Unless stated otherwise below, the provision of your personal data is neither legally nor contractually obligatory, nor required for conclusion of a contract. You are not obliged to provide your data. Not providing it will have no consequences. This only applies as long as the processing procedures below do not state otherwise.
"Personal data" is any information relating to an identified or identifiable natural person.
Server log files
You can use our websites without submitting personal data. Every time you access our website, user data is transmitted by your internet browser and stored in protocol files (server log files). This stored data includes e.g. name of the site called up, date and time of the request, amount of data transferred and the provider making the request. This data serves exclusively to ensure smooth operation of our website and to improve our offering. It is not possible to assign this data to a particular person.
Collection and processing when using the contact form
When you use the contact form we will only collect your personal data (name, email address, message text) in the scope provided by you. The data processing is for the purpose of making contact. By submitting your message you agree to the processing of your transmitted data. Processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent.You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. We will only use your email address to process your request. Finally your data will be deleted, unless you have agreed to further processing and use.
When you open a customer account, we will collect your personal data in the scope given there. The data processing is for the purpose of improving your shopping experience and simplifying order processing. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your customer account will then be deleted.
Data collection when you post a comment
When you comment on an article or a contribution, we collect your personal data (name, email address, comment text) only in the scope provided by you. The processing serves to allow you to comment and to display comments. By submitting the comment you agree to the processing of the transmitted data. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. You personal data will then be deleted.
On submission of your comment your IP address will also be saved in order to prevent misuse of the comment function and to ensure the security of our IT systems. By submitting the comment you agree to the processing of the transmitted data. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your IP address will then be deleted.
Collection, processing, and use of personal data in orders
When you submit an order, we only collect and use your personal data where this is necessary for the fulfilment and handling of your requests. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of art. 6 (1) lit. b GDPR and is required for the fulfilment of a contract with you. We will not forward your data to third parties without your explicit consent. This only excludes our service partners which we require in order to handle the contractual relationship or service providers we use to process an order. Along with the recipients named in the clauses of this data protection declaration, these may be recipients in the following categories: Shipping providers, payment service providers, merchandise management service providers, service providers for order processing, web hosts, IT service providers and dropshipping dealers. We will comply strictly with legal requirements in every case. The scope of data transmission is restricted to a minimum.
‘Käufersiegel' rating system
Our website uses the ‘Käufersiegel' rating system by Händlerbund Management AG (Torgauer Straße 233 B, 04347 Leipzig). Following your order, we would like to ask you to evaluate and comment on your purchase with us. We will write to you for this purpose in the course of processing the contract, making use of the technical system of the provider of the ‘Käufersiegel' rating tool in processing the order. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in truthful, verified evaluation of our services. You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation. Your email address will only be used for this purpose and in particular will not be used for further advertising and will also not be forwarded to other third parties. The personal data saved for this purpose in the technical system of the ‘Käufersiegel' rating tool will be deleted three months after the delivery of goods recorded for evaluation.
Data collection and processing, credit check when purchasing on account via heidelpay
When paying by invoice via heidelpay, personal data are transmitted to the collection service provider heidelpay (Heidelberger Payment GbmH, Vangerowstraße 18, 69115 Heidelberg) and processed there. The data processing is for the purpose of offering purchase on account as well as the credit check required for this. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in offering various payment methods as well as our justified interest in protection from payment default. You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation. In order to carry out its in-house identity and credit check, Billpay, or the partner companies commissioned by Billpay, send data to credit agencies and receives information from them and, if applicable, information on creditworthiness on the basis of mathematical and statistical procedures, taking address information among other things into account.
Specifically, the credit agencies may be among those named in the illustrative but not exhaustive list below:
- Schufa Holding AG, Bürgel Wirtschaftsinformationen GmbH & Co. KG,
- Arvato Infoscore GmbH, Deltavista GmbH, Universum Business GmbH,
- Bisnode International Group,
- Regis24 GmbH,
- Creditreform AG.
The provision of data is required for conclusion of contract with your desired payment method. Failure to provide it will mean that the contract cannot be concluded with your desired payment method.
All PayPal transaction are covered by the PayPal Data Privacy Statement which you can find at https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=en_GB.
Using the links below, you can find out how to manage cookies (or deactivate them, among other things) in major browsers:
- Chrome Browser: https://support.google.com/accounts/answer/61416?hl=en
- Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
- Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
- Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Use of Matomo
Our website uses the analysis tool Matomo by InnoCraft Ltd. (150 Willis St, 6011 Wellington, New Zealand; "Matomo"). The processing of data serves to analyse this website and its visitors. Data is collected and saved for marketing and optimisation purposes. A usage profile can be generated from this data under a pseudonym. Cookies may be deployed for this purpose. Cookies facilitate recognition of your internet browser. The data collected with Matomo technologies will not be used to identify the website user personally in future or combined with personal data on the bearer of the pseudonym without the separately issued consent of the affected party. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in needs-based and targeted design of the website. You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR by contacting us, for reasons relating to your personal situation. Approval for data collection and storage can be withdrawn at any time with future effect.
Use of YouTube
Duration of storage
After contractual processing has been completed, the data is initially stored for the duration of the warranty period, then in accordance with the retention periods prescribed by law, especially tax and commercial law, and then deleted after the period has elapsed, unless you have agreed to further processing and use.
Rights of the affected person
If the legal requirements are fulfilled, you have the following rights according to art. 15 to 20 GDPR: Right to information, correction, deletion, restriction of processing, data portability. You also have a right of objection against processing based on art. 6 (1) GDPR, and to processing for the purposes of direct marketing, according to art. 21 (1) GDPR.
Contact us at any time. Our contact details can be found in our imprint.
Right to complain to the regulatory authority
You have the right to complain to the regulatory authority according to art. 77 GDPR if you believe that your data is not being processed legally.
Last update: 25.04.2018