Privacy Policy
1. Privacy at a Glance
General information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data are all data by which you can be personally identified. Detailed information on data protection can be found in our privacy policy listed below this text.
Data collection on this website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the section "Information regarding the responsible party" in this privacy policy.
How do we collect your data?
Firstly, your data are collected when you provide them to us. These can, for example, be data that you enter in a contact form.
Other data are collected automatically or after your consent when visiting the website by our IT systems. These are primarily technical data (e.g. internet browser, operating system or time of page view). These data are collected automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure the website is provided without errors. Other data can be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right at any time to receive free information about the origin, recipient and purpose of your stored personal data. You also have the right to request the rectification or deletion of this data. If you have given consent to data processing, you can withdraw this consent at any time with effect for the future. Furthermore, you have the right to request, under certain circumstances, the restriction of the processing of your personal data. You also have the right to lodge a complaint with the responsible supervisory authority.
You can contact us at any time for further questions regarding data protection.
Analytics tools and third-party tools
When visiting this website, your surfing behavior can be statistically evaluated. This happens primarily with analysis programs.
Detailed information about these analysis programs can be found in the following privacy policy.
2. Hosting and Content Delivery Networks (CDN)
Shopify
We host our website with Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter "Shopify").
Shopify is a tool for creating and hosting websites. When you visit our website, Shopify records your IP address as well as information about the device you are using and your browser. Shopify also analyzes visitor numbers, visitor sources, customer behavior and creates user statistics. When you make a purchase on our website, Shopify also collects your name, email address, shipping and billing addresses, payment data and other information related to the purchase (e.g. telephone number, amount of sales made, etc.). Shopify stores cookies in your browser for analysis purposes.
Details can be found in Shopify's privacy policy: https://www.shopify.de/legal/datenschutz.
The use of Shopify is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in presenting our website as reliably as possible. If consent has been requested, processing will be carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, provided the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.
Order processing
We have concluded a contract for order processing (DPA) with the above-mentioned provider. This is a contract required by data protection law, which ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
Cloudflare
We use the service "Cloudflare". The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter "Cloudflare").
Cloudflare offers a globally distributed content delivery network with DNS. Technically, the information transfer between your browser and our website is routed through Cloudflare's network. This enables Cloudflare to analyze the data traffic between your browser and our website and serve as a filter between our servers and potentially harmful data traffic from the internet. Cloudflare may also use cookies or other technologies to recognize internet users, but solely for the purpose described here.
The use of Cloudflare is based on our legitimate interest in the most error-free and secure provision of our website (Art. 6 para. 1 lit. f GDPR).
The transfer of data to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.cloudflare.com/privacypolicy/.
Further information about security and privacy at Cloudflare can be found here: https://www.cloudflare.com/privacypolicy/.
Google Cloud CDN
We use the Google Cloud CDN content delivery network. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google offers a globally distributed content delivery network. Technically, the transfer of information between your browser and our website is routed through Google's network. This allows us to improve the worldwide availability and performance of our website.
The use of Google Cloud CDN is based on our legitimate interest in providing our web offerings in the most error-free and secure manner possible (Art. 6 para. 1 lit. f GDPR).
The transfer of data to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://cloud.google.com/terms/eu-model-contract-clause.
More information about Google Cloud CDN can be found here: https://cloud.google.com/cdn/docs/overview?hl=de.
Amazon CloudFront CDN
We use the Amazon CloudFront CDN content delivery network. The provider is Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855, Luxembourg (hereinafter "Amazon").
Amazon CloudFront CDN is a globally distributed content delivery network. Technically, the transfer of information between your browser and our website is routed through this CDN. This allows us to improve the worldwide availability and performance of our website.
The use of Amazon CloudFront CDN is based on our legitimate interest in providing our web offerings in the most error-free and secure manner possible (Art. 6 para. 1 lit. f GDPR).
The transfer of data to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/.
More information about Amazon CloudFront CDN can be found here: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice__German_Translation.pdf.
4. Data collection on this website
Cookies
Our website uses so-called "cookies". Cookies are small text files and do not cause any harm to your device. They are either temporarily stored for the duration of a session (session cookies) or permanently stored on your device (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.
In some cases, third-party cookies may also be stored on your device when you enter our website (third-party cookies). These enable us or you to use certain services provided by the third-party company (e.g., cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary, as certain website features would not function without them (e.g., shopping cart functionality or displaying videos). Other cookies are used to evaluate user behavior or to display advertising.
Cookies necessary for conducting electronic communication processes, providing specific functions you have requested (e.g., shopping cart function), or optimizing the website (e.g., cookies for audience measurement) are stored based on Art. 6 (1) lit. f GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services. If consent for storing cookies and similar recognition technologies has been requested, processing is conducted exclusively based on this consent (Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG); consent can be revoked at any time.
You can set your browser to inform you about the setting of cookies, allow cookies only on a case-by-case basis, exclude the acceptance of cookies for specific cases or in general, and activate automatic deletion of cookies when closing your browser. Disabling cookies may limit the functionality of this website.
If third-party cookies or cookies for analytical purposes are used, we will separately inform you about this within the scope of this privacy policy and, if necessary, request your consent.
Consent with ConsentManager
Our website uses the consent technology provided by ConsentManager to obtain your consent for storing certain cookies on your device or for using specific technologies and to document this in compliance with data protection regulations. The provider of this technology is Jaohawi AB, Håltegelvägen 1b, 72348 Västerås, Sweden, website: https://www.consentmanager.de (hereinafter "ConsentManager").
When you enter our website, a connection to ConsentManager's servers is established to obtain your consents and other declarations regarding cookie usage. Subsequently, ConsentManager stores a cookie in your browser to assign your consent or revocation thereof to you. The data collected in this way is stored until you request us to delete it, delete the ConsentManager provider cookie yourself, or the purpose for data storage no longer applies. Mandatory statutory retention obligations remain unaffected.
The use of ConsentManager takes place to obtain legally required consents for the use of cookies. The legal basis for this is Art. 6 (1) lit. c GDPR.
Contract processing
We have entered into a data processing agreement (DPA) with the above-mentioned provider. This is a contract required by data protection law that ensures the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
Server log files
The website provider automatically collects and stores information in server log files, which your browser automatically transmits to us. These include:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources.
The collection of this data is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of the website; therefore, server log files must be recorded.
Contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide, will be stored by us for processing the inquiry and for follow-up questions. We do not pass on this data without your consent.
This data is processed based on Art. 6 (1) lit. b GDPR if your request is related to fulfilling a contract or carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively processing the inquiries addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR) if requested; the consent can be revoked at any time.
The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory statutory provisions—especially retention periods—remain unaffected.
Request by email, telephone, or fax
If you contact us by email, telephone, or fax, your request, including all resulting personal data (name, inquiry), will be stored and processed by us to process your request. We do not pass on this data without your consent.
The processing of this data is based on Art. 6 (1) lit. b GDPR if your inquiry relates to fulfilling a contract or implementing pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries addressed to us (Art. 6 (1) lit. f GDPR) or your consent (Art. 6 (1) lit. a GDPR) if requested; consent can be revoked at any time.
The data you send us via contact requests will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after processing your request). Mandatory statutory provisions—especially statutory retention periods—remain unaffected.