Privacy Policy & Cookies

---

We attach the greatest importance to the protection of your data entrusted to us. The collection, processing and use of personal data is subject to the provisions of current legislation and data protection regulation (GDPR).

This privacy statement explains the type, scope and purpose of the processing of personal data within our website and other processing systems, functions and content (hereinafter jointly referred to as "website"). This privacy statement is applicable regardless of the domains, systems, platforms and devices (for example, desktop or mobile) upon which the website is accessed.

We only process users’ personal data in compliance with the relevant data protection regulations. This means that the users’ data will be processed only if there is legal permission, i.e. in particular if

We would like to point out that the legal basis of the consent Art. 6 para. 1, lit. a and Art. 7 GDPR, the legal basis for the processing and implementation services in order to fulfil our contractual measures Art. 6 para. 1, lit. b. GDPR, the legal basis for the processing in order to fulfil our legal obligations Art. 6 para. a, lit. c GDPR and the legal basis for the processing to protect our legitimate interests is Art. 6, para. 1 lit. f. GDPR.

We meet organisational, contractual and technical security measures in accordance with the state of the art, in order to ensure that the provisions of the data protection laws are complied with, and to ensure protection of the data processed by us against accidental or intentional manipulation, loss, destruction or access by unauthorised persons.

Disclosure of data to third parties only takes place within the framework of the legal guidelines. We give the data of users to third parties only if required, for example, on the basis of Art. 6 para. 1 lit. b. GDPR for contractual purposes or on the basis of legitimate interests according to Art. 6 para. 1 lit. f. GDPR for economic and effective operation of our business activities.

If we use subcontractors in order to provide our services, we will take appropriate legal measures and appropriate technical and organisational measures for the protection of personal data in accordance with the relevant statutory provisions.

In as far as content, tools or other resources from other suppliers (hereinafter jointly referred to as "third parties") can be used within the scope of this privacy statement, and their named location is in a third country, it is assumed that a data transfer takes place in the country of domicile of the third party. Third countries are understood to be countries in which the GDPR is not a directly applicable law, that is, in principle, countries outside the EU or the European Economic Area. The transfer of data to third countries is carried out if an adequate level of protection for the data, a user consent or other legal permission is present.

We process inventory data (such as names and addresses, as well as contact data of users), contract data (for example, services used, names of contact persons, payment information) in order to fulfil our contractual obligations and services according to Art. 6, para. 1, lit. b GDPR.

Users have the option to create an account in order to buy products in our online shop and can view their orders. As part of the registration process, the necessary mandatory information is communicated to the users. User accounts are not accessible by the public and cannot be indexed by search engines. If an account is terminated upon request, the data in relation to the user account is deleted, whose retention is judged necessary for commercial or tax reasons according to Art. 6, para. 1 lit. c. GDPR. It is the responsibility of the users to safeguard their data in the event of termination before the end of the contract. We are entitled to permanently delete all stored data of the user during the duration of the contract.

In the context of registration and re-registration and use of our website, we store the IP address and the time of the respective user activity. Storage is carried out on the basis of our legitimate interests, as well as for protection of the user against misuse and other unauthorised use. Disclosure of this data to third parties does not generally occur, unless it is necessary to pursue our claims or there is a legal obligation according to Art. 6, para. 1. lit. c GDPR.

We process usage data (for example, the pages accessed on our website, interest in our products), and content data (for example, entries in the contact form or user profile) for advertising purposes in a user profile, for example to show users product information based on their previously selected services.

When contacting us (via the contact form or E-mail), the information of the user to edit the contact request and their settlement is processed in accordance with Art. 6 para. 1 lit. b GDPR.

The information provided by the users is stored in our customer relationship management system "Fresh desk" - Fresh Works Inc., 1250 Bayhill Drive, Suite 315, San Bruno, CA 94066, USA. Fresh works is certified under the Privacy Shield Agreement and provides a guarantee of compliance with the European Data Protection Law. Please also note the following data protection regulations: https://www.freshworks.com/privacy/. We use the CRM system on the basis of our legitimate interests (efficient and quick processing of user requests).

We collect information for each access to the server on which this service is located (so-called server log files) on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. F. GDPR. Access data includes the name of the retrieved page, file, date and time of access, data volume transferred, notification of successful retrieval, browser type with version, the operating system of the user, referrer URL (the page previously visited), IP address, and the requesting provider.

Log file information is stored for a maximum period of seven days for security reasons (e.g. for the elucidation of abuse or fraud) and then deleted. Data whose further retention is required for evidential purposes is excluded from deletion up to the final clarification of the respective incident.

Cookies are pieces of information that is transferred from our web server or third-party web servers to the web browser of the user and stored for later retrieval. Cookies can be small files or other types of stored information.

We use "session cookies", which can be stored for the duration of the current visit to our website (e.g. in order to store your login status or the shopping cart function and thus to be able to allow the use of our website). A randomly generated unique identification number, or so-called session ID is stored in a session cookie. A cookie also contains information on its origin and the storage period. These cookies cannot store any other data. Session cookies are deleted when you have finished using our website and, for example, log out or close your browser.

In accordance with this privacy statement, the user is notified of the use of other cookies under pseudonymous reach measurement.

If users do not want cookies to be saved on their computers, they will be asked to the disable relevant option in the system settings of their browsers. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies may restrict the functionality of this website.

You can deny the use of cookies for the purposes of reach measurement and advertising purposes, via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and, in addition, the US-American website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

On the basis of our legitimate interests (i.e., interest in the analysis, optimisation and economic operation of our website in accordance with Art. 6, para. 1, lit. f GDPR.), we use Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google uses cookies. The information generated by the cookie about your use of the website by the user is generally sent to a Google server in the USA and stored there. Google is certified under the Privacy Shield Agreement and provides a guarantee of compliance with the European Data Protection Law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf in order to evaluate the usage of our site by users, to compile reports on the activities within this website and to provide us with further services linked with the use of this website and internet-related services. In doing so, pseudonymous user profiles may be created from the processed data profiles of the users. We use Google Analytics only with activated IP anonymity. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement regarding the European Economic Area. Only in exceptional cases will the full IP address transferred to a Google server in the USA and shortened there.

The IP address transmitted by the user's browser is not combined with any other data held by Google. The users may refuse the use of cookies by selecting the appropriate settings in their browser software. The users can also prevent the collection of the data related to their use of the website generated by the cookie and its processing by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Further information on the use of data by Google, recruitment and prevention options can be found on the following Google websites:

With the creation of a customer account in our online shop you agree to the transit of non-advertising e-mails that contain important information regarding our business relationship, such as information about your customer account, price adjustments, changing contacts and other important information that influences a joint cooperation.

We will clarify the content of our newsletter and the login, shipping, and statistical evaluation procedures, as well as prevention options with the following notes.

By subscribing to our newsletter, you consent to the receipt and the described procedures, as well as with this privacy notice.

Content of the newsletter: We send out newsletters, E-mails and other electronic notifications with advertising information (hereinafter referred to as the "newsletter") only with the consent of the recipient or legal permission. In addition, our newsletters contain information on our products, offers, promotions, events and our company.

Registration procedure: You have the option to register for the newsletter in the registration form for our online shop. When you are logged in, you can also register and de register for the newsletter in your personal "My Account" area. You will then receive a confirmation email in which we ask you to confirm your e-mail address. If you are a customer, but don't have an account for the online shop and not want to register, on request we will send a link to a newsletter registration page that is independent from the online shop. During registration for the newsletter you will receive a confirmation email in which we ask you to confirm your e-mail address. Registration to the newsletter will be recorded in accordance with the legal requirements for the registration process. Similarly, changes to your data will be recorded by the shipping service provider. Registration to the newsletter will be recorded in accordance with the legal requirements for the log on process. Similarly, changes to your data stored by the shipping service provider are recorded.

Shipping service provider: The newsletter is dispatched via Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, hereinafter referred to as "shipping service provider".

Statistical collection and analysis – the newsletters contain a so-called "web beacon", i.e. a pixel-sized file which is retrieved from the server of the shipping service provider upon opening the newsletter. During its retrieval, technical information is collected, such as information about the browser and your system, as well as your IP address and time of access. This information is used for technical improvement of services on the basis of the technical data or the target groups and their reading behaviour on the basis of access location (identifiable with the help of the IP address) or the access times. A further part of the statistical surveys is the determination whether or not the newsletter is opened and which links are clicked. This information can be assigned to the individual newsletter recipients for technical reasons. But it is neither our intention nor that of the shipping service provider to monitor individual users. The analysis of personal tracking helps us much more to recognise the reading habits of our users and adapt our content to them or to provide different content in accordance with the interests of our users.

The use of the shipping service provider, implementation of the statistical surveys and analyses, as well as recording the registration procedure, is made on the basis of our legitimate interests according to Art. 6, para. 1, lit. f GDPR. Our interest is focused on the use of a user-friendly and secure newsletter system, which serves both our business interests, as well as the expectations of users.

Termination/Cancellation – you can cancel receipt of our newsletter at any time, i.e. revoke your consent. In doing so, your consent to shipment by the shipping service provider and statistical analysis are simultaneously deleted. A separate revocation of shipment by the shipping service provider or of the statistical analysis is not possible. You can manage and terminate your newsletter preferences in the settings of your customer account in our online shop. You can also find a link to cancel the newsletter at the end of each newsletter.

We use content or service offerings from third-parties within our web site on the basis of our legitimate interests (i.e., interest in the analysis, optimisation and economic operation of our website in accordance with Art. 6 para. 1 lit. f. GDPR) in order to integrate their contents and services, such as videos or fonts (hereinafter referred to as "content"). This always assumes that the third-parties of this content recognise the IP address of the users, as without the IP address they would be unable to send the content to their browsers. The IP address is therefore required for the presentation of this content. We strive to use only such content, whose respective providers use the IP address only for the delivery of the content. Third-party providers can also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical and marketing purposes. Information such as visitor traffic on the pages of this website can be evaluated by the use of pixel tags. The pseudonymous information may also be stored in cookies on the user’s device and may contain among other things, technical information about the browser and operating system used, referring websites, access period and further information about the use of our website, and may be connected with such information from other sources.

The following diagram provides an overview of third-party vendors and their content, along with links to their respective privacy statements, which contain further information about the processing of data and, in some cases already mentioned here, the prevention options (so-called opt-out):

Users have the right to request, free of charge, to receive information about the personal data we have stored about them. In addition, users have the right to correction of incorrect data, restriction of the processing and deletion of their personal data, if applicable, to assert their right to data portability and, in the case of the acceptance of unlawful data processing, file a complaint with the responsible supervisory authority. Users may also, in principle, revoke consent with effect for the future.

Deletion of data

Data stored by us is deleted as soon as it is no longer required for its intended purpose and its deletion does not contravene any statutory retention obligations. If the user’s data cannot be deleted because it is necessary for other legally permitted purposes, its processing is restricted. In other words, the data is secured and cannot be used for other purposes. This applies, for example, to data of users which must be kept for commercial or tax reasons.

The storage period is 6 years as per the legal requirements in accordance with § 257 para. 1 of the GERMAN COMMERCIAL CODE (trade books, inventories, opening balances, annual financial statements, business letters, receipts, etc.), and 10 years in accordance with § 147 para. 1 AO (books, records, situation reports, receipts, trade and business letters, for tax-related documents, etc.).

Right of objection

Users can object to the future processing of their personal data in accordance with the statutory requirements at any time. The objection may be in particular against processing for the purposes of direct marketing.

Changes to the Privacy Statement

We reserve the right to amend the privacy statement to suit changed legal situations, or if changes are made to the service and the data processing. However, this only applies with regard to explanations of data processing. If user consents are required or if parts of the privacy statement contain provisions of the contractual relationship with the users, the changes take place only with the consent of the user.

Users are asked to obtain regular updates about the contents of the data protection policy.