Privacy policy

The controller responsible for data processing is:
ARUS Vertriebs GmbH
Waldstrasse 11c
85649 Brunnthal
Germany
support@arus-vertrieb.de

Thank you for your interest in our online shop. Protecting your privacy is very important to us. Below we provide you with detailed information on how we handle your data. Your data is processed on the basis of the GDPR as well as pursuant to § 165 para. 3 TKG (Austria).

1. Access data and hosting

You can visit our website without providing any personal information. Each time a webpage is accessed, the web server automatically stores what is known as a server log file, which contains, for example, the name of the file requested, your IP address, the date and time of retrieval, the amount of data transferred and the requesting provider (access data), and documents the retrieval. This access data is evaluated exclusively for the purpose of ensuring smooth operation of the site and improving our services. This serves to safeguard our legitimate interests in the correct presentation of our services, which predominate within the context of a balancing of interests, pursuant to Art. 6(1) sentence 1 (f) GDPR. All access data is deleted no later than seven days after the end of your visit to the site.

Hosting

The hosting and website display services are provided in part by our service providers as part of processing on our behalf. Unless otherwise explained within this privacy policy, all access data as well as all data collected in the forms provided for that purpose on this website is processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact option described in this privacy policy.

Our service providers are based and/or use servers in the following countries, for which the European Commission and the Swiss Federal Council have determined by decision that an adequate level of data protection exists: Canada, New Zealand, Japan, United Kingdom, USA.

The adequacy decisions for the USA serve as the basis for the transfer of data to a third country, provided that the respective service provider is certified. Until certification by our service providers has been obtained, the data transfer continues to be based on the following basis: standard contractual clauses of the European Commission.

Our service providers are based and/or use servers in these countries: Australia, India, Singapore.
No adequacy decision by the European Commission or the Swiss Federal Council exists for these countries. Our cooperation with them is based on the following safeguards: standard contractual clauses of the European Commission

2. Data processing for contract fulfilment and for contacting us

2.1 Data processing for contract fulfilment

For the purpose of contract fulfilment (including enquiries about and handling of any existing warranty and performance-defect claims as well as any statutory update obligations) pursuant to Art. 6(1) sentence 1 (b) GDPR, we collect personal data if you voluntarily provide it to us as part of your order. Mandatory fields are marked as such because in these cases we require the data to fulfil the contract and cannot ship the order without it. The data collected can be seen from the respective input forms.

Further information on the processing of your data, in particular on its disclosure to our service providers for the purpose of processing orders, payments and shipments, can be found in the following sections of this privacy policy. Once the contract has been fully performed, your data is restricted from further processing and deleted after the tax and commercial law retention periods have expired, pursuant to Art. 6(1) sentence 1 (c) GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1 (a) GDPR, or we reserve the right to use the data beyond that in a manner permitted by law, about which we inform you in this policy.

2.2 Customer account

Insofar as you have given your consent for this pursuant to Art. 6(1) sentence 1 (a) GDPR by choosing to open a customer account, we use your data for the purpose of opening the customer account and for storing your data for further future orders on our website. Your customer account can be deleted at any time, either by sending a message to the contact option described in this privacy policy or via a function provided for that purpose in the customer account. After your customer account has been deleted, your data is deleted, unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1 (a) GDPR, or we reserve the right to use the data beyond that in a manner permitted by law, about which we inform you in this policy.

2.3 Contacting us

As part of our communication with customers, we collect personal data pursuant to Art. 6(1) sentence 1 (b) GDPR in order to process your enquiries, if you voluntarily provide such data to us when contacting us (e.g. via contact form, live chat tool or email). Mandatory fields are marked as such because in these cases we require the data to process your enquiry. The data collected can be seen from the respective input forms. Once your enquiry has been fully processed, your data is deleted, unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1 (a) GDPR, or we reserve the right to use the data beyond that in a manner permitted by law, about which we inform you in this policy.

WhatsApp live chat tool

For the purpose of communicating with customers, we use the live chat tool of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("WhatsApp"). This serves to safeguard our legitimate interests in effective and improved customer communication, which predominate within the context of a balancing of interests, pursuant to Art. 6(1) sentence 1 (f) GDPR. WhatsApp acts on our behalf for us. The telephone numbers stored by us on our mobile device are automatically processed on servers of Meta companies headquartered at 1601 Willow Road, Menlo Park, California 94025, USA. In doing so, only telephone numbers of customers who have previously contacted us via WhatsApp and have therefore already accepted WhatsApp's terms of use and privacy policy are stored.

The adequacy decisions for the USA serve as the basis for the transfer of data to a third country, provided that the respective service provider is certified. Certification exists.

Our service providers are based and/or use servers in these countries: Singapore.
No adequacy decision by the European Commission or the Swiss Federal Council exists for these countries. Our cooperation with them is based on the following safeguards: standard contractual clauses of the European Commission

3. Data processing for the purpose of shipment

For the purpose of contract performance pursuant to Art. 6(1) sentence 1 (b) GDPR, we pass on your data to the shipping service provider commissioned with delivery, insofar as this is necessary for the delivery of ordered goods. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact option described in this privacy policy.

Disclosure of data to shipping service providers for the purpose of delivery notification

If you have given us your express consent to this during or after your order, we pass on your email address and telephone number to the selected shipping service provider on the basis of Art. 6(1) sentence 1 (a) GDPR, so that they can contact you before delivery for the purpose of announcing or coordinating delivery.
Consent can be withdrawn at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address listed below. After withdrawal, we delete the data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond that in a manner permitted by law, about which we inform you in this policy. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact option described in this privacy policy.

Hermes Germany GmbH
Essener Straße 89
D-22419 Hamburg
Germany

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

General Logistics Systems Germany GmbH & Co. OHG
GLS Germany-Straße 1 - 7
DE-36286 Neuenstein
Germany

United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany

DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany

4. Data processing for payment purposes

When processing payments in our online shop, we work together with the following partners: technical service providers, credit institutions, payment service providers.

4.1 Data processing for transaction handling

Depending on the payment method selected, we pass on the data necessary for processing the payment transaction to our technical service providers, who act on our behalf as processors, or to the commissioned credit institutions, or to the selected payment service provider, insofar as this is necessary for processing the payment. This serves to fulfil the contract pursuant to Art. 6(1) sentence 1 (b) GDPR. In some cases, payment service providers collect the data required to process the payment themselves, e.g. on their own website or via technical integration into the order process. In this respect, the privacy policy of the respective payment service provider applies.
If you have any questions about our partners for payment processing and the basis of our cooperation with them, please contact us using the contact option described in this privacy policy.

4.2 Data processing for the purpose of fraud prevention and optimising our payment processes

Where applicable, we provide our service providers with further data which they use, together with the data required for processing the payment, as our processors for the purpose of fraud prevention and optimising our payment processes (e.g. invoicing, processing of disputed payments, support for accounting). This serves, pursuant to Art. 6(1) sentence 1 (f) GDPR, to safeguard our legitimate interests in protecting ourselves against fraud and in efficient payment management, which predominate within the context of a balancing of interests.

4.3 Identity and credit check when selecting Klarna payment services

Klarna direct debit, purchase on account via Klarna, Klarna instalment purchase
If you choose the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"), we ask for your consent pursuant to Art. 6(1) sentence 1 (a) GDPR that we may transmit the data necessary for processing the payment and for an identity and credit check to Klarna. In Germany, the credit agencies named in Klarna's privacy policy may be used for the identity and credit check. Klarna uses the information received on the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. You may withdraw your consent at any time by sending a message to the contact option named in this privacy policy. This may mean that we can no longer offer you certain payment options. You may also withdraw your consent to this use of personal data vis-à-vis Klarna at any time.

Identity and credit check when selecting Billpay payment services (operated by Klarna Bank AB)

If you choose the payment services of Klarna Bank AB (publ.), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "BillPay"), we ask for your consent pursuant to Art. 6(1) sentence 1 (a) GDPR that we may transmit the data necessary for processing the payment and for an identity and credit check to Billpay. In Germany, the credit agencies named in Billpay's privacy policy may be used for the identity and credit check. Billpay uses the information received on the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. You may withdraw your consent at any time by sending a message to the contact option named in this privacy policy. This may mean that we can no longer offer you certain payment options. You may also withdraw your consent to this use of personal data vis-à-vis BillPay at any time.

4.4 Identity and credit check when selecting purchase on account via PayOne

If you choose the purchase-on-account payment method (offered via PayOne GmbH, Lyoner Str. 9, 60528 Frankfurt a. M., Germany (hereinafter "PayOne")), we ask for your consent pursuant to Art. 6(1) sentence 1 (a) GDPR that we may transmit the data necessary for processing the payment and for an identity and credit check to PayOne. In Germany, the credit agencies named in PayOne's privacy policy may be used for the identity and credit check. PayOne uses the information received on the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. You may withdraw your consent at any time by sending a message to the contact option named in this privacy policy. This may mean that we can no longer offer you certain payment options.

4.5 Identity and credit check when selecting purchase on account via PayPal and Ratepay

If you choose the purchase-on-account payment method (offered via Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin (hereinafter "Ratepay") and PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg (hereinafter "PayPal")), we ask for your consent pursuant to Art. 6(1) sentence 1 (a) GDPR that we may transmit the data necessary for processing the payment and for an identity and credit check to Ratepay. In Germany, the credit agencies named in Ratepay's privacy policy may be used for the identity and credit check. Ratepay uses the information received on the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. You may withdraw your consent at any time by sending a message to the contact option named in this privacy policy. This may mean that we can no longer offer you certain payment options. Additional information on data protection at PayPal can be found here.

4.6 Engagement of debt collection service providers

We pass on your data to a commissioned debt collection service provider (mediaFinanz GmbH, Weiße Breite 5, 49084 Osnabrück, Germany) if our payment claim has not been settled despite a prior reminder. In this case, the claim is collected directly by the debt collection service provider. This serves to fulfil the contract pursuant to Art. 6(1) sentence 1 (b) GDPR as well as to safeguard our legitimate interests in effectively asserting or enforcing our payment claim, which predominate within the context of a balancing of interests, pursuant to Art. 6(1) sentence 1 (f) GDPR.

5. Advertising by email, telephone

5.1 Email newsletter with sign-up and newsletter tracking

If you sign up for our newsletter, we use the data required for this purpose or separately provided by you in order to regularly send you our email newsletter on the basis of your consent pursuant to Art. 6(1) sentence 1 (a) GDPR. You may unsubscribe from the newsletter at any time, either by sending a message to the contact option described below or via a link provided for that purpose in the newsletter. After unsubscribing, we delete your email address from the recipient list, unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1 (a) GDPR, or we reserve the right to use the data beyond that in a manner permitted by law, about which we inform you in this policy.

Please note that when sending the newsletter, we evaluate your user behaviour. To do this, we also analyse your interaction with our newsletter by measuring, storing and evaluating open rates and click rates for the purpose of designing future newsletter campaigns ("newsletter tracking").

For this evaluation, the emails sent contain single-pixel technologies (e.g. so-called web beacons, tracking pixels) that are stored on our website. For the evaluations, we link in particular the following "newsletter data"

the page from which the page was requested (the so-called referrer URL),
the date and time of access,
a description of the type of web browser used,
the IP address of the requesting computer,
the email address,
the date and time of sign-up and confirmation

and the single-pixel technologies with your email address or your IP address and, where applicable, an individual ID. Links contained in the newsletter may also contain this ID.

If you do not want newsletter tracking, you may unsubscribe from the newsletter at any time, as described above.

The information is stored for as long as you have subscribed to the newsletter.

5.2 Sending review requests by email

If you have given us your express consent to do so during or after your order, pursuant to Art. 6(1) sentence 1 (a) GDPR, we use your email address to request that you leave a review of your order via the review system we use. This consent can be withdrawn at any time by sending a message to the contact option described in this privacy policy or via a link provided for that purpose in the review request. After you have withdrawn your consent, we delete your email address from the recipient list, unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1 (a) GDPR, or we reserve the right to use the data beyond that in a manner permitted by law, about which we inform you in this policy.

5.3 Telephone advertising

Insofar as you have given your consent for this pursuant to Art. 6(1) sentence 1 (a) GDPR, we use the data required for this purpose or separately provided by you for our own advertising purposes, e.g. to inform you about interesting offers and our products. You may withdraw your consent at any time, either by sending a message to the contact option described in this privacy policy or by verbal notice during any call. After withdrawal, we delete your telephone number, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond that in a manner permitted by law, about which we inform you in this policy.

6. Cookies and other technologies

6.1 General information

In order to make visiting our website appealing and to enable the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognise your browser again on your next visit (persistent cookies).

Protection of privacy on end devices
When using our online offering, we use absolutely necessary technologies in order to be able to provide the expressly requested telemedia service. In this respect, the storage of information on your device or access to information already stored on your device does not require your consent.

For functions that are not absolutely necessary, the storage of information on your device or access to information already stored on your device requires your consent. Please note that if consent is not given, parts of the website may not be usable without restriction. Any consent you have given remains in effect until you adjust or reset the respective settings on your device.

Any downstream data processing through cookies and other technologies

We use technologies that are absolutely necessary for the use of certain functions of our website (e.g. shopping cart function). These technologies collect and process your IP address, the time of your visit, device and browser information, as well as information on your use of our website (e.g. information on the contents of the shopping cart). This serves, within the context of a balancing of interests, to safeguard our predominant legitimate interests in an optimised presentation of our services pursuant to Art. 6(1) sentence 1 (f) GDPR.

We also use technologies to fulfil the legal obligations to which we are subject (e.g. to be able to prove consent to the processing of your personal data) as well as for web analytics and online marketing. Further information on this, including the respective legal basis for the data processing, can be found in the following sections of this privacy policy. Where applicable, we also use technologies that are not individually listed in this privacy policy. Further information on these technologies, including the respective legal basis for the data processing, can be found on the Usercentrics platform. You can access this by clicking the fingerprint button in the bottom right or bottom left corner of the page.

What types of cookies are used?

Targeting cookies: These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to tailor our website and the advertising displayed to you to your interests.

Necessary cookies
These cookies are necessary to enable the operation of our website. These include, for example, cookies that allow you to log in to the customer area or add something to the shopping cart.

Analytical/performance cookies: These cookies make it possible to collect anonymised data on the usage behaviour of our visitors. We then evaluate this data, for example, to improve the functionality of the website and to show you interesting offers.

Third-party cookies
These cookies from some of our advertising partners help to make the internet offering and our website more interesting for you. As a result, cookies from partner companies are also stored on your hard drive when you visit our website. These are temporary cookies that delete themselves automatically after a predetermined period. Cookies from partner companies are generally deleted after a few days or up to 24 months, and in individual cases after several years. Our partner companies' cookies also do not contain any personal data. Data is only collected under a user ID pseudonym. This pseudonymised data is never merged with your personal data.

Functional cookies
These cookies are used for certain functionalities of our website, e.g. to suggest a better navigation flow on our website, or to show you personalised and relevant information (e.g. "interest-based advertising")

Cookie settings

You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

Insofar as you have consented to the use of technologies pursuant to Art. 6(1) sentence 1 (a) GDPR, you can withdraw your consent at any time by sending a message to the contact option described in this privacy policy. Alternatively, you can click the fingerprint button in the bottom right or bottom left corner of the page. If cookies are not accepted, the functionality of our website may be restricted.

6.2 Use of the Usercentrics consent management platform to manage consent

On our website, we use the Usercentrics Consent Management Platform ("Usercentrics") to inform you about the cookies and other technologies we use on our website, and to obtain, manage and document your legally required consent, where applicable, to the processing of your personal data by these technologies. This is necessary pursuant to Art. 6(1) sentence 1 (c) GDPR to fulfil our legal obligation, to which we are subject, pursuant to Art. 7(1) GDPR to be able to prove your consent to the processing of your personal data. Usercentrics is an offering of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, which processes your data on our behalf. When you visit our website, the Usercentrics web server automatically stores a so-called server log file, which also contains your anonymised IP address, the date and time of your visit, device and browser information, as well as information on your consent behaviour. Your data is deleted after three years, unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1 (a) GDPR, or we reserve the right to use the data beyond that in a manner permitted by law, about which we inform you in this policy.

The adequacy decisions for the USA serve as the basis for the transfer of data to a third country, provided that the respective service provider is certified. Certification exists.

7. Use of cookies and other technologies

We use the following cookies and other third-party technologies on our website. Unless otherwise stated for individual technologies, this is done on the basis of your consent pursuant to Art. 6(1) sentence 1 (a) GDPR. Once the purpose has been fulfilled and our use of the respective technology has ended, the data collected in this context is deleted. You can withdraw your consent at any time with effect for the future. Further information on your options for withdrawal can be found in the "Cookies and other technologies" section. Further information, including the basis of our cooperation with the individual providers, can be found under the individual technologies. If you have any questions about the providers and the basis of our cooperation with them, please contact us using the contact option described in this privacy policy.

7.1 Use of Google services

We use the technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google") described below. Information about your use of our website that is automatically collected by Google's technologies is generally transmitted to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Unless otherwise stated for individual technologies, data processing is carried out on the basis of an agreement concluded for the respective technology between joint controllers pursuant to Art. 26 GDPR. Further information on data processing by Google can be found in Google's privacy notice.

Our service providers are based and/or use servers in countries outside Switzerland, the EU and the EEA, for which the European Commission and the Swiss Federal Council have determined by decision that an adequate level of data protection exists.

Our service providers are based and/or use servers in countries outside Switzerland, the EU and the EEA. No adequacy decision by the European Commission or the Swiss Federal Council exists for these countries. Our cooperation with them is based on standard contractual clauses of the European Commission.

Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information as well as information on your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. If you visit our website from the EU, your IP address is stored on a server located in the EU to derive location data and is then deleted immediately before the traffic is forwarded to further Google servers for processing. Data processing is carried out on the basis of an agreement on order processing by Google.

For the purpose of optimised marketing of our website, we have activated the data sharing settings for "Google products and services". This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google's services. Data sharing with Google under these data sharing settings is carried out on the basis of an additional agreement between controllers. We have no influence on the subsequent processing of data by Google.

For the purpose of optimised marketing of our website, we use the so-called User-ID function. With the help of this function, we can assign a unique, permanent ID to your interaction data from one or more sessions on our online presences and thus analyse your user behaviour across devices and sessions.

For web analysis purposes, the extension function of Google Analytics, Google Signals, enables so-called "cross-device tracking". If your internet-enabled devices are linked to your Google account and you have activated the "personalised advertising" setting in your Google account, Google can generate reports on your usage behaviour (in particular cross-device user numbers), even if you switch devices. We do not process any personal data in this respect; we only receive statistics generated on the basis of Google Signals.

For web analysis and advertising purposes, the extension function of Google Analytics, the so-called DoubleClick cookie, enables your browser to be recognised when you visit other websites. Google will use this information to compile reports on website activity and to provide further services related to the use of the website.

If you do not give us consent pursuant to Art. 6(1) sentence 1 (a) GDPR to the use of Google Analytics, no cookies will be stored on or read from your device. The data processing described in the preceding paragraphs does not take place. In order to close gaps in web analysis through behavioural and conversion modelling, pings containing data (user agent, information on your consent behaviour, screen resolution, IP address) are sent to Google.

Google AdSense

Our website markets advertising space for third-party ads via Google AdSense. These ads are displayed to you at various points on this website. The so-called DoubleClick cookie enables the display of advertising tailored to your interests through the collection and processing of data (IP address, time of visit, device and browser information as well as information on your use of our website) and the automatic assignment of a pseudonymous user ID, with the help of which interests are determined based on visits to this and other websites.

Google Ads

For advertising purposes in Google search results and on third-party websites, the so-called Google Remarketing cookie is set when you visit our website, which enables interest-based advertising through the automatic collection and processing of data (IP address, time of visit, device and browser information as well as information on your use of our website) using a pseudonymous cookie ID and on the basis of the pages you have visited. Further data processing only takes place if you have activated the "personalised advertising" setting in your Google account. If you are in this case logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing.

For website analysis and event tracking, we use Google Ads Conversion Tracking to measure your subsequent usage behaviour if you reached our website via a Google Ads advertisement. Cookies may be used for this purpose and data (IP address, time of visit, device and browser information as well as information on your use of our website based on events specified by us, such as visiting a website or signing up for the newsletter) may be collected, from which usage profiles are created using pseudonyms.

If you do not give us consent pursuant to Art. 6(1) sentence 1 (a) GDPR to the use of Google Ads, no cookies will be stored on or read from your device. The data processing described in the preceding paragraphs does not take place. In order to close gaps in web analysis through behavioural and conversion modelling, pings containing data (user agent, information on your consent behaviour, screen resolution, IP address, page URL, information on ad clicks in URL parameters) are sent to Google. Your IP address is used to derive the IP country.

Google reCAPTCHA

For the purpose of protecting our web forms against misuse and against spam by automated software (so-called bots), Google reCAPTCHA collects data (IP address, time of visit, browser information as well as information on your use of our website) and analyses your use of our website by means of what is known as JavaScript as well as cookies. In addition, other cookies stored in your browser by Google services are evaluated. No personal data from the input fields of the respective form is read out or stored.

Google Tag Manager

The Google Tag Manager enables us to manage various codes and services on our website. When implementing the individual tags, Google may also process personal data (e.g. IP address, online identifiers (including cookies)). Data processing is carried out on the basis of an agreement on order processing by Google.

The use of the Google Tag Manager makes it possible to integrate various services/technologies.
If you do not wish to use individual tracking services and have therefore deactivated them, the deactivation remains in effect for all affected tracking tags integrated via the Google Tag Manager.

YouTube video plugin

To embed third-party content, the YouTube video plugin, in the enhanced privacy mode we use, collects data (IP address, time of visit, device and browser information), transmits it to Google and is then processed by Google, but only if you play a video.

7.2 Use of Facebook services

Use of Facebook Pixel

We use the Facebook Pixel as part of the technologies of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Facebook (by Meta)" or "Meta Platforms Ireland") described below. The Facebook Pixel automatically collects and stores data (IP address, time of visit, device and browser information as well as information on your use of our website based on events specified by us, such as visiting a website or signing up for the newsletter), from which usage profiles are created using pseudonyms. As part of what is known as advanced matching, information is also collected and stored in hashed form for matching purposes, which can be used to identify individuals (e.g. names, email addresses and telephone numbers). For this purpose, the Facebook Pixel automatically sets a cookie when you visit our website, which automatically enables your browser to be recognised when you visit other websites by means of a pseudonymous cookie ID. Facebook (by Meta) will combine this information with further data from your Facebook account and use it to compile reports on website activity and to provide further services related to the use of the website, in particular personalised and group-based advertising.
Information about your use of our website that is automatically collected by Facebook (by Meta) technologies is generally transmitted to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Further information on data processing by Facebook can be found in Facebook's (by Meta) privacy notice.
Our service providers are based and/or use servers in the following countries, for which the European Commission and the Swiss Federal Council have determined by decision that an adequate level of data protection exists: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.
The adequacy decisions for the USA serve as the basis for the transfer of data to a third country, provided that the respective service provider is certified. Certification exists.

Our service providers are based and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico. No adequacy decision by the European Commission or the Swiss Federal Council exists for these countries. Our cooperation with them is based on the following safeguards: standard contractual clauses of the European Commission.

Facebook Analytics

As part of the Facebook Business Tools, statistics on visitor activity on our website are created from the data collected by the Facebook Pixel on your use of our website. Data processing is carried out on the basis of an agreement on order processing by Facebook (by Meta). This analysis serves the optimal presentation and marketing of our website.

Facebook Ads (Ads Manager)

We use Facebook Ads to advertise this website on Facebook (by Meta) as well as on other platforms. We determine the parameters of the respective advertising campaign. Facebook (by Meta) is responsible for the precise implementation, in particular the decision on the placement of ads with individual users. Unless otherwise stated for individual technologies, data processing is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Joint responsibility is limited to the collection of the data and its transmission to Meta Platforms Ireland. The subsequent processing of data by Meta Platforms Ireland is not covered by this.

Based on the statistics on visitor activity on our website generated via Facebook Pixel, we conduct group-based advertising on Facebook (by Meta) via Facebook Custom Audience by determining the characteristics of the respective target group. Within the framework of the advanced matching carried out to determine the respective target group (see above), Facebook (by Meta) acts as our processor.

Based on the pseudonymous cookie ID set by the Facebook Pixel and the data collected on your usage behaviour on our website, we conduct personalised advertising via Facebook Pixel Remarketing.

Via Facebook Pixel Conversions, we measure your subsequent usage behaviour for the purpose of website analysis and event tracking, if you reached our website via a Facebook Ads advertisement. Data processing is carried out on the basis of an agreement on order processing by Facebook (by Meta).

7.3 Other providers of web analytics and online marketing services

Use of Pinterest Tag for web analysis and advertising purposes

For web analysis and advertising purposes on Pinterest as well as on third-party websites, when you visit our website, technologies of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest") automatically enable interest-based advertising through the collection and processing of data (IP address, time of visit, device and browser information as well as information on your use of our website based on events specified by us, such as visiting a website or signing up for the newsletter) using a pseudonymous cookie ID and on the basis of the pages you have visited. Usage profiles are created from the collected data using pseudonyms. Pinterest will combine this information with further data from your Pinterest account and use it to compile reports on website activity and to provide further services related to the use of the website. We have no influence on data processing by Pinterest and only receive statistics generated on the basis of the Pinterest Tag. In this way, we measure your subsequent usage behaviour for website analysis and event tracking purposes, if you reached our website via a Pinterest advertisement. Information automatically collected by Pinterest is generally transmitted to and stored on a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA.

8. Integration of the Trusted Shops Trustbadge/other widgets

If you have given your consent to this pursuant to Art. 6(1) sentence 1 (a) GDPR, Trusted Shops widgets are integrated on this website to display Trusted Shops services (e.g. quality seal, collected reviews) and to offer Trusted Shops products to buyers after placing an order.

The Trustbadge and the services advertised with it are an offering of Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops"), with whom we are joint controllers under data protection law pursuant to Art. 26 GDPR. Within this privacy notice, we inform you below of the essential contents of the agreement pursuant to Art. 26(2) GDPR.

Within the framework of the joint responsibility existing between us and Trusted Shops SE, please preferably contact Trusted Shops for data protection questions and to exercise your rights, using the contact options given in the privacy information. Regardless of this, you can always contact the controller of your choice. If necessary, your enquiry will then be forwarded to the other controller for a response.

8.1 Data processing when integrating the Trustbadge/other widgets

The Trustbadge is provided by a US content delivery network (CDN) provider. An adequate level of data protection is ensured in each case by an adequacy decision of the EU Commission (available here) or the Swiss Federal Council (available here). Service providers used from the USA are generally certified under the EU-U.S. Data Privacy Framework or the Swiss-U.S. Data Privacy Framework (together the "DPF"). Further information is available here. If service providers used are not certified under the DPF, standard contractual clauses have been concluded as an appropriate safeguard.

When the Trustbadge is called up, the web server automatically stores a so-called server log file, which also contains your IP address, the date and time of retrieval, the amount of data transferred and the requesting provider (access data) and documents the retrieval. The IP address is anonymised immediately after collection, so that the stored data cannot be attributed to you personally. The anonymised data is used in particular for statistical purposes and for error analysis.

8.2 Data processing after completion of an order

If you have given your consent, the Trustbadge, after completion of an order, accesses order information (order total, order number, product purchased if applicable) as well as the email address stored on your end device, and your email address is hashed using a cryptological one-way function. The hash value is then transmitted to Trusted Shops together with the order information pursuant to Art. 6(1) sentence 1 (a) GDPR.
This serves to check whether you are already registered for Trusted Shops services. If this is the case, further processing is carried out in accordance with the contractual agreement made between you and Trusted Shops. If you are not yet registered for the services or do not give your consent to automatic recognition via the Trustbadge, you will subsequently be given the opportunity to register manually for use of the services or to take out cover under any usage agreement you may already have.

For this purpose, after completion of your order, the Trustbadge accesses the following information stored on the device you use: order total, order number and email address. This is necessary so that we can offer you buyer protection. Data is only transmitted to Trusted Shops once you actively decide to take out buyer protection by clicking the correspondingly labelled button in what is known as the Trustcard. If you decide to use the services, further processing is governed by the contractual agreement with Trusted Shops pursuant to Art. 6(1)(b) GDPR, in order to be able to complete your registration for buyer protection and secure the order, as well as to be able to subsequently send you review invitations by email, where applicable.

Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6(1)(f) GDPR for the purpose of ensuring smooth operation. Processing may take place in third countries (USA, United Kingdom and Israel) in this context. An adequate level of data protection is ensured in each case by an adequacy decision of the EU Commission (available for the USA here, for Israel here and for the United Kingdom here) or the Swiss Federal Council (further information available here). Service providers used from the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. If service providers used are not certified under the DPF, standard contractual clauses have been concluded as an appropriate safeguard.

9. Social media

9.1 Social buttons from Facebook (by Meta), Instagram (by Meta), WhatsApp

Social buttons from social networks are used on our website. These are only integrated into the page as HTML links, so that no connection is established with the respective provider's servers when our website is accessed. If you click on one of the buttons, the respective social network's website opens in a new window of your browser, where you can, for example, click the like or share button.

9.2 Our online presence on Facebook (by Meta), Instagram (by Meta), YouTube, Pinterest

Insofar as you have given your consent for this to the respective social media operator pursuant to Art. 6(1) sentence 1 (a) GDPR, when you visit our online presences on the social media mentioned above, your data is automatically collected and stored for market research and advertising purposes, from which usage profiles are created using pseudonyms. These may be used, for example, to place advertisements within and outside the platforms that are presumed to match your interests. Cookies are generally used for this purpose. Please refer to the providers' privacy notices linked below for detailed information on the processing and use of data by the respective social media operator, as well as a contact option and your related rights and setting options for protecting your privacy. Should you nevertheless require assistance in this regard, you can contact us.

Facebook (by Meta) is an offering of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). Information automatically collected by Meta Platforms Ireland about your use of our online presence on Facebook (by Meta) is generally transmitted to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing in connection with visiting a Facebook (by Meta) fan page is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (on Insights data) can be found here.

The adequacy decisions for the USA serve as the basis for the transfer of data to a third country, provided that the respective service provider is certified. Certification exists.

Our service providers are based and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico. No adequacy decision by the European Commission or the Swiss Federal Council exists for these countries. Our cooperation with them is based on the following safeguards: standard contractual clauses of the European Commission.

Pinterest is an offering of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). Information automatically collected by Pinterest about your use of our online presence on Pinterest is generally transmitted to and stored on a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA.

Instagram (by Meta) is an offering of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). Information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is generally transmitted to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, Menlo Park, California 94025, USA. Data processing in connection with visiting an Instagram (by Meta) fan page is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (on Insights data) can be found here.

The adequacy decisions for the USA serve as the basis for the transfer of data to a third country, provided that the respective service provider is certified. Certification exists.

YouTube is an offering of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information automatically collected by Google about your use of our online presence on YouTube is generally transmitted to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

10. Contact options and your rights

10.1 Your rights

As a data subject, you have the following rights:

pursuant to Art. 15 GDPR, the right to request information, to the extent specified therein, about the personal data we process concerning you;
pursuant to Art. 16 GDPR, the right to request the immediate correction of inaccurate or the completion of your personal data stored by us;
pursuant to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing
- is necessary to exercise the right to freedom of expression and information;
- is necessary to comply with a legal obligation;
- is necessary for reasons of public interest; or
- is necessary to assert, exercise or defend legal claims;
pursuant to Art. 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as
- you contest the accuracy of the data;
- the processing is unlawful, but you refuse its deletion;
- we no longer need the data, but you need it to assert, exercise or defend legal claims; or
- you have objected to the processing pursuant to Art. 21 GDPR;
pursuant to Art. 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller;
pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work, or of our company headquarters, for this purpose.

Right to object

Insofar as we process personal data as described above in order to safeguard our legitimate interests, which predominate within the context of a balancing of interests, you may object to such processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. Insofar as the processing is carried out for other purposes, you only have a right to object where there are grounds arising from your particular situation.

After you exercise your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

This does not apply if the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.

10.2 Contact options

If you have any questions about the collection, processing or use of your personal data, or about information, correction, restriction or deletion of data, as well as the withdrawal of consent given or objection to a particular use of data, please contact us directly using the contact details in our imprint.