Privacy Policy

DATA PROTECTION POLICY

INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE RESPONSIBLE PARTY 1.1 We are delighted to welcome you to our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data includes all data that can personally identify you.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is the Shop Name. The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser's address bar.

DATA COLLECTION WHEN VISITING OUR WEBSITE If you only use our website for informational purposes, i.e., without registering or otherwise providing information to us, we only collect the data that your browser sends to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website:

Visited website Date and time of access Amount of data sent in bytes Source/reference from which you accessed the page Browser used Operating system used IP address used (if applicable, in anonymized form) Processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no further disclosure or other use of the data. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.

COOKIES To make your visit to our website attractive and to enable the use of certain functions, we use cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data and IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

Some of the cookies are used to simplify the ordering process by storing settings (e.g., the content of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies implemented by us, processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either for the performance of the contract or in accordance with Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

We may work with advertising partners to make our online offer more interesting for you. For this purpose, cookies from partner companies may also be stored on your hard drive when you visit our website (third-party cookies). If we cooperate with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in the following paragraphs.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences Chrome: https://support.google.com/chrome/answer/95647?hl=en Safari: https://support.apple.com/kb/ph21411?locale=en_US Opera: https://help.opera.com/en/latest/security-and-privacy/#clearBrowsingData

Please note that the functionality of our website may be restricted if cookies are not accepted.

CONTACT When contacting us (e.g., via contact form or email), personal data is collected. The data collected can be found in the contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted after final processing of your inquiry, provided that it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal obligations to retain data.

DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PROCESSING In accordance with Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the purpose of concluding a contract or opening a customer account. The data collected can be seen from the respective input forms. You can delete your customer account at any time and by sending a message to the address of the controller given above. We store and use the data you provide us with for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further data use has been reserved by us, about which we will inform you accordingly below.

USE OF YOUR DATA FOR DIRECT ADVERTISING 6.1 Registration for our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only required information for sending the newsletter is your email address. Any other data provided is voluntary and is used to address you personally. For sending the newsletter, we use the double opt-in procedure. This means that we will only send you an email newsletter if you have explicitly confirmed to us that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm that you wish to receive newsletters in the future by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to process your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. When registering for the newsletter, we store your IP address, the individual device identifier assigned by the Internet service provider (ISP), as well as the date and time of registration in order to be able to trace any misuse of your email address at a later time. The data collected by us when registering for the newsletter will be used exclusively for the purpose of advertising in the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond what is legally permitted and about which we inform you in this statement.

6.2 Sending the email newsletter to existing customers

If you have provided us with your email address when placing an order, we reserve the right to send you regular offers for similar goods, such as those already purchased, from our range by email, in accordance with § 7 Para. 3 UWG. We do not need to obtain separate consent from you for this purpose. Data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6 Para. 1 lit. f GDPR. If you initially objected to the use of your email address for this purpose, no offers will be sent. You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller mentioned at the beginning. For this, you will only incur transmission costs according to the basic tariffs. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.

DATA PROCESSING FOR ORDER PROCESSING 7.1 The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, to the extent necessary for the delivery of the goods. We will pass on your payment data to the commissioned bank as part of the payment processing, if this is necessary for payment processing. If payment service providers are used, we will explicitly inform you about this below. The legal basis for the transfer of data is Art. 6 Para. 1 lit. b GDPR.

7.2 Use of payment service providers

-PayPal When paying via PayPal, credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal, we will share your payment details with PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer is made in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to carry out a credit check for payment methods such as credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data will be transferred to credit agencies in accordance with Art. 6 Para. 1 lit. f GDPR, based on PayPal's legitimate interest in determining your ability to pay. PayPal uses the results of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. Address data, among other things, is also included in the calculation of the score values, but not exclusively. For further information on data protection, including the credit agencies used, please refer to PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

IMMEDIATELY If you select the payment method "IMMEDIATELY," the payment processing will be carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "IMMEDIATELY"), to whom we will pass on your information provided during the ordering process, along with information about your order in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data is carried out exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. You can obtain further information on the data protection regulations of SOFORT from the provider's data protection information at the following link: https://www.klarna.com/sofort/datenschutz.

8.CONTACT FOR REVIEW REMINDERS

Personal review reminder (no dispatch via a customer review system)

We use your email address for a one-time reminder to submit a review of your order for the review system we use, provided that you have given us your express consent during or after your order in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time by sending a message to the data controller.

USE OF SOCIAL MEDIA: SOCIAL PLUGINS

9.1 Facebook Plugins with Shariff Solution

Additional customs and/or import duties are not included in the price and are borne by the customer.

Our website uses so-called social plugins ("plugins") of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook").

To increase the protection of your data when visiting our website, these buttons are not unrestricted plugins but are only integrated into the page via an HTML link. This type of integration ensures that when you visit a page on our website that contains such buttons, no connection is made to Facebook's servers. When you click on the button, a new browser window opens that calls up the Facebook page where you can interact with the plugins (possibly after entering your login data).

Facebook Inc., based in the USA, is certified under the US-European Privacy Shield, which ensures compliance with the level of data protection in the EU.

For the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your related rights and privacy settings, please refer to Facebook's privacy policy: https://www.facebook.com/policy.php

9.2 Google+ Plugins as Shariff Solution

On our website, so-called social plugins ("plugins") of the social network Google+ are used, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

To increase the protection of your data when visiting our website, these buttons are not unrestricted plugins but are only integrated into the page via an HTML link. This type of integration ensures that when you visit a page on our website that contains such buttons, no connection is made to Google+'s servers. When you click on the button, a new browser window opens that calls up the Google+ page where you can interact with the plugins (possibly after entering your login data).

Google LLC, based in the USA, is certified under the US-European Privacy Shield, which ensures compliance with the level of data protection in the EU.

For the purpose and scope of data collection and the further processing and use of data by Google, as well as your related rights and privacy settings, please refer to Google's privacy policy: https://www.google.com/intl/de/policies/privacy/

9.3 Instagram Plugin as Shariff Solution

On our website, so-called social plugins ("plugins") of the online service Instagram are used, which is operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram").

To increase the protection of your data when visiting our website, these buttons are not unrestricted plugins but are only integrated into the page via an HTML link. This type of integration ensures that when you visit a page on our website that contains such buttons, no connection is made to Instagram's servers. When you click on the button, a new browser window opens that calls up the Instagram page where you can interact with the plugins (possibly after entering your login data).

Instagram LLC, based in the USA, is certified under the US-European Privacy Shield, which ensures compliance with the level of data protection in the EU.

For the purpose and scope of data collection and the further processing and use of data by Instagram, as well as your related rights and privacy settings, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/

ONLINE MARKETING

10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick").

DoubleClick uses cookies to display ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Google collects via a cookie ID which ads are displayed in which browser to prevent multiple ads from being displayed. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 para. 1 lit. f GDPR.

In addition, DoubleClick may capture conversions related to ad requests by using cookie IDs. This occurs when a user sees a DoubleClick ad and later accesses the advertiser's website with the same browser and makes a purchase. According to Google, DoubleClick cookies do not contain personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server. We have no influence on the extent and further use of the data that Google collects through the use of this tool, and therefore inform you according to our level of knowledge: By integrating DoubleClick, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will receive your IP address and store it.

If you want to disable this tracking process, you can deactivate cookies for conversion tracking by adjusting your browser settings to block cookies from the domain www.googleadservices.com: https://www.google.de/settings/ads. This setting will be deleted when you delete your cookies. Alternatively, you can get information about setting cookies and make settings for them via the Digital Advertising Alliance at www.aboutads.info. Finally, you can set your browser to inform you about the setting of cookies and decide on their acceptance individually or exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited.

Google LLC, based in the USA, is certified under the US-European Privacy Shield, which ensures compliance with the level of data protection in the EU.

For more information on the privacy policy of DoubleClick by Google, please visit: https://www.google.de/policies/privacy/

10.2 Use of Google AdWords Conversion Tracking

This website uses the online advertising program "Google AdWords" and, as part of Google AdWords, the conversion tracking of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use Google AdWords to draw attention to our attractive offers with the help of advertising materials on external websites (so-called Google AdWords). We can determine how successful individual advertising measures are based on the data of the advertising campaigns. We thus pursue the interest in displaying advertising to you that is of interest to you, making our website more interesting for you, and achieving a fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your computer system. These cookies usually lose their validity after 30 days and do not serve to identify you personally. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked across AdWords customers' websites. The information obtained with the help of the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you do not wish to participate in tracking, you can object to this use by deactivating the Google conversion tracking cookie in your Internet browser settings. You will then not be included in the conversion tracking statistics. We use Google AdWords on the basis of our legitimate interest in targeted advertising in accordance with Art. 6 para. 1 lit. f GDPR.

Google LLC, based in the USA, is certified under the US-European Privacy Shield, which ensures compliance with the level of data protection in the EU.

For more information on Google's privacy policy, please visit: https://www.google.de/policies/privacy/

You can permanently deactivate cookies for advertising preferences by preventing them from being set through corresponding settings in your browser software or by downloading and installing the browser plugin available at the following link: https://www.google.com/settings/ads/plugin?hl=en

Please note that certain functions of this website may not be available or may only be used to a limited extent if you have deactivated the use of cookies.

11. WEB ANALYSIS SERVICES Google (Universal) Analytics

Google Universal Analytics This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server in the USA and stored there. This website uses Google Analytics exclusively with the extension "_anonymizeIp()" to ensure anonymization of the IP address by shortening it and to exclude direct personal references. With this extension, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and internet use. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plugin available at the following link: Google Analytics Opt-out. Alternatively, you can click on the following link to set an opt-out cookie that prevents Google Analytics from collecting data on this website in the future (this opt-out cookie works only in this browser and only for this domain. If you delete your cookies in this browser, you will need to click this link again): Google Analytics deactivate. Google LLC in the USA is certified under the US-EU Privacy Shield, which ensures compliance with EU data protection standards. This website also uses Google Analytics for cross-device analysis of visitor flows, which is carried out using a user ID. A unique, permanent and anonymized ID is assigned to the user the first time they access a page, which is used across devices. This allows interaction data from different devices and sessions to be assigned to a single user. The user ID does not contain any personal data and does not transmit such data to Google. Data collection and storage via the user ID can be objected to at any time for the future. To do so, you must disable Google Analytics on all systems you use, such as in another browser or on your mobile device. You can do this by using a browser plugin from Google (Google Analytics deactivate). Alternatively, you can click on the following link for browsers on mobile devices or if you do not want to use the plugin to set an opt-out cookie that prevents Google Analytics from collecting data on this website in the future (this opt-out cookie works only in this browser and only for this domain; if you delete your cookies in this browser, you will need to click this link again): Google Analytics deactivate. Further information on Universal Analytics can be found at: Google Analytics Help

RETARGETING/REMARKETING/REFERRAL ADVERTISING

**Facebook Custom Audience via the Pixel Method This website uses the "Facebook Pixel" from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). With explicit consent, user behavior can be tracked after viewing or clicking on a Facebook ad. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimize future advertising efforts. The data collected is anonymous to us and does not provide insight into user identities. However, Facebook stores and processes the data and may link it to the respective user profile. Facebook may use the data in accordance with the Facebook Privacy Policy (https://www.facebook.com/about/privacy/) for its own advertising purposes. Users can allow Facebook and its partners to display ads on and off Facebook. In addition, a cookie may be stored on the user's computer for this purpose. These processes are carried out only with explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Users must be at least 13 years old to give their consent. If they are younger, parental consent is required. Facebook Inc. in the USA is certified under the EU-US Privacy Shield and ensures compliance with EU data protection standards. Users can disable cookies by adjusting their browser settings, but this may affect the functionality of the website. The use of third-party cookies, such as those from Facebook, can be disabled at https://www.aboutads.info/choices/.

**Google AdWords Remarketing Our website uses Google AdWords Remarketing to advertise in Google search results and on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google places a cookie in the user's browser, which enables interest-based advertising based on visited pages. Processing is based on our legitimate interest in optimizing website marketing in accordance with Art. 6 para. 1 lit. f GDPR. Further data processing only takes place if the user has agreed to link his internet and app browsing history with his Google account for personalized advertising. Users who are logged in to Google during their visit to our website allow Google to use their data along with Google Analytics data to create cross-device remarketing audience lists. Users can permanently disable ad preference cookies by downloading and installing the browser plugin at https://www.google.com/settings/ads/onweb/ or adjusting settings at www.aboutads.info. Google LLC in the USA is certified under the EU-US Privacy Shield. For more information, see Google's advertising and privacy policies at https://www.google.com/policies/technologies/ads/.

RIGHTS OF THE DATA SUBJECT

13.1 Relevant data protection legislation grants you comprehensive rights as a data subject (rights of access and intervention), as outlined below:

Right of access (Art. 15 GDPR): You have the right to be informed about your processed personal data, processing purposes, categories, recipients, storage period, criteria for determining duration, rights to rectification, erasure, restriction, objection, complaint to a supervisory authority, data source, automated decision-making (including profiling), consequences, and the right to know about guarantees related to data transmission to third countries. Right to rectification (Art. 16 GDPR): You have the right to correct your inaccurate data or complete incomplete data. Right to erasure (Art. 17 GDPR): You can request the deletion of your data under certain conditions, unless this conflicts with rights to freedom of expression, legal obligations, public interest, or the assertion, exercise, or defense of legal claims. Right to restriction of processing (Art. 18 GDPR): You can restrict processing while accuracy is contested, you object to deletion, data is needed for legal claims, or you have objected to processing pending verification of legitimate grounds. Right to information (Art. 19 GDPR): If you have exercised rights to rectification, erasure, or restriction of processing, the controller must inform recipients, unless this is impossible or involves disproportionate effort. You have the right to know these recipients. Right to data portability (Art. 20 GDPR): You can receive your personal data in a structured, commonly used, and machine-readable format or request transmission to another controller, if technically feasible. Right to withdraw consent (Art. 7 para. 3 GDPR): You can withdraw your consent at any time regarding future processing. The revocation does not affect the lawfulness of processing prior to revocation. Right to lodge a complaint (Art. 77 GDPR): If you believe that processing violates the GDPR, you have the right to lodge a complaint with a supervisory authority.

13.2 RIGHT TO OBJECT If we process your personal data on the basis of our legitimate interest, you have the right to object at any time for reasons arising from your particular situation. After objection, we will cease processing unless compelling legitimate grounds override your interests, rights, and freedoms, or are necessary for the assertion, exercise, or defense of legal claims. If we process your personal data for direct marketing, you have the right to object at any time. In this case, we will cease processing your data for direct marketing purposes.

14. DURATION OF PERSONAL DATA STORAGE

The duration of personal data storage depends on the respective legal retention period (e.g., commercial and tax retention periods). After the period has expired, the relevant data will be routinely deleted unless it is no longer required for contract fulfillment or initiation and/or we have no legitimate interest in further storage.