Privacy Policy

You can find more information about data protection at Ecwid here: https://www.ecwid.com/eu-privacy-policy

3. Cookies
Our website uses cookies.

Cookies are text files that are stored on the user's device. When a user visits a website, a cookie can be stored on the user's operating system. Some functions of our website cannot be offered without the use of cookies. This requires that the browser is recognized even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. Our legitimate interest in processing personal data pursuant to Art. 6 para. 1 lit. f) GDPR also lies in the aforementioned purposes.

Furthermore, our website may use cookies that enable analysis of users' browsing behavior (so-called third-party cookies). You can find more detailed information about the scope, purpose, legal basis, a nd options for objecting to this in the relevant sections of the respective chapter of this privacy policy.

As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable, restrict, or delete the transmission of cookies. If you disable cookies for our website, you may no longer be able to use all of its functions to their full extent. You can prevent the transmission of Flash cookies by changing the settings of the Flash Player.

For help with cookie settings, please refer to your browser's help menu or the following links: Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/B... Firefox: https://support.mozilla.org/de/kb/cookies-erlauben... Chrome: http://support.google.com/chrome/bin/answer.py?hl=... Safari: https://support.apple.com/de-de/guide/safari/sfri1... Opera: https://help.opera.com/en/latest/web-preferences/#...

Some of the cookies used here are deleted after you close your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information, such as browser and location data as well as IP addresses, to varying degrees. Persistent cookies are automatically deleted after a predetermined period, which can vary depending on the cookie.

The checkout solution used here from Klarna (Klarna Bank AB (publ.), Sveavägen 46, 111 34 Stockholm, Sweden) uses cookies to ensure a smooth checkout process for you.

This enables [the use of cookies]. More information about the individual cookies and an explanation of their respective purposes can be found for Germany at http://cdn.klarna.com/1.0/shared/content/policy/co... and here for Austria at https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_at/checkout.pdf.

4. Making contact

When you contact us via the contact form, the data you enter in the input fields will be transmitted to us and stored. The specific data collected is indicated in the respective input fields.

u

When you contact us via email, only the data you enter there will be transmitted to us.

The data will be used exclusively for processing the conversation and your request. The legal basis for processing the data, if the user has given consent, is Article 6(1)(a) GDPR. The legal basis for processing data transmitted via email is Article 6(1)(f) GDPR. If the email contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. The data will be deleted as soon as it is no longer required for the purpose for which it was collected, provided there are no legal retention obligations to the contrary. For personal data from the contact form and those transmitted by email, this is the case when the respective conversation with the user has ended. A conversation is considered ended when it is clear from the circumstances that the matter in question has been conclusively resolved. The user has the right to withdraw their consent to the processing of their personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

5. Data development when opening a customer account and for contract processing

If you wish to place an order in our online shop, you will need to provide your personal data, which we require to process your order. We will process the data you provide to fulfill your order.

In some cases, we work with external service providers to process your order. For this purpose, we need to share the necessary personal data with them.

If we commission a transport company to deliver your goods, we will forward your data required for delivery to the respective transport company. For payment processing, we will forward your data to the commissioned bank as necessary. If we use payment service providers, you will also be informed of this below. The legal basis for the transfer of your data is Article 6(1)(b) GDPR.

We use the Ecwid shop system. This is operated by Ecwid, Inc. (Ecwid, Inc., 144 West D Street, Suite 103, Encinitas, California 92024, USA), headquartered in the USA. Further information on data protection at Ecwid can be found here: https://www.ecwid.com/eu-privacy-policy

6. Use of your data for direct marketing 6.1 Newsletter

You can subscribe to our free newsletter on our website. When you subscribe, the data you enter in the registration form is transmitted to us. The only required field is your email address. Any additional information you provide will only be used for personalized communication.

The legal basis for processing your data after subscribing to the newsletter is, if the user has given their consent, Article 6(1)(a) GDPR. We obtain this consent by sending you a confirmation email after subscribing to the newsletter, which contains a confirmation link. By clicking this link, you simultaneously give your consent to receive the newsletter.

When you submit your newsletter subscription, we store your IP address as well as the date and time of registration. This information is stored to enable us to trace any potential misuse of your email address.

We use the data we collect when you subscribe to our newsletter exclusively for the purpose of sending the newsletter.

You can unsubscribe from the newsletter at any time. A corresponding link is included in every newsletter for this purpose. This also allows you to revoke your consent to the storage of the personal data collected during the registration process.

6.2 Newsletter for existing customers

If you purchase goods or services on our website and provide your email address, we may subsequently use it to send you a newsletter. In such cases, the newsletter will only contain direct advertising for our own similar goods or services.

The legal basis for sending the newsletter following the sale of goods or services is Section 7 Paragraph 3 of the German Unfair Competition Act (UWG) and Article 6 Paragraph 1 Letter f of the GDPR. Data processing is therefore based solely on our legitimate interest in personalized direct marketing.

If you have already objected to the use of your email address for direct marketing purposes, you will not receive this newsletter. However, you can also object to the use of your email address for the aforementioned advertising purpose at any time by notifying us. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.

7. Data processing for order fulfillment

- UPS
If your goods are delivered by the shipping provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we will only share the recipient's name and delivery address with UPS for delivery purposes and to the extent necessary, in accordance with Article 6(1)(b) GDPR. Only if you have given your explicit consent during the ordering process will we share your email address with UPS before delivery, in accordance with Article 6(1)(a) GDPR, for the purpose of coordinating a delivery date or providing delivery notification. You can withdraw your consent at any time with effect for the future by contacting the data controller named above or UPS.

- GLS

If your goods are delivered by the transport service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein), we will only forward the recipient's name and
delivery address to GLS for the purpose of delivery and to the extent necessary in accordance with Art. 6
Para. 1 lit. b GDPR. Only if you have given your express consent during the ordering process will we forward your email address to GLS before delivery in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of coordinating a delivery date or for delivery notification. You can withdraw your consent at any time with effect for the future by contacting the data controller named above or the transport service provider GLS.

- DPD

If your order is delivered by the shipping provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will only share your name and delivery address with DPD for delivery purposes and to the extent necessary, in accordance with Article 6(1)(b) GDPR. Only if you have given your explicit consent during the ordering process will we share your email address with DPD before delivery, in accordance with Article 6(1)(a) GDPR, for the purpose of coordinating a delivery date or providing delivery notification. You can withdraw your consent at any time with effect for the future by contacting the data controller named above or DPD.

- DHL

If your order is delivered by the shipping provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will only share your name and delivery address with DHL for delivery purposes and to the extent necessary, in accordance with Article 6(1)(b) GDPR. Only if you have given your explicit consent during the ordering process will we share your email address with DHL before delivery, in accordance with Article 6(1)(a) GDPR, for the purpose of coordinating a delivery date or providing delivery notification. You can withdraw your consent at any time with effect for the future by contacting the data controller named above or DHL.

7.1 Disclosure of your personal data to shipping service providers

7.2 If you wish to place an order in our online shop, it is necessary for the conclusion of the contract that you provide your personal data, which we require for processing your order. We process the data you provide in order to process your order.

In some cases, we work with external service providers to process your order. For this purpose, we need to share the necessary personal data with them.

If we commission a transport company to deliver your goods, we will forward your data required for delivery to the respective transport company. For payment processing, we will forward your data to the commissioned bank as necessary. If we use payment service providers, you will also be informed of this below. The legal basis for the transfer of your data is Article 6(1)(b) GDPR.

7.3 To fulfill our contractual obligations, we work with external shipping partners. We will only share your name and delivery address (and other data if necessary) with a shipping partner selected by us for the purpose of delivering the ordered goods, in accordance with Article 6(1)(b) GDPR.

- Use of payment service providers

7.4 Apple Pay

When selecting the payment method "Apple Pay" (a service of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland), payment processing is carried out via the " Apple Pay" function of your device running iOS, watchOS or macOS by charging a payment card you have stored with "Apple Pay".

Your transaction is protected by the security features of your device's hardware and software. To authorize a payment, you must enter a code and verify your identity using your device's "Face ID" or " Touch ID" function.

The information you provide during the ordering process, along with details of your order, will be transmitted to Apple in encrypted form for payment processing. Apple will then re-encrypt this data and transmit it to the payment service provider of the payment card stored in Apple Pay to complete t he payment. This encryption ensures that only the website where the order was placed can access the payment information.

After payment, Apple sends the device account number and a transaction-specific, dynamic security code to the shop website to confirm the payment. Personal data may be processed during this process. In this case, this is done for the purpose of payment processing in accordance with Article 6(1)(b) GDPR.

When using Apple Pay on your iPhone or Apple Watch to complete a purchase, which you made via

When you use Safari on your Mac, the Mac and the authorizing device communicate via an encrypted channel on Apple's servers. Apple may process or store data during this process. However, this occurs in a format that cannot identify you personally.

Information on Apple Pay's privacy policy can be found here: https://support.apple.com/de-de/HT203027

7.5 Google Pay

When selecting the payment method "Google Pay" (a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google")), payment processing is handled via the " Google Pay" application on your Android mobile device (at least version 4.4 "KitKat") equipped with NFC. Payment is made using one of your payment cards stored with Google Pay or a payment system verified there (e.g., PayPal). To authorize a Google Pay payment exceeding €25, you must first unlock your mobile device. The information you provide during the ordering process will be shared with Google for payment processing purposes. Google generates a unique transaction number, which is transmitted to the order website to verify the payment. This transaction number is simply a numerical token and does not contain any personal data. The actual transaction is carried out between the user and the order website by debiting the payment method stored with Google Pay. Personal data may be processed during these processes. In that case, processing will take place for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.

The Google Pay terms of service can be found here:

https://payments.google.com/payments/apis-secure/u... Weitere Hinweise zum Datenschutz bei Google Pay finden Sie unter der nachstehenden Internetadresse: https://payments.google.com/payments/apis-secure/g... Weitere Hinweise zum Datenschutz von Google finden Sie hier: https://business.safety.google/privacy/

- Klarna

When paying via the following payment methods (where offered): - "Klarna Invoice" - "Klarna Installments" - " Klarna Direct Debit" (a Klarna instant payment method) - "Klarna Credit Card Payment" (a Klarna instant payment method), payment processing is handled by Klarna AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter referred to as "Klarna"). We will forward your personal data (first and last name, street, house number, postal code, city, gender, email address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, items, delivery method) to Klarna for the purpose of identity and credit checks if you have expressly consented to this transfer in accordance with Art. 6 Para. 1 lit. a GDPR. Klarna may share your data with one of the following credit agencies: https://cdn.klarna.com/1.0/shared/content/legal/te...

The credit report may contain probability values (so-called score values). If score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data is among the data used to calculate the score values, but is not the only factor. You can withdraw your consent at any time by contacting the data controller or Klarna. However, Klarna may still process your personal data if this is necessary for processing payments in accordance with the contract. For individuals residing in Germany, the following data protection provisions of Klarna apply:

_ https://cdn.klarna.com/1.0/shared/content/policy/d... protection.pdfFür Betroffene mit Sitz in Österreich

gelten folgende Datenschutzbestimmungen von Klarna: https://cdn.klarna.com/1.0/shared/content/policy/d... protection.pdf

- Paypal B
ei AIf you select the payment method PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "

purchase on account" or "installment payment" via PayPal, payment processing is carried out via PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal").

We will transfer your personal data to PayPal in accordance with Article 6(1)(b) GDPR to the extent necessary. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal.

For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR based on PayPal's legitimate interest in verifying your creditworthiness.

PayPal uses the result of the credit check regarding the statistical probability of payment default to decide whether to offer the respective payment method.
The credit report may contain probability values (so-called score values). If score values are included i n the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data is among the factors, but not the only one, used in calculating the score values.

What other data PayPal collects is detailed in PayPal's privacy policy, which can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full. You can object to this processing of your data at any time by contacting PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for processing payments in accordance with the contract.
- Stripe B

ei IAf you select a payment method from the payment service provider Stripe, the payment processing will be carried out via Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland (hereinafter referred to as "stripe").

We will forward your personal data, along with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number), to Stripe in accordance with Art. 6 para. 1 lit. b GDPR exclusively for the purpose of payment processing and only to the extent necessary.

8. Use of social media: Video Using YouTube videos

This website uses the YouTube embedding function to display and play videos from the provider " YouTube," which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the enhanced privacy mode, which, according to the provider, only initiates the storage of user information when the video(s) are played. When you start playing embedded YouTube videos, the provider "YouTube" sets cookies to collect information about your user behavior. According to "YouTube," this information is used, among other things, to collect video statistics, improve user-friendliness, and prevent misuse. If you are logged into Google at the same time, your data will be directly associated with your account.

If you do not wish to have your activity associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. This analysis is carried out, in particular, pursuant to Article 6(1)(f) GDPR, based on Google's legitimate interests in displaying personalized advertising, conducting market research, and/or designing a website to meet user needs. Similarly, our legitimate interest in embedding the videos, pursuant to Article 6(1)(f) GDPR, lies in analyzing user behavior, designing our website according to user interests, and maximizing the financial potential of our website.

You have the right to object to the creation of these user profiles, and to exercise this right you must contact YouTube. Regardless of whether the embedded videos are played, a connection to the Google "DoubleClick" network is established each time this website is accessed, which may trigger further data processing operations beyond our control.

Data may also be transferred to Google LLC servers in the USA. Further information on data protection at YouTube can be found in the provider's privacy policy at: https://policies.google.com/privacy?hl=de. Settings for personalized advertising are available at: https://adssettings.google.com/authenticated.

Google LLC, based in the USA, is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with the level of data protection applicable in the EU. Details can be found here: https://privacy.google.com/businesses/gdprcontroll...

9. Online Marketing DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") ("DoubleClick").

DoubleClick by Google uses cookies to present you with relevant advertisements. A pseudonymous identification number (ID) is assigned to your browser to track which ads have been displayed and clicked. This provides us with valuable information to make our websites even faster and more user-friendly. The above analysis is based on our legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR. The cookies do not contain any personally identifiable information. The use of DoubleClick cookies merely enables Google and its partner websites to display ads based on previous visits to our or other websites on the internet.

The information generated by cookies is transmitted to and stored by Google on a server in the USA for evaluation. Google will only transfer this data to third parties if required by law or as part of commissioned data processing. Under no circumstances will Google combine your data with other data collected by Google. You can prevent the storage of cookies by adjusting your browser settings; however, please note that in this case you may not be able to fully utilize all the functions of our website.

Furthermore, you can prevent Google from collecting and processing data generated by cookies and related to your use of the websites by clicking the link below.

https://adssettings.google.com/ unter dem Punkt DoubleClick-Deaktivierungserweiterung verfügbare Browser- Plugin herunterladen und installieren.

Alternatively, you can disable Doubleclick cookies on the Digital Advertising Alliance website at the following link: http://optout.aboutads.info/?c=2#!/

Google LLC, based in the USA, is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with the level of data protection applicable in the EU. Further information about DoubleClick by Google's privacy policy can be found at the following web address:

http://www.google.de/policies/privacy/ Weitere H

You can find information about Google's privacy policy here: https://business.safety.google/privacy/

10. Web analytics services Google Analytics 4

We use Google Analytics 4 on our website, a web analytics service provided by Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) (hereinafter referred to as "GA4").

Google Analytics uses "cookies." These are small text files that are stored on your device and enable an analysis of your use of the website. The information generated about your use of this website (including your truncated IP address) is transmitted to a Google server, stored and processed there, and may be transferred to the USA.

Addresses are anonymized by default. For IPv4 addresses, the last octet is set to zero, and for IPv6 addresses, the last 80 bits are set to zero in memory, thus "anonymizing" them. Personal identification i s impossible. However, transfer to servers of Google LLC, located in the USA, cannot be ruled out.

During your website visit, GA4 records your user behavior in the form of "events," such as: page views, first visit to the website, session start, your "click path," interaction with the website, scrolls, clicks on external links, internal search queries, interaction with videos, file downloads, viewed/clicked ads, and language settings. GA4 also records your approximate location (region), your IP address (in anonymized form), technical information about your browser and the devices you use (e.g., language settings, screen resolution), your internet service provider, and the referrer URL (the website/advertising medium that led you to this website).

On our behalf, Google uses this information to evaluate your website usage, compile reports on website activity, and provide us with other services related to website and internet usage. Your anonymized IP address collected in this context will not be merged with other Google data.

The data collected in this context will be stored for two months.

The legal basis for the data processing described here, as well as the setting of cookies, is your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR. This consent can be revoked at any time with effect for the future, for example by deactivating this Google service via the cookie consent tool in which you have already given your consent.

Without your consent, Google Analytics 4 will not be used during your visit to our website. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service using the "Cookie Consent Tool" provided on the website.

Google LLC, based in the USA, is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with the level of data protection applicable in the EU. We have also concluded a data processing agreement with Google. Further information on data protection through Google Analytics 4 can be found on the following websites: https://policies.google.com/technologies/partner-s... and https://policies.google.com/privacy?hl=de&gl=de

Demographic characteristics

Google Analytics 4's "demographics" feature can generate statistics that provide insights into the age, gender, and interests of website visitors. This is achieved by analyzing advertising and information from third-party providers and identifying target groups for specific marketing activities. However, no personal data is linked to any individual. The data is deleted after two months.

UserIDs

If we use the extended "UserIDs" function, your activities (including conversions) can be analyzed across devices. In this case, the analysis is not pseudonymous. This is possible if you have given your consent to the use of Google Analytics 4.0 in accordance with Art. 6 para. 1 lit. a GDPR, you have created an account on this website, and you log in to this account on different devices.

Google Signals

If we use the "Google Signals" extension, we can generate cross-device reports about your usage behavior. However, we only receive statistics and no personally identifiable information. This analysis i s only possible if you have enabled personalized ads in your Google account and linked your devices to a Google account. Your consent to the use of Google Analytics is also required in accordance with Article 6(1)(a) of the GDPR.

Cross-device analysis can be prevented by disabling the "personalized advertising" feature in your Google account.

More information about Google Signals can be found here:

https://support.google.com/analytics/answer/753298... Further information on Google's privacy policy can be found here: https://business.safety.google/privacy/

11. Tools and other items Google reCAPTCHA

We use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in preventing abuse and spam.

reCAPTCHA is a feature designed to ensure that input is made by a natural person.

The service sends your IP address and possibly other data required by Google for the reCAPTCHA service to Google.

When using Google reCAPTCHA, your personal data may also be transmitted to the servers of Google LLC in the USA.

Google LLC, based in the USA, is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with the level of data protection applicable in the EU. Further information about Google's privacy policy can be found at the following web address:

http://www.google.de/policies/privacy/ Weitere Hinweise zum Datenschutz von Google finden Sie hier: https://business.safety.google/privacy/

12. Rights of the data subject

12.1 The applicable data protection law grants you comprehensive rights as a data subject (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

- Right of access pursuant to Article 15 GDPR: You can request confirmation from the controller as to whether personal data concerning you is being processed by the controller. Furthermore, you have the right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage, and the existence of other rights such as rectification of the data or the existence of a right to lodge a c omplaint with a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved and the significance and the envisaged consequences of such processing for you, as well as your right to be informed of the safeguards pursuant to Article 46 GDPR relating to the transfer of your data to third countries;

- Right to rectification pursuant to Article 16 GDPR :