Privacy policy

Privacy Policy

1. General Information and Principles of Data Processing

We are pleased that you are visiting our website. Protecting your privacy and your personal data—known as personal information—when you use our website is a matter of great importance to us.


According to Article 4(1) of the GDPR, personal data refers to any information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your phone number, your email address, and your IP address.


Data for which no connection to your person can be established—such as through anonymization—is not considered personal data. Processing (e.g., collection, storage, retrieval, consultation, use, disclosure, erasure, or destruction) pursuant to Article 4(2) of the GDPR always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of the processing has been achieved and there are no longer any legally required retention obligations to be observed.


Here you will find information about how we handle your personal data when you visit our website. In order to provide the functions and services of our website, it is necessary for us to collect personal data about you. We also explain to you the nature and scope of the respective data processing, the purpose and the corresponding legal basis, and the respective retention period.


This privacy policy applies only to this website. It does not apply to other websites to which we merely link via a hyperlink. We cannot assume any responsibility for the confidential handling of your personal data on these third-party websites, as we have no influence over whether these companies comply with data protection regulations. Please refer directly to these websites for information on how these companies handle your personal data.


2. Data Controller

The person responsible for the processing of personal data on this website is: Our Promise Merchandising GbR, Gewerbering 23, 84180 Loiching, 015779737681, shop@our-promise.com


3. Provision and Use of the Website / Server Log Files

a) Nature and scope of data processing

When you use this website without otherwise transmitting data to us (e.g., through registration or use of the contact form), we collect technically necessary data via server log files that are automatically transmitted to our server, including:

  • IP address

  • Date and time of the request

  • Name and URL of the file accessed

  • Website from which access is made (referrer URL)

  • Access status/HTTP status code

  • Browser type

  • Language and version of the browser software

  • Operating system



b) Purpose and Legal Basis

This process is technically necessary to display our website to you. We also use the data to ensure the security and stability of our website. The legal basis for this processing is Art. 6(1)f) of the GDPR. The processing of the aforementioned data is necessary for the provision of a website and thus serves to safeguard the legitimate interest of our company.

c) Retention period

As soon as the aforementioned personal data is no longer required to display the website, it will be deleted. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no right to object to this aspect. Further storage may occur in individual cases if required by law.


4. Use of Cookies

a) Type, scope, and purpose of data processing

We use cookies. Cookies are small files that we send to the browser on your device during your visit to our website and that are stored there.

Some functions of our website cannot be provided without the use of technically necessary cookies. Other cookies, however, enable us to perform various analyses. For example, some cookies can recognize the browser you are using when you visit our website again and transmit various information to us. We use cookies to facilitate and improve the use of our website. For example, cookies allow us to make our website more user-friendly and effective for you by, for instance, tracking your use of our website and determining your preferred settings (such as country and language settings). If third parties process information via cookies, they collect this information directly through your browser. However, cookies do not cause any damage to your device. They cannot execute programs and do not contain viruses. Various types of cookies are used on our website; their types and functions are explained below.

Temporary Cookies/Session Cookies

Our website uses so-called temporary cookies or session cookies, which are automatically deleted as soon as you close your browser. This type of cookie makes it possible to record your session ID. This allows various requests from your browser to be assigned to a single session and enables us to recognize your device during subsequent visits to the website.

Persistent Cookies

Our website uses so-called persistent cookies. Persistent cookies are cookies that are stored in your browser for an extended period and can transmit information. The storage duration varies depending on the cookie. You can delete persistent cookies yourself via your browser settings.

Third-party cookies

We use analytical cookies to monitor anonymized user behavior on our website.

We also use advertising cookies. These cookies allow us to track user behavior for advertising and targeted marketing purposes.

Social media cookies allow you to connect to your social networks and share content from our website within your networks.

Configuring browser settings

Most web browsers are set by default to automatically accept cookies. However, you can configure your browser to accept only certain cookies or none at all. Please note, however, that you may then no longer be able to use all features of our website.

You can also use your browser settings to delete cookies already stored in your browser. Furthermore, it is possible to set your browser to notify you before cookies are stored. Since different browsers may function differently, we ask that you consult your browser’s help menu for the relevant configuration options.

Disabling the use of cookies may require the storage of a permanent cookie on your computer. If you subsequently delete this cookie, you will need to disable it again.

b) Legal Basis

Based on the purposes described, the legal basis for the processing of personal data using cookies is Article 6(1)f) of the GDPR. If you have given us your consent to the use of cookies based on a notice provided by us on the website (“cookie banner”), the legal basis is additionally Article 6(1)a) of the GDPR.


c) Retention Period

As soon as the data transmitted to us via cookies is no longer required for the purposes described above, this information will be deleted. Further storage may occur in individual cases if required by law.


5. Data collection for the implementation of pre-contractual measures and for contract fulfillment

a) Nature and scope of data processing

We collect personal data about you during the pre-contractual phase and upon conclusion of the contract. This includes, for example, your first and last name, address, email address, phone number, or bank account information.


b) Purpose and legal basis of data processing

We collect and process this data exclusively for the purpose of contract performance or to fulfill pre-contractual obligations. The legal basis for this is Article 6(1)b) of the GDPR. If you have also given your consent, the additional legal basis is Article 6(1)a) of the GDPR.


c) Retention period

The data will be deleted as soon as it is no longer necessary for the purpose of its processing.

In addition, statutory retention obligations may apply, such as commercial or tax law retention obligations under the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data upon the expiration of these retention obligations.


6. Registration options

a) Nature and scope of data processing

You can register on our website. When you register, we collect and store the data you enter into the input form (e.g., last name, first name, email address). This data is not shared with third parties.


b) Purpose and Legal Basis of Data Processing

Your registration is necessary for the use of certain content and services on our website, for the fulfillment of a contract, or for the implementation of pre-contractual measures. After registration, you are free to modify the personal data provided during registration at any time or to have it completely deleted from the data controller’s database.

The legal basis for processing, in the case of consent, is Art. 6(1)a)
GDPR. If your registration serves to prepare for the conclusion of a contract, Art. 6(1)b) GDPR is an additional legal basis.


c) Retention Period

We will store the data collected during registration for as long as you are registered on our website, after which it will be deleted. Statutory retention periods remain unaffected.


7. Order Form

An order form is available on our website that can be used for electronic pre-orders.


a) Nature and scope of data processing

Our data collection is limited to the following data:

  • First and last name

  • Phone number

  • Email address

  • Account details

  • Product name

b) Purpose and legal basis

The purpose of data processing is to enable us to process your order properly. The legal basis for this is Article 6(1)b) of the GDPR. The processing of the data serves to fulfill a contract or is necessary for the implementation of a pre-contractual measure taken at the request of the data subject.


c) Retention period

The data will be deleted as soon as it is no longer needed to achieve the purpose of the processing. In addition, statutory retention obligations may apply, such as commercial or tax law retention obligations under the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data upon the expiration of these retention obligations.


8. Contact Form

a) Nature and Scope of Data Processing

On our website, we offer you the opportunity to contact us via a provided contact form. As part of the process of submitting your inquiry via the contact form, you will be referred to this privacy policy to obtain your consent.



If you use the contact form, the following personal data will be processed:

  • Title

  • First name

  • Last name

  • Title

  • Company

  • Industry

  • Position

  • Street

  • Street number

  • Zip code

  • City

  • Country

  • Email address

  • Phone number

  • Subject

  • Message content



b) Purpose and legal basis

The purpose of providing your email address is to send you a response to your inquiry via email. When using the contact form, your personal data will not be disclosed to third parties.



The legal basis for processing is consent pursuant to Art. 6(1)a) of the GDPR, based on the declaration of consent you voluntarily provide, which may be revoked at any time with future effect.



c) Retention period

The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). This does not affect mandatory legal provisions—in particular retention periods under the German Commercial Code (HGB) or the German Fiscal Code (AO).



9. Contact Options via Email

Our website offers you the option of contacting us via email.


a) Nature and scope of data processing

You can contact us by email. In doing so, the data we collect is limited to the email address of the account you use to contact us, as well as any personal data you voluntarily provide when contacting us.


b) Purpose and Legal Basis

The purpose of data processing is to enable us to respond appropriately to your inquiry. The legal basis for this is Article 6(1)f) of the GDPR. There is a legitimate interest in processing the aforementioned personal data in order to handle your inquiry appropriately.


c) Retention period

The duration of storage of the aforementioned data depends on the context of your contact. Your personal data will be deleted on a regular basis once the purpose of communication is no longer applies and storage is no longer necessary. This may result, for example, from the processing of your inquiry.


10. Job Application
a) Nature and scope of data processing

You can apply via our website or by email. When you apply, we collect and store the data you enter into the form or send to us via email.



b) Purpose and Legal Basis
We process your data solely for the purpose of handling your application.
No data is disclosed to third parties. The legal basis for processing is Article 88(1) of the GDPR in conjunction with Section 26 of the BDSG and additionally Article 6(1)b) of the GDPR. If you grant us consent to include you in our applicant pool, the legal basis is Article 6(1)a) of the GDPR.



c) Retention Period

If we are unable to offer you a position, we will store your data for a maximum of six months after the conclusion of the application process, in accordance with Section 61b(1) of the German Labor Court Act (ArbGG) in conjunction with Section 15 of the German General Equal Treatment Act (AGG). The retention period begins upon receipt of the rejection letter.



If you have given us your consent to be included in our applicant pool, we will store your data for a maximum of two years.



d) Data sharing

Your data will only be shared with the departments involved in the decision-making process (relevant HR or functional departments, management, and work council).

In addition, we are obligated to disclose your data to public authorities and institutions (e.g., the public prosecutor’s office, police, supervisory authorities, tax office, social security agencies, etc.).


Other recipients of your data may include those entities for which you have given us your consent to transfer your data.



11. Comment Function

a) Nature and scope of data processing

You can comment on posts on our website. When you comment on a post, we collect and store the data you enter into the input form. In addition to the comments you leave, information regarding the time the comment was submitted and, if applicable, the username (pseudonym) you selected will also be stored and published. Furthermore, the IP address assigned by the data subject’s Internet Service Provider (ISP) is stored. No data is disclosed to third parties.



b) Purpose and Legal Basis

The data you provide (e.g., your IP address) is collected for security reasons and in the event that the data subject infringes the rights of third parties or posts illegal content through a submitted comment. This collected personal data is not disclosed to third parties unless such disclosure is required by law or serves to defend the legal rights of the controller.



The legal basis for processing the personal data transmitted when using the comment function is, if and to the extent that your consent is given, Article 6(1)a) of the GDPR. You may revoke this consent at any time. The lawfulness of data processing operations that have already taken place remains unaffected by the revocation. Another legal basis is Article 6(1)f) of the GDPR.

We have a legitimate interest in processing the data if the rights of third parties are infringed or if unlawful content is posted. This serves security purposes in the event that someone posts unlawful content in comments and posts (insults, prohibited political propaganda, etc.).



c) Retention Period

The comments and associated data (e.g., IP address) are stored and remain on our website until the commented-on content has been completely deleted or the comments must be deleted for legal reasons.



12. Withdrawal Function

In accordance with legal regulations, we provide a function on our website for the withdrawal of contracts. This function allows you to exercise your statutory right of withdrawal easily and without complication. Data processing within the scope of the statutory withdrawal function is carried out for the purpose of processing and confirming your right of withdrawal in accordance with legal regulations.


When using the withdrawal function, the following personal data is collected and processed:

  • Consumer’s name

  • Information identifying the contract (e.g., order number)

  • Means of communication for confirmation of receipt (usually email)

The processing of personal data is based on Article 6(1)b) of the GDPR, as the data processing is necessary for the performance of a contract to which the data subject is a party, or for the implementation of pre-contractual measures taken at the data subject’s request.


After submitting the notice of withdrawal, you will immediately receive confirmation of receipt on a durable medium via email. The personal data collected in connection with the withdrawal function will be stored only for as long as is necessary to process the withdrawal and to comply with statutory retention obligations.



13. Newsletter
a) Nature and Scope of Data Processing

On our website, you have the option to subscribe to a free, regular email newsletter. To be able to send you the newsletter regularly, we need your email address.



We use the so-called double opt-in procedure for sending the newsletter. This means that we will not send you an email newsletter until you have explicitly confirmed that you consent to receiving it. We will then send you a confirmation email asking you to click on a link to confirm that you wish to receive future newsletters from us. This ensures that only you, as the owner of the email address provided, can subscribe to the newsletter. Your confirmation must be provided promptly after receiving the confirmation email; otherwise, your newsletter subscription will be automatically deleted from our database.

When you subscribe to the newsletter, we collect and store the data you enter in the form (e.g., last name, first name, email address). When you subscribe to the newsletter, we also store your IP address as provided by your Internet Service Provider (ISP), as well as the date and time of your subscription, to enable us to trace any potential misuse of your email address at a later date. In the confirmation email sent for verification purposes (double opt-in
email), we also store the date and time you clicked the confirmation link and the IP address provided by your Internet Service Provider (ISP).



b) Purpose and Legal Basis
The data we collect when you subscribe to the newsletter is used exclusively for the purpose of sending you promotional communications via the newsletter.

The processing of your email address for newsletter distribution is based, pursuant to Art. 6(1)a) GDPR and § 7(2)(3) UWG, on the declaration of consent you voluntarily provide below, which may be revoked at any time with future effect. In addition, the processing is based on Article 6(1)f) of the GDPR due to our legitimate interest in documenting proof of the required consent.


c) Retention Period

Your email address will be stored for as long as you remain subscribed to the newsletter. After you unsubscribe from the newsletter, your email address will be deleted unless you have expressly consented to the continued use of your data.


14. Data transfer

We will only disclose your personal data to third parties if:

  1. You have given your explicit consent pursuant to Art. 6(1)(a) of the GDPR,

  2. this is permitted by law and necessary under Article 6(1)b) of the GDPR to fulfill a contractual relationship with you or to take steps prior to entering into a contract,

  3. there is a legal obligation to disclose the data under Article 6(1)c) of the GDPR. We are legally obligated to transfer data to government authorities, e.g., tax authorities, social security agencies, health insurance providers, regulatory agencies, and law enforcement agencies.

  4. the disclosure is necessary under Article 6(1)f) of the GDPR to safeguard legitimate business interests, as well as to assert, exercise, or defend legal claims, and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data.

  5. pursuant to Article 28 of the GDPR, we engage external service providers, known as processors, in the processing of your data, who are obligated to handle your data with due care.

We use such service providers in the following areas:

  • IT

  • Logistics

  • Telecommunications

When transferring data to external entities in third countries, i.e., outside the EU or the EEA, we ensure that these entities handle your personal data with the same care as within the EU or the EEA. We only transfer personal data to third countries where the European Commission has confirmed an adequate level of protection or where we ensure the careful handling of personal data through contractual agreements or other appropriate safeguards.


15. Tracking and Analytics Tools

You can find a detailed overview of the web analytics and social media tools we use here:


Apple Pay

We offer the option to process payments via the payment service provider Apple Pay, operated by Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland.

The legal basis for this is our legitimate interest in efficient and secure payment processing pursuant to Article 6(1)(f) of the GDPR. In this context, we share the following data with Apple Pay to the extent necessary for the performance of the contract (Article 6(1)(b) of the GDPR): name, address, account information, credit card number (if applicable), invoice amount, currency, and transaction number. Your data is shared exclusively for the purpose of payment processing with the payment service provider Apple Pay and only to the extent necessary for this purpose.

Apple Pay conducts a credit check for various services, such as payment by credit card or direct debit, to ensure your willingness and ability to pay. This corresponds to Apple Pay’s legitimate interest (pursuant to Article 6(1)(f) of the GDPR) and serves the purpose of contract performance (pursuant to Article 6(1)(b) of the GDPR). For this purpose, your data (name, address, date of birth, and bank account details) is shared with credit reporting agencies. We have no influence over this process and receive only the result indicating whether the payment was processed, declined, or is pending review.

For more information on data protection with Apple Pay, please visit: https://www.apple.com/de/legal/privacy/data/de/apple-pay/



Amazon Pay

We offer the option to process payments through the payment service provider Amazon Payments Europe S.C.A., 38 Avenue J.F. Kennedy, L-1855 Luxembourg.

The legal basis for this is our legitimate interest in efficient and secure payment processing pursuant to Art. 6(1)(f) of the GDPR.

In this context, we share the following data with Amazon Pay to the extent necessary for the performance of the contract (Article 6(1)(b) of the GDPR): name, address, bank account information, credit card number (if applicable), invoice amount, currency, and transaction number. Your data is shared exclusively for the purpose of payment processing with the payment service provider Amazon Pay and only to the extent necessary for this purpose.

For various services, such as payment by direct debit, Amazon conducts a credit check to ensure your willingness and ability to pay. This corresponds to the legitimate interest of Amazon Pay pursuant to Article 6(1)(f) of the GDPR and serves the purpose of contract performance pursuant to Article 6(1)(b) of the GDPR. For this purpose, your data (name, address, date of birth, and bank account details) is shared with credit bureaus. We have no influence over this process and receive only the result indicating whether the payment was processed, declined, or is pending review.

For more information on data protection at Amazon Pay, please visit: https://pay.amazon.de/help/201212490



Consentmanager

We have integrated the consent management tool “consentmanager” from consentmanager AB, Håltgelvågen 1b, 72348 Västerås, Sweden, into our website to request consent for data processing and the use of cookies or similar functions. Using consentmanager, you have the option to grant or deny your consent for specific features of our website, such as the integration of external elements, streaming content, statistical analysis, audience measurement, and personalized advertising. You can use consentmanager to grant or deny your consent for all features, or to grant your consent for specific purposes or individual features. You can also change the settings you have selected at a later time. The purpose of integrating consentmanager is to allow users of our website to decide on the aforementioned matters and to offer them the option to change settings they have already selected while continuing to use our website. When using consentmanager, personal data and information about the devices used (IP address, language, browser, etc.) are processed and transmitted to consentmanager AB. Information about the settings you have selected is also stored on your device.

The legal basis for the processing is Article 6(1)(c) of the GDPR in conjunction with Article 7(1) of the GDPR, insofar as the processing serves to fulfill the legally mandated obligations to provide evidence of consent. In all other cases, Article 6(1), first sentence, (f) of the GDPR is the applicable legal basis. Our legitimate interests in the processing lie in the storage of user settings and preferences regarding the use of cookies and the analysis of consent rates.

You may object to the processing to the extent that it is based on Article 6(1), first sentence, subparagraph (f) of the GDPR. Your right to object applies for reasons arising from your particular situation.

You can find the privacy policy of consentmanager AB here: https://www.consentmanager.net/en/privacy/



Facebook

When you visit our Facebook page, Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, collects, stores, and processes your personal data in accordance with Facebook’s Privacy Policy.

You can find the Privacy Policy here:

https://www.facebook.com/privacy/policy/?entry_point=facebook_page_footer

As part of the “Facebook Insights” feature, Facebook may provide us with the following categories of data, among others, in anonymized/statistical form for the purpose of measuring performance and optimizing our Facebook presence:

  1. Predefined interactions on our Facebook page

  2. Timestamps

  3. User’s country/city

  4. HTTP language code

  5. Age/Gender Group

  6. Previously visited website (so-called referral URL)

  7. User's device

  8. Facebook user ID (if logged in)

With regard to the processing of Insights data, Facebook and we share joint responsibility, with Facebook assuming primary responsibility. This applies to the processing of Insights data and the implementation of data subject rights. Therefore, please contact Facebook directly regarding all obligations under the GDPR pertaining to the processing of Insights data. We will forward any related inquiries we receive to Facebook.



Google AdSense

We use the online advertising service Google AdSense, which allows us to display ads tailored to your interests. Google AdSense is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

We use this service to display ads that may be of interest to you, with the aim of making our website more engaging for you. To this end, statistical information about you is collected and processed by our advertising partners. These ads can be identified by the label “Google Ads” within the respective ad.

When you visit our website, Google receives the information that you have accessed our website. To do this, Google uses a web beacon to set a cookie on your computer. If you are logged in to your Google account, your data can be directly associated with it. If you do not wish for your data to be associated with your Google profile, you must log out. It is possible that this data may be shared with Google’s contractual partners, third parties, and government authorities. This website also uses Google AdSense ads from third-party providers. The aforementioned data may be transferred to these third-party providers (listed at https://support.google.com/dfp_sb/answer/94149).

You can prevent the storage of cookies by adjusting your browser settings accordingly; however, please note that in this case, you may not be able to use all features of this website to their full extent.

You can also disable interest-based ads on Google via the following link: https://adssettings.google.com/anonymous?hl=de

Please note that this setting will be deleted if you clear your cookies.

For more information on Google’s privacy policy, please visit:

https://policies.google.com/privacy?hl=de

Privacy Policy for Advertising:

https://policies.google.com/technologies/ads?hl=de&gl=de



Google Analytics

We use the tracking tool Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on our website.

Google Analytics uses so-called cookies, which are text files stored on your computer that enable an analysis of your use of the website.

The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the United States and stored there.

On behalf of the operator of this website, Google will use this information to systematically evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services related to website and internet usage.

When individual pages of our website are accessed, the following data is stored:

  1. Three bytes of the IP address of the user’s accessing system (anonymized IP address)

  2. The webpage accessed

  3. The website from which the user accessed the page on our website (referrer URL)

  4. The subpages accessed from the page visited

  5. The duration of the visit to the website

  6. The frequency with which the website is visited

We use Google Analytics with IP anonymization enabled. This truncates IP addresses by the last octet (e.g., 192.168.79.***; known as IP masking). It is no longer possible to associate the truncated IP address with the user’s computer or device.

The Google Analytics service is used to analyze usage patterns on our website. The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR.

We will delete the stored data as soon as it is no longer needed for our record-keeping purposes.

You can prevent the storage of cookies by adjusting your browser settings accordingly; however, please note that in this case, you may not be able to use all features of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), as well as from processing this data, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

You can also change your consent settings in the cookie settings at any time.

For more information on the Google Analytics Terms of Service:

www.google.com/analytics/terms/de.html

For more information on Google Analytics’ privacy policy:

https://support.google.com/analytics/answer/6004245?hl=de



Google Payments

We offer the option to process payments via the payment service provider Google Payments, operated by Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, (“Google”).

The legal basis for this is our legitimate interest in efficient and secure payment processing pursuant to Article 6(1)(f) of the GDPR. In this context, we share the following data with Google Pay to the extent necessary for the performance of the contract (Article 6(1)(b) of the GDPR): name, address, bank account information, credit card number (if applicable), invoice amount, currency, and transaction number. Your data is shared exclusively for the purpose of payment processing with the payment service provider Google Pay and only to the extent necessary for this purpose.

For various services, such as payment by credit card or direct debit, Google Payments conducts a credit check to ensure your willingness and ability to pay. This corresponds to the legitimate interest of Google Payments (pursuant to Article 6(1)(f) of the GDPR) and serves the purpose of contract performance (pursuant to Article 6(1)(b) of the GDPR). For this purpose, your data (name, address, date of birth, and bank account details) is shared with credit bureaus. We have no influence over this process and receive only the result indicating whether the payment was processed, declined, or is pending review.

For more information on data protection at Google Payments, please visit: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de



Google reCAPTCHA

To ensure adequate data security when submitting forms, we use the reCAPTCHA service in certain cases, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

This allows us to distinguish whether the input is being made by a human or is being misused by automated computer programs (so-called “bots”). When reCAPTCHA is used, the user’s IP address and, if applicable, other data required by Google for the reCAPTCHA service are transmitted to Google. Google processes this data exclusively as a data processor in accordance with Article 28 of the GDPR. Google processes the data only on the instructions and on behalf of the website operator.

The legal basis for the use of reCAPTCHA is Article 6(1)(f) of the GDPR. Verifying whether form entries were created by a human constitutes a legitimate interest of the website operator.

Google’s European contact information: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

For more information on Google’s privacy policy, visit https://policies.google.com/privacy



Instagram

When you visit our Instagram channel, personal data is stored and processed by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 D02 X525, Ireland, as the provider of Instagram, in accordance with Instagram’s Privacy Policy.

You can find the privacy policy here: https://help.instagram.com/519522125107875

To tailor our pages to user needs and continuously optimize them, we use the analytics service Instagram Insights. This service tracks your activity on our page and provides us with anonymized statistics. This provides us with insights into, among other things, interactions on our Instagram page, page views, the reach of posts, information about our followers’ activity, the countries and locations of our visitors, and statistics on the gender distribution of our visitors. It is not possible for us to identify individual users or access individual user profiles.



Instagram Link

An Instagram icon is integrated into the footer of our website, which links to our Instagram profile, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Instagram”).

When you visit our website and click on the Instagram icon, you will be redirected directly to our Instagram profile. No personal data about you is transmitted to Instagram unless you click on the icon.

If you are logged into Instagram and click on the Instagram icon on our website, Instagram may associate your visit to our website with your Instagram profile. If you do not wish this to happen, we recommend that you log out of Instagram before clicking on the Instagram icon.

We have no control over the type and scope of data that Instagram collects and processes when you visit our Instagram profile. For more information about Instagram’s data processing, as well as your rights and privacy settings, please refer to Instagram’s Privacy Policy.

Please note that Instagram, as the platform operator, is solely responsible for data processing. Information on how Instagram processes your data and what data is collected can be found in Instagram’s Privacy Policy, which is available at https://help.instagram.com/519522125107875.




Meta Pixel / Meta Conversion Tracking

We use the visitor action pixel provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2 D02 X525, Ireland (“Meta”) on our website. Specifically, we have implemented Meta’s remarketing tag or tracking pixel. Meta and we are jointly responsible for data processing.

The Meta Pixel enables Meta to identify visitors to our website as a target audience for displaying ads (so-called “Meta Ads”). A user may be tracked across multiple websites. We use the Meta pixel to display the Meta ads we place only to those Meta users who have shown an interest in our online offering or who exhibit certain characteristics (e.g., interest in specific topics or products, determined based on the websites they have visited), which we transmit to Meta (so-called “Custom Audiences”).

With the help of the Meta Pixel, we can also track the effectiveness of Meta ads for statistical and market research purposes (“Audience Insights”) by seeing whether users were redirected to our website after clicking on a Meta ad (so-called “conversion”).

The Meta pixel is a JavaScript code that sends the following data to Meta:

  • HTTP header information: including IP address, web browser information, page location, document, website URL, and the web browser’s device (computer, smartphone, tablet, other), as well as the date and time of use

  • Pixel-specific data: Pixel ID and Meta cookie data, including your Meta ID (these are used to link events to a specific Meta advertising account and thus assign them to a Meta user)

  • Additional information about the visit, as well as standard and custom data events.

In addition, we use the supplementary feature “automatic advanced matching.” Through this feature, data such as users’ first and last names, city of residence, email addresses, phone numbers, or Meta IDs is transmitted to Meta in encrypted form to create target groups (“Custom Audiences” or “Lookalike Audiences”). This also includes data from non-Meta users and from users who are not logged into Meta when visiting our website. This allows us to identify website visitors who have disabled the storage of third-party cookies.

If no Meta cookies are stored in your browser, you will not be assigned to any of the user groups designated as “Custom Audiences.” However, if the Meta ID contained in the Meta cookie has been matched to a Meta user, Meta assigns that user to a so-called “Custom Audience” based on the rules we have established.

We are jointly responsible with Meta for the operation of the tracking pixel with regard to compliance with data protection regulations. In this context, Meta provides the associated IT infrastructure as well as the social network’s website and is generally the primary point of contact when it comes to the processing of your data on the social network’s pages (e.g., requests for information or deletion). However, you may also assert your legal rights against us. In this case, we will forward your requests to the operator of the social network. We use the Meta pixel to display the “Meta Ads” we place to Meta users who have shown an interest in our online offering or who exhibit certain characteristics that we transmit to Meta (so-called “Custom Audiences”).

The legal basis for the use of Meta Custom Audience is your consent pursuant to Article 6(1)(a) of the GDPR.

For more information, please see Meta’s Privacy Policy: https://www.facebook.com/privacy/policy/?locale=de_DE



PayPal

We offer the option to process payments through the payment service provider PayPal, PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or “Purchase on Account” via PayPal, we share your payment information with PayPal as part of the payment processing. For the payment methods credit card via PayPal, direct debit via PayPal, or “Purchase on Account” via PayPal, PayPal reserves the right to conduct a credit check. PayPal uses the result of the credit check—which reflects the statistical probability of default—to determine whether to make the respective payment method available. The credit check may include probability values (so-called “score values”). To the extent that score values are included in the results of the credit check, they are based on a scientifically recognized mathematical-statistical method. Address data, among other factors, is included in the calculation of the score values.

For further information regarding data protection, including details on the credit bureaus used, please refer to PayPal’s Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full




Klarna

For payment processing, we work with the payment service provider Klarna AB (publ.) (hereinafter “Klarna”), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna offers various payment options. In order to offer you these payment options, we must transfer certain personal data to Klarna. This data typically includes your name, address, email address, phone number, order details, and, if necessary, additional information required for payment processing.

Klarna is solely responsible for the processing of this data. The transfer of data is based on Article 6(1)(b) of the GDPR to enable payment processing within the framework of the contractual relationship.

When you select one of the offered payment methods, Klarna conducts a credit check. For this purpose, Klarna may transfer your personal data to credit bureaus to assess your creditworthiness. Please note that Klarna conducts this credit check independently and we have no influence over the result. The credit check is carried out on the basis of Article 6(1)(f) of the GDPR, as Klarna has a legitimate interest in protecting itself against payment defaults.

If you select Klarna as your payment service provider, your personal data will generally be stored for the duration of the statutory retention periods. Once these periods have expired, the data will be deleted, provided there are no further statutory retention obligations.

Please note that the use of Klarna’s payment services is voluntary. You may select a different payment method at any time that does not involve the transfer of data to Klarna. By using Klarna’s payment services, you consent to the processing of your personal data as described.

Klarna collects and processes this data in accordance with its own privacy policy, which is available at https://www.klarna.com/de/datenschutz/.



Order Printer Pro: PDF Invoice for Shopify

We use the tool “Order Printer Pro: PDF Invoice for Shopify” to create and manage PDF invoices for orders placed via the Shopify platform. Order Printer Pro is an app that enables the automatic generation, printing, and sending of invoices.

When using Order Printer Pro, customers’ personal data is processed. The data processed includes, in particular, order information (order number, order date, products ordered, prices), invoice information (invoice number, invoice date), and contact information (name, address, email address), as well as payment information.

The data is processed on the basis of Article 6(1)(b) of the GDPR to fulfill the contract with the customer, as well as on the basis of Article 6(1)(c) of the GDPR to comply with legal obligations, in particular tax and commercial law retention requirements.

We have entered into a data processing agreement with Order Printer Pro in accordance with Article 28 of the GDPR, which ensures that Order Printer Pro processes the data in compliance with statutory data protection regulations and implements appropriate technical and organizational measures to protect the data.

The data is stored only for as long as necessary to achieve the stated purposes or as required by statutory retention obligations.

Further information on data processing by Order Printer Pro can be found in Shopify’s Privacy Policy: https://www.shopify.com/de/legal/datenschutz



Shopify

We host our website with Shopify on a processing-on-our-behalf basis.

When you visit our website, Shopify collects your IP address as well as information about the device and browser you are using. Shopify also analyzes user behavior and compiles user statistics. When you make a purchase through our website, Shopify collects your name, email address, shipping and billing addresses, payment information, and other data related to the purchase (e.g., phone number, transaction amount, etc.). Shopify stores cookies in your browser for the purpose of these analyses.

All data collected on our website is processed on Shopify’s servers.

If you are located in Canada or the United States, your personal data is received by: Shopify Inc., Attn: Privacy Officer, 151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada.

If you are located in the EEA, the United Kingdom, the Middle East, South America, or Africa, your personal data is received by: Shopify International Ltd., Attn: Data Protection Officer, c/o Intertrust Ireland, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland.

If you are located in Asia, Australia, or New Zealand, your personal data will be received by: Shopify Commerce Singapore Pte. Ltd., Attn: Data Protection Officer, 77 Robinson Road, #13-00 Robinson 77, Singapore 068896.

For more information about Shopify’s privacy practices, please visit the following website: https://www.shopify.de/legal/datenschutz


Shopify Email

We use the Shopify Email app, a service provided by Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter “Shopify”). Shopify Email enables us to create, manage, and run email marketing campaigns to connect with customers and inform them about products, offers, and news.

When using the Shopify Email app, users’ personal data is processed. The data processed includes, in particular, email addresses, names, usage data (e.g., open and click-through rates), as well as, where applicable, other contact details and information collected in the context of email marketing campaigns. This data is transmitted to Shopify.

The use of the Shopify Email app is based on a legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest consists of carrying out targeted marketing activities, maintaining customer relationships, and increasing sales figures.

Users have the option to object to the collection and processing of their data by Shopify. For more information on Shopify’s use of data, as well as settings and opt-out options, please refer to Shopify’s Privacy Policy at https://www.shopify.com/legal/privacy


Shopify Payments

We use the payment service provider “Shopify Payments.”

The transfer of your data to Stripe is based on Art. 6(1)(a) of the GDPR (consent) and Art. 6(1)(b) of the GDPR (processing necessary for the performance of a contract). You have the option to withdraw your consent to data processing at any time. Withdrawal does not affect the lawfulness of data processing operations that have already taken place. All data required for payment processing is used exclusively for the purpose of processing payments and is transmitted via the “SSL” protocol.

For more information on Shopify Payments’ privacy policy, please visit the following website: https://www.shopify.com/legal/privacy



Social Plugins

We currently use the following social media plugins: Facebook, X, TikTok, When you click a button, personal data is transmitted to the respective plugin provider and stored there.

The respective plug-in provider stores the data collected about you as user profiles and uses this data for advertising, market research, and/or to tailor its website to your needs. Such analysis is carried out in particular (even for users who are not logged in) to display targeted advertising and to inform other users of the social network about your activities on some of our websites. You have the right to object to the creation of these user profiles; to exercise this right, you must contact the respective plug-in provider. Through the plug-ins, we offer you the opportunity to interact with social networks and other users, enabling us to improve our services and make them more interesting for you as a user. The legal basis for the use of the plug-ins is Article 6(1)(f) of the GDPR.

Data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data we collect about you is directly associated with your existing account with the plug-in provider. In the case of U.S. providers, data is transferred to the United States.

For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the privacy policies of these providers listed below. There you will also find further information about your rights in this regard and settings options for protecting your privacy:

  • Facebook:

Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 D02 X525, Ireland

www.facebook.com/policy.php

  • X:

X Corp., 865 FM 1209, Building 2, Bastrop, TX 78602, USA

https://x.com/de/privacy

  • TikTok:

TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland

https://www.tiktok.com/legal/privacy-policy?lang=de-DE





Stripe

We offer the option to complete the payment process via the payment service provider Stripe Payments. When paying via Stripe, we share the information you provide during the ordering process, along with details about your order (name, address, account number, bank routing number, credit card number if applicable, invoice amount, currency, and transaction number), in accordance with Article 6(1)(b) of the GDPR. Your data is transferred exclusively for the purpose of processing payments with the payment service provider Stripe Payments and only to the extent necessary for this purpose.

Further information about the payment service provider Stripe in Europe: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Central Dock, Dublin, D02 H210, Ireland

And in the U.S.: Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA.

For more information on Stripe’s privacy policy, please visit:

https://stripe.com/de/privacy#translation



TikTok

On our TikTok channel, we present our services in a concise format and keep you informed about current promotions. In doing so, the user’s personal data is processed by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”). TikTok’s privacy policy can be found at:

https://www.tiktok.com/legal/privacy-policy?lang=de-DE

We use TikTok’s analytics features to measure the performance of our channel. For this purpose, TikTok provides us with the following information, among other things, in statistical form: Audiences (e.g., characteristics of target groups for ad delivery such as age, gender, and country), interactions (e.g., likes, video playback duration), and referral information (e.g., where users came from to view the video); however, it is not possible for us to draw conclusions about individual users or access individual user profiles.


TikTok Pixel

Our online platform uses the so-called “TikTok Pixel” from the social network TikTok, which is operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”).

With the help of the TikTok Pixel, TikTok is able, on the one hand, to identify you as a visitor to our online service as a target audience for the display of ads (so-called “TikTok Ads”). Accordingly, we use the TikTok pixel to display the TikTok Ads we place only to those TikTok users who have also shown an interest in our online service or who exhibit certain characteristics (e.g., interests in specific topics or products, determined based on the websites visited), which we transmit to TikTok (so-called “Custom Audiences”). In particular, the following information is processed for this purpose: your IP address, device information (e.g., type, brand), the browser system used, the time you accessed our service, and your response to the respective campaign. The legal basis for this processing is Article 6(1)(a) of the GDPR in conjunction with your consent.

TikTok uses this data to display targeted and personalized advertisements to its users and to create interest-based user profiles. With the help of the TikTok pixel, we also aim to ensure that our TikTok ads align with users’ potential interests and do not come across as intrusive. The data collected is anonymous to us and cannot be viewed by us; it is only used by us to measure the effectiveness of our ad campaigns.

You can find TikTok’s privacy policy here: https://www.tiktok.com/legal/page/eea/privacy-policy/de



YouTube Videos

On our YouTube channel, you can find videos and helpful tips about our services. Personal data is stored and processed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), as the operator of YouTube, in accordance with Google’s Privacy Policy.

You can find the privacy policy here: https://policies.google.com/privacy?hl=de&gl=de

Using YouTube’s analytics features, we are able to perform certain statistical analyses to optimize our channel. This includes, in particular, details regarding the most popular videos (e.g., time spent by users, video rankings), the target audiences (e.g., countries, language settings, age and gender, activity times), and our channel’s reach (e.g., where users were referred from to a video) and impressions (e.g., how many users viewed a specific ad). We are unable to draw conclusions about individual users or access individual user profiles.

For more information on YouTube’s analytics features, visit: https://support.google.com/youtube/answer/9002587?hl=de


Embedding YouTube Videos

This website uses the YouTube embedding feature to display and play videos from the provider “YouTube,” which is owned by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

The extended privacy mode is used here, which, according to the provider, does not begin storing user information until the videos are played. When playback of embedded YouTube videos begins, the provider “YouTube” uses cookies to collect information about user behavior. According to “YouTube,” this serves, among other things, to collect video statistics, improve user-friendliness, and prevent abusive behavior. If you are logged in to Google, your data will be directly associated with your account when you click on a video. If you do not wish for your data to be associated with your YouTube profile, you must log out before clicking the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. Such analysis is carried out in particular pursuant to Article 6(1)(f) of the GDPR based on Google’s legitimate interests in displaying personalized advertising, conducting market research, and/or tailoring its website to user needs. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube. Regardless of whether the embedded videos are played, a connection to the Google network “DoubleClick” is established every time this website is accessed, which may trigger further data processing operations beyond our control.

For more information on data protection at “YouTube,” please refer to the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy



16. Data Security and Security Measures

We are committed to protecting your privacy and treating your personal data confidentially. To this, we implement comprehensive technical and organizational security measures, which are regularly reviewed and adapted to technological advancements. This includes, among other things, the use of recognized encryption methods (SSL or TLS). However, data disclosed in unencrypted form, for example, via unencrypted email, may be read by third parties. We have no control over this. It is the responsibility of the respective users to protect the data they provide against misuse through encryption or other means.


17. Changes to the Privacy Policy

We reserve the right to update this policy at any time as necessary.


18. Your Rights

Here you will find your rights regarding your personal data. Details are set forth in Articles 7, 15–22, and 77 of the GDPR. You may contact the controller (Section 2) regarding this matter.


  1. Right to Withdraw Your Consent Under Article 7(3)(1) of the GDPR

You may withdraw your consent to the processing of your personal data at any time with future effect. However, this does not affect the lawfulness of the processing carried out prior to the withdrawal.

  1. Right of access under Article 15 of the GDPR

You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to access this personal data as well as to further information, e.g., the purposes of processing, the categories of personal data processed, the recipients, and the planned duration of storage or the criteria for determining the duration.

  1. Right to Rectification and Completion under Article 16 of the GDPR

You have the right to request the immediate rectification of inaccurate data. Considering the purposes of the processing, you have the right to request the completion of incomplete data.

  1. Right to erasure (“right to be forgotten”) under Article 17 of the GDPR

You have the right to erasure provided that the processing is not necessary.
This is the case, for example, if your data is no longer necessary for the original purposes, you have withdrawn your consent under data protection law, or the data has been processed unlawfully.

  1. Right to restriction of processing under Article 18 of the GDPR

You have the right to restrict processing, e.g., if you believe personal data is inaccurate.

  1. Right to data portability under Article 20 of the GDPR

You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.

  1. Right to object under Article 21 of the GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of certain personal data concerning you. In the case of direct marketing, you, as the data subject, have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

  1. Automated decision-making in individual cases, including profiling, pursuant to Article 22 of the GDPR

You have the right not to be subject to a decision based solely on automated processing, including profiling—except in the exceptional cases mentioned in Article 22 of the GDPR. Decision-making based solely on automated processing, including profiling—does not take place.

  1. Lodging a complaint with a data protection supervisory authority pursuant to Article 77 of the GDPR

In addition, you may lodge a complaint with a data protection supervisory authority at any time, for example if you believe that the data processing is not in compliance with data protection regulations.