Personal data is all the information that relates to an identified or identifiable individual. In particular, this includes information that enables us to identify you, such as your name, your telephone number, your address or e-mail address. Statistical data that we collect when you visit our website and, for example, data that cannot be associated with your person, does not fall under the term of personal data.
The contact person and so-called person responsible for the processing of your personal data when you visit this website in accordance with the basic EU data protection regulation (GDPR) is
Am Kupfergraben 6A,
10 117 Berlin
Phone +49 (0) 30 95 999 3810
If you have any questions about data protection in connection with our products or the use of our website, you can also contact our data protection officer at any time. He can be reached at the above postal address and at the e-mail address previously provided (keyword: "Attn. Data Protection Officer").
Every time you use our website, we collect the access data that your browser automatically transmits to enable you to visit the website. The access data includes in particular:
· IP address of the requesting device,
· Address of the called up website and the enquiring website,
· Information about the browser and operating system used,
· Online IDs (e.g. device IDs, session IDs).
The processing of this data is necessary to enable the visit to the website and to guarantee the permanent functionality, availability and security of our systems. The access data is also temporarily stored in internal log files for the purposes described above in order to produce statistical data on the use of our website, to further develop our website with regard to the usage habits of our visitors (e.g. if the proportion of mobile devices used to access the pages increases) and to generally maintain our website administratively. The legal basis is Art. 6 para. 1 s.1 lit. b of the GDPR.
The information stored in the log files does not allow any direct inferences to be made regarding your person – in particular, we only store the IP addresses in an abridged, anonymised form. The log files are stored for 30 days and archived after subsequent anonymisation.
You can contact us via the contact form. In this context, we process data exclusively for the purpose of communicating with you. The legal basis is Art. 6 para. 1 lit. b of the GDPR. The data collected by us when using the contact form will be automatically deleted after complete processing of your request, unless we still need your request to fulfil contractual or legal obligations (see section "Storage period").
You have the possibility to register for our login area in order to use the full range of functions of our website. We have marked the data you are obliged to provide as mandatory fields (in particular first name, last name and e-mail address). Registration is not possible without this data. The legal basis of the processing is Art. 6 para. 1 lit. b of the GDPR.
When placing an order, we collect mandatory information necessary for the execution of the contract:
• First name and surname
• E-mail address
• Billing and shipping address.
Optionally, the telephone number can be provided so that we can also contact you in this way in the event of queries. The legal basis of processing is Art. 6 para. 1 s.1 lit. b of the GDPR.
You have the possibility to order our newsletters, in which we inform you regularly about innovations to our products and campaigns.
We use the so-called double opt-in procedure, i.e. we shall only send you information by e-mail if you confirm that you are the owner of the e-mail address provided by clicking on a link in our notification e-mail. If you confirm your e-mail address, we shall store your e-mail address, the time of registration and the IP address assigned at registration until you unsubscribe from the newsletter. The sole purpose of storing this information is to send you the newsletters and to provide proof of your registration. You can unsubscribe at any time. A corresponding link can be found in every newsletter. A message to the contact data given above or in the newsletter (e.g. by e-mail or letter) is of course also sufficient. The legal basis of the processing is your consent in accordance with Art. 6 para. 1 lit. a of the GDPR.
In our newsletters, we use commercially available technology with which interactions with the newsletters can be measured (e.g. opening of the e-mail, clicked links). We use this data in pseudonymous form for general statistical evaluations, as well as for the optimisation and further development of our content and customer communication. This is done with the help of small graphics embedded in the newsletter (so-called pixels). The data is collected exclusively pseudonymised and is not linked to your other personal data. The legal basis for this is our above-mentioned legitimate interest pursuant to Art. Art. 6 para. 1 s. 1 lit f of the GDPR. We want to share content that is as relevant as possible for our customers through our newsletter and to better understand what readers are actually interested in. If you do not want this analyse of usage behaviour, you can unsubscribe from the newsletter or deactivate graphics in your e-mail program by default. The data on the interaction with our newsletters is stored pseudonymously for 30 days and subsequently made completely anonymous.
If you take part in one of our surveys, we use your data for market and opinion research. As a matter of principle, we evaluate the data anonymously for internal purposes. If surveys are not evaluated anonymously in exceptional cases, the data will only be collected with your consent. The GDPR is not applicable to anonymous surveys and, in exceptional cases of personal evaluations, the legal basis is the aforementioned consent pursuant to Art. 6 para. 1 s. 1 lit. a of the GDPR.
In the context of sweepstakes, we use your data for the purpose of conducting the sweepstake and notifying you of the prize. You can find detailed information in our terms of participation for each competition. The legal basis of the processing is the sweepstake agreement in accordance with Art. 6 para. 1 s.1 lit. b of the GDPR.
For some of our services, it is necessary for us to use so-called cookies. A cookie is a small text file that is stored by the browser on your device. Cookies are not used to run programs or deliver viruses to your computer. The main purpose of our own cookies is rather to provide an offer tailored to your needs and to make the use of our services as time-saving as possible.
We use our own cookies in particular
· to indicate that information placed on our website has been displayed so that it will not be displayed again the next time you visit the website.
We wish to make your use of our website more comfortable and customised. These services are based on our aforementioned legitimate interests; the legal basis is Art. 6 para. 1 s. 1 lit f of the GDPR.
The legal basis for data processing described in the following section is Art. 6 para. 1 s. 1 lit f of the GDPR, based on our legitimate interest in the demand-oriented design and continuous optimisation of our website.
In the following list of technologies we use, you will also find information on possible contradictions with regard to our analysis measures using an opt-out cookie. Please note that after deleting all cookies in your browser or later use of another browser and/or profile, an opt-out cookie must be set again.
In the following section, we would like to explain these technologies and the providers used for them in more detail.
The following, in particular, can be added to the data collected:
· the identification number of a cookie;
· the device ID of mobile device;
· technical information about the browser and the operating system.
However, the data collected is stored exclusively pseudonymously, so that no direct conclusions can be drawn about the persons.
In the following list of technologies we use, you will also find information on the possible contradictions with regard to our analysis measures using an opt-out cookie. Alternatively, you can exercise your objection by making appropriate settings on the websites Truste or Your Online Choices , which provide bundled opportunities for objections from many advertisers. Both sides allow the listed providers to deactivate all ads at once by means of opt-out cookies or alternatively to make the settings for each provider individually. Please note that after deleting all cookies in your browser or later use of another browser and/or profile, an opt-out cookie must be set again.
If you use a Google Account, depending on the settings in your Google Account, Google can link your web and app browsing history to your Google Account and use information from your Google Account to personalise ads. If you do not wish to be associated with your Google profile, you must log out of Google before accessing our contact page.
Google will use this stored information to evaluate your use of the website, to compile reports on website activity for website operators, and for the provision of other services related to Internet use and use of the website.
We have included videos on our website that are stored on YouTube and can be played directly from our websites. YouTube is a multimedia service of YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA ("YouTube"), a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). In the event that personal data is transferred to the USA, Google and the Group company YouTube have submitted to the EU-US Privacy Shield. The legal basis is Art. 6 para. 1 s. 1 lit. f of the GDPR, based on our legitimate interest in the integration of video and image content.
By visiting our website, YouTube and Google receive the information that you have accessed the corresponding subpage of our website. This happens regardless of whether you are logged in to YouTube or Google or not. YouTube and Google use this data for purposes of advertising, market research and demand-oriented design of their websites. If you visit YouTube on our website while logged into your YouTube or Google profile, YouTube and Google may also link this event to their profiles. If you do not wish to be associated, you must log out of Google before visiting our website.
You can configure your browser to reject cookies as shown above, or you can prevent the collection of data generated by cookies and related to your use of this website and the processing of this data by Google by deactivating the "Personalised advertising on the web" button in the Google settings for advertising . In this case, Google will only display non-individualised advertising.
For more information, see Google's Privacy Notices , which also applies to YouTube.
The data collected by us will only be shared if:
· you have expressly consented to this under Art. 6 para. 1 s. 1 lit. a of the GDPR,
· disclosure is necessary in accordance with Art. 6 para. 1 s. 1 lit f of the GDPR to assert, exercise or defend legal claims and there is no reason to believe that you have an overriding interest in not disclosing your data,
· in accordance with Art. 6 para. 1 p. 1 lit c GDPR we are legally obliged to pass it on or
· this is legally permissible and in accordance with Art. 6 para. 1 s. 1 lit b of the GDPR is required for the processing of contractual relationships with you or for the implementation of pre-contractual measures that are taken at your request.
In addition, disclosure may take place in connection with official enquiries, court orders and legal proceedings if it is necessary for legal prosecution or enforcement.
In the event that personal data is transferred to the USA, Google has submitted itself to comply with EU-US Privacy Shield. The legal basis is Art. 6 para. 1 s. 1 lit. f of the GDPR, based on our legitimate interest in integrating and managing several tags on our website in an uncomplicated manner. See Google tag manager information for more information.
We have a legitimate interest in carrying out the credit assessments described below to be protected against bad debts and misuse by third parties. In the event that we have paid or provided service in advance, we reserve the right to obtain a credit assessment report, based on mathematical and statistical methods, from SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden.
If the result of a credit check does not meet our requirements, we reserve the right to demand a secure method of payment (e.g. credit card) or to refuse to conclude the contract.
· when paying by PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A, 22-24 Boulevard Royal, L-2449 Luxembourg, Luxembourg,
· when paying by Amazon Payments: Amazon Payments Europe S.C.A. 5, Rue Plaetis, L-2338 Luxembourg, Luxembourg,
· when paying by Klarna: Klarna Bank AB (publ). Sveavägen 46, 111 34 Stockholm, Sweden
· when paying by Giropay, GIROPAY GMBH, An der Welle 4, 60322 Frankfurt/Main, Germany
In the case of payment by credit card, enter the required payment information (credit card details) directly on our website.
In principle, we only store personal data for as long as necessary to fulfil contractual or statutory obligations for which we have collected the data. Thereafter, we delete the data immediately, unless we need the data, until the expiration of the statutory limitation period for evidence for civil claims or for statutory storage requirements.
For evidence, we have to keep contract data for another three years from the end of the year in which the business relationship with you ends. Any claims become statute-barred after the legal limitation period at the earliest at this time.
Even after that, we still have to store some of your data for accounting reasons. We are obliged to do so on the basis of statutory documentation obligations that may arise from the German Commercial Code, the Fiscal Code, the Banking Act, the Money Laundering Act and the Securities Trading Act. The periods specified there for keeping documents are two to ten years.
You have the right to request information about the processing of your personal data by us at any time. We shall explain how the data is processed and provide you with an overview of the data stored concerning your person as part of the provision of information.
If data stored with us is incorrect or no longer up-to-date, you have the right to have this data corrected.
You may also request that your data be deleted. If, in exceptional cases, deletion is not possible due to other legal regulations, the data will be blocked so that it is only available for this legal purpose. You may also have the processing of your data restricted, e.g. if you believe that the data we have stored is incorrect.
You also have the right to data transferability, i.e. on request, we will send you a digital copy of the personal data you have provided.
In order to exercise your rights as described here, you may contact us at any time using the contact details mentioned above. This also applies if you wish to receive copies of guarantees to prove an adequate level of data privacy.
In addition, you have the right to object to the data processing described in Art. 6 para. 1 s. 1 lit e or f of the GDPR. Finally, you have the right to complain to the supervisory data protection authority to which we are accountable. You may exercise this right before a supervisory authority in the member state in which you reside, work or where the suspected infringement takes place. The responsible supervisory authority in Berlin is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit, , Friedrichstraße). 219, 10969 Berlin.
In accordance with Article 7 para. 2 of the GDPR, you have the right to revoke the consent you have given to us at any time. As a result, we are no longer allowed to continue the data processing that is based on this consent in the future. The withdrawal of consent shall not affect the lawfulness of processing taking place on the basis of this consent before its revocation.
Insofar as we collect your data on the basis of legitimate interests pursuant to Art. 6 Para. 1 lit f of the GDPR, you have the right under Art. 21 of the GDPR to object to the processing of your data and to give us reasons which arise from your particular situation and which in your opinion speak for a predominance of your interests that are worthy of protection. If you object to data processing for direct marketing purposes, you have a general right of objection, which we will also implement if you do not give reasons.
If you would like to make use of your right of revocation or objection, an informal message to the above-mentioned contact data is also sufficient.
We maintain up-to-date technical measures to ensure data security, in particular, to protect your personal data against dangers during data transfers, as well as prior knowledge of third parties. These measures are kept up to date with the latest state of the art technology. To secure the personal information you provide on our website, we use Transport Layer Security (TLS), which encrypts the information you enter.
Version: 1.0 / As of May 2018