Privacy policy for online store (www.moskinto.de)

Welcome to our website! We respect the privacy and personal sphere of our customers and users. When processing your personal data within the scope of our services, we strictly adhere to the statutory provisions. We would therefore like to inform you in detail about what data is collected when you visit our website and use the services offered there, and how this data is processed or used by us in the following.

1. name and contact details of the controller

The responsible party within the meaning of the BDSG and the GDPR for the processing of your personal data is Apaloo GmbH, represented by the Managing Director Andreas Jetter, Riedweg 10, 78607 Talheim, Germany; Tel.: +49 7464 980 282; Fax:+49 7464 980 276; E-Mail: info(at)moskinto.de.

2. Collection and storage of log files when visiting our website

When you visit our website www.moskinto.de, the browser used on your end device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which the access is made (referrer URL),
• Browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The aforementioned data will be processed by us for the following purposes:

• Ensuring a smooth connection of the website,
• Ensuring a comfortable use of our website,
• Evaluation of system security and stability
• Evaluation of user behavior and advertising measures, as well as
• for other administrative purposes.

The data processing is carried out to protect our legitimate interests. The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

In addition, we use cookies and analysis services when you visit our website. You can find more detailed explanations of this in sections 4 and 5 of this data protection declaration.

3. Hosting

Within the scope of processing on our behalf, a third-party provider provides us with the services for hosting and displaying the website. According to Art. 6 para. 1 p. 1 lit. f GDPR, this serves to protect our legitimate interests in a correct presentation of our offer, which outweigh our interests in the context of a balancing of interests. All data collected in the context of the use of this website or in forms provided for this purpose in the online store as described below are processed on its servers. Processing on other servers only takes place within the framework explained here.

Hosting by Shopify:

4. Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies on our site. These are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware.

In the cookie, information is stored that arises in each case in connection with the specific end device used. However, this does not mean that we gain direct knowledge of your identity.

The following cookies are used on our website:

Technically necessary cookies:

Technically necessary cookies are those that are required for the smooth functioning of our website. These are in particular:

• Session cookies that store certain settings of the user (e.g. the shopping cart, language settings or log-in data);
• Cookies that are set by integrated payment service providers (regardless of a specific payment), provided that they do not analyze any specific usage behavior, but only serve to prepare possible payments or to check payment legitimacy;
• Opt-out cookies, which can be used to revoke cookie consent

Some functions of our website cannot be offered without the use of these cookies. The data processing is carried out on the basis of Art. 6 (1) lit. f GDPR from our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer and on the basis of Art. 6 (1) lit. b GDPR for contract performance.

For more information about the functionality and providers of the technically necessary (essential) cookies used, see "Cookie Settings" Cookie Settings under the button "Individual Cookie Settings".

Statistics cookies:

Statistics cookies allow website operators to learn more about how visitors use the website by collecting this data anonymously and compiling it into reports. The data collected by the cookies is used solely to optimize the performance of the website. In this way, we can improve the functioning of our website and thus ensure, for example, that you quickly find the product you are looking for.

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. a GDPR. You can give your consent conclusively by clicking "Accept all" on the consent banner on our website or by sliding the respective sliders for the statistics cookies to the right under the "Individual cookie settings" button. Under Cookie Settings, you can revoke your consent at any time as well as access further information on the functionalities and providers of the statistics cookies used and configure the use of the individual cookies. Your revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Marketing-Cookies:

Marketing cookies are used to show you interest-based advertising. When you visit another website, your browser's cookie will be recognized and you will be shown selected advertising based on the information stored in this cookie. Under certain circumstances, third-party marketing cookies are also set in this process (see under point 5. of this privacy policy) in order to enable third-party functions and techniques.

These cookies are only activated if you have given your consent to this. The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. a GDPR. You can give your consent conclusively by clicking "Accept all" on the consent banner on our website or by sliding the respective sliders for the marketing cookies to the right under the "Individual Cookie Settings" button. Under Cookie Settings, you can revoke your consent at any time as well as access further information on the functionalities and providers of the marketing cookies used and configure the use of the individual cookies. Your revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Cookie-Settings

Please note that you can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance or can exclude the acceptance of cookies for certain cases or in general.

You can learn how to delete cookies in the most common browsers and change cookie settings here, among other things:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14

Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Incidentally, you can configure the settings for the cookies used on our website under Cookie Settings under the button "Individual Cookie Settings" and deactivate their use.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5. Third-party analysis and marketing tools (tracking)

The third-party tracking measures listed below and used by us are carried out on the basis of Art. 6 (1) p. 1 lit. a GDPR. With the tracking measures used, we want to ensure on the one hand a demand-oriented design and the continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These interests are considered legitimate in the sense of the aforementioned provision.

You can deactivate the use of third-party analysis and marketing tools used on our website at any time under "Cookie Settings" under the "Individual Cookie Settings" button by moving the respective sliders for the respective tools to the left.

The respective data processing purposes and data categories as well as the respective providers can be found below.

a) Google Analytics

Our website uses Google Analytics, a web analytics service provided by our service provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), with your consent, which may be revoked at any time. Google Analytics uses cookies that are stored on your computer and that enable an analysis of your use of the website.

The following types of data are processed by Google:

• Browser-Typ/-Version
• Operating system used
• Referrer-URL (the previously visited page)
• Host name of the accessing computer (IP-Address)
• Time of the server request

The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. However, by activating IP anonymization on our website, your IP address will be truncated and thus anonymized by Google beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

On our behalf, Google will use the transmitted information for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and internet usage.

The legal basis for the processing of personal data described here is Art. 6 para. 1 lit. a) GDPR.

You have the right to revoke your consent at any time with effect for the future, cf. item 12 lif. f of this data protection declaration. Further information on revocation can be found in section 13 of this data protection declaration.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your shortened IP address) and the processing of this data by Google by downloading and installing the browser add-on available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

If you prevent the storage of cookies, we point out that in this case not all functions of this website can be used in full.

Further information on data protection in connection with Google Analytics can be found, for example, in Google Analytics Help: https://support.google.com/analytics/answer/6004245?hl=de

b) Google Ads, Conversion Tracking

Our website uses Google Ads (formerly: AdWords) and, within the framework of Google AdWords, conversion tracking, an online advertising service of Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), after your consent, which can be revoked at any time.

In this context, pseudonymized usage profiles are created and cookies are used (see section 4 of this privacy policy). When you click on an ad placed by us on Google AdWords, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. The cookie contains information about your use of this website such as

• Browser-Typ/-Version,
• Operating system used,
• Referrer-URL (the previously visited page) bzw. Referrer-Ad (the clicked advertisement),
• Host name of the accessing computer (IP-Address),
• Time of the server request

The information generated by the cookie about your use of our website will be transmitted to and stored by Google on servers in the United States or other third countries.

If you visit our website and the cookie has not yet expired, we and Google can recognize which ad you clicked on and were redirected to that page. There is no possibility that cookies can be tracked through the websites of other AdWords customers.

The information obtained with the help of the conversion cookie serves the purpose of creating advertising success statistics. Here, we learn the total number of users who clicked on one of our ads and were redirected to a subpage of our website tagged with a conversion tracking tag. However, we do not receive any information that can be used to identify users personally.

The legal basis for the processing of personal data described here is Art. 6 para. 1 lit. a) GDPR.

You have the right to revoke your consent at any time with effect for the future, cf. item 12 lif. f of this data protection declaration. Further information on revocation can be found in section 13 of this data protection declaration.

Furthermore, you can disable personalized advertising for you in Google's advertising settings. You can find instructions on how to do this at https://support.google.com/ads/answer/2662922?hl=de.

In addition, you can disable the use of cookies by third parties by visiting the Network Advertising Initiative disable page at. https://www.networkadvertising.org/choices/ and implement the further information on opting out mentioned there..

If you prevent the storage of cookies, we point out that in this case not all functions of this website can be used in full.

You can find further information and Google's privacy policy at: https://www.google.de/policies/privacy/.

c) Facebook-Pixel, Facebook Custom Audiences and Facebook Conversions

On our site, we also use the "Facebook pixel" of the social network Facebook, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

With the help of the Facebook pixel, it is possible for Facebook to determine the visitors to our online offer as a target group for the display of ads (so-called "Facebook ads" or "Instagram ads"). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "Custom Audiences").

With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

The Facebook pixel is directly integrated by Facebook when you visit our website and can save a so-called cookie on your device. If you subsequently log in to Facebook or visit Facebook while logged in, the visit to our online offer will be noted in your profile. The data collected about you is anonymous for us, so it does not offer us any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and can be used by Facebook and for its own market research and advertising purposes. If we should transmit data to Facebook for matching purposes, this data is encrypted locally in on the browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of matching data that is also encrypted by Facebook.

Furthermore, when using the Facebook Pixel, we use the additional function "extended matching", whereby data for the creation of target groups ("Custom Audiences" or "Look Alike Audiences") is transmitted to Facebook in encrypted form.

By integrating the Facebook Pixel, the use of Facebook Custom Audiences and Facebook Conversions, we therefore pursue the purpose of reducing wastage in the context of marketing and placing optimized advertising for website visitors. The purpose of processing the data using Facebook Custom Audiences is to create statistics for the formation of user categories in order to enable interest-based targeting of advertising media or advertising measures on the Internet. This allows us to continuously improve our offer.

You can find more information about the Facebook Pixel at: https://www.facebook.com/business/help/651294705016616. For more information about Facebook Custom Audiences, please visit.: https://developers.facebook.com/docs/marketing-api/audiences-api/websites and https://developers.facebook.com/docs/facebook-pixel/pixel-with-ads/conversion-tracking.

The legal basis for the processing of personal data described here is Art. 6 para. 1 lit. a) GDPR.

You have the right to revoke your consent at any time with effect for the future, cf. item 12 lif. f of this data protection declaration. Further information on revocation can be found in section 13 of this data protection declaration.

Regarding the storage period of the information, Facebook states that the data will be stored for as long as necessary to provide products and services to you or others (https://de-de.facebook.com/about/privacy/ under "Data Storage, Account Deactivation and Deletion").

For more information about the collection and use of data by Facebook, about your rights in this regard and options for protecting your privacy, please see Facebook's privacy policy at https://www.facebook.com/about/privacy/.

To object to the collection by the Facebook pixel and the use of your data to display Facebook ads altogether, you can further set an opt-out cookie by clicking on the link below, which disables Facebook pixel tracking:

This opt-out cookie works only in this browser and only for this domain. If you delete your cookies in this browser, you must click the link above again.

If you prevent the storage of cookies, we point out that in this case not all functions of this website can be used in full.

6. Contact

When contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6 (1) f GDPR or your consent pursuant to Art. 6 (1) a GDPR (when contacting us via contact form). You have the right to revoke your consent at any time with effect for the future, cf. point 12 lit. f of this privacy policy. Further information on revocation can be found in section 13 of this data protection declaration.

If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted after final processing of your request. This is the case when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

If the data processing is carried out according to Art. 6 para. 1 lit. f GDPR, you have the right from item 14 of this privacy policy.

7. Data processing for orders via our website, customer account

a) Order

If you place an order via our website, we collect the following data both in the case of a guest order and in the case of registration in the store:

• Core data: This is your surname, first name, if applicable the name of your company, your address, e-mail address (mandatory information) and, if applicable, telephone and/or cell phone number (voluntary information). We need this information to be able to identify you, to contact you and, if necessary, to enforce our rights. The data is processed for the purpose of fulfilling the contract (legal basis in this respect: Art. 6 para. 1 p. 1 lit. b GDPR) and to protect our legitimate interests (legal basis: Art. 6 para. 1 p. 1 lit. f GDPR).

• Invoice data: In addition to your billing address, this also includes the date and amount of the invoice and, if applicable, your VAT ID. We process this data because we are legally obliged to do so (§ 147 AO). The legal basis for the processing is Art. 6 para. 1 p. 1 lit. c GDPR.

• Payment data: Here we process the credit or giro card data provided by you for the purpose of payment processing and thus to protect our legitimate interests; it is therefore carried out on the basis of Art. 6 (1) p. 1 lit. f) GDPR 

• Communication content: We also process the content of communication with you, i.e. e-mail and/or written correspondence. The data processing is carried out for the fulfillment of the contract and thus on the basis of Art. 6 para. 1 p. 1 lit. b GDPR.

b) Customer account

If you place an order via our portal, you can register as a customer. The creation of a customer account is only possible in the context of an order.

When opening a customer account, a password-protected access to the stored user data is created. Here you can view all the data that you have submitted to us via the order form. In this area you will also find your order data and information about open or completed orders. Registration also has the advantage for you that you can log in directly to our online store with your e-mail address and password in the event of a future order, without having to enter your data again.

The legal basis for the creation of the customer account is your consent, Art. 6 para. 1 lit. a GDPR. The processing of your personal data that you have provided in your customer account as part of an order is carried out in accordance with section 7 lit. a) of this privacy policy.

You have the right to revoke your consent at any time with effect for the future, cf. item 12 lif. f of this data protection declaration. Further information on revocation can be found in section 13 of this data protection declaration.

The deletion of your customer account is possible at any time, subject to legal retention periods, and can be done either by sending a message to the responsible person named in section 1 of this privacy policy or via a function provided for this purpose in the customer account.

The duration of the storage of personal data can be found under item 15.

c) Payments

8. Comment function/product reviews

As part of the rating function on this website, in addition to your rating your comment, information on the time of creation of the comment and the comment name you have chosen (rating is also possible under a pseudonym) will be stored and published on this website. Furthermore, your IP address is logged and stored. This storage of the IP address is done for security reasons and in case the person concerned violates the rights of third parties or posts illegal content through a submitted comment. We need your e-mail address in order to contact you if a third party should object to your published content as illegal.

The legal basis for processing the data transmitted when using the rating function is your consent pursuant to Art. 6 (1) lit. a GDPR. You have the right to revoke your consent at any time with effect for the future, see section 12 lit. f of this privacy policy. Further information on revocation can be found in section 13 of this privacy policy.

The duration of the storage of personal data can be found under section 15 of this privacy policy.

We reserve the right to delete ratings if they are objected to by third parties as illegal.

9. Use of social media

1. Youtube video use

This website uses the Youtube embedding function to display and play videos from the provider "Youtube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

The extended data protection mode is used here, which, according to the provider, only triggers the storage of user information when the video is played. If the playback of embedded Youtube videos is started, the provider "Youtube" uses cookies to collect information about user behavior. According to information from "Youtube", these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive behavior.

If you are logged in to Google, your data is directly assigned to your account when you click on a video. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 (1) lit. f GDPR on the basis of Google's legitimate interests in the insertion of personalized advertising, market research and/or needs-based design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

The use of Youtube may also result in the transmission of personal data to the servers of Google LLC. in the USA. Regardless of a playback of the embedded videos, a connection to the Google network is established each time this website is called up, which may trigger further data processing operations without our influence.

For further information on data protection at "Youtube", please refer to the Youtube terms of use at https://www.youtube.com/static?template=terms and in Google's privacy policy at https://www.google.de/intl/de/policies/privacy.

As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 (1) lit. a GDPR. You have the right to revoke your consent at any time with effect for the future, see section 12 lit. f of this privacy policy. Further information on revocation can be found in section 13 of this privacy policy.

2. External links - Fanpages

In addition to this website, we also maintain presences in various social media, which you can reach via corresponding buttons on our website. If you visit such a presence, personal data may be transmitted to the provider of the social network.

Visiting our social media presences may trigger data processing operations. In detail:

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.

Our social media presences are intended to ensure the most comprehensive presence possible on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The data processing operations carried out by the social networks may be based on different legal grounds, which are to be indicated by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) lit. a GDPR).

If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. However, our responsibility is limited to data processing operations in which we are involved on the respective social media platform.

We ourselves collect personal data via our social media fan pages, for example, when you contact us via Facebook Messenger. You can see from the chat history which data we collect when you contact us via Messenger. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f GDPR. If your contact via social media platform aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted after final processing of your request, provided that there are no legal retention obligations.

If the data is processed pursuant to Art. 6 (1) lit. f GDPR, you have the right of objection from item 14 of this privacy policy. We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly.

Social networks in detail:

• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland):

For fan pages: We have concluded a joint processing agreement (Controller Addendum) with Facebook. This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

Privacy policy Facebook: https://www.facebook.com/about/privacy/,

Opt-Out possibility: https://www.facebook.com/settings?tab=ads  and http://www.youronlinechoices.com/

Facebook provides us with so-called page insights for our Facebook page: https://www.facebook.com/business/a/page/page-insights. This is aggregate data that allows us to understand how people interact with our site. Page insights may be based on personal data collected in connection with a visit or interaction of persons on or with our site and its content. Pursuant to Art. 6 (1) lit. f GDPR, this serves to protect our legitimate interests in an optimized presentation of our offer and effective communication with customers and interested parties, which prevail in the context of a balancing of interests. You can object to the processing of your data for the aforementioned purposes at any time by changing your settings for advertisements in your Facebook user account under https://www.facebook.com/settings?tab=ads.

We also point out that we have no influence on the data collection and further processing by Facebook. It is also not apparent to us to what extent, where and for how long the data is stored by Facebook, to what extent Facebook complies with existing deletion obligations, what evaluations and links are made with the data on the part of Facebook and to whom the data is passed on by Facebook. Please therefore carefully check which personal data you share with us via Facebook.

(1) Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA):

The data controller is Facebook Ireland.

Privacy policy and opt-out option

: https://help.instagram.com/155833707900388

Instagram also provides so-called page insights for our Instagram page: https://www.facebook.com/business/help/441651653251838?id=419087378825961. For more information, see above under number 9 b) (1) of this privacy policy..

Mere links to social media sites do not have plugin quality, do not trigger any processing operations by the networks on the source page, and are therefore not subject to consent.

10. Use of customer data for direct marketing

a) Subscribe to our e-mail newsletter

If you subscribe to our e-mail newsletter, we will send you information about our offers on a regular basis. Mandatory information for sending the newsletter is only your e-mail address. The provision of further data is voluntary and will be used to address you personally. For sending the newsletter we use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter after you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in the future by clicking on an appropriate link. By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 (1) lit. a GDPR. When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter will be used exclusively for the purpose of addressing you in an advertising manner by way of the newsletter.

You can unsubscribe from the newsletter at any time via an unsubscribe link contained in each issue or by sending a corresponding message to the responsible person named in section 1 of this data protection declaration, thereby revoking the consent you have given with effect for the future. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data in a manner that goes beyond this, which is permitted by law and about which we inform you in this declaration, cf. section 15 of this data protection declaration. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected by this.

b) Sending the e-mail newsletter to existing customers

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, such as those already purchased, from our range by e-mail. In accordance with Section 7 (3) of the German Unfair Competition Act (UWG), we do not need to obtain your separate consent for this. In this respect, the data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 (1) lit. f GDPR.

If you have initially objected to the use of your e-mail address for this purpose, we will not send any e-mails. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible person named in section 1 of this data protection declaration (see also section 14 of this data protection declaration). After receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.

a) Advertising by mail

On the basis of our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address and - insofar as we have received this additional information from you in the context of the contractual relationship - your title, academic degree, year of birth and your occupational, industry or business designation in accordance with Art. 6 (1) lit. f GDPR and to use it to send you interesting offers and information about our products by mail. You can object to the storage and use of your data for this purpose at any time by sending a message to the responsible persons named in section 1 of this privacy policy (see also section 14 of this privacy policy).

11. Data sharing

In order to process your order, we work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts.

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the framework of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 (1) lit. b GDPR.

Otherwise, we will only disclose data to third parties if we are legally obliged to do so (Art. 6 para. 1 p. 1 lit. c GDPR) or if you have previously given us your express consent to do so (Art. 6 para. 1 p. 1 lit. a GDPR); we will inform you in advance about the categories of data and the purposes of the transfer as well as the purposes of the further data processing before giving your consent. Otherwise, we do not pass on any data to third parties.

a) Transfer of personal data to shipping service providers

To fulfill our contractual obligations to our customers, we work with external shipping partners. For the purpose of delivery, we only pass on your name and delivery address to a shipping partner selected by us in accordance with Art. 6 (1) lit. b GDPR. The transfer takes place only insofar as this is necessary for the delivery of goods. If you have given your express consent for this in the ordering process, we will pass on your e-mail address or telephone number to the respective shipping partner in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of coordinating a delivery date or for delivery notification before the goods are delivered. Without a corresponding consent, a prior coordination of the delivery date with Deutsche Post or the delivery announcement is not possible.

You have the right to revoke your consent at any time with effect for the future, see section 12 lit. f of this privacy policy. Further information on revocation can be found in section 13 of this privacy policy.

The shipping companies we use are:

– DHL GmbH, Sträßchensweg 10, 53113 Bonn

You can find the privacy policy of DHL GmbH here: https://www.dhl.de/de/toolbar/footer/datenschutz.html.

a) Use of payment service providers (payment services)

For the processing of payments, we work together with external payment service providers. If necessary, we pass on the payment data required for the payment processing to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the payment service selected by you in the ordering process. This is done for the fulfillment of contractual obligations according to Art. 6 para. 1 lit b) DS-GVO, if you choose the appropriate payment method. In part, the selected payment service providers also collect this data themselves, insofar as you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the privacy policy of the respective payment service provider applies. We work together with the following payment service providers:

– Paypal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection, including information on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

12. Data subject rights

As the affected party, you have the right:

1. pursuant to Art. 15 GDPR to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
2. pursuant to Art. 16 GDPR to demand the correction of inaccurate or incomplete personal data stored by us without undue delay;
3. pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims;
4. to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
5. in accordance with Art. 20 GDPR to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
6. to revoke your consent at any time in accordance with Art. 7 (3) GDPR. This has the consequence that we may no longer continue the data processing based on this consent for the future, and
7. complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our office for this purpose.

13. Revocation of consent once given

A revocation of the once given consent with effect for the future is possible at any time. If you wish to exercise your right of revocation, simply send an e-mail to the responsible person named in section 1 of this data protection declaration.

If you have consented to the setting of cookies, you can revoke your consent at any time under Cookie Settings without giving reasons.

After revocation, we will delete your data and no longer process it for the purpose stated here, unless you have expressly consented to further use of your data or we reserve the right to use data in a manner that goes beyond this and is permitted by law and about which we inform you in this declaration.

The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.

14. Right of objection

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you wish to exercise your right of objection, simply send an e-mail to the data controller named in section 1 of this privacy policy.

15. Duration of the storage of personal data

The duration of the storage of personal data depends on the respective legal basis, the respective processing purpose and - if relevant - the respective statutory retention and documentation obligations (e.g. retention periods under commercial and tax law from HGB, StGB or AO).

When personal data is processed on the basis of explicit consent pursuant to Art. 6 (1) (a) GDPR, this data is stored until the data subject revokes his or her consent. If there are legal retention periods for data that is processed within the scope of legal business or obligations similar to legal business on the basis of Art. 6 (1) (c) GDPR, this data will be routinely deleted after the retention periods have expired, insofar as it is no longer required for the fulfillment of a contract or the initiation of a contract and/or there is no legitimate interest on our part in continuing to store it.

Personal data processed on the basis of Art. 6(1)(f) GDPR will be stored until the data subject exercises his or her right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing is for the establishment, exercise or defense of legal claims.

In the case of processing of personal data for the purpose of direct marketing on the basis of Art. 6 (1) lit. f GDPR (see under No. 10. of this privacy statement), this data will be stored until the data subject exercises his or her right to object pursuant to Art. 21 (2) GDPR. Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

We store the data relating to your customer account for as long as this exists with us and mutual claims may still exist from this or if the protection of our legitimate interests or legal obligations require further processing. This means in detail:

Your account including your master data (cf. clause 7. of this data protection declaration) will be blocked in the event of termination. We delete this data as well as the communication content (cf. item 7. a) of this data protection declaration) definitively as soon as we no longer need it for the processing of the contract (regularly after the expiry of the third year after the termination of the user contract), unless we are required under Article 6 para. 1 S. 1 lit. c GDPR, we are obliged to store the data for a longer period of time due to tax and commercial law retention and documentation obligations (from HGB or AO) or you have consented to a storage beyond this period of time according to Art. 6 para. 1 S. 1 lit. a GDPR.

16. Data security

For security reasons and to protect the transmission of personal data and other confidential content, this website uses SSL or TLS encryption. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser bar. Only transmit your confidential information when SSL encryption is activated.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

17. Actuality and change of this privacy policy

This privacy policy is currently valid and has the status June 2021.

Due to the further development of our website and offers on it or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy.