Data protection declaration
1. Introduction and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we would like to inform you about how we handle your personal data when you use our website. Personal data includes all information that enables us to personally identify you.
1.2 The controller in charge for data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Ursula Rohde, David-Gilly-Straße 1, 14469 Potsdam, Deutschland, Tel.: +4933195136212, E-Mail: info@design-lichtschalter.com. The controller of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing.
2. Data collection when visiting our website
2.1 If you visit our website for information purposes only, i.e. without registering or otherwise providing us with data, we only collect data that your browser transmits to the server (so-called ‘server log files’). When you visit our website, the following data is collected, which is technically necessary to display the website to you:
• The website visited
• Date and time of access
• Amount of data in bytes
• Source/reference from which you accessed the page
• Browser used
• Operating system used
• IP address used (anonymised if necessary)
These data are processed in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in improving the stability and functionality of the website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.
2.2 Our website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and confidential content (e.g. orders or enquiries). You can recognise an encrypted connection by the character string ‘https://’ and the lock symbol in the browser line.
3. Hosting & content delivery network
We use a provider to host our website and display its content. This provider provides its services itself or through selected subcontractors exclusively on servers within the European Union. All data collected on our website is processed on these servers. We have concluded a data processing agreement with this provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
4. Cookies
We use cookies to make visiting our website more convenient and to provide certain functions. These are small text files that are stored on your end device. Some of these cookies are automatically deleted after you close your browser (so-called ‘session cookies’), while others remain on your end device and make it possible to store settings (so-called ‘persistent cookies’). You can view the storage duration of these cookies in the cookie settings of your web browser.
Insofar as personal data is processed by certain cookies, the processing is carried out in accordance with Art. 6 (1) point b GDPR for the fulfilment of the contract or in accordance with Art. 6 (1) point f GDPR to safeguard our legitimate interests in an optimal functionality of the website as well as a user-friendly and effective design of the visit.
You can adjust your browser settings so that you are informed when cookies are set and can decide whether to accept them on a case-by-case basis, or to accept cookies in certain cases or to reject them in general. Please note that not accepting cookies may limit the functionality of our website.
5. Contacting us
5.1 Your own review reminder
On the basis of your express consent in accordance with Art. 6 (1) point a GDPR, we will use your e-mail address to remind you once to submit a review for your order. You can withdraw your consent at any time by sending a message to the controller for data processing.
5.2 ShopVote
We use the services of Blickreif GmbH, Schulstraße 46, 80634 Munich, Germany, for the rating reminders. On the basis of your express consent in accordance with Art. 6 (1) point a GDPR, we transmit your e-mail address and, if applicable, other customer data to the provider so that the provider can contact you by e-mail with a reminder to submit a rating. You can withdraw your consent at any time with effect for the future, either with us or with the provider. We have concluded a contract with the provider for order processing that ensures the protection of the data of our site visitors and prohibits unauthorised disclosure to third parties.
5.3 Contact in general
If you contact us (e.g. using the contact form or by email), we process personal data exclusively for the purpose of processing and answering your request and only to the extent necessary. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 (1) point f GDPR. If you contact us with the intention of concluding a contract, Art. 6 (1) (b) GDPR also forms the legal basis for the processing. Your data will be deleted as soon as the matter has been conclusively clarified and there are no legal obligations to retain it.
6) Comment function
When you use the comment function on this website, in addition to your comment, information about when the comment was created and the name of the commentator you have chosen will also be stored and published on this website. In addition, your IP address will be logged and stored. This storage is for security reasons and in case a comment violates the rights of third parties or posts illegal content. We need your email address to contact you if a third party objects to the published content as unlawful. The legal basis for the storage of your data is Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to by third parties as unlawful.
7) Data processing when opening a customer account
In accordance with Art. 6 (1) point b GDPR, personal data will be collected and processed to the extent necessary if you provide it to us when opening a customer account. The input mask used for this purpose on our website indicates which data must be provided in order to open a customer account. You can delete your customer account at any time by sending a message to the controller at the address given above. After deletion of your customer account, your data will be deleted, provided that all contracts concluded through it have been fully processed, there are no legal retention periods to the contrary and there is no justified interest in further storage.
8) Use of customer data for direct advertising
8.1 Registration for our email newsletter
If you register for our email newsletter, you will regularly receive information about our offers. The only information required to send the newsletter is your email address. Any further information is voluntary and is used to address you personally. We use the so-called double opt-in procedure, in which you will receive the newsletter only if you explicitly confirm your registration by clicking on a confirmation link in the confirmation e-mail. By activating the confirmation link, you consent to the use of your personal data in accordance with Art. 6 (1) point a GDPR. We store the IP address as well as the date and time of registration in order to be able to track any possible misuse of your email address. The data collected will be used exclusively for this purpose. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the controller. After unsubscribing, your email address will be immediately deleted from our mailing list, unless you have expressly agreed to further use or we reserve the right to further data use, which is permitted by law and about which we inform you in this statement.
8.2 Sending the email newsletter to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range. In accordance with Section 7 (3) of the German Unfair Competition Act (UWG), we do not require separate consent for this. The data processing is carried out on the basis of our legitimate interest in personalised direct mail in accordance with Art. 6 (1) point f GDPR. If you have objected to the use of your email address for this purpose, no emails will be sent. You can object to the use of your email address for advertising purposes at any time with effect for the future by sending a message to the controller.
9) Data processing for order processing
9.1 Transmission of image files for order processing by email
On our website, we offer the option of personalising products by uploading image files. These image files serve as a template for product customisation. Customers can send us image files that we use exclusively for personalising the ordered products in accordance with the specifications on our website. We will notify you if image files are forwarded to service providers for the purpose of processing your order. No further forwarding of data will take place. If the transmitted files contain personal data (e.g. images of identifiable persons), these will be processed exclusively for the purpose of processing the order in accordance with Art. 6 (1) point b GDPR. After completion of the order, the transmitted image files will be automatically and completely deleted.
9.2 Disclosure of personal data in the context of contract processing
If it is necessary for the fulfilment of the contract, in particular for the delivery of goods and the processing of payments, we will transfer your personal data to the relevant transport service providers and financial institutions in accordance with Art. 6 (1) point b GDPR.
If we have to provide you with updates for products with digital components or digital products based on an existing contract, we will use the contact details provided when you placed your order (name, address, email) to inform you of upcoming updates in accordance with our legal information obligations under Art. 6 (1) point c GDPR. This will be done via suitable communication channels (e.g. post or email). Your contact details will be used solely for this purpose and only processed to the extent necessary.
9.3 Cooperation with service providers for the fulfilment of the contract
In order to process your order, we work together with various service providers, some of whom support us in the execution of contracts. In this context, certain personal data is transmitted to these service providers to the extent necessary for the fulfilment of the contract.
9.4 Disclosure of personal data to shipping providers
- Deutsche Post
As a transport service provider, we commission Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany.
We transmit your e-mail address and/or telephone number to Deutsche Post in accordance with Art. 6 (1) point a GDPR, for the purpose of coordinating a delivery date or sending a delivery notification, if you have expressly agreed to this in the order. Otherwise, only the recipient's name and the delivery address will be passed on in accordance with Art. 6 (1) point b GDPR. This information will only be passed on if it is necessary for the delivery.
• DHL
We also use DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany, for delivery.
Similar to Deutsche Post, we transmit your e-mail address and/or telephone number to DHL in order to coordinate delivery dates or send delivery notifications, provided that you have consented to this in the ordering process. Otherwise, only the recipient's name and the delivery address will be passed on in accordance with Art. 6 (1) point b GDPR, insofar as this is necessary for the delivery.
9.5 Use of payment service providers
- Apple Pay
If you use the ‘Apple Pay’ payment option, payment is processed via the ‘Apple Pay’ system from Apple Distribution International, Cork, Ireland. Your payment data is transmitted in encrypted form and is only used to complete the payment. Additional security features, such as entering a code or using ‘Face ID’ or ‘Touch ID’, are required to authorise a payment. Further information on data protection at Apple Pay can be found at: https://support.apple.com/de-de/HT203027
• iDeal
On our website, we also offer online payments via the provider Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands. The corresponding transaction data is processed in accordance with the applicable data protection regulations.
This website offers one or more payment methods from the following provider: Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands.
If you choose a payment option that requires you to pay in advance (e.g. credit card payment), your payment information provided during the ordering process (including name, address, bank and card details, currency and transaction number) and order details will be transmitted to the provider in accordance with Art. 6 (1) point b GDPR. This data transfer is carried out exclusively for the purpose of processing the payment and only to the extent necessary.
Klarna
For payments via Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden, your order data (such as name, address, bank and card details, currency, transaction number) will be passed on to Klarna in accordance with Art. 6 (1) point b GDPR. This is solely for the purpose of payment processing.
If you choose a payment option in which Klarna makes advance payments (e.g. invoice or instalment payments), you will need to provide additional personal information (name, address, date of birth, telephone number, alternative payment methods if applicable) during the ordering process.
Klarna will use this information together with other data such as shopping cart value and order history to check the risk of payment defaults. Credit agencies may also be used to check creditworthiness: List of credit reference agencies.
You can object to this processing at any time, unless the data processing is necessary for payment processing.
Mollie
For payments via Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, the Netherlands, your payment data (name, address, bank details, currency and transaction number) will be passed on to Mollie during the ordering process in order to process the payment, in accordance with Art. 6 (1) point b GDPR. The data will only be used for payment processing.
PayPal
If you choose PayPal as your payment method, your payment information (including your name, address, bank details and card details) and order information will be provided to PayPal in accordance with Art. 6 (1) point b GDPR. This transfer is also necessary for payment processing.
If we provide services in advance (e.g. in the case of payment by instalments), you must also provide personal data (name, address, date of birth, email address, telephone number). To check solvency, PayPal forwards this information for a credit check. Score values from credit reference agencies may also be included in the check. Further details on the credit check can be found here.
• PayPal Checkout
This website uses PayPal Checkout, an online payment system from PayPal that consists of PayPal's own payment methods and additional third-party payment methods.
When you pay with PayPal, credit card via PayPal, direct debit via PayPal or – where available – ‘Pay Later’ via PayPal, your payment data will be forwarded to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as ‘PayPal’). This is done in accordance with Art. 6 (1) point b GDPR, insofar as this is necessary for the processing of the payment.
For the payment methods ‘credit card via PayPal’, ‘direct debit via PayPal’ or ‘later payment via PayPal’, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit reference agencies in accordance with Art. 6 (1) point f GDPR, in order to determine your solvency. The results of the credit check, which may include probability values (so-called score values), are used to decide whether to provide the payment method. These score values are based on a recognised mathematical-statistical procedure and include, among other things, address data. You can object to this processing at any time; however, PayPal may still be entitled to process your data insofar as this is necessary for payment processing.
When you use the PayPal payment method ‘purchase on account’, your payment data will be transmitted to PayPal, which will forward it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin, to process the payment. Ratepay will carry out an identity and credit check in its own name and will forward the data to credit reference agencies to check your solvency. For more information, see: Ratepay Credit Agencies.
If you choose a local third-party payment method, PayPal will pass on your payment data in accordance with Art. 6 (1) point b GDPR. Depending on your selection, PayPal transfers your data to the corresponding provider:
• Apple Pay (Apple Distribution International, Hollyhill Industrial Estate, Cork, Ireland)
• Google Pay (Google Ireland Limited, Dublin, Ireland)
• iDeal (Currence Holding BV, Amsterdam, Netherlands)
• Bancontact (Bancontact Payconiq Company, Brussels, Belgium)
• Blik (Polski Standard Płatności sp. z o.o., Warsaw, Poland)
• eps (PSA Payment Services Austria GmbH, Vienna, Austria)
• MyBank (PRETA S.A.S., Paris, France)
• Przelewy24 (PayPro SA, Poznań, Poland)
For more information on data protection, please refer to PayPal's privacy policy: PayPal Privacy Policy.
• SOFORT
This website also offers payment methods from SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany.
If you choose a payment method that requires you to pay in advance (e.g. credit card payment), your payment data (name, address, bank and payment information, currency and transaction number) will be shared in accordance with Art. 6 (1) point b GDPR. These data are used exclusively for payment processing.
10) Web analysis services
10.1 Google Analytics
Our website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). This service helps us to analyse user behaviour on our website.
By default, cookies are set when you visit the website and are stored as small text files on your device. These cookies collect various information, including your abbreviated IP address, to avoid direct identification.
The collected data is transferred to Google servers and processed there. This may also include transfer to Google LLC in the United States. Google uses this information on our behalf to evaluate the use of the website, to compile reports and to provide other services related to the use of the website and the internet. The truncated IP address collected by Google Analytics is not merged with other Google data.
The collected data is stored for a period of two months and then deleted.
The above-mentioned processing, in particular the setting of cookies, will only take place with your express consent in accordance with Art. 6 (1) point a GDPR. Google Analytics 4 will not be activated during your visit to our site without your consent. You can revoke your consent at any time with effect for the future. To do so, please deactivate the service using the ‘Cookie Consent Tool’ on our website.
We have entered into a data processing agreement with Google to ensure the protection of our visitors' data and to prevent unauthorised disclosure to third parties.
Further legal information about Google Analytics 4 can be found at the following links:
https://business.safety.google/intl/de/privacy/
https://policies.google.com/privacy?hl=de&gl=de
https://policies.google.com/technologies/partner-sites
Demographic characteristics
Google Analytics 4 uses the ‘demographic features’ function, which allows us to compile statistics about the age, gender, and interests of visitors. This information comes from advertising and third-party data and is used to identify target audiences for marketing purposes. However, this data is not personal and is deleted after two months.
Google Signals
This website may also use Google Signals to create cross-device reports. If you have personalised ads enabled and your devices are linked to your Google Account, Google may, subject to your consent to the use of Google Analytics in accordance with Art. 6 (1) a GDPR, analyse your use across multiple devices. However, we do not receive any personal data, only aggregated statistics. You can stop this cross-device analysis at any time by disabling the ‘Personalised advertising’ function in your Google Account settings. For more information, please see:
https://support.google.com/ads/answer/2662922?hl=de
UserIDs
In addition to Google Analytics 4, the ‘UserIDs’ function can be used on this website. If you have an account on our website and sign in across different devices, your activities can be analysed across devices. This analysis is carried out exclusively subject to your consent in accordance with Art. 6 (1) point a GDPR.
The provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection.
10.2 Google Tag Manager
Our website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager provides a technical basis for integrating and controlling various web applications, including tracking and analysis services.
Google Tag Manager itself does not store any data on your device and does not carry out any independent data analysis. However, it may happen that your IP address is transmitted to Google when you use the website, including to servers in the United States.
This processing will only take place if you have given us your express consent in accordance with Art. 6 (1) point a GDPR. Without this consent, no processing will take place via the Google Tag Manager. You can withdraw your consent at any time by deactivating the service in the ‘Cookie Consent Tool’ on our website.
Here, too, we have concluded an order processing contract with the provider to ensure the protection of our visitors' data.
For data transfers to the US, the provider has joined the EU-US Data Privacy Framework.
Further legal information on Google Tag Manager can be found at:
https://business.safety.google/intl/de/privacy/
https://policies.google.com/privacy?hl=de&gl=de
11) Retargeting/remarketing and conversion tracking
11.1 Google Ads conversion tracking
This website uses the online advertising programme ‘Google Ads’ and, as part of Google Ads, uses conversion tracking from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’).
We use Google Ads to place ads on external websites to draw attention to our offers. This enables us to measure the effectiveness of the ads and ensure that the advertising is relevant to you. The aim is to show you interesting ads and to enable a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad. Cookies are small text files that are stored on your end device. These cookies normally lose their validity after 30 days and are not used for personal identification. If, after clicking on an ad, the user visits a certain page on this website, we and Google can determine that the user clicked on the ad and was redirected. Each Google Ads customer receives a different cookie, so cookies cannot be tracked between customers. The data collected by the conversion cookie is used to generate conversion statistics for customers who use conversion tracking. These statistics include information on the number of users who clicked on an ad and visited a page tagged with a conversion tag, but do not include any data that personally identifies them.
When using Google Ads, personal data may be transmitted to Google LLC. servers in the United States. Further information on the processing operations triggered by Google Ads Conversion Tracking and how data from websites is handled can be found here: Google Partner Website Information.
All of the above data processing, including the setting of cookies on the end device, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) point a GDPR. You can withdraw this consent at any time with effect for the future by deactivating the setting in the ‘Cookie Consent Tool’ on the website.
In addition, you can permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the Google browser plug-in available at the following link: Google Ads Plugin.
We use the customer matching function within Google Ads to provide more relevant advertising based on data from business or business-like relationships. In doing so, we transmit aggregated customer data (mainly email addresses and telephone numbers) to Google. Google does not have access to the plain text data, but encrypts it automatically during transmission. The encrypted information is used by Google to assign it to existing Google accounts. This way, personalised advertising can be displayed across all Google services connected to the Google account.
Customer data will only be transmitted to Google if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. You can revoke this consent at any time with effect for the future. Further information on Google's data protection practices regarding customer matching can be found here: Google Customer Matching.
Google's privacy policy can be viewed here:
Google Privacy and
Google Privacy Policy.
For the transmission of data to the USA, Google has submitted to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection.
11.2 Google Ads conversion tracking without cookies
This website uses Google Ads and, as part of Google Ads, the conversion tracking of Google Ireland Limited. We use Google Ads to draw attention to our offers through advertisements on external websites. The aim is to display advertising that is of interest to you and to enable a fair calculation of advertising costs.
In contrast to the conventional use of cookies, however, this conversion tracking does not use a cookie, but sets your browser's local storage to store an ID assigned by Google. This ID enables an analysis of your website behaviour without cookies being set on your device. The ID is set when you click on a Google ad and records certain user information.
When a user visits certain pages of this website, both Google and we can determine that the user clicked on an ad and was redirected to that page. Each Google Ads customer receives their own cookie, so the cookies cannot be tracked between different Google Ads customers' websites. The information collected in this way is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. These customers receive the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, no information is provided that would allow personal identification of the users. In the context of Google Ads, personal data may also be transmitted to the servers of Google LLC in the USA. Further details on the processing by Google Ads and the handling of data from websites can be found here:
https://policies.google.com/technologies/partner-sites.
If the collected information is personally identifiable, it will be processed in accordance with Art. 6 para. 1 lit. f DSGVO based on our legitimate interest in the statistical evaluation of the success of our advertising campaigns.
Google's privacy policy can be viewed here:
https://business.safety.google/intl/de/privacy/ and
https://www.google.de/policies/privacy/.
For the transmission of data to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures that the European data protection level is complied with on the basis of an adequacy decision by the European Commission.
Google Ads conversion tracking
This website uses the advertising programme ‘Google Ads’ and conversion tracking from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 ESW5, Ireland (‘Google’). We use Google Ads to draw attention to our offers with the help of advertising material (so-called Google Adwords) on external websites. This enables us to analyse how successful individual advertising measures are and ensure that we show you relevant advertising. These cookies are set when a user clicks on a Google ad. Cookies are small text files that are stored on your end device and usually expire after 30 days. They are not used for personal identification. If the user accesses certain pages of this website and the cookie is still valid, we and Google can recognise that the user has clicked on an ad and has been redirected. Each Google Ads customer receives a different cookie.
The data collected in this way is used to generate conversion statistics for Google Ads customers who have activated conversion tracking. You will not receive any information that personally identifies users. Further information on the processing of Google Ads conversion tracking can be found here:
https://policies.google.com/technologies/partner-sites.
If the above-mentioned processing operations (in particular the setting of cookies to collect information on your end device) take place, this is based on your express consent in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future by disabling this service using the ‘Cookie Consent Tool’ provided on the website.
Furthermore, you can permanently object to the use of cookies for Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de.
Please note that certain functions of this website may not be available or may only be available to a limited extent if you have disabled the use of cookies.
Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform (GMP) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. GMP uses cookies to deliver relevant ads to users, improve campaign performance reports and prevent a user from seeing the same ads more than once. With the help of a cookie ID, Google records which ads are displayed in which browser and can prevent them from being displayed multiple times. In addition, cookie IDs can be used to record conversions that are related to ad requests, e.g. when a user sees a GMP ad and later visits the advertiser's website and makes a purchase. GMP cookies do not contain any personal data.
By using GMP, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and use of the data collected by Google. To the best of our knowledge, Google receives the information that you have visited the corresponding area of our website or clicked on one of our ads through the integration of GMP. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or are not logged in, Google may still store your IP address. When using GMP, personal data may also be transmitted to the servers of Google LLC in the USA.
All of the processing mentioned above, in particular the setting of cookies to collect information on the end device used, will only take place if you have given us your express consent in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the ‘Cookie Consent Tool’ provided on the website.
For data transfers to the US, the provider has joined the EU-US Data Privacy Framework, which ensures that the European level of data protection is complied with on the basis of an adequacy decision by the European Commission. The Google Marketing Platform (GMP) privacy policy can be found here:
https://business.safety.google/intl/de/privacy/ and
https://www.google.de/policies/privacy/.
12) Site functionalities
12.1 Youtube
Our website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Data may also be transmitted to Google LLC, USA.
When you access a page on our website that contains a plugin of this kind, your browser establishes a direct connection with the provider's servers to load the plugin. In doing so, certain information, including your IP address, is transmitted to the provider.
If the playback of embedded videos is started via the plug-in, the provider also sets cookies in order to collect information about user behaviour, create playback statistics and prevent abusive behaviour. If you are logged into your user account with the provider during your visit, your data will be directly associated with your account when you click on a video. If you do not want this, you must log out before playing the video.
All of the processing mentioned above, in particular the setting of cookies to collect information on the end device used, will only take place if you give us your express consent in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future by deactivating the service in the ‘Cookie Consent Tool’.
For data transfers to the US, the provider has joined the EU-US Data Privacy Framework, which ensures, on the basis of an adequacy decision by the European Commission, that the European level of data protection is respected.
12.2 ShopVote graphics
Our website displays external customer reviews and/or an externally awarded quality mark, which are graphic elements from the provider Blickreif GmbH, Schulstraße 46, 80634 Munich, Germany.
When you visit a page on our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers in order to load the elements properly. In doing so, certain browser information, including your IP address, is transmitted to the provider.
If personal data is processed, this is done in accordance with Art. 6 (1) point f GDPR, which allows the processing of data to fulfil a contract or for measures preliminary to a contract.
12.3 Google reCAPTCHA
On this website, we use the CAPTCHA service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Data may also be transmitted to Google LLC, USA. ‘Google Fonts’, fonts loaded from the internet by Google, are used for the visual design of the captcha window. Other information transmitted to Google through the functionality of reCAPTCHA is not affected.
The service checks whether an entry is made by a natural person or by machine and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. To ensure that an action is taken by a human and not by an automated bot, the IP address of the device used, identification data of the browser and operating system used, as well as the date and duration of the visit, are collected and transmitted to the provider's server for evaluation. Cookies, small text files that are stored in the browser of the end device, may be used for this purpose.
If the processing described above is carried out with the help of cookies, this will only take place if you have given us your express consent in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time for the future by deactivating the service in the ‘Cookie Consent Tool’ on the website.
If the processing described above is carried out without the use of cookies, the legal basis is based on our legitimate interest in determining individual responsibility on the Internet and avoiding abuse and spam in accordance with Art. 6 (1) point f GDPR.
A data processing agreement has been concluded with the provider that ensures the protection of the data of visitors to our website and prevents unauthorised disclosure to third parties. For data transfers to the US, the provider has submitted to the EU-US Data Privacy Framework, which ensures that the European level of data protection is complied with by means of an adequacy decision of the European Commission.
Further information on Google's data protection provisions is available here:
https://business.safety.google/intl/de/privacy/
12.4 Google Customer Reviews (formerly Google Certified Merchant Programme)
We work with Google as part of the ‘Google Customer Reviews’ programme. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). This programme enables us to collect customer reviews from users of our website. After making a purchase on our website, you will be asked whether you would like to take part in a Google email survey.
If you give your consent in accordance with Art. 6 (1) point a GDPR, we will send your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchase experience on our website. Your review will then be summarised with other reviews and displayed in our Google Customer Reviews logo and in the Merchant Center dashboard. Your review will also be used for Google seller ratings. In the context of using Google Customer Reviews, personal data may be transferred to the servers of Google LLC. in the United States.
You can revoke your consent at any time by notifying the data controller or by contacting Google directly.
For data transfers to the US, the provider has submitted to the EU-US Data Privacy Framework, which is based on an adequacy decision by the European Commission and ensures that the European level of data protection is respected.
Further information on Google's privacy policy is available here:
https://business.safety.google/intl/de/privacy/
13) Tools and Miscellaneous
13.1 - Accounting software
We use a third-party provider's cloud-based software to do our accounting. This provider processes our incoming and outgoing invoices and, if applicable, bank transactions in order to automatically record invoices, assign them to the corresponding transactions and create a partially automated financial accounting system. Insofar as personal data is processed, this is done on the basis of our legitimate interest in the efficient and proper documentation of our business transactions.
13.2 Cookie consent tool
Our website uses a ‘cookie consent tool’ to manage user consent to cookies and cookie-based applications. Each time a page is accessed, users are presented with an interactive user interface that allows them to give their consent by ticking the appropriate box. This ensures that cookies that require consent are only set after the user has given their consent. The tool sets technically necessary cookies to store your cookie settings. Personal data is generally not processed unless the processing serves to store or log cookie settings (e.g. the IP address). In this case, the processing is carried out on the basis of the legitimate interest in legally compliant and user-friendly cookie management.
14) Rights of the data subjects
14.1 Rights of access and intervention
The applicable data protection law grants you various rights with regard to your personal data. These include, among other things, the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability and the right to object. For further details, please refer to the respective legal bases of the GDPR.
14.2 Right to object
If we process your personal data on the basis of an overriding legitimate interest, you have the right to object to this processing at any time if there are compelling reasons for doing so arising from your particular situation. We will stop the processing in this case, unless there are compelling legitimate grounds for the processing that outweigh your rights and freedoms. If your data is used for direct marketing, you can object at any time and we will stop processing it for this purpose.
15) Duration of personal data storage
The duration of the storage of personal data is based on the respective legal basis and the purpose of the processing. Insofar as statutory retention periods exist (e.g. for tax or commercial law purposes), these data will be deleted after the expiry of these periods, provided that they are no longer required for the fulfilment of the contract or the assertion of legal claims.
- 23022025 -