Privacy Policy

Data protection declaration

Unless stated otherwise below, the provision of your personal data is neither legally nor contractually obligatory, nor required for conclusion of a contract. You are not obliged to provide your data. Not providing it will have no consequences. This only applies as long as the processing procedures below do not state otherwise.
“Personal data” is any information relating to an identified or identifiable natural person.

 
Server log files
You can use our websites without submitting personal data. 
Every time our website is accessed, user data is transferred to us or our web hosts/IT service providers by your internet browser and stored in server log files. This stored data includes for example the name of the site called up, date and time of the request, the IP address, amount of data transferred and the provider making the request. The processing is carried out on the basis of Article 6(1) f) GDPR due to our legitimate interests in ensuring the smooth operation of our website as well as improving our services.
 
Collection and processing when using the contact form 
When you use the contact form we will only collect your personal data (name, email address, message text) in the scope provided by you. The data processing is for the purpose of making contact. By submitting your message you agree to the processing of your transmitted data. Processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent.You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. We will only use your email address to process your request. Finally your data will be deleted, unless you have agreed to further processing and use.
 
Use of Google reCAPTCHA 
Our website uses the reCAPTCHA service by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The request serves to distinguish whether the input was made by a human or automatic machine processing. For this purpose your input will be transmitted to Google and used by them further. In addition, the IP address and any other data required by Google for the reCAPTCHA service will be transferred to Google. This data will be processed by Google within the EU and potentially also in the USA. Transmission of data to the USA is covered by an adequacy decision by the European Commission, the “Privacy Shield”. Google participates in “Privacy Shield” and has submitted to its requirements. 
Processing is carried out on the basis of Article 6(1)f) GDPR due to our legitimate interest in protecting our website from automated spying, misuse and SPAM.
You can find more detailed information on Google reCAPTCHA and the associated data protection declaration at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy
 
Customer account
When you open a customer account, we will collect your personal data in the scope given there. The data processing is for the purpose of improving your shopping experience and simplifying order processing. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your customer account will then be deleted.
 
Data collection when you post a comment 
When you comment on an article or a contribution, we collect your personal data (name, email address, comment text) only in the scope provided by you. The processing serves to allow you to comment and to display comments. By submitting the comment you agree to the processing of the transmitted data. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. You personal data will then be deleted.
 
On publication of your comment only the name you have entered will be published.

On submission of your comment your IP address will also be saved in order to prevent misuse of the comment function and to ensure the security of our IT systems. By submitting the comment you agree to the processing of the transmitted data. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your IP address will then be deleted.
 
Collection, processing, and transfer of personal data in orders
When you submit an order we only collect and use your personal data insofar as this is necessary for the fulfilment and handling of your order as well as processing of your queries. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of Article 6(1) b) GDPR and is required for the fulfilment of a contract with you. 
Your data is transferred here for example to the shipping companies and dropshipping providers, payment service providers, service providers for handling the order and IT service providers that you have selected. We will comply strictly with legal requirements in every case. The scope of data transmission is restricted to a minimum.
 
Use of your email address for mailing of newsletters
We use your email address outside of contractual processing exclusively to send you a newsletter for our own marketing purposes, if you have explicitly agreed to this. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. You can unsubscribe from the newsletter at any time using the relevant link in the newsletter or by contacting us. Your email address will then be removed from the distributor.
 
Forwarding of your email address to shipping companies for information on shipping status
We forward your email address to the shipping company in the course of contractual processing, if you have explicitly agreed to this in the order process. The forwarding is for the purpose of informing you by email on the shipping status of your order. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us or the transport company without affecting the legality of the processing carried out with your consent up to the withdrawal.
 
Use of an external merchandise management system
We use a merchandise management system in the course of order processing for the purposes of contractual processing. For this purpose your personal data as collected in the course of the order will be sent to
JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven, Germany 
Data collection and processing as part of a credit check 
When paying in advance, e.g. by invoice or direct debit, we reserve the right to obtain a credit report on the basis of mathematical and statistical processes using 
KSV1870 Information GmbH, Wagenseilgasse 7, 1120 Wien. For this purpose we will transmit the personal data required for a credit assessment to the above company and use the information received on the statistical likelihood of a payment default for a balanced decision on the justification, execution or termination of the contractual relationship. The credit check can include probability values (score values) which are calculated on the basis of scientifically recognised mathematical and statistical procedures, taking address information among other things into account. Your interests worthy of protection will be taken into account in accordance with legal requirements. The data processing is for the purpose of credit checking for initiation of contract. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in protection from payment default when paying in advance. You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation. The provision of data is required for conclusion of contract with your desired payment method. Failure to provide it will mean that the contract cannot be concluded with your desired payment method.

Data collection and processing, credit check when purchasing on account via heidelpay
When paying by invoice via heidelpay, personal data are transmitted to the collection service provider heidelpay (Heidelberger Payment GbmH, Vangerowstraße 18, 69115 Heidelberg) and processed there. The data processing is for the purpose of offering purchase on account as well as the credit check required for this. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in offering various payment methods as well as our justified interest in protection from payment default. You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation. In order to carry out its in-house identity and credit check, Billpay, or the partner companies commissioned by Billpay, send data to credit agencies and receives information from them and, if applicable, information on creditworthiness on the basis of mathematical and statistical procedures, taking address information among other things into account.
Specifically, the credit agencies may be among those named in the illustrative but not exhaustive list below:
- Schufa Holding AG, Bürgel Wirtschaftsinformationen GmbH & Co. KG,
- Arvato Infoscore GmbH, Deltavista GmbH, Universum Business GmbH,
- Bisnode International Group,
- Regis24 GmbH,
- Creditreform AG.
The provision of data is required for conclusion of contract with your desired payment method. Failure to provide it will mean that the contract cannot be concluded with your desired payment method.

 
Use of personal data if you choose Klarna as payment method 
If you have chosen Klarna’s payment services Klarna invoice and/or Klarna hire purchase as a payment option, you have agreed to us collecting and transmitting to Klarna the following required personal data for the handling of purchase on account and an identity and credit check such as first name, last name, date of birth, gender, email address, IP address and phone number as well as the data required for handling the purchase on account connected to the order, such as the number of items, item numbers, invoice amount and taxes in percentage. The data processing allows us to offer the payment methods of purchase on account and hire purchase as well as the required credit check. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal.This data is transmitted so that Klarna can produce an invoice for the handling of your purchase with your desired invoice processing method and carry out an identity and credit check. Klarna requires the buyer’s personal data in order to collect information from credit agencies for the purposes of identity and credit checking. In Germany these may be the following credit agencies:
- Schufa Holding AG, Kormoranweg 5, 65203 Wiesbaden 
- Bürgel Wirtschaftsinformationen GmbH & Co. KG, Postfach 5001 66, 22701 Hamburg 
- Creditreform Bremen Seddig KG, Contrescarpe 17, 28203 Bremen 
- infoscore Consumer Data GmbH, Rheinstraße 99, 76532 Baden-Baden.
In the course of deciding on the foundation, execution or termination of the contractual relationship, Klarna will, along with an address check, collect and use information on the buyer’s previous payment behaviour as well as probability values on this behaviour in the future. Klarna will calculate these score values on the basis of a scientifically recognised mathematical and statistical procedure. Klarna will use your address data, among other things, for this purpose. If this calculation shows that you are not creditworthy, Klarna will inform you of this immediately.
Revocation of the use of personal data by Klarna 
1. You may withdraw your consent to the use of personal data to Klarna at any time. Klarna may, however, remain entitled to process, use and transmit personal data if this is necessary for the contractually compliant handling of payment by Klarna’s services, is legally prescribed or is encouraged by a court or an authority.
2. Of course, you can get information on the personal data stored by Klarna at any time. This right is guaranteed by the Bundesdatenschutzgesetz (Federal Data Protection Act). If you as a buyer should want this or wish to share changes relating to the stored data with Klarna, you can send an email to datenschutz@klarna.de.
 
Data collection and processing when paying by credit card, direct debit and invoice via secupay AG
We have integrated the components secupay.Lastschrift (direct debit), secupay.Rechnungskauf (payment by invoice) and secupay.Kreditkarte (credit card) by secupay AG (Goethstr. 6, 01896 Pulsnitz; “secupay”) into our website. secupay is a payment institute in the sense of the Zahlungsdiensteaufsichtsgesetz (Payment Services Supervision Act - ZAG) registered with the Federal Financial Supervisory Authority (Graurheindorfer Str. 108, 53117 Bonn; “BaFin” (register number: 126737) and facilitates cashless payment for products and services online. secupay forms a procedure allowing the claim for the purchase price to be assigned to secupay. This allows a retailer to deliver goods, services or downloads to the customer immediately after the order is placed. If you choose “direct debit”, “payment by invoice” or “credit card” via secupay when ordering from us, your data will automatically be transmitted to secupay. By choosing one of these payment options you agree to transmission of your personal data as necessary for handling the payment. When handling the purchase via secupay, your payment method data is transmitted to secupay. secupay then carries out a technical check on the risk of payment default. The online retailer is then automatically notified that the financial transaction has been carried out. The personal data exchanged with secupay includes first name, last name, address, email address, IP address, phone number and other data which is required for handling the payment. Data is transmitted in order to process your payment and prevent fraud. We will also transmit other personal data to secupay if there is a justified interest in doing so. The personal data exchanged between us and secupay may be transmitted by secupay to credit agencies. This transmission is for the purpose of identity and credit checking. secupay may forward the personal data to affiliated companies and service providers or subcontractors where this is necessary for the fulfilment of contractual obligations or the data is to be processed on its behalf. You have the option of withdrawing your consent for secupay to handle your data at any time. Withdrawal will not affect personal data which have to be processed, used or transmitted for (contractually compliant) payment processing. secupay’s applicable data protection provisions can be found at https://www.secupay.com/en/privacy-policy.
 
Using PayPal
All PayPal transaction are covered by the PayPal Data Privacy Statement. You can found this at https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=en_GB

 
Cookies
Our website uses cookies. Cookies are small text files which are saved in a user’s internet browser or by the user’s internet browser on their computer system. When a user calls up a website, a cookie may be saved on the user’s operating system. This cookie contains a characteristic character string which allows the browser to be clearly identified when the website is called up again. We use cookies to make our offering more user-friendly, effective and secure. Cookies also allow our systems to recognise your browser after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. These services require the browser to be recognised again after a page change.
 
Our website also uses cookies to allow us to analyse the surfing behaviour of visitors to our website. 
 
Processing is carried out on the basis of § 15 (3) TMG (Telemedia Act) as well as art. 6 (1) lit. f GDPR due to our justified interest in the purposes above.
The data collected in this way is pseudonymised using technological measures. It is therefore not possible to connect the data to your person. The data will not be stored together with other personal data pertaining to you. You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation. Cookies will be stored on your computer. You therefore have full control over the use of cookies. By choosing corresponding technical settings in your internet browser, you can prevent the storage of cookies and transmission of the data they contain. Cookies which have already been saved may be deleted at any time. We would, however, like to point out that this may prevent you from making full use of all the functions of this website.
Using the links below, you can find out how to manage cookies (or deactivate them, among other things) in major browsers:
Use of Google Analytics 
Our website uses the web analysis service Google Analytics by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The processing of data serves to analyse this website and its visitors. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services to the website operator relating to website and internet use. The IP address communicated by your browser as part of Google Analytics is not associated with any other data held by Google. Google Analytics uses cookies, which make it possible to analyse your use of the website. The information generated by the cookie regarding your use of this website is usually transferred to a Google server in the USA and stored there. IP anonymisation is activated on this website. Google uses this to shorten your IP address beforehand within Member States of the European Union or in other signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Your data may be transmitted to the USA. Transmission of data to the USA is covered by an adequacy decision by the European Commission. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in needs-based and targeted design of the website. You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation. You can prevent the storage of cookies  by choosing corresponding technical settings in your internet browser; we would, however, like to point out that this may prevent you from making full use of all the functions of this website. You can also prevent collection of the data (including your IP address) generated by the cookies and related to your use of the website by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link [https://tools.google.com/dlpage/gaoptout?hl=en]. You can set an opt-out cookie to prevent collection by Google Analytics across devices. Opt-out cookies prevent the future collection of your data when you visit this website. You need to opt-out on all systems and devices in use for this to work comprehensively. If you click here, the opt-out cookie is set: Disable Google Analytics.  
You can find more detailed information on the terms and conditions of use and data protection at https://www.google.com/analytics/terms/ and at https://policies.google.com/?hl=en.
Use of YouTube
Our website uses YouTube LLC’s function for the embedding of YouTube videos. (901 Cherry Ave., San Bruno, CA 94066, USA; “YouTube”).
YouTube is an affiliated company of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;“Google”).This feature shows YouTube videos in an iFrame on the website. The option “advanced privacy mode” is enabled here. This prevents YouTube from storing information on visitors to the website. It is only if you watch a video that information is transmitted to and stored by YouTube.Further information on the data collected and used by YouTube and Google, your rights and privacy can be found in YouTube’s privacy policy (https://www.youtube.com/t/privacy).
 
Duration of storage 
After contractual processing has been completed, the data is initially stored for the duration of the warranty period, then in accordance with the retention periods prescribed by law, especially tax and commercial law, and then deleted after the period has elapsed, unless you have agreed to further processing and use.
 
Rights of the affected person
If the legal requirements are fulfilled, you have the following rights according to art. 15 to 20 GDPR: Right to information, correction, deletion, restriction of processing, data portability. You also have a right of objection against processing based on art. 6 (1) GDPR, and to processing for the purposes of direct marketing, according to art. 21 (1) GDPR.
 
Contact us at any time. Our contact details can be found in our imprint.
 
Right to complain to the regulatory authority
You have the right to complain to the regulatory authority according to art. 77 GDPR if you believe that your data is not being processed legally.
 
Right to object
If the data processing outlined here is based on our legitimate interests in accordance with Article 6(1)f) GDPR, you have the right for reasons arising from your particular situation to object at any time to the processing of your data with future effect.
If the objection is successful, we will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests or rights and freedoms, or the processing is intended for the assertion, exercise or defence of legal claims.
If personal data is being processed for the purposes of direct advertising, you can object to this at any time by notifying us. If the objection is successful, we will no longer process the personal data for the purposes of direct advertising.
 
Use of idealo
We have integrated the logo of our partner, idealo (idealo internet GmbH, Ritterstraße 11, 10969 Berlin), onto our website. When you visit our website, information is automatically sent to the idealo server by the browser you are using on your device. This information is collected and then stored on a so-called server log file for 7 days before being automatically deleted. This process requires no intervention from you and includes the following information:
  • IP address of the user's computer,
  • Date and time the website is accessed,
  • Name and URL of the retrieved file,
  • Website from where the user came (Referrer URL),
  • Browser used and, if applicable, the operating system of your computer and the name of your access provider.
The temporary storage of IP addresses by the system is necessary in order for the website to be accessed. In this regard, the IP address must be stored for the duration of the visit to the website. Storage in log files occurs to guarantee optimal functioning of the website. The data collected also serves to optimise the website and ensure the safety of the information technology systems. At no point is any data stored together with other personal data. The legal basis for this data processing is Art. 6 para. 11point f GDPR.

last update: 14.08.2018