Privacy policy

General information
In order to make visiting our website attractive and to enable the use of certain functions, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies).

Privacy Protection on End Devices
When you use our online services, we employ technologies that are strictly necessary to provide the telemedia service you have expressly requested. The storage of information on your end device or access to information already stored on your end device does not require your consent in this regard. For functions that are not strictly necessary, the storage of information on your device or access to information already stored on your device requires your consent. Please note that if you do not grant your consent, parts of the website may not be fully usable. Any consent you have granted remains in effect until you adjust or reset the respective settings on your device.

Any downstream data processing by cookies and other technologies
We use technologies that are absolutely necessary for the use of certain functions of our website (e.g. shopping cart function). These technologies collect and process the IP address, time of visit, device and browser information as well as information about your use of our website (e.g. information about the contents of the shopping cart). In the context of a balancing of interests, this serves overriding legitimate interests in an optimized presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. In addition, we use technologies to fulfill the legal obligations to which we are subject (e.g. to be able to prove consent to the processing of your personal data) as well as for web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.

The cookie settings
You can find the cookie settings for your browser under the following links:
Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

Insofar as you have consented to the use of the technologies pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO, you may revoke your consent at any time by sending a message to the contact option described in the privacy policy.

We use the following cookies and other third-party technologies on our website. Unless otherwise stated for the individual technologies, this is done on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. After the end of the purpose and the end of the use of the respective technology by us, the data collected in this context will be deleted. You can withdraw your consent at any time with effect for the future. Further information on your revocation options can be found in the section "Cookies and other technologies". Further information, including the basis of our cooperation with the individual providers, can be found under the individual technologies. If you have any questions about the providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

7.1 Use of Adobe services
We use the following technologies from Adobe Systems, Software Ireland Limited, Ireland, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland ("Adobe"). The information automatically collected by Adobe technologies about your use of our website is usually transmitted to a server of Adobe, Inc, 345 Park Avenue San Jose, CA 95110-2704, USA and stored there. If your IP address is collected via Adobe technologies, it will be shortened or completely replaced by a generic IP address before being stored on Adobe's servers by activating the appropriate settings.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA.

The adequacy decision for the USA applies as the basis for third country transfers, provided that the respective service provider is certified. Certification is available.

Our service providers are located and/or use servers in countries outside the EU and the EEA. There is no adequacy decision from the European Commission for these countries. Our cooperation with them is based on standard data protection clauses of the European Commission

Adobe Fonts
For the uniform presentation of content on our website, data (IP address, time of visit, device and browser information) is collected by the "Adobe Fonts" script code, transmitted to Adobe and then processed by Adobe. We have no influence on this subsequent data processing. The data processing takes place on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR.

7.2 Use of Google services
We use the following technologies of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google technologies about your use of our website is generally transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. Unless otherwise specified for the individual technologies, data processing is carried out on the basis of an agreement concluded for the respective technology between jointly responsible parties in accordance with Art. 26 GDPR. Further information about data processing by Google can be found in Google's privacy policy.

Google Analytics
For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information as well as information on your use of our website), from which user profiles are created using pseudonyms. Cookies may be used for this purpose. If you visit our website from the EU, your IP address will be stored on a server located in the EU to derive location data and then deleted immediately before the traffic is forwarded to other Google servers for processing. Data processing is carried out on the basis of an agreement on order processing by Google.

In order to optimize the marketing of our website, we have activated the data sharing settings for "Google products and services". This allows Google to access the data collected and processed by Google Analytics and then use it to improve Google services. The release of data to Google as part of these data release settings is based on an additional agreement between the responsible parties. We have no influence on the subsequent data processing by Google.

Google Ads
For advertising purposes in Google search results and on third-party websites, the so-called Google Remarketing cookie is set when you visit our website, which automatically enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information and information about your use of our website) and by means of a pseudonymous cookie ID and on the basis of the pages you visit. Any further data processing will only take place if you have activated the "personalized advertising" setting in your Google account. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing.

For website analysis and event tracking, we use Google Ads Conversion Tracking to measure your subsequent usage behavior if you have reached our website via a Google Ads advertisement. For this purpose, cookies may be used and data (IP address, time of visit, device and browser information as well as information on your use of our website based on events specified by us, such as visiting a website or subscribing to a newsletter) may be collected, from which user profiles are created using pseudonyms.

If you do not give us your consent to the use of Google Ads in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, no cookies will be stored on your device or read out. The data processing described in the previous paragraphs does not take place. In order to close gaps in web analysis through behavior and conversion modeling, pings with data (user agent, information about your consent behavior, screen resolution, IP address, page URL, information about ad clicks in URL parameters) are sent to Google. Your IP address is used to derive the IP country.

Google Maps
For the visual presentation of geographical information, Google Maps collects data about your use of the Maps functions, in particular the IP address and location data, transmits it to Google and subsequently processes it by Google. We have no influence on this subsequent data processing.

YouTube video plugin
To integrate third-party content, data (IP address, time of visit, device and browser information) is collected via the YouTube video plugin in the extended data protection mode used by us, transmitted to Google and then processed by Google only when you play a video.

7.3 Use of Facebook services 

Use of Facebook Pixel
We use the Facebook Pixel as part of the technologies of Meta Platforms Ireland Ltd, Block J, Serpentine Avenue, Dublin 4, Ireland ("Facebook (by Meta)" or "Meta Platforms Ireland") described below. The Facebook Pixel automatically collects and stores data (IP address, time of visit, device and browser information as well as information about your use of our website based on events specified by us, such as visiting a website or subscribing to a newsletter), from which usage profiles are created using pseudonyms. As part of the so-called extended data matching, information is also collected and stored in hashed form for matching purposes, which can be used to identify individuals (e.g. names, email addresses and telephone numbers). For this purpose, a cookie is automatically set by the Facebook pixel when you visit our website, which automatically enables your browser to be recognized by means of a pseudonymous cookie ID when you visit other websites. Facebook (by Meta) will merge this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website activity, in particular personalized and group-based advertising. The information automatically collected by Facebook (by Meta) technologies about your use of our website is usually transferred to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. Further information about data processing by Facebook can be found in Facebook's privacy policy (by Meta).

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA applies as the basis for third country transfers, provided that the respective service provider is certified. Certification is available.

Our service providers are located and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico. There is no adequacy decision from the European Commission for these countries. Our cooperation with them is based on these guarantees: standard data protection clauses of the European Commission.

Facebook analytics
As part of the Facebook business tools, statistics on visitor activity on our website are created from the data collected with the Facebook pixel about your use of our website. Data processing is carried out on the basis of an agreement on order processing by Facebook (by Meta). Their analysis serves to optimize the presentation and marketing of our website.

Facebook Ads (Ads Manager)
We use Facebook Ads to advertise this website on Facebook (by Meta) and on other platforms. We determine the parameters of the respective advertising campaign. Facebook (by Meta) is responsible for the exact implementation, in particular the decision on the placement of the ads with individual users. Unless otherwise specified for the individual technologies, data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR. The joint controllership is limited to the collection of data and its transmission to Meta Platforms Ireland. Subsequent data processing by Meta Platforms Ireland is not covered by this.

Based on the statistics generated via Facebook Pixel about visitor activities on our website, we operate group-based advertising on Facebook (by Meta) via Facebook Custom Audience by determining the characteristics of the respective target group. Facebook (by Meta) acts as our data processor in the context of the extended data comparison (see above) that takes place to determine the respective target group.

Based on the pseudonymous cookie ID set by Facebook Pixel and the data collected about your usage behavior on our website, we operate personalized advertising via Facebook Pixel Remarketing.

We use Facebook Pixel Conversions to measure your subsequent usage behavior for web analysis and event tracking if you have reached our website via a Facebook Ads ad. Data processing is carried out on the basis of an agreement on order processing by Facebook (by Meta).

We use services provided by Brevo SAS, 55 rue d’Amsterdam, 75008 Paris, France (“Brevo”) on our website.

We use Brevo in conjunction with WooCommerce to handle email communications (such as newsletters and transactional emails), marketing automation, and the analysis and optimization of our marketing activities.

To this end, we use the following in particular:

- the Brevo plugin for WooCommerce
- the Brevo API for transferring customer and order data
- the Brevo Tracker for analyzing user behavior on our website

As part of this usage, even unregistered visitors to our website may be tracked and analyzed. Once a user places an order, creates a customer account, or subscribes to a newsletter, previously collected usage data may be linked to an existing user profile.

When using Brevo, the following personal data, in particular, may be processed:

- IP address
- Device and browser information
- Pages visited, clicks, and interactions
- Date and time of access
- Email address and, if applicable, first and last name
- Order and transaction data (e.g., products, order status, time)
- Usage and interaction data from emails (e.g., opens and clicks)

The shipping transactional emails (e.g., order confirmations, shipping information) is carried out for the purpose of fulfilling the contract in accordance with Article 6(1)(b) of the GDPR.

The use of marketing, tracking, and analytics features (including the Brevo Tracker) is permitted only with prior consent via our cookie consent tool, in accordance with Article 6(1)(a) of the GDPR and Section 25 of the TTDSG. Subscription to our newsletter is subject to a double opt-in procedure. The processing of data for the purpose of sending the newsletter is based on consent in accordance with Article 6(1)(a) of the GDPR. In individual cases, the shipping emails to business customers may be based on Article 6(1)(f) of the GDPR (legitimate interest).

The data is processed on servers located within the European Union. We have entered into a data processing agreement with Brevo in accordance with Article 28 of the GDPR. You may withdraw your consent at any time with future effect—either through the cookie settings on our website or via the unsubscribe link included in every email.
For more information about Brevo’s data protection practices, please refer to Brevo’s Privacy Policy.

If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, Trusted Shops widgets are integrated on this website to display Trusted Shops services (e.g. seal of approval, collected reviews) and to offer Trusted Shops products to buyers after an order.

The Trustbadge and the services advertised with it are an offer from Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops"), with which we are jointly responsible under data protection law in accordance with Art. 26 GDPR. In the context of this data protection information, we inform you below about the essential contents of the contract in accordance with Art. 26 para. 2 GDPR.

Within the framework of the joint responsibility existing between us and Trusted Shops SE, please contact Trusted Shops in the event of data protection issues and to assert your rights using the contact options provided in the data protection information. Irrespective of this, you can always contact the controller of your choice. If necessary, your request will then be forwarded to the other responsible party for a response.

9.1 Data Processing When Integrating the Trustbadge/Other Widgets
The Trustbadge is provided by a U.S.-based CDN (Content Delivery Network) provider. An adequate level of data protection is ensured in each case by an adequacy decision of the EU Commission, which is available here for the U.S. Service providers from the U.S. are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. If service providers used are not certified under the DPF, standard contractual clauses have been agreed upon as a suitable safeguard. When the Trustbadge is accessed, the web server automatically stores a so-called server log file, which also contains your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access. The IP address is anonymized immediately after collection, so that the stored data cannot be associated with you personally. The anonymized data is used in particular for statistical purposes and for error analysis.

When the Trustbadge is accessed, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data) and documents the access. The IP address is anonymized immediately after collection so that the stored data cannot be assigned to your person. The anonymized data is used in particular for statistical purposes and for error analysis.

9.2 Data Processing After Order Completion
If you have given your consent, the Trustbadge accesses order information stored on your device (order total, order number, and, if applicable, the product purchased) as well as your email address after the order is completed, and your email address is hashed using a cryptographic one-way function. The hash value is then transmitted to Trusted Shops along with the order information in accordance with Art. 6(1)(a) GDPR.
This serves to verify whether you are already registered for Trusted Shops services. If this is the case, further processing takes place in accordance with the contractual agreement between you and Trusted Shops. If you are not yet registered for the services or do not give your consent to automatic recognition via the Trustbadge, you will subsequently have the opportunity to manually register for the use of the services or to finalize the agreement within the framework of your existing user contract, if applicable.

For this purpose, the Trustbadge accesses the following information, which is stored in the end device you are using, after you have completed your order: Order total, order number and e-mail address. This is necessary so that we can offer you buyer protection. The data will only be transmitted to Trusted Shops if you actively decide to take out buyer protection by clicking on the correspondingly labeled button in the so-called Trustcard. If you decide to use the services, further processing is based on the contractual agreement with Trusted Shops in accordance with Art. 6 para. 1 lit. b GDPR in order to complete your registration for buyer protection and to secure the order and, if necessary, to be able to send you evaluation invitations by e-mail afterwards.

Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6 para. 1 lit. f GDPR for the purpose of ensuring trouble-free operation. Processing may take place in third countries (USA, Great Britain and Israel). An adequate level of data protection is ensured in each case by an adequacy decision of the EU Commission, which can be accessed here for the USA, here for the UK and here for Israel. Service providers from the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. If the service providers used are not certified under the DPF, standard contractual clauses have been concluded as a suitable guarantee.