PrivacyPolicy

General notice and mandatory information

Name of the controller

The controller responsible for data processing on this website is:

The controller decides alone or jointly with others on the purposes and means of processing personal data, such as names, contact details and similar information.

Withdrawal of your consent to data processing

Some data processing operations are possible only with your express consent. You may withdraw consent you have already given at any time. An informal notification by email is sufficient for withdrawal. The lawfulness of data processing carried out before withdrawal remains unaffected.

Right to lodge a complaint with the competent supervisory authority

If you are affected by a data protection violation, you have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the data protection officer of the German federal state in which our company is based. The following link provides a list of data protection officers and their contact details:

bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party. The data will be provided in a machine-readable format. If you request direct transfer of the data to another controller, this will be done only where technically feasible.

Right of access, rectification, restriction and erasure

Within the framework of the applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients and the purpose of the data processing. Where applicable, you also have a right to rectification, restriction or erasure of this data. You may contact us at any time using the contact details provided in the imprint if you have questions about this or about personal data more generally.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content that you send to us as the site operator, this website uses SSL or TLS encryption. This means that data you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https://" address line in your browser and by the lock symbol in the browser bar.

Google Web Fonts

This website uses web fonts from Google. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The use of these web fonts makes it possible to present our website as intended, regardless of which fonts are available locally on your device. This is done by retrieving Google Web Fonts from a Google server in the USA and by transmitting your data to Google. This includes your IP address and which page you visited on our website. Google Web Fonts are used on the basis of Art. 6(1)(f) GDPR. As the operator of this website, we have a legitimate interest in the optimal presentation and transmission of our website.

Google is certified under the EU-US Privacy Shield. This data protection agreement is intended to ensure compliance with the level of data protection applicable in the EU.

Details about Google Web Fonts can be found at google.com/fonts. Further information is available in Google's privacy policy: policies.google.com/privacy/partners?hl=en.

Use of Google Analytics

We use Google Analytics to analyse website usage. The data obtained from this is used to optimise our website and advertising measures.

Google Analytics is provided to us by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes website usage data on our behalf and is contractually obliged to take measures to ensure the security and confidentiality of the processed data.

During your visit to the website, the following data may be recorded, among other things:

• Pages accessed
• Orders including revenue and ordered products
• Achievement of website goals, such as contact requests and newsletter registrations
• Your behaviour on the pages, such as time spent, clicks and scrolling behaviour
• Your approximate location, such as country and city
• Your IP address in shortened form, so that unique assignment is not possible
• Technical information such as browser, internet provider, device and screen resolution
• The source of your visit, meaning the website or advertising medium through which you came to us

Personal data such as name, address or contact details is never transmitted to Google Analytics.

This data is transferred to Google servers in the USA. We point out that the USA cannot guarantee the same level of data protection as within the EU.

Google Analytics stores cookies in your web browser for two years from your last visit. These cookies contain a randomly generated user ID that can be used to recognize you on future visits to the website.

The recorded data is stored together with the randomly generated user ID, which enables the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored indefinitely in aggregated form.

If you do not agree to the collection of this data, you can prevent it by installing the browser add-on to disable Google Analytics once, or by rejecting cookies through our cookie settings dialog.

PayPal

We offer the option of processing payment through the payment service provider PayPal, PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6(1)(f) GDPR). In this context, we pass the following data to PayPal where necessary for contract fulfilment (Art. 6(1)(b) GDPR).

• First name
• Last name
• Address
• Email address
• Telephone number

The processing of the data specified in this section is neither required by law nor by contract. Without the transmission of your personal data, we cannot process a payment via PayPal. However, you may also send us your order directly by email. You will then receive an invoice and the data will be stored only internally in our customer records.

For various services, such as payment by direct debit, PayPal carries out a credit check to ensure your willingness and ability to pay. This corresponds to PayPal's legitimate interest pursuant to Art. 6(1)(f) GDPR and serves the performance of the contract pursuant to Art. 6(1)(b) GDPR. For this purpose, your data, including name, address, date of birth and bank account details, is passed on to credit agencies. We have no influence on this process and receive only the result of whether the payment has been completed, rejected or is pending review.

Further information on objection and removal options in relation to PayPal can be found at: paypal.com/de/webapps/mpp/ua/privacy-full.

Your data is stored until payment processing is completed. This also includes the period required for handling refunds, receivables management and fraud prevention.