with Article 6(1)(a) GDPR where consent has been given, or in accordance with Article 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly and effective design of the website visit.
You can configure your browser so that you are informed when cookies are set and can decide individually whether to accept them, or so that you exclude the acceptance of cookies in certain cases or generally.
Please note that if cookies are not accepted, the functionality of our website may be restricted.
5) Contacting Us
5.1 Shopify Inbox
This website uses the live chat system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
Personal data transmitted via the chat is processed either in accordance with Article 6(1)(b) GDPR because it is necessary for initiating or performing a contract, or in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in providing effective support to visitors to our website.
Subject to any conflicting statutory retention periods, the data you transmit in this way will be deleted once the matter concerned has been conclusively resolved.
In addition, further information may be collected and evaluated using cookies for the purpose of creating pseudonymised user profiles. However, this information is not used to identify you personally and is not combined with other data records. Where this information is personal data, processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation purposes.
The setting of cookies can be prevented by configuring your browser accordingly. However, the functionality of our website may be restricted in this case.
You may object to the collection and storage of data for the purpose of creating a pseudonymised user profile at any time with effect for the future by contacting us.
Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.
We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
5.2 WhatsApp Business
You have the option of contacting us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the “Business” version of WhatsApp.
If you contact us via WhatsApp in connection with a specific transaction, such as an order you have placed, we store and use the mobile telephone number you use on WhatsApp and, where provided, your first and last name in accordance with Article 6(1)(b) GDPR in order to process and respond to your enquiry. On the basis of the same legal ground, we may ask you via WhatsApp to provide further data, such as an order number, customer number, address or email address, in order to assign your enquiry to a specific transaction.
If you use our WhatsApp contact option for general enquiries, for example regarding our range of services, availability or website, we store and use the mobile telephone number you use on WhatsApp and, where provided, your first and last name in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in providing the requested information efficiently and promptly.
Your data will only ever be used to respond to your enquiry via WhatsApp. It will not be disclosed to third parties.
Please note that WhatsApp Business has access to the address book of the mobile device used by us for this purpose and automatically transfers telephone numbers stored in the address book to a server of its parent company, Meta Platforms Inc., in the United States. For the operation of our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact details of users who have contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, when first using the app on their device and accepting the WhatsApp terms of use, to the transmission of their WhatsApp telephone number from the address books of their chat contacts in accordance with Article 6(1)(a) GDPR. The transfer of data relating to users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For information on the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your rights and settings options for protecting your privacy, please refer to WhatsApp’s privacy policy:
https://www.whatsapp.com/legal/?eea=1#privacy-policy
We have concluded a data processing agreement with the provider which protects the data of our website visitors and prohibits disclosure to third parties.
In the context of the processing described above, data may be transferred to servers of Meta Platforms Inc. in the United States.
For data transfers to the United States, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
5.3 When you contact us, for example by contact form or email, personal data is processed solely for the purpose of handling and responding to your enquiry and only to the extent necessary for this purpose.
The legal basis for processing this data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) GDPR. If your contact is aimed at entering into a contract, Article 6(1)(b) GDPR constitutes an additional legal basis for processing. Your data will be deleted when the circumstances indicate that the matter concerned has been conclusively resolved, provided that no statutory retention obligations prevent deletion.
6) Data Processing When Opening a Customer Account
In accordance with Article 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. The data required to open an account can be found in the input fields of the relevant form on our website.
You may delete your customer account at any time by sending a message to the controller at the address stated above. After your customer account has been deleted, your data will be deleted once all contracts concluded through the account have been fully processed, provided that no statutory retention periods prevent deletion and that we have no continuing legitimate interest in further storage.
7) Use of Customer Data for Direct Advertising
7.1 Subscription to Our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing any other data is voluntary and is used to address you personally. We use the double opt-in procedure for newsletter distribution. This ensures that you receive newsletters only after you have expressly confirmed your consent to receiving the newsletter by clicking a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) GDPR. We also store the IP address entered by your internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data collected when you register for the newsletter is used strictly for the stated purpose.
You may unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending an appropriate message to the controller named at the beginning of this policy. After unsubscribing, your email address will be deleted immediately from our newsletter mailing list unless you have expressly consented to further use of your data or we reserve the right to use data beyond this scope where permitted by law and where we inform you of this in this policy.
7.2 Email Notifications Regarding Product Availability
For temporarily unavailable products, you may register to receive email notifications about product availability. In this case, we will send you a one-time email informing you that the product you selected is available again. The only mandatory information required for sending this notification is your email address. Providing any other data is voluntary and may be used to address you personally. We use the double opt-in procedure for sending these emails. This ensures that you receive a notification only after you have expressly confirmed your consent by clicking a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) GDPR. We also store the IP address entered by your internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data collected when you register for our email product availability notification service is used strictly for the stated purpose.
You may unsubscribe from availability notifications at any time by sending an appropriate message to the controller named at the beginning of this policy. After unsubscribing, your email address will be deleted immediately from the mailing list established for this purpose unless you have expressly consented to further use of your data or we reserve the right to use data beyond this scope where permitted by law and where we inform you of this in this policy.
7.3 Shopping Cart Reminder Emails
If you abandon your purchase before completing your order, you may choose to receive a one-time email reminding you of the contents of your virtual shopping cart.
The only mandatory information required for sending this reminder is your email address. Providing any other data is voluntary and may be used to address you personally. We use the double opt-in procedure for sending these emails. This ensures that you receive a notification only after you have expressly confirmed your consent by clicking a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) GDPR for the purpose of sending a shopping cart reminder. We also store the IP address entered by your internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data collected when you register for our email notification service is used strictly for the stated purpose.
You may unsubscribe from shopping cart reminders at any time by sending an appropriate message to the controller named at the beginning of this policy. After unsubscribing, your email address will be deleted immediately from the mailing list established for this purpose unless you have expressly consented to further use of your data or we reserve the right to use data beyond this scope where permitted by law and where we inform you of this in this policy.
8) Data Processing for Order Fulfilment
8.1 To the extent necessary for the performance of the contract for delivery and payment purposes, the personal data collected by us will be disclosed to the commissioned transport company and the commissioned financial institution in accordance with Article 6(1)(b) GDPR.
If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details provided by you when placing the order in order to inform you personally within the scope of our statutory information obligations in accordance with Article 6(1)(c) GDPR. Your contact details will be used strictly for notifications concerning updates owed by us and will be processed by us for this purpose only to the extent necessary for the relevant information.
For the processing of your order, we also work with the service provider(s) listed below, who support us wholly or partly in the performance of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
8.2 Disclosure of Personal Data to Shipping Service Providers
- Deutsche Post
We use the following provider as a transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany.
We disclose your email address and/or telephone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or providing a delivery notification in accordance with Article 6(1)(a) GDPR, provided that you have given your express consent to this during the ordering process. Otherwise, for delivery purposes, we disclose only the recipient’s name and delivery address to the provider in accordance with Article 6(1)(b) GDPR. Disclosure takes place only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.
Consent may be withdrawn at any time with effect for the future by contacting either the controller named above or the provider.
- DHL
We use the following provider as a transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.
We disclose your email address and/or telephone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or providing a delivery notification in accordance with Article 6(1)(a) GDPR, provided that you have given your express consent to this during the ordering process. Otherwise, for delivery purposes, we disclose only the recipient’s name and delivery address to the provider in accordance with Article 6(1)(b) GDPR. Disclosure takes place only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.
Consent may be withdrawn at any time with effect for the future by contacting either the controller named above or the provider.
- Hermes
We use the following provider as a transport service provider: Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg, Germany.
We disclose your email address and/or telephone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or providing a delivery notification in accordance with Article 6(1)(a) GDPR, provided that you have given your express consent to this during the ordering process. Otherwise, for delivery purposes, we disclose only the recipient’s name and delivery address to the provider in accordance with Article 6(1)(b) GDPR. Disclosure takes place only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.
Consent may be withdrawn at any time with effect for the future by contacting either the controller named above or the provider.
8.3 Use of Payment Service Providers
- Apple Pay
If you choose the “Apple Pay” payment method provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed using the Apple Pay function on your device running iOS, watchOS or macOS by charging a payment card stored in Apple Pay. Apple Pay uses security features integrated into the hardware and software of your device to protect your transactions. In order to authorise a payment, you must therefore enter a code previously defined by you and verify the payment using the Face ID or Touch ID function of your device.
For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before transmitting it to the payment service provider of the payment card stored in Apple Pay for the purpose of processing the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. Once the payment has been completed, Apple sends your device account number and a transaction-specific dynamic security code to the originating website in order to confirm the success of the payment.
Where personal data is processed as part of the transmissions described above, processing is carried out exclusively for the purpose of payment processing in accordance with Article 6(1)(b) GDPR.
Apple retains anonymised transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was completed successfully. The anonymisation completely excludes any personal reference. Apple uses the anonymised data to improve Apple Pay and other Apple products and services.
If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made via Safari on a Mac, the Mac and the authorising device communicate through an encrypted channel on Apple’s servers. Apple does not process or store any of this information in a format that can identify you. You can disable the option to use Apple Pay on your Mac in your iPhone settings. Go to “Wallet & Apple Pay” and disable “Allow Payments on Mac”.
Further information on data protection in connection with Apple Pay can be found at:
https://support.apple.com/de-de/HT203027
- Bancontact
One or more online payment methods provided by the following provider are available on this website: Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium.
If you select a payment method offered by the provider for which you make advance payment, such as payment by credit card, the payment data you provide during the ordering process, including your name, address, bank and payment card details, currency and transaction number, as well as information about the contents of your order, will be transmitted to the provider in accordance with Article 6(1)(b) GDPR. In this case, your data will be disclosed exclusively for the purpose of processing payment with the provider and only to the extent necessary for this purpose.
- EPS Transfer
One or more online payment methods provided by the following provider are available on this website: PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria.
If you select a payment method offered by the provider for which you make advance payment, such as payment by credit card, the payment data you provide during the ordering process, including your name, address, bank and payment card details, currency and transaction number, as well as information about the contents of your order, will be transmitted to the provider in accordance with Article 6(1)(b) GDPR. In this case, your data will be disclosed exclusively for the purpose of processing payment with the provider and only to the extent necessary for this purpose.
- Google Pay
If you choose the “Google Pay” payment method provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), payment is processed via the Google Pay application on your NFC-enabled mobile device running at least Android 4.4 (“KitKat”) by charging a payment card stored in Google Pay or another verified payment system, such as PayPal. To authorise a Google Pay payment of more than EUR 25, your mobile device must first be unlocked using the configured verification method, such as facial recognition, password, fingerprint or pattern.
For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, is transmitted to Google. Google then transmits the payment information stored in Google Pay to the originating website in the form of a unique transaction number, which is used to verify the payment. This transaction number contains no information about the actual payment data of the payment methods stored in Google Pay, but is created and transmitted as a uniquely valid numerical token. In all transactions via Google Pay, Google acts solely as an intermediary for processing the payment. The transaction itself is carried out exclusively between the user and the originating website by charging the payment method stored in Google Pay.
Where personal data is processed as part of the transmissions described above, processing is carried out exclusively for the purpose of payment processing in accordance with Article 6(1)(b) GDPR.
Google reserves the right to collect, store and evaluate certain transaction-specific information for each transaction carried out via Google Pay. This includes the date, time and amount of the transaction, the merchant’s location and description, a description of the goods or services purchased provided by the merchant, photographs you have attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction, and, where applicable, the offer associated with the transaction.
According to Google, this processing is carried out exclusively in accordance with Article 6(1)(f) GDPR on the basis of the legitimate interest in proper accounting, verification of transaction data, and optimisation and maintenance of the Google Pay service.
Google also reserves the right to combine the processed transaction data with further information collected and stored by Google when you use other Google services.
The Google Pay terms of use can be found at:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information on data protection in connection with Google Pay can be found at:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- Klarna
One or more online payment methods provided by the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.
If you select a payment method offered by the provider for which you make advance payment, such as payment by credit card, the payment data you provide during the ordering process, including your name, address, bank and payment card details, currency and transaction number, as well as information about the contents of your order, will be transmitted to the provider in accordance with Article 6(1)(b) GDPR. In this case, your data will be disclosed exclusively for the purpose of processing payment with the provider and only to the extent necessary for this purpose.
If you select a payment method for which the provider makes advance payment, such as purchase on account, instalment purchase or direct debit, you will also be asked during the ordering process to provide certain personal data, including your first and last name, street, house number, postcode, city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method.
In order to safeguard our legitimate interest in assessing the solvency of our customers, we transmit this data to the provider for the purpose of a credit check in accordance with Article 6(1)(f) GDPR. On the basis of the personal data provided by you and further data, such as the shopping cart, invoice amount, order history and payment experience, the provider checks whether the payment option selected by you can be granted with regard to the risk of non-payment and/or default.
For the purpose of making a decision in the context of the application review, identity and credit information from the following credit agencies may also be taken into account alongside the provider’s internal criteria in accordance with Article 6(1)(f) GDPR:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (“score values”). Where score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data is included in the calculation of score values, among other factors.
You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain entitled to process your personal data where this is necessary for contractual payment processing.
- PayPal
One or more online payment methods provided by the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
If you select a payment method offered by the provider for which you make advance payment, the payment data you provide during the ordering process, including your name, address, bank and payment card details, currency and transaction number, as well as information about the contents of your order, will be transmitted to the provider in accordance with Article 6(1)(b) GDPR. In this case, your data will be disclosed exclusively for the purpose of processing payment with the provider and only to the extent necessary for this purpose.
If you select a payment method for which we make advance payment, you will also be asked during the ordering process to provide certain personal data, including your first and last name, street, house number, postcode, city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method.
In such cases, in order to safeguard our legitimate interest in assessing your solvency, we transmit this data to the provider for the purpose of a credit check in accordance with Article 6(1)(f) GDPR. On the basis of the personal data provided by you and further data, such as the shopping cart, invoice amount, order history and payment experience, the provider checks whether the payment option selected by you can be granted with regard to the risk of non-payment and/or default.
The credit report may contain probability values (“score values”). Where score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data is included in the calculation of score values, among other factors.
You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain entitled to process your personal data where this is necessary for contractual payment processing.
- Shopify Payments
One or more online payment methods provided by the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
If you select a payment method offered by the provider for which you make advance payment, such as payment by credit card, the payment data you provide during the ordering process, including your name, address, bank and payment card details, currency and transaction number, as well as information about the contents of your order, will be transmitted to the provider in accordance with Article 6(1)(b) GDPR. In this case, your data will be disclosed exclusively for the purpose of processing payment with the provider and only to the extent necessary for this purpose.
8.4 Electronic Withdrawal Function for Distance Contracts
Consumers who conclude contracts on this website for which a statutory right of withdrawal exists have the option of declaring their withdrawal using an electronic withdrawal function in accordance with the applicable withdrawal provisions.
For the provision of the electronic withdrawal function, we use a solution provided by: Anviara LLC, Am Wesenitzbogen 7, Lohmen, 01847, Germany.
When using the withdrawal function, in addition to information identifying the contract to be withdrawn, further personal information such as the consumer’s first and last name and email address must be provided or confirmed.
This information is initially collected by the provider on the basis of our legitimate interest in a user-friendly, stable and process-optimised solution in accordance with Article 6(1)(f) GDPR, then used to confirm receipt of the withdrawal declaration by email on our behalf, and finally transmitted to us. We subsequently process the transmitted information in order to properly handle the withdrawal in accordance with Article 6(1)(b) GDPR and Article 6(1)(c) GDPR on the basis of our statutory obligation to provide an electronic withdrawal function for paid consumer distance contracts.
The information collected by the provider is routinely deleted once a withdrawal has been conclusively processed, provided that no statutory retention obligations prevent deletion.
We have concluded a data processing agreement with the provider which protects the data processed within the withdrawal function and prohibits unauthorised disclosure to third parties.
9) Web Analytics Services
9.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.
Google (Universal) Analytics is used on this website exclusively without cookies, which means that the service does not set cookies on your device at any time.
Instead, the local storage of your browser is used to store an individual ID assigned by Google (Universal) Analytics, which enables an analysis of your use of the website. Certain user information is processed via this ID. This information also includes your IP address, although Google truncates the final digits in order to exclude direct personal identification.
The information is transmitted to Google servers and processed there. This may also involve transfers to Google LLC in the United States.
Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide further services relating to website and internet usage. The truncated IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. Data collected through the use of Google (Universal) Analytics is stored for a period of two months and then deleted.
All processing described above, including the storage of information on the device used in the form of the ID, takes place only if you have given us your express consent in accordance with Article 6(1)(a) GDPR.
Without your consent, Google (Universal) Analytics will not be used during your visit to our website. You may withdraw your consent at any time with effect for the future.
To exercise your right of withdrawal, you may download and install the browser plugin available at:
https://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plugin, or within browsers on mobile devices, you may withdraw your consent by clicking the following link to set an opt-out cookie that will prevent Google Analytics from collecting data on this website in the future. This opt-out cookie works only in this browser and only for this domain. If you delete your cookies in this browser, you must click the link again:
Disable Google Analytics
We have concluded a data processing agreement with Google which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
Further legal information on Google (Universal) Analytics can be found at:
https://business.safety.google/intl/de/privacy/
https://policies.google.com/privacy?hl=de&gl=de
https://policies.google.com/technologies/partner-sites
Demographic Features
Google (Universal) Analytics uses the special “demographic features” function and can use it to generate statistics containing information about the age, gender and interests of website visitors. This is done by analysing advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the data collected cannot be assigned to a specific person and is deleted after being stored for two months.
Google Signals
As an extension of Google (Universal) Analytics, Google Signals may be used on this website to generate cross-device reports. If you have activated personalised advertisements and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Article 6(1)(a) GDPR, analyse your usage behaviour across devices and create database models, including models for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the “Personalised advertising” function in your Google account settings. Follow the instructions on this page:
https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information on Google Signals can be found at:
https://support.google.com/analytics/answer/7532985?hl=de
User IDs
As an extension of Google (Universal) Analytics, the “User IDs” function may be used on this website. If you have consented to the use of Google (Universal) Analytics in accordance with Article 6(1)(a) GDPR, created an account on this website and log in to that account on different devices, your activities, including conversions, may be analysed across devices.
For data transfers to the United States, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
9.2 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.
By default, when you visit the website, Google Analytics 4 sets cookies, which are small text files stored on your device and which collect certain information. This information also includes your IP address, although Google truncates the final digits in order to exclude direct personal identification.
The information is transmitted to Google servers and processed there. This may also involve transfers to Google LLC in the United States.
Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide further services relating to website and internet usage. The truncated IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. Data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.
All processing described above, in particular the setting of cookies on the device used, takes place only if you have given us your express consent in accordance with Article 6(1)(a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to our website. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service using the cookie consent tool provided on the website.
We have concluded a data processing agreement with Google which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
Further legal information on Google Analytics 4 can be found at:
https://business.safety.google/intl/de/privacy/
https://policies.google.com/privacy?hl=de&gl=de
https://policies.google.com/technologies/partner-sites
Demographic Features
Google Analytics 4 uses the special “demographic features” function and can use it to generate statistics containing information about the age, gender and interests of website visitors. This is done by analysing advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the data collected cannot be assigned to a specific person and is deleted after being stored for two months.
Google Signals
As an extension of Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have activated personalised advertisements and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Article 6(1)(a) GDPR, analyse your usage behaviour across devices and create database models, including models for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the “Personalised advertising” function in your Google account settings. Follow the instructions on this page:
https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information on Google Signals can be found at:
https://support.google.com/analytics/answer/7532985?hl=de
User IDs
As an extension of Google Analytics 4, the “User IDs” function may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Article 6(1)(a) GDPR, created an account on this website and log in to that account on different devices, your activities, including conversions, may be analysed across devices.
For data transfers to the United States, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
9.3 Google Tag Manager
This website uses “Google Tag Manager”, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google Tag Manager provides a technical basis for combining various web applications, including tracking and analytics services, and for calibrating, controlling and making them subject to conditions through a uniform user interface. Google Tag Manager itself does not store information on user devices or read information from them. Nor does the service perform any independent data analysis. However, when a page is accessed, Google Tag Manager transmits your IP address to Google, where it may be stored. A transfer to servers of Google LLC in the United States is also possible.
This processing takes place only if you have given us your express consent in accordance with Article 6(1)(a) GDPR. Without such consent, Google Tag Manager will not be used during your visit to our website. You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please disable this service in the cookie consent tool provided on the website.
We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
For data transfers to the United States, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further legal information on Google Tag Manager can be found at:
https://business.safety.google/intl/de/privacy/
https://policies.google.com/privacy?hl=de&gl=de
9.4 Shopify Analytics
This website uses the web analytics service provided by: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.
Using cookies and/or comparable technologies, such as tracking pixels, web beacons and algorithms for reading device and browser information, the service collects and stores pseudonymised visitor data, including information about the device used, such as the IP address and browser information, in order to evaluate it for statistical analyses of usage behaviour on our website and to create pseudonymised user profiles. Among other things, this enables the evaluation of movement patterns (“heat maps”), which show the duration of page visits and interactions with page content, such as text entries, scrolling, clicks and mouse-overs. Pseudonymisation generally excludes direct personal identification. The data is not combined with directly identifying data about you collected in any other way.
All processing described above, in particular the reading or storage of information on the device used, takes place only if you have given us your express consent in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.
We have concluded a data processing agreement with the provider which protects the data of our website visitors and prohibits disclosure to third parties.
For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
10) Retargeting, Remarketing and Conversion Tracking
10.1 Meta Pixel
Within our online offering, we use the “Meta Pixel” service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”).
If a user clicks on an advertisement placed by us on Facebook and/or Instagram, the URL of the linked page is extended by a parameter using Meta Pixel. After redirection, this URL parameter is then stored in the user’s browser by a cookie set by our linked page itself.
This enables Meta, on the one hand, to identify visitors to our online offering as a target group for the display of advertisements (“ads”). We therefore use the service to display Facebook and/or Instagram advertisements placed by us only to users who have shown an interest in our online offering or who have certain characteristics, such as interests in particular topics or products determined on the basis of websites visited, which we transmit to Meta (“Custom Audiences”).
On the other hand, Meta Pixel can be used to track whether users were redirected to our website after clicking on an advertisement and what actions they performed there (“conversion tracking”).
The data collected is anonymous to us and therefore does not allow us to draw any conclusions regarding the identity of users. However, the data is stored and processed by Meta, meaning that a connection to the respective user profile is possible and Meta may use the data for its own advertising purposes.
All processing described above, in particular the setting of cookies for reading information from the device used, takes place only if you have given us your express consent in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.
We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
The information generated by Meta is generally transmitted to a Meta server and stored there. In this context, data may also be transferred to servers of Meta Platforms Inc. in the United States.
For data transfers to the United States, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
10.2 Google Ads Conversion Tracking
This website uses the online advertising programme “Google Ads” and, as part of Google Ads, the conversion tracking service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
We use Google Ads to draw attention to our offers on external websites using advertising materials (“Google AdWords”). By reference to the advertising campaign data, we can determine how successful individual advertising measures are. Our objective is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an advertisement placed by Google. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used to identify you personally. If the user visits certain pages of this website while the cookie is still valid, Google and we can recognise that the user clicked on the advertisement and was redirected to that page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie is used to compile conversion statistics for Google Ads customers who have opted for conversion tracking. Customers are informed of the total number of users who clicked on their advertisement and were redirected to a page containing a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
When Google Ads is used, personal data may also be transferred to the servers of Google LLC in the United States.
Details of the processing initiated by Google Ads conversion tracking and how Google handles data from websites can be found at:
https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of cookies for reading information from the device used, takes place only if you have given us your express consent in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.
You may also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plugin available at:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de
In order to address users whose data we have received in the context of business or similar relationships with advertising that is more closely aligned with their interests, we use a customer match function within Google Ads. For this purpose, we electronically transmit one or more files containing aggregated customer data, in particular email addresses and telephone numbers, to Google. Google does not receive access to plain-text data, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. Google can then use the encrypted information only to match it with existing Google accounts created by the data subjects. This enables personalised advertising to be displayed across all Google services linked to the relevant Google account.
Customer data is transmitted to Google only if you have given us your express consent in accordance with Article 6(1)(a) GDPR. You may withdraw this consent at any time with effect for the future. Further information on Google’s data protection measures in relation to the customer match function can be found at:
https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Google’s privacy policies are available at:
https://business.safety.google/intl/de/privacy/
https://www.google.de/policies/privacy/
For data transfers to the United States, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
10.3 TikTok Pixel
This website uses the conversion tracking technology provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
If you reach our website from an advertisement on the provider’s domain, cookies and/or comparable technologies, such as tracking pixels, web beacons, pings or HTTP requests, may be used to track the success of the advertisement.
For this purpose, certain device and browser information, including your IP address where applicable, is read using the tracking technology in order to record and evaluate user actions predefined by us, such as completed transactions, leads, website searches or product page views. This enables statistics to be generated regarding usage behaviour on our website after redirection from an advertisement, which we use to optimise our offering.
All processing described above, in particular the setting of cookies for reading information from the device used, takes place only if you have given us your express consent in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.
We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
11) Website Functions
11.1 Integration of the Instagram Feed via Mintt Studio
On our website, we use the services of Mintt Studio, Rua Parque da República 116, 4430-164 Vila Nova de Gaia, Portugal, to display preview images from our Instagram profile. Cookies are used for this purpose, i.e. small text files stored locally in the cache of your internet browser.
When visitors access our website, the widget establishes a connection to the servers of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Instagram”). As a result, Instagram receives certain browser information, including your IP address. In individual cases, data may also be transferred to servers of Meta Platforms Inc. in the United States.
All processing described above, in particular the setting of cookies for reading information from the device used, takes place only if you have given us your express consent in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.
11.2 YouTube
This website uses plugins for displaying and playing videos provided by: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Data may also be transferred to: Google LLC, United States.
If you access a page of our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers, at the latest when the video is played, in order to load the content. Certain information, including your IP address, is transmitted to the provider in this process.
When playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behaviour, compile playback statistics and prevent misuse.
If you are logged into a user account with the provider while visiting our website, your data will be assigned directly to your account when you click on a video. If you do not want the data to be assigned to your account, you must log out before activating the playback button.
All processing described above, in particular the setting of cookies for reading information from the device used, takes place only if you have given us your express consent in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service using the cookie consent tool provided on the website.
For data transfers to the United States, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
11.3 Google Web Fonts
This website uses web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, in order to display fonts consistently.
When a page is accessed, your browser loads the required web fonts into its browser cache in order to display text and fonts correctly and establishes a direct connection to the provider’s servers. Certain browser information, including your IP address, is transmitted to the provider in this process.
Data may also be transferred to: Google LLC, United States.
The processing of personal data in connection with establishing contact with the font provider takes place only if you have given us your express consent in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service using the cookie consent tool provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
For data transfers to the United States, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further information on Google’s privacy policy can be found at:
https://business.safety.google/intl/de/privacy/
11.4 Google Photos
This website uses the “Google Photos” image service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) for integrating and displaying images.
Google Photos itself does not store information on user devices or read information from them. Nor does the service perform any independent data analysis.
However, in order to load image files from the Google network, your IP address is transmitted to Google when the page is accessed and may be stored there. A transfer to servers of Google LLC in the United States is also possible.
This processing takes place only if you have given us your express consent in accordance with Article 6(1)(a) GDPR. Without such consent, image files will not be loaded via Google Photos.
You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please disable this service in the cookie consent tool provided on the website. We have concluded a data processing agreement with Google under which Google is required to protect the data of our website visitors and not disclose it to third parties.
For data transfers to the United States, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
12) Tools and Miscellaneous
Cookie Consent Tool
This website uses a “cookie consent tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The cookie consent tool is displayed to users when the website is accessed in the form of an interactive user interface through which consent can be given for certain cookies and/or cookie-based applications by selecting the relevant options. Through use of the tool, all cookies/services requiring consent are loaded only if the respective user gives the corresponding consent. This ensures that such cookies are set on the user’s device only if consent has been given.
The tool sets technically necessary cookies in order to store your cookie preferences. As a rule, personal user data is not processed in this context.
If, in individual cases, personal data such as the IP address is processed for the purpose of storing, assigning or recording cookie settings, this processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly cookie consent management and therefore in a legally compliant design of our website.
A further legal basis for processing is Article 6(1)(c) GDPR. As controller, we are subject to the legal obligation to make the use of technically non-essential cookies dependent on the respective user’s consent.
Where necessary, we have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
Further information on the operator and the settings options of the cookie consent tool can be found directly in the relevant user interface on our website.
13) Rights of the Data Subject
13.1 The applicable data protection law grants you the following rights as a data subject in relation to the controller with regard to the processing of your personal data. The respective legal basis stated applies to the conditions for exercising each right:
- Right of access pursuant to Article 15 GDPR
- Right to rectification pursuant to Article 16 GDPR
- Right to erasure pursuant to Article 17 GDPR
- Right to restriction of processing pursuant to Article 18 GDPR
- Right to notification pursuant to Article 19 GDPR
- Right to data portability pursuant to Article 20 GDPR
- Right to withdraw consent granted pursuant to Article 7(3) GDPR
- Right to lodge a complaint pursuant to Article 77 GDPR
13.2 RIGHT TO OBJECT
IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
14) Duration of Storage of Personal Data
The duration for which personal data is stored is determined by the respective legal basis, the purpose of processing and, where applicable, additionally by the relevant statutory retention period, such as retention periods under commercial and tax law.
Where personal data is processed on the basis of express consent in accordance with Article 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.
Where statutory retention periods apply to data processed in connection with contractual or similar obligations on the basis of Article 6(1)(b) GDPR, this data will be routinely deleted after the expiry of the retention periods, provided that it is no longer required for the performance or initiation of a contract and/or we have no continuing legitimate interest in further storage.
Where personal data is processed on the basis of Article 6(1)(f) GDPR, the data will be stored until you exercise your right to object under Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes on the basis of Article 6(1)(f) GDPR, the data will be stored until you exercise your right to object under Article 21(2) GDPR.
Unless otherwise indicated in the other information contained in this policy regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
