7) DATA PROCESSING FOR ORDER PROCESSING
7.1 The personal data collected by us will be transferred to the transport company tasked with processing the contract to the extent necessary for the delivery of the goods. Your payment details will be transferred to the authorized credit institution for payment processing if necessary. If payment service providers are used, we will provide explicit information about them below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.
7.2 Use of Payment Service Providers
If you choose to pay via PayPal, credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "payment in installments" via PayPal, we will transfer your payment details to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). The transfer is carried out in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing. PayPal reserves the right to perform a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "payment in installments" via PayPal. For this purpose, your payment details may be shared with credit bureaus in accordance with Art. 6 para. 1 lit. f GDPR based on PayPal's legitimate interest in assessing your creditworthiness. The result of the credit check regarding the statistical probability of non-payment is used by PayPal to decide whether to offer the payment method in question. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, but is not limited to, address data. For more information on data protection, including information about the credit bureaus used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may continue to process your personal data if necessary for the contractual processing of payments.
If you select the payment method "SOFORT," the payment is processed through the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany ("SOFORT"), to whom we transfer your information provided during the ordering process, along with information about your order, in accordance with Art. 6 para. 1 lit. b GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data is only transferred for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. For more information about SOFORT's privacy policy, visit: https://www.klarna.com/sofort/datenschutz
8) CONTACT FOR REVIEW REMINDER
We use your email address to send a one-time reminder to review your order for the review system we use, provided you have explicitly consented to this during or after your order in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time by sending a message to the data controller.
9) USE OF SOCIAL MEDIA: SOCIAL PLUGINS
9.1 Facebook Plugins with Shariff Solution
Our website uses so-called social plugins ("plugins") from the social network Facebook, operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). To better protect your data when you visit our website, these buttons are not fully integrated as plugins on the page but only as an HTML link. This integration ensures that when you call up a page on our website containing such buttons, no connection is established with Facebook's servers. When you click the button, a new browser window opens, and the Facebook page is called up, where you can use the Facebook button (possibly after entering your login details).
Facebook Inc., based in the United States, is certified under the US-European "Privacy Shield" data protection agreement, which ensures compliance with the level of data protection applicable in the EU.
For more information on the purpose and extent of data collection and further processing and use of the data by Facebook, as well as your rights in this regard and settings options for protecting your privacy, please refer to Facebook's privacy policy: https://www.facebook.com/policy.php
9.2 Google+ Plugins as Shariff Solution
Our website uses so-called social plugins ("plugins") from the social network Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
To better protect your data when you visit our website, these buttons are not fully integrated as plugins on the page but only as an HTML link. This integration ensures that when you call up a page on our website containing such buttons, no connection is established with Google+ servers. When you click the button, a new browser window opens, and the Google+ page is called up, where you can use the Google+ button (possibly after entering your login details).
Google LLC, based in the United States, is certified under the US-European "Privacy Shield" data protection agreement, which ensures compliance with the level of data protection applicable in the EU.
For more information on the purpose and extent of data collection and further processing and use of the data by Google, as well as your rights in this regard and settings options for protecting your privacy, please refer to Google's privacy policy: https://www.google.com/intl/de/policies/privacy/
9.3 Instagram Plugin as Shariff Solution
Our website uses so-called social plugins ("plugins") from the online service Instagram, managed by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram").
To better protect your data when you visit our website, these buttons are not fully integrated as plugins on the page but only as an HTML link. This integration ensures that when you call up a page on our website containing such buttons, no connection is established with Instagram's servers. When you click the button, a new browser window opens, and the Instagram page is called up, where you can use the Instagram button (possibly after entering your login details).
Instagram LLC, based in the United States, is certified under the US-European "Privacy Shield" data protection agreement, which ensures compliance with the level of data protection applicable in the EU.
For more information on the purpose and extent of data collection and further processing and use of the data by Instagram, as well as your rights in this regard and settings options for protecting your privacy, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/
10) ONLINE MARKETING
10.1 DoubleClick by Google
This website uses the online marketing tool DoubleClick by Google operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick").
DoubleClick uses cookies to display ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to track which ads are shown in which browser and can thus prevent them from being shown multiple times. Processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 para. 1 lit. f GDPR.
Additionally, DoubleClick may use cookie IDs to record so-called conversions related to ad requests. For example, this is the case when a user sees a DoubleClick ad and later visits the advertiser’s website with the same browser and makes a purchase on the advertiser’s website with the same browser. According to Google, DoubleClick cookies do not contain personal information.
Through the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our knowledge: by integrating DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google may assign the visit to your account. Even if you are not registered with Google or not logged in, there is a possibility that the provider will detect and store your IP address.
If you want to object to participating in this tracking procedure, you can set your browser to block cookies from the domain www.googleadservices.com, https://www.google.de/settings/ads, whereby this setting is removed when you delete your cookies. You can also contact the Digital Advertising Alliance at www.aboutads.info for information about setting cookies and creating settings for this. Finally, you can set your browser to be informed about the placement of cookies and individually decide on their acceptance or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.
Google LLC, based in the United States, is certified under the US-European data protection agreement "Privacy Shield," which guarantees compliance with the level of data protection applicable in the EU.
More information about the privacy policy of DoubleClick by Google can be found at the following internet address: https://www.google.de/policies/privacy/
10.2 Use of Google AdWords Conversion Tracking
This website uses the online advertising program "Google AdWords" and, as part of conversion tracking, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use the offer of Google AdWords to draw attention to our attractive offers using external websites. Based on the data from the advertising campaigns, we can determine how successful the individual advertising measures are. In doing so, we pursue the interest of advertising that is interesting for you, to make our website more interesting for you, and to make a fair calculation of the advertising costs.
The conversion tracking cookie is set when a user clicks on an AdWords ad placed by Google. Cookies are small text files stored on your computer system. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user has clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. The information collected with the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The customers learn the total number of users who have clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that can personally identify users. If you do not want to participate in tracking, you can block the Google conversion tracking cookie by setting your internet browser accordingly. You will then not be included in the conversion tracking statistics. We use Google AdWords based on our legitimate interest in targeted advertising in accordance with Art. 6 para. 1 lit. f GDPR.
Google LLC, based in the United States, is certified under the US-European data protection agreement "Privacy Shield," which guarantees compliance with the level of data protection applicable in the EU.
More information about Google's privacy policy can be found at the following internet address: https://www.google.de/policies/privacy/
You can permanently disable cookies for advertising preferences by downloading and installing the browser plugin available at the following link: https://www.google.com/settings/ads/plugin?hl=de
Please note that certain features of this website may no longer be available or may be limited if you disable the use of cookies.
11) WEB ANALYTICS SERVICES
Google (Universal) Analytics
This website uses Google Analytics, a web analytics service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies" (text files placed on your computer) to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including the truncated IP address) is usually transmitted to a Google server in the USA and stored there.
This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by truncating it and excludes direct personal reference. This extension means that your IP address is truncated by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the USA and truncated there. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization purposes.
Google uses this information on our behalf to analyze your use of the website, to compile reports on website activity, and to provide us with other services related to website and internet usage. The IP address transmitted by Google Analytics from your browser is not combined with other data from Google.
You can prevent the storage of cookies by adjusting the settings in your browser software; however, we point out that in this case, you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) being sent to Google and the processing of these data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plugin or within browsers on mobile devices, you can click on the following link to set an opt-out cookie that prevents Google Analytics from collecting data in the future: Google Analytics opt-out. This opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you will need to click on this link again: Google Analytics opt-out.
More information about Universal Analytics can be found here: https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376
12) RETARGETING/ REMARKETING/ RECOMMENDATION ADVERTISING
Facebook Custom Audience via Pixel Method
This website uses the "Facebook Pixel" from Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, United States ("Facebook"). If explicit consent is given, this allows tracking of user behavior after they have seen or clicked on a Facebook ad. This procedure serves to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can optimize future advertising measures.
Facebook Inc., based in the United States, is certified under the US-European "Privacy Shield" agreement for data protection, which guarantees compliance with the level of data protection applicable in the EU. To disable the use of cookies on your computer, you can set your internet browser to prevent cookies from being stored or delete already stored cookies. Disabling all cookies may, however, result in some features on our websites no longer being performed. You can object to the use of cookies by external providers such as Facebook on the website of the Digital Advertising Alliance: https://www.aboutads.info/choices/
Google AdWords Remarketing
Our website uses the features of Google AdWords Remarketing, which allows us to advertise this website in Google search results and on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For this purpose, Google places a cookie in your browser, which automatically uses a pseudonymous cookie ID and enables interest-based ads based on the pages you visit. Processing is carried out based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 para. 1 lit. f GDPR.
Further data processing only occurs if you have given consent to Google for linking your internet and app browsing history with your Google account and using information from your Google account to personalize ads you see on the internet. If you are logged in to Google during your visit to our website, Google uses your data together with Google Analytics data to personalize audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked with Google Analytics data to create target groups.
You can permanently disable the setting of cookies for advertising preferences by downloading and installing the browser plugin available at the following link: https://www.google.com/settings/ads/onweb/ You can also contact the Digital Advertising Alliance at www.aboutads.info for information about setting cookies and creating settings for this.
Google LLC, based in the United States, is certified under the US-European data protection agreement "Privacy Shield," which guarantees compliance with the level of data protection applicable in the EU.
More information about Google Ads can be found here: https://www.google.com/policies/technologies/ads/
13) RIGHTS OF THE DATA SUBJECT
13.1 Applicable Data Protection Laws
The applicable data protection legislation grants you, with respect to the data controller responsible for processing your personal data, the following rights (information and intervention rights), which we will inform you about below:
Right to Information according to Art. 15 GDPR: You have the right to obtain information about your personal data processed by us, including the purposes of the processing, the categories of processed personal data, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of the right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the source of your data if not collected by us, the existence of automated decision-making including profiling, and, if applicable, meaningful information about the involved logic and the significance and intended consequences of such processing, as well as your right to be informed about safeguards under Art. 46 GDPR if your data is transferred to third countries.
Right to Rectification according to Art. 16 GDPR: You have the right to immediate rectification of inaccurate data concerning you and/or completion of incomplete data stored by us.
Right to Erasure according to Art. 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Art. 17 para. 1 GDPR are met. However, this right does not exist particularly if processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
Right to Restriction of Processing according to Art. 18 GDPR: You have the right to request the restriction of processing of your personal data while the accuracy of your data, which you dispute, is verified, if you refuse to have your data erased due to unlawful processing and request the restriction of processing instead, if you need your data for the establishment, exercise, or defense of legal claims after we no longer need the data for the purposes achieved, or if you have objected on grounds relating to your particular situation, as long as it is not yet clear whether our legitimate reasons override yours.
Right to Notification according to Art. 19 GDPR: You have the right to request the data controller to notify all recipients to whom your personal data has been disclosed of any rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
Right to Data Portability according to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to transfer it to another data controller, where technically feasible.
Right to Withdraw Consent according to Art. 7 para. 3 GDPR: You have the right to withdraw your consent to the processing of data at any time with future effect. In the event of withdrawal, we will immediately erase the relevant data unless further processing is based on a legal ground for processing without consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before the withdrawal.
Right to Lodge a Complaint according to Art. 77 GDPR: If you believe that the processing of personal data concerning you infringes the GDPR, you have – without prejudice to any other administrative or judicial remedy – the right to lodge a complaint with a supervisory authority, particularly in the member state of your habitual residence, place of work, or place of the alleged infringement.
13.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR LEGITIMATE INTERESTS IN THE CONTEXT OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE RELEVANT DATA. FURTHER PROCESSING MAY, HOWEVER, BE RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.
14) DURATION OF STORAGE OF PERSONAL DATA
The duration of the storage of personal data is determined by the respective legal retention periods (e.g., retention periods under commercial and tax law). After the retention period has expired, the relevant data is routinely erased, provided it is no longer needed to fulfill or initiate a contract and/or we no longer have a legitimate interest in further storage.