Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither required by law nor by contract, nor is it necessary to conclude a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no other indication is given for the subsequent processing operations.

"Personal data" means all information relating to an identified or identifiable natural person.

Server Log Files

You can visit our website without providing any information about yourself.

Whenever you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transmitted, and the requesting provider. Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the uninterrupted operation of our website and improving our offer.

Your data is transmitted to Canada, among other places. There is an EU Commission adequacy decision for data transfers to Canada.

Contact

Data Controller

Feel free to contact us. The contact details of the data controller can be found in our legal notice.

Customer Initiating Contact via Email

If you initiate business contact with us via email, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing is for the purpose of processing and responding to your contact request.

If the contact is for the purpose of carrying out pre-contractual measures (e.g., advice on purchasing interest, creating an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.

If the contact is for other reasons, this data processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data relating to you based on Art. 6(1)(f) GDPR.

We use your email address only to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.

Collection and Processing When Using the Contact Form

When using the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing is for the purpose of contacting you.

If the contact is for the purpose of carrying out pre-contractual measures (e.g., advice on purchasing interest, creating an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.

If the contact is for other reasons, this data processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data relating to you based on Art. 6(1)(f) GDPR.

We use your email address only to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.

Use of the Chatbot and Forms

We offer you an AI-based chatbot from Flyweight GmbH, Jungbuschstraße 28, 68159 Mannheim, Germany (https://www.flyweight.io/legal-notice / https://www.flyweight.io/privacy-statement) on our website to answer your questions. When using the chatbot, your requests are combined with a database created from information scraped from our own website and a Large Language Model to provide you with answers to your request. The chatbot is instructed not to ask for personal data. Please note: If separate forms appear due to your requests, in which you may then be required to provide personal data based on your request, the information you provide there will be processed separately and will not be sent to the AI.

Processed data categories: The data categories result from your requests if you provide personal data within your question.

• For example, if you ask: "Where is my order?", a form will appear in which you can enter your order number and your postal code.
• For example, if you want to learn more about a product and receive advice accordingly, a form will appear in which you can enter the relevant information (e.g., name, phone number, email, etc.).

Purpose of processing: Processing your provided information to generate answers to your requests using the chatbot.

• For example, if you ask: "Where is my order?" and enter your order number and postal code in the form, this information will be used to make a direct request to the shop system (Shopify) so that delivery information can be sent and you can be informed about the status of the order.
• If you want advice on a product, your request (with the data you provided in the form and the entire chat history) will be forwarded to the shop operator so that they can contact you.

Source of the data: We collect this data directly from you.

Legal basis: We process the data for the performance of a contract or for pre-contractual measures pursuant to Article 1(1)(b) GDPR.

Retention period: We store this data until your request has been answered or for the duration of the contract and beyond until the expiration of the statutory retention periods, which can be 6 to 10 years.

Location of recipients: EU and non-EU

Guarantees for transfers to third countries: EU Standard Contractual Clauses (SCC), adequacy decision

Customer Account - Orders

Customer Account

When opening a customer account, we collect your personal data to the extent stated therein. The data processing is for the purpose of improving your shopping experience and simplifying order processing. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on consent up to the time of revocation. Your customer account will then be deleted.

Collection, Processing, and Disclosure of Personal Data for Orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your requests. The provision of the data is necessary to conclude the contract. Failure to provide it will result in no contract being concluded. Processing is based on Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data is therefore disclosed, for example, to the shipping companies and dropshipping providers you select, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly comply with statutory requirements. The scope of data transmission is limited to the minimum necessary.

Your data is transmitted to Canada, among other places. There is an EU Commission adequacy decision for data transfers to Canada.

Advertising

Use of the Email Address for Sending Newsletters

Regardless of contract processing, we use your email address exclusively for our own advertising purposes for sending newsletters, provided you have expressly consented. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on consent up to the time of revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.

Your data is disclosed to an email marketing service provider as part of a data processing agreement. No disclosure to other third parties takes place.

Use of the Email Address for Sending Direct Advertising

We use your email address, which we obtained in connection with the sale of goods or services, for the electronic transmission of advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. The provision of the email address is necessary to conclude the contract. Failure to provide it will result in no contract being concluded. Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. The contact details for exercising the objection can be found in the legal notice. You can also use the link provided for this purpose in the advertising email. No other costs than the transmission costs according to the basic tariffs will be incurred.

Shipping Service Provider

Disclosure of the Email Address to Shipping Companies to Provide Information on Shipping Status

We disclose your email address to the transport company as part of contract processing, provided you have expressly consented during the ordering process. The disclosure is for the purpose of informing you about the shipping status via email. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company, without affecting the lawfulness of the processing carried out based on consent up to the time of revocation.

Payment Service Provider

Use of PayPal

All PayPal transactions are subject to the PayPal Privacy Statement. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Express

We use the PayPal Express payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing is for the purpose of being able to offer you payment via the PayPal Express payment service. To integrate this payment service, PayPal must collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. Cookies enable the recognition of your browser.

The processing of your personal data is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data relating to you.

By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal so that the contract with you can be fulfilled using the selected payment method. This processing is based on Art. 6(1)(b) GDPR. Further information on data processing when using the PayPal Express payment service can be found in the corresponding privacy statement at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.

Use of Personal Data When Selecting Klarna Payment Options

To be able to offer you Klarna's payment options, we will transmit personal data, such as contact details and order data, to Klarna. This allows Klarna to assess whether you can use the payment options offered by Klarna and to adapt the payment options to your needs. General information about Klarna can be found at: https://www.klarna.com/de/. Your personal information will be handled by Klarna in accordance with the applicable data protection regulations and according to the information in Klarna's privacy statement at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that enables the unique identification of the browser when the website is accessed again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data contained therein. Already stored cookies can be deleted at any time. However, we point out that you may not be able to use all the functions of this website to their full extent.

Under the links below, you can find out how you can manage cookies in the most important browsers (including disabling them):

Technically Necessary Cookies

Unless otherwise stated in the privacy statement below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after changing pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after changing pages.

The use of cookies or comparable technologies is based on § 25(2) TTDSG. The processing of your personal data is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.

You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data relating to you.

Analysis & Advertising Tracking

Use of Google Analytics

We use the web analysis service Google Analytics from Google Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

The data processing is for the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the obtained information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities, and to provide further services related to website and internet use to the website operator. The following information may be collected, among others: IP address, date and time of the page access, click path, information about the browser and device you use, visited pages, referrer URL (the website through which you accessed our website), location data, purchasing activities. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.

Google Analytics uses technologies such as cookies, browser storage, and tracking pixels that enable it to analyze your use of the website. The information generated about your use of this website is generally transferred to and stored on a Google server in the USA. There is no EU Commission adequacy decision for the USA. Data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adsprocessorterms/. Both Google and US government authorities have access to your data. Google may combine your data with other data, such as your search history, personal accounts, usage data from other devices, and any other data Google has about you.

IP anonymization is enabled on this website. This means that Google will shorten your IP address before it is transferred to a Google server in the USA or another country in the European Economic Area or a country covered by the Agreement on the European Economic Area. In exceptional cases, the full IP address is transferred to a Google server in the USA and shortened there.

Your personal data is processed on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in tailoring the website to meet user needs and providing targeted content. You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.

You can prevent Google Analytics from collecting data about your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

To prevent Google Analytics from collecting and storing data across devices, you can set an opt-out cookie. Opt-out cookies prevent Google from collecting your data when you visit this website in the future. You must opt out on all systems and devices you use for this to be fully effective. If you delete the opt-out cookie, requests will be sent to Google again. Click here to set the opt-out cookie: [Disable Google Analytics].

For more information about the terms of use and privacy policy, see https://www.google.com/analytics/terms/de.html, https://www.google.de/intl/de/policies/, and https://policies.google.com/technologies/cookies?hl=de.

Use of Google Ads Conversion Tracking

We use the "Google Ads" online advertising program on our website, which includes conversion tracking (visit action reporting). Google Conversion Tracking is an analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

If you click on an ad placed by Google, a cookie for conversion tracking will be placed on your computer. These cookies have a limited lifespan, contain no personal data, and are therefore not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Google and we can detect that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Therefore, it is not possible to track cookies across the websites of Ads customers.

The information collected using the conversion cookie is used to create conversion statistics. This allows us to learn the total number of users who clicked on one of our ads and were redirected to a page containing a conversion tracking tag. However, we do not receive any information that would allow users to be personally identified.

Your data may be transferred to Google LLC servers in the USA. There is no EU Commission adequacy decision for the USA. Data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adsprocessorterms/.

Your personal data is processed on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in addressing website visitors with targeted, interest-based advertising. You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.

You can disable personalized advertising from Google in your Google ad settings. Instructions can be found at https://support.google.com/ads/answer/2662922?hl=de

Alternatively, you can prevent third parties from using cookies by visiting the Network Advertising Initiative opt-out page at https://www.networkadvertising.org/choices/ and following the further opt-out instructions provided there. You will then not be included in conversion tracking statistics.

For more information and Google's privacy policy, see: https://www.google.de/policies/privacy/

Use of Google AdSense

We use the AdSense feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website. The data is processed to rent advertising space on the website and to address website visitors with targeted, interest-based advertising. This feature allows the provider to display personalized, interest-based ads from the Google Display Network to website visitors. Google uses cookies that enable it to analyze your use of the website. The information generated by the cookie about your use of this website is generally transferred to and stored on a Google server in the USA. There is no EU Commission adequacy decision for the USA. Data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adsprocessorterms/. Google may transfer this information to third parties if required by law or if third parties process this data on Google's behalf. Google will not associate your IP address with any other Google data in any case.

Your personal data is processed on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in addressing website visitors with targeted, interest-based advertising. You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. You can permanently disable Google's use of cookies by following the link below and downloading and installing the provided plug-in: https://support.google.com/ads/answer/7395996?hl=de. Alternatively, you can prevent third parties from using cookies by visiting the Network Advertising Initiative opt-out page at https://www.networkadvertising.org/choices/ and following the further opt-out instructions provided there. For more information and Google's privacy policy, see: https://www.google.com/policies/technologies/ads/ and https://www.google.de/policies/privacy/

Use of Google Inc.'s Remarketing or "Similar Audiences" Feature

We use the remarketing or "Similar Audiences" feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website.

The feature is used to analyze visitor behavior and interests. Google uses cookies to analyze website usage, which forms the basis for creating interest-based ads. The cookies collect information about website visits and anonymized data about website usage. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown ads that are highly likely to take into account the product and information areas you previously viewed.

Your data may be transferred to Google LLC servers in the USA. There is no EU Commission adequacy decision for the USA. Data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks.

Your personal data is processed on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in addressing website visitors with targeted, interest-based advertising. You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.

You can permanently disable Google's use of cookies by following the link below and downloading and installing the provided plug-in: https://support.google.com/ads/answer/7395996?hl=de

Alternatively, you can prevent third parties from using cookies by visiting the Network Advertising Initiative opt-out page at https://www.networkadvertising.org/choices/ and following the further opt-out instructions provided there.

For more information about Google Remarketing and the associated privacy policy, see: https://www.google.com/privacy/ads/

Data Subject Rights and Retention Period

Retention Period

After the contract has been fully fulfilled, the data will initially be stored for the duration of the warranty period, and then for the statutory retention periods, in particular those under tax and commercial law, and will be deleted after the period expires, unless you have consented to further processing and use.

Rights of the Data Subject

Subject to the statutory requirements, you have the following rights under Art. 15 to 20 GDPR: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, and the right to data portability.

Furthermore, under Art. 21(1) GDPR, you have the right to object to processing based on Art. 6(1)(f) GDPR, as well as to processing for direct marketing purposes.

Right to lodge a complaint with the supervisory authority

Under Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

Right to object

If the personal data processing activities listed here are based on our legitimate interests under Art. 6(1)(f) GDPR, you have the right, at any time and for reasons relating to your particular situation, to object to such processing with respect to future processing.

Once you have objected, we will stop processing the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims.

If personal data is processed for direct marketing purposes, you may object to such processing at any time by notifying us. Once you have objected, we will stop processing the data concerned for direct marketing purposes.

Vertrag widerrufen