Data protection

To the extent not otherwise stated below, the provision of your personal date is neither required by law nor by contract nor is it required for the conclusion of a contract. You are not obligated to provide data. There are no consequences for not providing data. This only applies to the extent not otherwise stated in connection with the following processing operations. "Personal data" constitutes all information relating to an identified or identifiable natural person.

Server log files

You can visit our webpages without providing any information relating to your person. Every time our webpage is accessed, your browser transmits user data to us or our web hosting/IT service provider, which is saved in server log files. This saved data includes, e.g., the name of the page accessed, date and time of access, the IP address, the quantity of data transmitted and the requesting provider. Data will be processed on the basis of Art. 6 (1)(f) GDPR in connection with our overriding legitimate interest in ensuring fault-free operation of our webpage and in order to improve our offering.

Contact

Controller

Please feel free to contact us. You can find the contact details of the controller in our imprint.

Unsolicited email contact of the customer

If you wish to contact us via email in an unsolicited manner for the purpose of business, we will collect your personal data (name, email address, message text) only to the extent you provide such data. Data processing allows us to process and respond to your contact request. If contacting us serves to carry out precontractual measures (e.g., consultation in the event of buying interest, preparation of an offer) or concerns a contract concluded between you and us, such data processing shall be effected on the basis of Art. 6 (1)(b) GDPR. If you contact us for other reasons, data processing will be effected on the basis of Art. 6 (1)(f) GDPR on the basis of our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to, at any time, object to such processing of personal data concerning you based on Art. 6 (1)(f) GDPR for reasons relating to your unique situation. We only use your email address in order to process your inquiry. Your data will then be erased in compliance with legal storage periods unless you have not consented to further processing and use.

Collection and processing in connection with use of the contact form

If you use the contact form, we collect your personal data (name, email address, message text) only to the extent you have provided it. Data processing serves the purpose of establishing contact. If contacting us serves to carry out precontractual measures (e.g., consultation in the event of buying interest, preparation of an offer) or concerns a contract concluded between you and us, such data processing shall be effected on the basis of Art. 6 (1)(b) GDPR. If you contact us for other reasons, data processing will be effected on the basis of Art. 6 (1)(f) GDPR on the basis of our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right, for reasons relating to your unique situation, to object, at any time, to such processing of personal data concerning you on the basis of Art. 6 (1)(f) GDPR. We only use your email address in order to process your inquiry. Your data will be subsequently erased in compliance with statutory storage periods unless you have not consented to further processing and use.
Customer account and orders

Customer account

When you open a customer account, we collect your personal data to the extent specified during the process. The processing of your personal data serves to improve your purchasing experience and simplify the processing of your order. Processing is effected on the basis of Art. 6 (1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us without prejudice to the lawfulness of the processing effected on the basis of your consent up to the time of its revocation. Your customer account will be subsequently erased.
Collection, processing and dissemination of personal data in connection with orders

In connection with ordering, we only collect and process your personal data to the extent that this is required for the fulfilment and processing of your order as well as for processing your inquiries. Data must be provided for the conclusion of the contract. If data is not provided, no contract can be concluded. Processing shall be effected on the basis of Art. 6 (1)(b) GDPR and is required for the fulfilment of an agreement with you. At the same time, your data will be transmitted to the shipping company and drop-shipping provider, payment service provider, service provider for the fulfilment of your order and IT service provider. In all cases, we shall strictly comply with statutory requirements. The scope of data transmission is kept to a minimum.

Advertising

Use of your personal data for the purpose of forwarding advertising via mail

We use your personal data (name, address) provided to us in connection with the sale of a good or service in order to forward you advertising via mail unless you have objected to such use. The provision of this data is a requirement for the conclusion of contract. If data is not provided, no contract can be concluded. Processing is effected on the basis of Art. 6 (1)(f) GDPR in connection with our overriding legitimate interest in direct advertising. You can object to this use of your address data at any time by sending notice to us. You can find the contact information for objecting in the imprint.

Use of the email address for forwarding newsletters

We use your email address independent of contract fulfilment exclusively for the purpose of advertising the forwarding of our newsletters insofar as you have expressly consented to it. Processing is effected on the basis of Art. 6 (1)(a) GDPR with your consent. You can revoke your consent at any time without prejudice to the lawfulness of the processing effected on the basis of the consent up to revocation. For this, you can unsubscribe from the newsletter at any time using the respective link in the newsletter or by providing us with notification. Your email address will then be removed from the mailing list.

In the process, your data will be forwarded to a service provider for email marketing in connection with order processing. Your data will not be forwarded to other third parties.

Use of the email address for forwarding direct advertising

We use your email address provided to us in connection with the sale of a good or service, for the electronic transmission of advertising for own goods or services similar to those you previously purchased from us unless you have objected to such use. Your email address must be provided for the conclusion of contract. If data is not provided, no contract can be concluded. Processing is effected on the basis of Art. 6 (1)(f) GDPR in connection with our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by sending notice to us. You can find the contact information for objecting in the imprint. You can also use the link provided in the advertising email. No costs other than the transmission costs in accordance with base rates will be incurred in this respect.

Shipping providers and merchandise management

Transmission of email address to shipping companies for information regarding the shipping status

In connection with the fulfilment of the contract, we transmit your email address to the shipping company insofar as you have expressly consented hereto during the order process. The transmission of your email address serves to send you email updates on the shipping status. Processing is effected on the basis of Art. 6 (1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us or the shipping company without prejudice to the lawfulness of the processing effected on the basis of your consent up to the time of its revocation.

Use of an external merchandise management system

In connection with order processing, we use a merchandise management system for contract fulfilment. For this, your personal data collected in connection with the order are transmitted to

Pickware GmbH, Goebelstr. 21, 64293 Darmstadt proALPHA Business Solutions GmbH, Auf dem Immel 8, 67685 Weilerbach.

Cookies

Our webpage uses cookies. Cookies are small text files which are stored on your computer or which a user's browser stores. When a user accesses a webpage, a cookie can be stored on the user's operating system as a result. This cookie contains a characteristic series of characters that make it possible to specifically identify the user's browser the next time it accesses the webpage.
Cookies are stored on your computer. Therefore, you have full control of the use of cookies. You can select relevant technical settings in your browser so that you are informed before cookies are created and can decide whether to accept individual cookies, their storage and the transmission of the data contained therein. Stored cookies can be erased at any time. However, we wish to inform you that you may not be able to fully use all functions on this webpage.

Via the links provided below, you can find information on how to manage cookies in the main browsers (including how to deactivate them):

Chrome: support.google.com/accounts/answer/61416

Mozilla Firefox: support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Internet Explorer: support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Safari: support.apple.com/de-de/guide/safari/manage-cookies-and-webpage-data-sfri11471/mac

Technically necessary cookies

To the extent no further relevant information is provided in the privacy policy below, we only create such technically necessary cookies in order to make our offer more user-friendly, effective and secure. Furthermore, cookies allow our systems to recognise your browser – even after you have moved on to another page – and to provide you with services. Some of the functions on our webpage are not available without the use of cookies. For these functions to work, it must also be possible to recognise the browser after leaving the page.
Cookies or comparable technologies are used on the basis of § 15 (3)(1) TMG (the Telemedia Act). Your personal data will be processed on the basis of Art. 6 (1)(f) GDPR in connection with our overriding legitimate interest in ensuring optimal functionality of the webpage as well as the user-friendly, effective design of our offer. You have the right, for reasons relating to your unique situation, to object, at any time, to such processing of personal data concerning you.

Use of the Consent Manager

On our webpage, we use the consent management tool Consent Manager from Consentmanager AB (Håltegelvägen 1b, 72348 Västerås, Sweden; "Consentmanager"). The tool makes it possible for you to give your consent to data processing via the webpage, in particular, the creation of cookies and to exercise your right of revocation for consent already given. Data processing serves to retrieve and document the required consent to data processing and, as a result, to comply with legal obligations. Cookies can be used for this purpose. At the same time, the following information, among others, can be collected and transmitted to Consentmanger: Date and time the page was accessed, information on the browser and device you used, anonymised IP address, opt-in and opt-out data. This data will not be forwarded to other third parties. Data processing is effected in order to comply with the legal obligation on the basis of Art. 6 (1)(c) GDPR. You can find further information regarding data protection for Consentmanager under: www.consentmanager.net/privacy.php.

Adtracking analysis

Use of Google Analytics

We use the analytical web service Google Analytics of Google LLC on our webpage. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). To the extent you have your habitual place of residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller for your data. Accordingly, Google Ireland Limited is the affiliate of Google, which is responsible for the processing of your data and compliance with applicable data protection laws. Data processing serves to analyse this webpage and its visitors and is also effected for the purpose of marketing and advertising. For this, Google will, for the order of the operator of this webpage, use the information collected in order to analyse your use of the webpage in order to compile reports on webpage activities and in order to provide further services vis-à-vis the webpage operator in connection with use of the webpage and internet. At the same time, the following information can be collected among others: IP address, date and time of page access, click path, information on the browser you used and the device you used, pages visited, referrer URL (webpage from which you accessed our webpage), location data, purchasing activities. The IP address transmitted by your browser in connection with Google Analytics will not be combined with other data from Google. Google Analytics uses technologies such as cookies, web storage in the browser and tracking pixels, which make it possible to analyse webpage use. The resulting information generated regarding your use of this webpage will generally be transmitted to a Google server in the USA and saved there. No adequacy decision from the EU Commission exists for the USA. Data transmission is effected, among other things, on the basis of the standard contractual clauses as suitable guarantees for the protection of personal data; they can be viewed at : policies.google.com/privacy/frameworks. Both Google and US government authorities have access to your data. Google can link your data with other data such as your search history, your personal accounts, your usage data from other devices and all other data available to Google. IP anonymisation is activated on this webpage. As a result, your IP address will be shortened by Google within the member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Cookies or comparable technologies are used with your consent on the basis of § 15 (3)(1) TMG in conjunction with Art. 6 (1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1)(a) GDPR. You can revoke your consent at any time without prejudice to the lawfulness of the processing effected on the basis of the consent up to revocation. You can find further information on terms of use and data protection at www.google.com/analytics/terms/de.html and/or at  https://www.google.de/intl/de/policies/ and at  https://policies.google.com/technologies/cookies?hl=de.

Use of the Facebook pixel

On our webpage, we use the "Custom Audiences" remarketing function of Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland "Facebook"). Facebook Ireland and ourselves are jointly the controller with respect to the collection of your data effected in connection with the integration of the service and transmission of such data to Facebook. The basis for this is the agreement between ourselves and Facebook Ireland regarding the joint processing of personal data, which sets out the respective responsibilities. The agreement can be accessed at www.facebook.com/legal/controller_addendum . According to it, we in particular are responsible for the fulfilment of the duties to provide information under Art. 13, 14 GDPR, for compliance with the security requirements under Art. 32 GDPR with respect to correct technical implementation and configuration of the service as well as compliance with the obligations under Art. 33, 34 GDPR to the extent that a personal data breach concerns our obligations under the agreement regarding joint processing. Facebook Ireland is responsible for enabling data subject rights under Art. 15 - 20 GDPR, complying with the security requirements of Art. 32 DSGVO with respect to the security of the service and the obligations under Art. 33, 34 GDPR to the extent a personal data breach concerns the obligations of Facebook Ireland under the agreement regarding joint processing. The application serves to provide visitors to the webpage with targeted personalized advertising in the Facebook network. For this, Facebook implemented the remarketing tag on the webpage. When visiting the webpage, this tag creates a direct connection to the Facebook servers. As a result, information is transmitted to the Facebook service informing it which of our pages you visited. Facebook will attribute this information to your personal Facebook user account. When you visit the Facebook social network, you will then be shown personalized ads. If applicable, your data will be transmitted to the USA. No adequacy decision from the EU Commission exists for the USA. Data transmission is effected, among other things, on the basis of the standard contractual clauses as suitable guarantees for the protection of personal data; they can be viewed at: www.facebook.com/legal/EU_data_transfer_addendum. Cookies or comparable technologies are used with your consent on the basis of § 15 (3)(1) TMG in conjunction with Art. 6 (1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1)(a) GDPR. You can revoke your consent at any time without prejudice to the lawfulness of the processing effected on the basis of the consent up to revocation. You can find further information on the collection and use of data by Facebook, your related rights and ways to protect your privacy in Facebook's privacy policy at www.facebook.com/about/privacy/.

Use of Google Ads conversion tracking

We use the "Google Ads" online advertising platform on our webpage and, in connection with it, conversion tracking (assessment of customer interactions). Google Conversion Tracking is an analytical service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). To the extent you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller for your data. Accordingly, Google Ireland Limited is the affiliate of Google, which is responsible for the processing of your data and compliance with applicable data protection laws. If you click on an online ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies are valid for a limited period of time, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages on our webpage and the cookie has not yet expired, Google and we can recognise that you have clicked on the ad and been redirected to this page. Every Google Ads customer receives a different cookie. As a result, there is no possibility of cookies being traced via Ads customer webpages. The information obtained using the conversion cookie is used to compile conversion statistics. In the process, we learn the total number of users who have clicked one of our ads and were redirected to a page provided with a conversion tracking tag. However, we do not receive any information that can be used to identify users personally. If applicable, your data will be transmitted to the USA. No adequacy decision from the EU Commission exists for the USA. Data transmission is effected, among other things, on the basis of the standard contractual clauses as suitable guarantees for the protection of personal data; they can be viewed at: policies.google.com/privacy/frameworks. Cookies or comparable technologies are used with your consent on the basis of § 15 (3)(1) TMG in conjunction with Art. 6 (1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1)(a) GDPR. You can revoke your consent at any time without prejudice to the lawfulness of the processing effected on the basis of the consent up to revocation. You can find further information and Google's privacy policy at: www.google.de/policies/privacy/.

Use of the remarketing or "similar target groups" function of Google Inc.

On our webpage, we use the remarketing or "similar target groups" function of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). To the extent you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller for your data. Accordingly, Google Ireland Limited is the affiliate of Google, which is responsible for the processing of your data and compliance with applicable data protection laws. The use of this serves to analyse visitor behaviour and visitor interests. Google uses cookies to perform the analysis of webpage usage, which forms the basis for the creation of personalized ads. The visits to the webpage and anonymized data regarding webpage usage. The personal data of visitors to the webpage is not saved. If you subsequently visit another webpage in the Google display network, you will be shown ads, which very probably take into account previous product and information areas visited by you. If applicable, your data will be transmitted to the USA. No adequacy decision from the EU Commission exists for the USA. Data transmission is effected, among other things, on the basis of the standard contractual clauses as suitable guarantees for the protection of personal data; they can be viewed at: policies.google.com/privacy/frameworks. Cookies or comparable technologies are used with your consent on the basis of § 15 (3)(1) TMG in conjunction with Art. 6 (1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1)(a) GDPR. You can revoke your consent at any time without prejudice to the lawfulness of the processing effected on the basis of the consent up to revocation. You can find further information regarding Google Remarketing and the relevant privacy policy at: www.google.com/privacy/ads/.

Plug-ins and miscellaneous

Use of the Google Tag Manager

We use the Google Tag Manager of Google LLC on our webpage. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). To the extent you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller for your data. Accodingly, Google Ireland Limited is the affiliate of Google, which is responsible for the processing of your data and compliance with applicable data protection laws. This application manages JavaScript tags and HTML tags, which are used to implement, in particular, tracking and analysis tools. Data processing serves the purpose of the needs-based design and optimisation of our webpage. The Google Tag Manager neither saves cookies itself nor are personal data processed as a result. However, it enables the triggering of other tags which can collect and process personal data. You can find further information on terms of use and data protection here: www.google.com/intl/de/tagmanager/use-policy.html.

Use of Google invisible reCAPTCHA

On our webpage, we use the invisible reCAPTCHA service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). To the extent you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller for your data. Accordingly, Google Ireland Limited is the affiliate of Google, which is responsible for the processing of your data and compliance with applicable data protection laws. It serves to differentiate between input from a human or automated, machine-based processing. In the background, it collects and analyses Google usage data which is used by Invisible reCaptcha to differentiate between regular users and bots. Your input is transmitted to Google and reused there. Furthermore, the IP address and, if applicable, other data required by Google for the Invisible reCAPTCHA service will be transferred to Google. These data are processed by Google within the European Union and, if applicable, also in the USA. No adequacy decision from the EU Commission exists for the USA. Data transmission is effected, among other things, on the basis of the standard contractual clauses as suitable guarantees for the protection of personal data; they can be viewed at: policies.google.com/privacy/frameworks. Processing is effected on the basis of Art. 6 (1)(f) GDPR in connection with our legitimate interest to protect our webpage from automated spying, misuse and SPAM. You have the right, for reasons relating to your unique situation, to object, at any time, to such processing of personal data concerning you on the basis of Art. 6 (1)(f) GDPR. You can find further information regarding Google reCAPTCHA and the relevant privacy policy at: www.google.com/recaptcha/intro/android.html  and www.google.com/privacy.

Use of GoogleMaps

On our webpage, we use this function to embed maps from GoogleMaps of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). To the extent you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller for your data. Accordingly, Google Ireland Limited is the affiliate of Google, which is responsible for the processing of your data and compliance with applicable data protection laws. The function enables the visual rendering of geographic information and interactive maps. In the process, data of webpage users are collected, processed and used by Google when pages containing embedded GoogleMaps maps are accessed. In the process, your data will also be transmitted to the USA. No adequacy decision from the EU Commission exists for the USA. Data transmission is effected, among other things, on the basis of the standard contractual clauses as suitable guarantees for the protection of personal data; they can be viewed at: policies.google.com/privacy/frameworks. Cookies or comparable technologies are used on the basis of § 15 (3)(1) TMG (Telemedia Act). Your personal data will be processed on the basis of Art. 6 (1)(f) GDPR in connection with our overriding legitimate interest in the needs-based design and optimisation of our webpage. You have the right, for reasons relating to your unique situation, to object, at any time, to such processing of personal data concerning you. You can find further information on the collection and use of data by Google in the privacy policy of Google at www.google.com/privacypolicy.html. There, in the data protection centre, you can change your settings so that you can manage and protect the data processed by Google.

Use of YouTube

On our webpage, we use the function to embed YouTube videos of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube").YouTube is an affiliate of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The function displays videos stored on YouTube in an iFrame on the webpage. At the same time, the option "Enhanced privacy mode" is activated. As a result, YouTube does not save any information regarding the webpage visitors. Only when you watch a video is corresponding information transmitted to YouTube and stored there. If applicable, your data will be transmitted to the USA. No adequacy decision from the EU Commission exists for the USA. Data transmission is effected, among other things, on the basis of the standard contractual clauses as suitable guarantees for the protection of personal data; they can be viewed at: policies.google.com/privacy/frameworks. Cookies or comparable technologies are used on the basis of § 15 (3)(1) TMG (Telemedia Act). Your personal data will be processed on the basis of Art. 6 (1)(f) GDPR in connection with our overriding legitimate interest in the needs-based design and optimisation of our webpage. You have the right, for reasons relating to your unique situation, to object, at any time, to such processing of personal data concerning you. You can find further information on the collection and use of data by YouTube and Google, related rights and ways to protect your privacy in Youtube's privacy policy www.facebook.com/about/privacy/.

Data subject rights and storage period

Duration of storage

Once the contract has been fully executed, the data are first stored for the duration of the warranty period, thereafter in compliance with statutory storage periods, particularly those prescribed by tax and commercial law; once such periods have expired, the data are erased unless you have not consented to further processing and use.

Rights of the data subject

If the respective legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right of access, to rectification, to erasure, to restriction of processing, to data portability. Furthermore, you have, in accordance with Art. 21 (1) GDPR, a right to object to processing, which is based on Art. 6 (1)(f) GDPR as well as to processing for the purpose of direct advertising.
Right to lodge a complaint with the supervisory authority Under Art. 77 GDPR, you have a right to lodge a complaint with the supervisory authority if you believe that your personal data has not be legitimately processed.

Right to object to processing

If the data processing of personal data listed here is effected on the basis of our legitimate interest under Art. 6 (1)(f) GDPR, you have the right, for reasons relating to your unique situation, to object, at any time, to processing with effect for the future. Once you have objected, the processing of the relevant data will be terminated unless we are able to prove the presence of compelling legitimate reasons for processing, which override your interests, rights and freedoms or if processing serves the assertion, exercise or defence of legal claims.

If personal data processing is effected for the purpose of direct advertising, you can object to such processing at any time by notifying us. Once you have objected, we terminate processing of the relevant data for the purpose of direct advertising.

last updated: 27 October 2020