Data protection regulation

The data controller is:

Lea Strunk e.K. , Studio Hertzberg
Stuttgarterstr.47
12059 Berlin
Management: Lea Strunk

Thank you for your interest in our online shop. The protection of your privacy is very important to us. Below, we inform you in detail about how we handle your data.

  1. Access data and hosting

You can visit our websites without providing any personal information. Each time a website is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of retrieval, the amount of data transferred and the requesting provider (access data), and documents the retrieval.

This access data is evaluated exclusively for the purpose of ensuring the trouble-free operation of the site and improving our offer. This serves to protect our legitimate interests, which are overriding in the context of a balancing of interests, in a correct presentation of our offer, pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. All access data will be deleted no later than seven days after the end of your visit to the site.

Hosting services by a third-party provider

As part of processing on our behalf, a third-party provider performs hosting and website display services for us. All data collected in connection with the use of this website or in the forms provided in the online shop, as described below, will be processed on its servers. Processing on other servers will only take place within the scope explained here.

This service provider is located in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.

  1. Data collection and use for contract processing, contact, and opening a customer account

We collect personal data if you voluntarily provide it to us in the context of your order or when contacting us (e.g., via contact form or e-mail). Mandatory fields are marked as such, because in these cases we absolutely need the data for contract processing or for processing your contact request, and you cannot send the order or contact request without providing them. Which data is collected can be seen from the respective input forms. We use the data you provide in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for contract processing and processing your inquiries.

Insofar as you have given your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR by choosing to open a customer account, we use your data for the purpose of opening a customer account.

After complete processing of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the expiry of tax and commercial law retention periods, unless you have expressly consented to further use of your data or we reserve the right to further data use that is legally permitted and about which we inform you in this declaration. Deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described below or via a function provided for this purpose in the customer account.

  1. Data transfer

For the fulfillment of the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the order process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in to the payment service provider with your access data during the order process. The data protection declaration of the respective payment service provider applies in this respect.

We use a payment service provider whose registered office is in a country outside the European Union. The transfer of personal data to this company only takes place to the extent necessary for the fulfillment of the contract.

Data transfer to shipping service providers

If you have given us your express consent to this during or after your order, we will pass on your e-mail address and telephone number to the selected shipping service provider on the basis of this consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, so that they can contact you before delivery for the purpose of announcing or coordinating the delivery.

The consent can be revoked at any time by a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to further data use that is legally permitted and about which we inform you in this declaration.

DHL Paket GmbH

Sträßchensweg 10

53113 Bonn

Deutschland

Use of payment service providers

Paypal
If you pay via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "installment payment" via PayPal, we will pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), in the context of payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of payment default for the purpose of deciding on the provision of the respective payment method. The credit check can contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, but not exclusively, are included in the calculation of the score values. Further data protection information, including on the credit agencies used, can be found in PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

SOFORT
If you select the payment method "KLARNA" & "SOFORT", payment processing is carried out by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we pass on your information provided during the order process, along with information about your order, in accordance with Art. 6 Para. 1 lit. b GDPR. Your data is passed on exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this. Further information on SOFORT's data protection regulations can be found at the following internet address: https://www.klarna.com/sofort/datenschutz.

KLARNA

In collaboration and cooperation with the payment service provider KLARNA (Klarna Bank AB (publ). Sveavägen 46, 111 34 Stockholm, Sweden), we offer you "Invoice", "Direct Debit" and "Pay Now" as payment options. In order to be able to offer you Klarna's payment methods, we may transmit your personal data in the form of contact and order data to Klarna during checkout, so that Klarna can assess whether you are eligible for their payment methods and to adapt these payment methods for you. Your transmitted personal data will be processed in accordance with Klarna's Privacy Policy. Further information about KLARNA can be found here and information about the KLARNA App can be found here.

PAYONE GmbH

PAYONE is a service of PAYONE GmbH, Daniel-Goldbach-Straße 17-19, 40880 Ratingen, Germany, which handles payment processes for purchases made through our website. To process your payment, we transmit your data to our payment provider PAYONE (PAYONE GmbH; payone.com) via a secure connection after completing the order. All entries and verifications for your payment are carried out and stored by the payment processor. You can find more information at: https://www.bspayone.com/DE/de/privacy

AMAZON PAY
If you select the "Amazon Pay" payment method, payment processing is handled by the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: "Amazon Payments"), to whom we transmit your information provided during the order process, along with information about your order, in accordance with Art. 6 para. 1 lit. b GDPR. Your data is transmitted exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this. Further information on Amazon Payments' data protection regulations can be found at the following internet address: https://pay.amazon.com/de/help/201751600

Use of specialized service providers for order processing and fulfillment

Billbee
Order processing is carried out via the service provider "Billbee" (Billbee GmbH, Paulinenstrasse 54, 32756 Detmold). Name, address, and, if applicable, other personal data are transmitted to Billbee exclusively for the processing of the online order, in accordance with Art. 6 Para. 1 lit. b GDPR. Your data is only transmitted to the extent that this is actually necessary for the processing of the order. Details on Billbee's data protection and its privacy policy can be viewed on Billbee's website at "billbee.io".

  1. Email newsletter and postal advertising

Email advertising with newsletter subscription

If you subscribe to our newsletter, we will use the data required for this or separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a dedicated link in the newsletter. After unsubscribing, we will delete your e-mail address from the recipient list, unless you have expressly consented to further use of your data or we reserve the right to further data use that is legally permitted and about which we inform you in this declaration.

The newsletter is sent by a service provider as part of processing on our behalf, to whom we forward your e-mail address for this purpose. This service provider is located within a country of the European Union or the European Economic Area.

Newsletter distribution with Klavyo

Our e-mail newsletters are sent via the technical service provider "Klaviyo", 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to whom we transfer the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system. Please note that your data is usually transferred to a Klaviyo server in the USA and stored there.

Klaviyo uses this information to send the newsletters on our behalf. Klaviyo does not use the data of our newsletter recipients to contact them themselves or to pass them on to third parties.
To protect your data in the USA, we have concluded a data processing agreement ("Data-Processing-Agreement") with Klaviyo, in which Klaviyo undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection regulations and, in particular, not to pass it on to third parties.

Klaviyo is also certified under the US-European data protection agreement "Privacy Shield" and thus undertakes to comply with EU data protection requirements.

You can view Klaviyo's data protection regulations here: https://www.klaviyo.com/privacy

Newsletter distribution with Mailchimp

If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 49 para. 1 sentence 1 lit. a GDPR.

You can unsubscribe from the newsletter at any time by sending a message to the contact option described below or by clicking on a link provided in the newsletter. After unsubscribing, we will delete your e-mail address, unless you have expressly consented to further use of your data or we reserve the right to further data use, which is permitted by law and about which we inform you in this declaration. The revocation of your consent is effective for the future and does not affect the legality of the processing carried out on the basis of the consent until revocation.

The newsletter is sent as part of processing on our behalf by a service provider (Mailchimp – Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA; Website: https://mailchimp.com; Privacy Policy: https://mailchimp.com/legal/privacy/), to whom we pass on your e-mail address for this purpose.

This service provider is located in the USA. There is no adequacy decision from the EU for data transfers to the USA. This means that data transmitted to these providers is not protected according to the usual data protection level of the GDPR. The provider is subject to US law and may therefore be obliged to disclose data to intelligence services if the relevant legal requirements are met. Risks for data subjects arise primarily from the difficult enforcement of rights, the lack of control over further processing or disclosure of data, and the access by government agencies described above.

Postal advertising and your right to object

Furthermore, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, e.g., for sending interesting offers and information about our products by post. This serves to protect our legitimate interests, which are overriding in the context of a balancing of interests, in addressing our customers for advertising purposes in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

  1. Cookies and web analysis

To make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to protect our legitimate interests, which are overriding in the context of a balancing of interests, in an optimized presentation of our offer in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies). You can find the duration of storage in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer™

Safari™

Chrome™

Firefox™

Opera™

If cookies are not accepted, the functionality of our website may be limited.

This website also uses the DoubleClick cookie as part of the use of Google Analytics (see below), which enables your browser to be recognized when visiting other websites. The information generated automatically by the cookie about your visit to this website is usually transmitted to a Google server in the USA and stored there. The IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area by activating IP anonymization on this website. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

Google will use this information to compile reports on website activity and to provide other services related to website usage. This serves to protect our legitimate interests in an optimal marketing of our website, which are overriding in the context of a balancing of interests, in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. Google may also transfer this information to third parties if this is legally required or insofar as third parties process this data on behalf of Google. After the purpose has ceased and we cease using Google DoubleClick, the data collected in this context will be deleted.

Google Double Click is a service of Google Ireland Limited, a company registered and operating under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).

Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. An up-to-date certificate can be viewed here. For companies certified under the Privacy Shield, an adequate level of data protection is established due to the agreements between the USA, the European Commission and Switzerland.

You can deactivate the DoubleClick cookie via this link. In addition, you can find out about the setting of cookies and make settings via the Digital Advertising Alliance. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited.

Essential Cookies

Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. Without these cookies, the website cannot function properly.

Statistics and Marketing Cookies

Statistical cookies help the shop owner understand how customers interact with websites by collecting and reporting information anonymously. Marketing cookies are used to track visitors across websites. The goal is to display ads that are relevant and engaging to the individual user and therefore more valuable to third-party advertisers.

Use of Google (Universal) Analytics for web analysis

This website uses Google (Universal) Analytics for website analysis. The web analysis service is offered by Google Ireland Limited, a company registered and operating under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). This serves to protect our legitimate interests in an optimized presentation of our offer, which are overriding in the context of a balancing of interests, in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as cookies. The automatically collected information about your use of this website is usually transmitted to a Google server in the USA and stored there. By activating IP anonymization on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics is generally not merged with other Google data. After the purpose has ceased and we cease using Google Analytics, the data collected in this context will be deleted.

Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. An up-to-date certificate can be viewed here. Due to this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can prevent Google from collecting the data generated by the cookie and related to your use of the website (incl. your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plug-in, you can click this link to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie will be placed on your device. If you delete your cookies, you must click the link again.

In addition, this website uses Google Signals. This is an extension function of Google Analytics that enables so-called "cross-device tracking". This means that if your internet-enabled devices are linked to your Google account, Google can create reports on usage behavior (in particular cross-device user numbers), even if you change your device. For this purpose, Google uses data insofar as you have activated the "personalized advertising" setting in your Google account.

This serves to protect our legitimate interests in an optimized presentation of our offer, which are overriding in the context of a balancing of interests, in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

No processing of personal data takes place by us in this respect; we only receive statistics created based on Google Signals.

You can deactivate the "personalized advertising" setting in your Google account at any time, and thus object to data collection by Google Signals.

  1. Online Marketing

Google Ads Remarketing

Through Google Ads, we advertise this website in Google search results and on third-party websites. For this purpose, the so-called remarketing cookie from Google is set when you visit our website, which automatically enables interest-based advertising using a pseudonymous CookieID and based on the pages you have visited. This serves to protect our legitimate interests in an optimal marketing of our website, which are overriding in the context of a balancing of interests, in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. After the purpose has ceased and we cease using Google Ads Remarketing, the data collected in this context will be deleted.

Further data processing only takes place if you have agreed with Google that your web and app browsing history will be linked to your Google account and information from your Google account will be used to personalize ads that you see on the web. If you are logged in to Google while visiting our website in this case, Google will use your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked with Google Analytics data by Google to form audiences.

Google Ads is a service of Google Ireland Limited, a company registered and operating under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).

Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. An up-to-date certificate can be viewed here. Due to this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can deactivate the remarketing cookie via this link. In addition, you can find out about the setting of cookies and make settings via the Digital Advertising Alliance.

Google Fonts

The script code "Google Fonts" is integrated on this website. Google Fonts is a service of Google Ireland Limited, a company registered and operating under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). This serves to protect our legitimate interests in a uniform presentation of the content on our website, which are overriding in the context of a balancing of interests, in accordance with Art. 6 Para. 1 lit. f) GDPR. In this context, a connection is established between the browser you are using and Google's servers. Google thereby becomes aware that our website has been accessed via your IP address.

Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. An up-to-date certificate can be viewed here. Due to this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield. Further information about data processing by Google can be found in Google's privacy policy.

Facebook Conversion Tracking

Facebook Pixel for creating Custom Audiences with extended data matching
Within our online offering, the so-called "Facebook Pixel" of the social network Facebook is used in the mode of extended data matching, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").
Based on explicit consent, when a user clicks on an advertisement placed by us on Facebook, an addition is made to the URL of our linked page by Facebook Pixel. This URL parameter is then written into the user's browser via a cookie, which our linked page itself sets. In addition, this cookie collects specific customer data, such as the email address, which we collect on our website linked to the Facebook ad during processes such as purchases, account logins or registrations (extended data matching). The cookie is then read by Facebook Pixel and enables the data, including the specific customer data, to be forwarded to Facebook.
With the help of the Facebook Pixel with extended data matching, Facebook is able to accurately determine the visitors to our online offering as a target group for the display of ads (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel with extended data matching to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products, which are determined by the visited websites) which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook Pixel with extended data matching, we also want to ensure that our Facebook Ads correspond to the potential interest of the users and do not appear annoying. We can also evaluate the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "Conversion"). Compared to the standard version of Facebook Pixel, the extended data matching function helps us to better measure the effectiveness of our advertising campaigns by recording more attributed conversions.
All transmitted data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with Facebook's data use policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to display advertisements on and off Facebook.
These processing operations only take place if explicit consent is given in accordance with Art. 6 Para. 1 lit. a GDPR.
Consent to the use of the Facebook Pixel may only be given by users older than 13 years of age. If you are younger, please ask your parents or guardians for permission.
The information generated by Facebook is usually transmitted to a Facebook server and stored there; this can also lead to a transmission to the servers of Facebook Inc. in the USA. Facebook Inc., based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which ensures compliance with the data protection level applicable in the EU.
You can revoke your consent at any time by deactivating Facebook Pixel tracking. For this purpose, you can set an opt-out cookie by clicking on the link below, which deactivates Facebook Pixel tracking:
Deactivate Facebook Pixel
This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click the link above again.

Pinterest Plugin

On our site, we use social plugins from the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA (“Pinterest”).

When you access a page that contains such a plugin, your browser establishes a direct connection to Pinterest’s servers. The plugin transmits log data to Pinterest’s server in the USA. This log data may contain your IP address, the address of the visited websites that also contain Pinterest functions, type and settings of the browser, date and time of the request, your usage of Pinterest, and cookies.

The use of the Pinterest plugin is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the broadest possible visibility in social media.

Further information on the purpose, scope and further processing and use of data by Pinterest, as well as your rights and options for protecting your privacy in this regard, can be found in Pinterest's privacy policy: https://policy.pinterest.com/de/privacy-policy.

  1. Social Media

Use of Instagram Social Plugins

On our website, so-called social plugins ("plugins") from social networks are used.

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of the respective social network. The content of the plugin is transmitted directly from the respective provider to your browser and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider (possibly in the USA) and stored there. If you are logged in to one of the services, the providers can directly associate your visit to our website with your profile in the respective social network. If you interact with the plugins, for example, by clicking the "Like" or "Share" button, the corresponding information is also transmitted directly to a server of the providers and stored there. The information is also published on the social network and displayed to your contacts there. This serves to protect our legitimate interests in an optimal marketing of our offer, which are overriding in the context of a balancing of interests, in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

The purpose and scope of data collection and the further processing and use of the data by the providers on their sites, as well as a contact option and your rights and setting options for protecting your privacy in this regard, can be found in the providers' privacy policies:

https://help.instagram.com/155833707900388

If you do not want the social networks to directly associate the data collected via our website with your profile in the respective service, you must log out of the corresponding service before visiting our website. You can also completely prevent the loading of plugins with add-ons for your browser, e.g. with the script blocker "NoScript".

Our online presence on Facebook, Instagram, Pinterest

Our presence on social networks and platforms serves to facilitate better, active communication with our customers and interested parties. We use it to inform about our products and ongoing special offers.

When you visit our online presences on social media, your data may be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from this data using pseudonyms. These can be used, for example, to display advertisements within and outside the platforms that presumably correspond to your interests. For this purpose, cookies are generally used on your device. These cookies store visitor behavior and user interests. According to Art. 6 para. 1 lit. f GDPR, this serves to protect our overriding legitimate interests, as part of a balancing of interests, in an optimized presentation of our offer and effective communication with customers and interested parties. If you are asked by the respective social media platform operators for consent to data processing, e.g. with the help of a checkbox, the legal basis for data processing is Art. 6 para. 1 lit. a GDPR.

If the aforementioned social media platforms are headquartered in the USA, the following applies: The European Commission has an adequacy decision for the USA. This is based on the EU-US Privacy Shield. An up-to-date certificate for the respective company can be viewed here.

For detailed information on how data is processed and used by the providers on their sites, as well as contact information and your rights and settings for protecting your privacy, in particular objection options (opt-out), please refer to the providers' privacy notices linked below. Should you still need assistance in this regard, you can contact us.

Facebook: https://www.facebook.com/about/privacy/

Data processing is carried out on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR, which you can view here.

Further information on data processing when visiting a Facebook fan page (information on Insights data) can be found here.

Instagram: https://help.instagram.com/519522125107875

Pinterest: https://about.pinterest.com/de/privacy-policy

Objection options (opt-out):

Facebook: https://www.facebook.com/settings?tab=ads

Instagram: https://help.instagram.com/519522125107875

Pinterest: https://www.pinterest.de/settings

  1. Sending review reminders by email

If you have given us your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR during or after your order, we will use your email address to remind you to submit a review of your order via the review system we use. This consent can be revoked at any time by sending a message to the contact option described below.

  1. Contact options and your rights

As a data subject, you have the following rights:

in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;

in accordance with Art. 16 GDPR, the right to demand the immediate correction of incorrect personal data stored by us or its completion;

in accordance with Art. 17 GDPR, the right to demand the erasure of your personal data stored by us, unless further processing is

  • for exercising the right to freedom of expression and information;
  • for compliance with a legal obligation;
  • for reasons of public interest or
  • for the establishment, exercise or defense of legal claims;

in accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data, if

the accuracy of the data is disputed by you;

the processing is unlawful, but you refuse its erasure;

we no longer need the data, but you need it for the establishment, exercise or defense of legal claims, or

you have objected to the processing in accordance with Art. 21 GDPR;

  • in accordance with Art. 20 GDPR, the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to request its transmission to another controller;
  • in accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

For questions regarding the collection, processing, or use of your personal data, for information, correction, restriction, or erasure of data, as well as revocation of granted consents or objection to a specific data use, please contact us directly using the contact details in our impressum.

Right to object If we process personal data as described above to protect our overriding legitimate interests within the framework of a balancing of interests, you can object to this processing with effect for the future. If the processing is for direct marketing purposes, you can exercise this right at any time as described above. If the processing is for other purposes, you have a right to object only if there are reasons arising from your particular situation. After exercising your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims. This does not apply if the processing is for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.

 

10. USE OF REVIEW AND QUALITY SEAL GRAPHICS

The Trusted Shops Trustbadge is embedded on this website to display our Trusted Shops seal of quality and to offer the Trusted Shops membership to buyers after an order.

This serves to protect our overriding legitimate interests, as part of a balancing of interests, in an optimal marketing of our offer, Art. 6 para. 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.

When the Trustbadge is called up, the web server automatically stores a so-called server log file, which contains, for example, your IP address, date and time of retrieval, amount of data transferred and the requesting provider (access data) and documents the retrieval. This access data is not evaluated and is automatically overwritten seven days after the end of your page visit at the latest.

Further personal data is only transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or have already registered for their use. In this case, the contractual agreement made between you and Trusted Shops applies.

11. USE OF SOCIAL MEDIA: VIDEOS

Use of YouTube videos

This website uses the YouTube embedding function to display and play videos from the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

The extended data protection mode is used here, which, according to the provider, only initiates the storage of user information when the video(s) are played. If the playback of embedded YouTube videos is started, the provider "YouTube" uses cookies to collect information about user behavior. According to "YouTube", these serve, among other things, to record video statistics, improve user-friendliness and prevent abusive behavior. If you are logged in to Google, your data will be directly assigned to your account when you click on a video. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates these. Such an evaluation is carried out in particular according to Art. 6 para. 1 lit. f GDPR on the basis of Google's legitimate interests in the display of personalized advertising, market research and/or the needs-based design of its website. You have a right to object to the creation of these user profiles, and you must contact YouTube to exercise this right. When using YouTube, personal data may also be transferred to the servers of Google LLC. in the USA.
Regardless of the playback of the embedded videos, a connection to the Google network is established with every call of this website, which can trigger further data processing operations beyond our control.

In the event of the transfer of personal data to Google LLC. with its registered office in the USA, Google LLC. has certified itself for the US-European data protection agreement "Privacy Shield", which ensures compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list

Further information on data protection at "YouTube" can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy

To the extent legally required, we have obtained your consent for the data processing described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future. To exercise your revocation, please follow the option described above for making an objection.