data protection

communication

Using Shopify's Inbox live chat system

We use the live chat system Inbox from Shopify Shopify Inc. (ATTN: Chief Privacy Officer 151 O'Connor Street Ground floor, Ottawa, ON K2P 2L8, Canada) on our website as part of order processing.
The data processing serves the purpose of direct and efficient communication between you and us as the provider. In order to operate the live chat system, cookies are used that enable the browser to be recognized. The following information can be processed and, if necessary, transmitted to Inbox: individual user ID, pages visited on our website, number of visits to our website, information on the device you are using and other personal information you provide when using the chat system Data (e.g. user name chosen by you, e-mail address). User profiles can be created from the data collected in this way using pseudonyms.

Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. Cookies or comparable technologies are used with your consent on the basis of Section 25 (1) sentence 1 TTDSG in conjunction with Article 6 (1) (a) GDPR. Your personal data will be processed with your consent on the basis of Article 6 Paragraph 1 Letter a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation.

You can find more information about data processing at Shopify at:

https://www.shopify.com/de/legal/datenschutz and others

Use of Social Plugins

We use social network plug-ins on our website. The integration of social plug-ins and the data processing that takes place in the process serve the purpose of optimizing advertising for our products.
When social plug-ins are integrated, a link is established between your computer and the servers of the social network provider and the plug-in is displayed on the page by notifying your browser, provided you have expressly consented to this. Both your IP address and the information about which of our pages you have visited are transmitted to the provider's server. This applies regardless of whether you are registered or logged in to the social network. Transmission also takes place for users who are not registered or not logged in. If you are connected to one or more of your social network accounts at the same time, the information collected can also be assigned to your corresponding profiles. When using the plug-in functions (e.g. by pressing the button), this information is also assigned to your user account. You can prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons.

Cookies or comparable technologies are used with your consent on the basis of Section 25 (1) sentence 1 TTDSG in conjunction with Article 6 (1) (a) GDPR. Your personal data will be processed with your consent on the basis of Article 6 Paragraph 1 Letter a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation.

The social networks named below are integrated into our website using social plug-ins. You can find more detailed information on the scope and purpose of the collection and use of the data as well as your rights in this regard and options for protecting your privacy in the linked data protection notices of the providers.

Instagram of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):

https://help.instagram.com/155833707900388

Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection /standard-contractual-clauses-scc_en .

Pinterest by Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA)

https://policy.pinterest.com/de/privacy-policy

Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA.

Use of social plug-ins via "Shariff"

We use social network plug-ins on our website. We use the privacy-safe "Shariff" button so that you retain control of your data.
No links to the servers of the social networks will be established and consequently no data will be transmitted without your express consent.
"Shariff" is a development by the specialists at the computer magazine c't. It enables more privacy on the web and replaces the usual "share" buttons on social networks. More information on the Shariff project can be found here https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html .
If you click on the button, a pop-up window appears in which you can log in to the respective provider with your data. Only after you have actively logged in will a direct connection to the social networks be established.
By logging in, you give your consent to the transfer of your data to the respective social media provider. Here, among other things, both your IP address and information about which of our pages you have visited are transmitted. If you are connected to one or more of your social network accounts at the same time, the information collected will also be assigned to your corresponding profiles. You can only prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons. The social networks named below are integrated using the “Shariff” function.
You can find more detailed information on the scope and purpose of the collection and use of the data as well as your rights in this regard and options for protecting your privacy in the linked data protection notices of the providers.

Facebook of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):

https://www.facebook.com/policy.php

Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum .

Instagram of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland) https://help.instagram.com/155833707900388 . Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, available at: http://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data- protection/standard-contractual-clauses-scc_de .

Pinterest by Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA)

https://policy.pinterest.com/de/privacy-policy

Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA.

Data subject rights and storage period

Duration of storage

After completion of the contract, the data will initially be stored for the duration of the warranty period, then taking into account statutory retention periods, in particular tax and commercial law, and then deleted after the period has expired, unless you have consented to further processing and use.

rights of the data subject

If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, to correction, to deletion, to restriction of processing, to data portability.
In addition, according to Art. 21 Para. 1 GDPR, you have the right to object to the processing based on Art. 6 Para. 1 f GDPR and to processing for the purpose of direct advertising.

Right of appeal to the supervisory authority

According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that your personal data is not being processed lawfully.

You can lodge a complaint, among other things, with the supervisory authority responsible for us, which you can reach under the following contact details:

North Rhine-Westphalia State Commissioner for Data Protection and Freedom of Information PO Box 20 04 44
40102 Dusseldorf
Phone: +49 211 384240

Fax: +49 211 38424999 Email: poststelle@ldi.nrw.de

Right to object

If the personal data processing listed here is based on our legitimate interest in accordance with Article 6 Paragraph 1 lit. f GDPR, you have the right to object to this processing at any time for reasons that arise from your particular situation with effect for the future.
After an objection has been raised, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. After the objection has been raised, we will stop processing the data concerned for the purpose of direct advertising.

last update: 29.11.2022