Privacy policy
Unless otherwise stated below, providing your personal data is neither legally nor contractually required, nor necessary to conclude a contract. You are not obligated to provide the data. Failure to provide it has no consequences. This only applies insofar as no other information is provided in the following processing operations. "Personal data" is any information relating to an identified or identifiable natural person.
Server log files
You can visit our website without providing any personal information. Each time you access our website, usage data is transmitted to us or our web host / IT service provider through your internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed
, the date and time of access, your IP address, the amount of data transferred, and the requesting provider.
Processing is based on Article 6(1)(f) GDPR due to our legitimate interest in ensuring uninterrupted operation of our website and improving our services.
Your data may be transferred to third countries outside the EU, particularly to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision by the EU Commission exists: the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's standard contractual clauses.
Contact
Responsible party
Feel free to contact us. The party responsible for data processing is: Philip Kehela, Flandrische Straße 2, 50674 Cologne, Germany, +49 (0) 151 257 239 90 (reachable via WhatsApp), datenschutz@mokebo.de
Customer initiating contact via email
If you initiate business contact with us via email, we collect your personal data (name, email address, message text) only to the extent you provide it. Data processing serves to process and respond to your inquiry.
If the contact serves to carry out pre-contractual measures (e.g., consultation regarding purchase interest, quote preparation) or concerns an existing contract between you and us, this data processing is based on Article 6(1)(b) GDPR.
If contact is made for other reasons, this data processing is based on Article 6(1)(f) GDPR due to our legitimate interest in processing and responding to your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to such processing of your personal data based on Article 6(1)(f) GDPR.
We use your email address only to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. Data processing serves the purpose of contact. If the contact serves to carry out pre-contractual measures (e.g., consultation regarding purchase interest, quote preparation) or concerns an existing contract between you and us, this data processing is based on Article 6(1)(b) GDPR.
If contact is made for other reasons, this data processing is based on Article 6(1)(f) GDPR due to our legitimate interest in processing and responding to your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to such processing of your personal data based on Article 6(1)(f) GDPR.
We use your email address only to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the withdrawal button
If you have concluded a contract through our online presence, we provide you with a withdrawal function (withdrawal button) through which you can submit your withdrawal notice directly. When using the withdrawal function, we collect your personal data (name, email address, information to identify the contract or part of the contract you wish to withdraw, and the time (date and time) of submission of your withdrawal notice) only to the extent you provide it. Data processing serves to provide you with the legally required option to withdraw your contract and to properly process your withdrawal. If the contact concerns an existing contract between you and us, this data processing is based on Article 6(1)(b) GDPR. Otherwise, data processing is based on Article 6(1)(c) GDPR, as we are legally required to provide a withdrawal function on our online presence. We use your email address only to process your withdrawal notice. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
Transfer to third parties (plugin use)
To technically provide and manage the withdrawal function on our online presence, we use a software solution from the third-party provider Händlerbund Legal GmbH, Kohlgartenstraße 11-13, 04315 Leipzig, as part of contract processing. To send confirmation emails, we also use the service of the third-party provider Scaleway SAS (8, rue de la Ville-l'Évêque, 75008 Paris, France). Your email address, subject line, and email status are transferred to this service. Further information about data collection and use by the third party and your rights can be found in Scaleway's privacy policy under this link. Your collected personal data will be transferred to the servers of the third-party providers mentioned above when using the withdrawal function. Processing of your personal data serves to fulfill legal requirements regarding the design of the withdrawal function in a legally compliant manner and is based on Article 6(1)(c) GDPR. This data processing is also based on Article 6(1)(f) GDPR due to our legitimate interest in providing you with a user-friendly withdrawal option. In this case, you have the right, for reasons arising from your particular situation, to object at any time to such processing of your personal data based on Article 6(1)(f) GDPR..
Collection and processing when applying via email
Website visitors can apply via email for open vacancies posted on our website. We collect your personal data only to the extent you provide it. This includes your contact information (e.g., name, email address, phone number), details about your professional qualifications and education, information about professional training, and performance-specific documentation. Data processing serves the purpose of contact and decision-making regarding establishing an employment relationship with you. Providing the data is necessary to conduct the application process. Processing of your personal data is based on Article 6(1)(b) GDPR in connection with Section 26(1) BDSG to carry out pre-contractual measures (completion of the application process as contract negotiation). If you have provided consent to process personal data for inclusion in our applicant pool, for example by checking a checkbox, processing is based on Article 6(1)(a) GDPR. You can revoke your consent at any time without affecting the lawfulness of processing based on consent until revocation. If special categories of personal data within the meaning of Article 9(1) GDPR are requested during the application process, such as information about the degree of severe disability, this is based on Article 9(2)(b) GDPR so we can exercise rights and fulfill obligations under employment law and social security and social protection law.
We store your personal data as long as necessary to decide on your application. Your data will subsequently be deleted no later than six months after, unless you have consented to further processing and use.
If the application process results in an employment relationship, the provided data will be further processed on the basis of Article 6(1)(b) GDPR in connection with Section 26(1) BDSG for employment purposes and subsequently transferred to your personnel file.
WhatsApp Business
If you contact us for business purposes via WhatsApp, we use WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "WhatsApp"). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA). Data processing serves to process and respond to your inquiry. For this purpose, we collect and process your WhatsApp-registered mobile number, your name if provided, and other data to the extent you provide it. We use a mobile device for this service with an address book containing only data from users who have contacted us via WhatsApp. No transfer of personal data to WhatsApp occurs without your prior consent with WhatsApp. Your data is transferred by WhatsApp to Meta Platforms Inc. servers in the USA. An adequacy decision by the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has certified itself under TADPF and committed to complying with European data protection principles. If the contact serves to carry out pre-contractual measures (e.g., consultation regarding purchase interest, quote preparation) or concerns an existing contract between you and us, this data processing is based on Article 6(1)(b) GDPR. If contact is made for other reasons, this data processing is based on Article 6(1)(f) GDPR due to our legitimate interest in providing quick and easy contact and responding to your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to such processing of your personal data based on Article 6(1)(f) GDPR. We use your personal data only to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use. More information about terms of use and privacy when using WhatsApp can be found here.
Customer account and orders
Customer account
When opening a customer account, we collect your personal data to the extent specified there. Data processing serves to improve your shopping experience and simplify order processing. Processing is based on Article 6(1)(a) GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of processing based on consent until revocation. Your customer account will subsequently be deleted.
Collection, processing, and transfer of personal data when placing orders
When placing an order, we collect and process your personal data only insofar as necessary to fulfill and process your order and respond to your inquiries. Providing the data is necessary to conclude the contract. Failure to provide it means no contract can be concluded. Processing is based on Article 6(1)(b) GDPR and is necessary to fulfill a contract with you. Your data may be transferred to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly comply with legal requirements. The scope of data transfer is limited to a minimum. Your data may be transferred to third countries outside the EU, particularly to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision by the EU Commission exists: the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's standard contractual clauses.
Reviews and advertising
Data collection when writing a comment or review
When commenting on or reviewing an article or post, we collect your personal data (name, email address, comment text) only to the extent you provide it. Processing serves to enable commenting/reviewing and display comments/reviews. To verify your review/comment, we also collect the following data: name and email address. By submitting the comment/review, you consent to processing of the transmitted data. Processing is based on Article 6(1)(a) GDPR with your consent. You can revoke consent at any time without affecting the lawfulness of processing based on consent until revocation. Your personal data will subsequently be deleted. When your comment/review is published, the name you provided and the email address you provided will be published. Additionally, when submitting your comment/review, your IP address is stored to prevent misuse of the commenting or review function and ensure the security of our information technology systems. By submitting the comment/review, you consent to processing of the transmitted data. Processing is based on Article 6(1)(a) GDPR with your consent. You can revoke consent at any time without affecting the lawfulness of processing based on consent until revocation. Your IP address will subsequently be deleted.
Use of Judge.me
We use the review system "Judge.me" from Judge.me Ltd (c/o Buckworths 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB; "Judge.me") on our website. Judge.me allows us to collect customer reviews and display them on our website to give you insight into the quality of our services. After an order, you may receive an invitation to submit a review from us or Judge.me, and can then submit a review. The following data may be processed by us or Judge.me: email address, name, phone number, address, device information (IP address, information about your web browser and operating system used), information about the product purchased or service used (order number, product details), the content of your review and the star rating you provided, your product photos or videos (if you attached these to your product review). This data may also be used for verification purposes of your review. Judge.me uses technologies such as cookies. Your data may be transferred outside the EU to the United Kingdom. An adequacy decision by the EU Commission exists for the United Kingdom. Your data may be transferred to the USA. An adequacy decision by the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Judge.me is not certified under TADPF. This data transfer is based on special contracts approved for use in the United Kingdom that provide the same protection that personal data has in the United Kingdom. Use of cookies or similar technologies is based on your consent under Section 25(1) sentence 1 TDDDG in connection with Article 6(1)(a) GDPR. Processing of your personal data is based on your consent under Article 6(1)(a) GDPR, provided you have expressly consented to transfer of your data and receipt of the review request. You can revoke consent at any time without affecting the lawfulness of processing based on consent until revocation.
Further information about privacy when using Judge.me can be found here.
Use of your personal data for mailing of postal advertising
We use your personal data (name, address) obtained in connection with the sale of goods or services to send you postal advertising, unless you have objected to this use. Providing this data is necessary to conclude the contract. Failure to provide it means no contract can be concluded. Processing is based on Article 6(1)(f) GDPR due to our legitimate interest in direct marketing. You can object to this use of your address data at any time by notifying us. Contact information for exercising the objection can be found in the imprint.
Use of email address for sending newsletters
We use your email address to send information and offers via newsletter, provided you have expressly consented. Data processing serves exclusively for advertising purposes. For this, we process your email address and any other data you voluntarily provided when signing up for our newsletter. Processing is based on Article 6(1)(a) GDPR with your consent. You can revoke consent at any time without affecting the lawfulness of processing based on consent until revocation. You can unsubscribe from the newsletter at any time using the appropriate link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address in a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is based on Article 6(1)(f) GDPR due to our and your legitimate interest in preventing future use of your email address for sending our newsletter. You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data.
Use of email address for sending direct advertising
We use your email address obtained in connection with the sale of goods or services for electronic transmission of advertising for our own goods or services similar to those you have already purchased from us, unless you have objected to this use. Providing the email address is necessary to conclude the contract. Failure to provide it means no contract can be concluded. Processing is based on Article 6(1)(f) GDPR due to our legitimate interest in direct marketing. You can object to this use of your email address at any time by notifying us. Contact information for exercising the objection can be found in the imprint. You can also use the link provided for this purpose in the advertising email. This incurs no costs other than transmission costs according to standard rates.
Use of Klaviyo
We use the Klaviyo Inc. service (125 Summer St Floor 7, Boston, MA 02111, USA; "Klaviyo") for newsletter distribution as part of contract processing. We transfer the information you provide during newsletter signup (email address, first and last name if applicable) to Klaviyo. Data processing serves the purpose of newsletter distribution and its statistical evaluation. To evaluate newsletter campaigns, sent newsletters contain a 1x1 pixel graphic (tracking pixel) or tracking link. This allows us to determine whether you opened the newsletter and whether you clicked on integrated links. In this connection, we collect your personal data such as IP address, browser type and device, and time. From this data, user profiles can be created under a pseudonym. The collected data is not used to personally identify you. The collected data is used only for statistical evaluation to improve newsletter campaigns. Your data is typically transferred to Klaviyo servers in the USA and stored there. An adequacy decision by the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo has certified itself under TADPF and committed to complying with European data protection principles. Processing of your personal data is based on Article 6(1)(f) GDPR due to our legitimate interest in targeted, effective, and user-friendly newsletter systems. You have the right, for reasons arising from your particular situation, to object at any time to such processing of your personal data.
Further information about privacy at Klaviyo can be found here and here.
Use of email address for availability notifications
We offer a product availability notification service on our website. If an item is temporarily unavailable, you have the option to enter your email address for that item and be notified by email when available, provided you have consented. You will receive a one-time email notification about the availability of the item. Processing is based on Article 6(1)(a) GDPR with your consent. You can revoke consent at any time without affecting the lawfulness of processing based on consent until revocation. You can unsubscribe from availability notifications at any time by notifying us. Your email address will then be removed from the mailing list.
Shipping service provider and inventory management
Transfer of email address to shipping companies for shipping status information
We transfer your email address to the shipping company as part of contract processing, provided you have expressly consented during checkout. The transfer serves to inform you by email about shipping status. Processing is based on Article 6(1)(a) GDPR with your consent. You can revoke consent at any time by notifying us or the shipping company without affecting the lawfulness of processing based on consent until revocation.
Use of external inventory management system
We use an inventory management system for contract processing as part of contract processing. Your personal data collected during order placement is transmitted to plentysystems AG, Johanna-Waescher-Straße 7, 34131 Kassel for this purpose. Processing of your personal data serves to fulfill the contract concluded with you and is based on Article 6(1)(b) GDPR.
Payment service providers and creditworthiness information
Use of PayPal
We use the PayPal payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves to enable you to pay using the payment service. When you select and use payment via PayPal, the data necessary for payment processing is transmitted to PayPal to fulfill the contract with you using your chosen payment method. This processing is based on Article 6(1)(b) GDPR.
All PayPal transactions are subject to the PayPal privacy policy. You can find it here.
Use of PayPal Express
We use the PayPal Express payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves to enable you to pay using the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, device location) when you visit the website. Cookies may also be used for this. Cookies enable recognition of your browser. Processing of your personal data is based on Article 6(1)(f) GDPR due to our legitimate interest in offering a customer-oriented range of payment methods. You have the right, for reasons arising from your particular situation, to object at any time to such processing of your personal data. When you select and use PayPal Express, the data necessary for payment processing is transmitted to PayPal to fulfill the contract with you using your chosen payment method. This processing is based on Article 6(1)(b) GDPR. Further information about data processing when using the PayPal Express payment service can be found in the associated privacy policy at here.
Use of PayPal Check-Out
We use the PayPal Check-Out payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves to enable you to pay using the payment service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data necessary for payment processing is transmitted to PayPal to fulfill the contract with you using your chosen payment method. This processing is based on Article 6(1)(b) GDPR.
Cookies may be stored that enable recognition of your browser. Data processing resulting from this is based on Article 6(1)(f) GDPR due to our legitimate interest in offering a customer-oriented range of payment methods. You have the right, for reasons arising from your particular situation, to object at any time to such processing of your personal data.
Credit card via PayPal, direct debit via PayPal, and "Pay Later" via PayPal
For certain payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to obtain creditworthiness information on the basis of mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits personal data necessary for a creditworthiness check to a credit agency and uses the information received about the statistical probability of payment default to make a careful decision about establishing, executing, or terminating the contractual relationship. The creditworthiness information may include probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical procedures, with address data being one factor in the calculation. Your legitimate interests are considered in accordance with legal requirements. Data processing serves the purpose of creditworthiness checking for contract initiation. Processing is based on Article 6(1)(f) GDPR due to our legitimate interest in protection against payment default when PayPal provides advance payment.
You have the right, for reasons arising from your particular situation, to object at any time to such processing of your personal data based on Article 6(1)(f) GDPR by notifying PayPal. Providing the data is necessary to conclude the contract using your chosen payment method. Failure to provide it means the contract cannot be concluded with your chosen payment method.
Third parties
When paying using a third-party payment method, the data necessary for payment processing is transmitted to PayPal. This processing is based on Article 6(1)(b) GDPR. To execute this payment method, PayPal may subsequently transfer the data to the respective provider. This processing is based on Article 6(1)(b) GDPR. Local third-party providers may include:
Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
Invoice purchase via PayPal
When paying using invoice purchase, the data necessary for payment processing is first transmitted to PayPal. To execute this payment method, PayPal then transfers the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") to fulfill the contract with you using your chosen payment method. This processing is based on Article 6(1)(b) GDPR. Ratepay may conduct a creditworthiness check on the basis of mathematical-statistical procedures (probability or score values) using credit agencies as described above. Data processing serves the purpose of creditworthiness checking for contract initiation. Processing is based on Article 6(1)(f) GDPR due to our legitimate interest in protection against payment default when Ratepay provides advance payment. Further information about privacy and which credit agencies Ratepay uses can be found here and here.
Further information about data processing when using PayPal can be found in the associated privacy policy here.
Data collection and processing during creditworthiness check
If we provide advance payment, for example with payment on account or direct debit, we reserve the right to obtain creditworthiness information on the basis of mathematical-statistical procedures using Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden. We transmit personal data necessary for a creditworthiness check and use the information received about the statistical probability of payment default to make a careful decision about establishing, executing, or terminating the contractual relationship. The creditworthiness information may include probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical procedures, with address data being one factor in the calculation. Your legitimate interests are considered in accordance with legal requirements. Data processing serves the purpose of creditworthiness checking for contract initiation. Processing is based on Article 6(1)(f) GDPR due to our legitimate interest in protection against payment default when we provide advance payment. You have the right, for reasons arising from your particular situation, to object at any time to such processing of your personal data based on Article 6(1)(f) GDPR by notifying us. Providing the data is necessary to conclude the contract using your chosen payment method. Failure to provide it means the contract cannot be concluded with your chosen payment method.
Use of Klarna payment options
We use the payment service from Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna") on our website. When you select and use payment via Klarna, the data necessary for payment processing is transmitted to Klarna to fulfill the contract with you using your chosen payment method. This processing is based on Article 6(1)(b) GDPR.
Cookies may be stored that enable recognition of your browser. Data processing resulting from this is based on Article 6(1)(f) GDPR due to our legitimate interest in offering a customer-oriented range of payment methods. You have the right, for reasons arising from your particular situation, to object at any time to such processing of your personal data.
"Pay Later" (invoice), "Pay Now" (payment by direct debit, credit card, instant transfer), "Financing" (installment purchase)
For certain payment methods such as "Pay Later" (invoice), "Pay Now" (payment by direct debit, credit card, instant transfer), "Financing" (installment purchase), Klarna reserves the right to obtain creditworthiness information on the basis of mathematical-statistical procedures using credit agencies.
For this purpose, Klarna transmits personal data necessary for a creditworthiness check, such as first and last name, address, gender, email address, IP address, and data related to the order, to a credit agency for the purpose of identity and creditworthiness verification and uses the information received about the statistical probability of payment default to make a careful decision about establishing, executing, or terminating the contractual relationship. The creditworthiness information may include probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical procedures, with address data being one factor in the calculation. Your legitimate interests are considered in accordance with legal requirements. Data processing serves the purpose of creditworthiness checking for contract initiation. Processing is based on Article 6(1)(f) GDPR due to our legitimate interest in protection against payment default when Klarna provides advance payment. You have the right, for reasons arising from your particular situation, to object at any time to such processing of your personal data based on Article 6(1)(f) GDPR by notifying Klarna. Providing the data is necessary to conclude the contract using your chosen payment method. Failure to provide it means the contract cannot be concluded with your chosen payment method.
Further information, in particular to which credit agencies Klarna transmits your personal data, can be found for Germany here.
General information about Klarna is available for Germany here and for Austria here. Your personal information will be treated by Klarna in accordance with applicable data protection regulations and in accordance with Klarna's privacy policy for Germany here and for Austria here.
Use of Shopify Payments
We use the "Shopify Payments" payment service from Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Payment processing is handled by payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). Data processing serves to enable you to pay using the Shopify Payments service. When you select and use a corresponding "Shopify Payments" payment method, the data necessary for payment processing is transmitted to Stripe to fulfill the contract with you using your chosen payment method. This processing is based on Article 6(1)(b) GDPR.
Stripe reserves the right to obtain creditworthiness information on the basis of mathematical-statistical procedures using credit agencies. For this purpose, Stripe transmits personal data necessary for a creditworthiness check to a credit agency and uses the information received about the statistical probability of payment default to make a careful decision about establishing, executing, or terminating the contractual relationship. The creditworthiness information may include probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical procedures, with address data being one factor in the calculation. Your legitimate interests are considered in accordance with legal requirements. Data processing serves the purpose of creditworthiness checking for contract initiation. Processing is based on Article 6(1)(f) GDPR due to our legitimate interest in protection against payment default when Stripe provides advance payment.
You have the right, for reasons arising from your particular situation, to object at any time to such processing of your personal data based on Article 6(1)(f) GDPR by notifying Stripe. Providing the data is necessary to conclude the contract using your chosen payment method. Failure to provide it means the contract cannot be concluded with your chosen payment method.
Further information about data processing when using the Shopify Payments service can be found in Shopify's privacy policy here.
Further information about data processing during payment processing by payment service provider Stripe can be found in Stripe's privacy policy here.
Cookies
Our website uses cookies. Cookies are small text files stored in your internet browser or on your computer system by the internet browser. When you visit a website, a cookie may be stored on your operating system. This cookie contains a characteristic string of characters that allows unique identification of your browser when you visit the website again.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide on acceptance individually, and prevent the storage of cookies and transmission of their contents. Previously stored cookies can be deleted at any time. However, we must inform you that you may then not be able to fully use all functions of this website.
Under the following links, you can find information on how to manage (including disable) cookies in the major browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-löschen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technisch Necessary cookies
Unless otherwise stated in this privacy policy, we only use technically necessary cookies to make our services more user-friendly, effective, and secure. Additionally, cookies enable our systems to recognize your browser even after you navigate to another page and provide you with services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that your browser be recognized even after you navigate to another page.
The use of cookies or similar technologies is based on Section 25(2) TDDDG. Processing of your personal data is based on Article 6(1)(f) GDPR due to our legitimate interest in ensuring optimal website functionality and user-friendly and effective design of our services. You have the right, for reasons arising from your particular situation, to object at any time to such processing of your personal data.
Analysis and advertising tracking
Use of Google Analytics 4
We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
Data processing serves to analyze this website and its visitors, and for marketing and advertising purposes. Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, compile reports about website activities, and provide other services related to website use and internet use to the website operator.
The following information may be collected: IP address, date and time of page visit, click path, information about the browser and device you use, visited pages, referrer URL (website through which you accessed our website), location data, purchase activities. Your data may be linked by Google with other data, such as your search history, personal accounts, usage data from other devices, and all other data Google has about you.
IP address is shortened by Google within EU member states or other EEA states before storage.
Processing of your personal data is based on your consent under Article 6(1)(a) GDPR. You can revoke consent at any time without affecting the lawfulness of processing based on consent until revocation.
The information generated about your use of this website is typically transmitted to a Google server in the USA and stored there. An adequacy decision by the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under TADPF and committed to complying with European data protection principles. Both Google and US government authorities have access to your data.
Further information about terms of use and privacy can be found at https://policies.google.com/technologies/partner-sites, at https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/.
VerwendungShopify analytics
We use the statistics and analysis functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") as part of contract processing. Shopify is an affiliate of Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
Data processing serves to analyze this website and its visitors. For this purpose, data is stored for marketing and optimization purposes and provided in reports, analyses, and statistics. Device information is collected and processed, including: information about web browsers, IP address, time zone, and some cookies installed on your device. As you navigate the website, information about visited web pages or products, referrer URL (website through which you accessed our website), and information about how you interact with the website is captured. Technologies such as cookies, web beacons, tags, and pixels (electronic files to capture information about how you navigate the website) are used for this.
Your data may be transferred to third countries outside the EU, particularly to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision by the EU Commission exists: the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's standard contractual clauses.
The use of cookies or similar technologies is based on your consent under Section 25(1) sentence 1 TDDDG in connection with Article 6(1)(a) GDPR. Processing of your personal data is based on your consent under Article 6(1)(a) GDPR. You can revoke consent at any time without affecting the lawfulness of processing based on consent until revocation.
You can find further information about privacy at Shopify at https://www.shopify.com/de/legal/datenschutz, Information about the data processing agreement at https://www.shopify.com/de/legal/dpa and information about cookies used at https://www.shopify.com/de/legal/cookies.
VerwendungMeta Pixel
We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.
Meta and we are joint controllers for the collection of your data and transmission of this data to Meta when the service is integrated. This is based on an agreement between us and Meta regarding joint processing of personal data, which specifies the respective responsibilities. The agreement can be accessed at https://de-de.facebook.com/legal/terms/businesstools. Under this agreement, we are particularly responsible for fulfilling information obligations under Articles 13, 14 GDPR, compliance with security requirements under Article 32 GDPR regarding correct technical implementation and configuration of the service, and compliance with obligations under Articles 33, 34 GDPR, insofar as a data breach concerns our obligations under the joint processing agreement. Meta is responsible for enabling data subject rights under Articles 15-20 GDPR, compliance with security requirements under Article 32 GDPR regarding service security, and compliance with obligations under Articles 33, 34 GDPR, insofar as a data breach concerns Meta's obligations under the joint processing agreement.
The application serves to target website visitors with interest-based advertising on the social networks Facebook and Instagram. For this purpose, Meta's remarketing tag has been implemented on the website. This tag establishes a direct connection to Meta servers when you visit the website. This transmits information about which of our pages you visited to Meta servers. Meta associates this information with your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will see personalized, interest-based ads.
The application also serves to create conversion statistics. This allows us to see the total number of users who clicked on one of our ads and were directed to a page equipped with a conversion tracking tag, as well as what actions were taken after being directed to this website. However, we do not receive information that allows users to be personally identified.
Your data may be transferred to the USA. An adequacy decision by the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under TADPF and committed to complying with European data protection principles.
Processing of your personal data is based on your consent under Article 6(1)(a) GDPR. You can revoke consent at any time without affecting the lawfulness of processing based on consent until revocation.
You can disable the "Custom Audiences" remarketing function here. Further information about data collection and use by Meta, your related rights and options for protecting your privacy can be found in Meta's privacy policy at https://www.facebook.com/about/privacy/.
VerwendungGoogle Ads Conversion Tracking
We use the online advertising program "Google Ads" and within this framework conversion tracking (visitor action evaluation) on our website. Google Conversion Tracking is an analysis service from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
When you click on a Google ad, a conversion tracking cookie is placed on your computer. These cookies have limited validity, contain no personal data, and therefore do not serve personal identification. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were directed to this page. Each Google Ads customer receives a different cookie. Thus, there is no way for cookies to be tracked across the websites of Ads customers.
The information obtained with the help of the conversion cookie serves the purpose of creating conversion statistics. This allows us to see the total number of users who clicked on one of our ads and were directed to a page equipped with a conversion tracking tag. However, we do not receive information that allows users to be personally identified.
Your data may be transferred to Google LLC servers in the USA. An adequacy decision by the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under TADPF and committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent under Section 25(1) sentence 1 TDDDG in connection with Article 6(1)(a) GDPR. Processing of your personal data is based on your consent under Article 6(1)(a) GDPR. You can revoke consent at any time without affecting the lawfulness of processing based on consent until revocation.
Further information and Google's privacy policy can be found at https://www.google.de/policies/privacy/ or https://business.safety.google/privacy/.
VerwendungGoogle AdSense
We use the AdSense function from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. Data processing serves the purpose of renting advertising space on the website and targeting website visitors with interest-based advertising on this space. Through this function, personalized, interest-based advertisements from the Google Display Network are delivered to website visitors. Google uses cookies to enable analysis of your website usage. The information generated by the cookie about your use of this website is typically transmitted to a Google server in the USA and stored there. An adequacy decision by the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under TADPF and committed to complying with European data protection principles. Google may transfer this information to third parties if required by law or if third parties process this data on behalf of Google. Google will not link your IP address with any other data from Google.
The use of cookies or similar technologies is based on your consent under Section 25(1) sentence 1 TDDDG in connection with Article 6(1)(a) GDPR. Processing of your personal data is based on your consent under Article 6(1)(a) GDPR. You can revoke consent at any time without affecting the lawfulness of processing based on consent until revocation.
Further information and Google's privacy policy can be found at https://www.google.com/policies/technologies/ads/, https://www.google.de/policies/privacy/ and https://business.safety.google/privacy/.
VerwendungPinterest Tag
We use the Pinterest Tag from Pinterest Europe Limited (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland; "Pinterest") on our website.
The application serves to target website visitors with interest-based advertising on the Pinterest social network. For this purpose, Pinterest's conversion tag has been implemented on the website. This tag establishes a direct connection to Pinterest servers when you visit the website. This transmits information about which of our pages you visited to Pinterest servers. Pinterest associates this information with your personal Pinterest user account if you are logged into the social network. When you visit Pinterest, you will see personalized, interest-based Pinterest ads.
If you access our website via a Pin on the Pinterest social network, a conversion tracking cookie is placed on your computer. These cookies have limited validity, contain no personal data, and therefore do not serve personal identification. If you visit certain pages on our website and the cookie has not yet expired, Pinterest and we can recognize that you clicked on the Pin and were directed to this page. The information obtained with the help of the conversion cookie serves the purpose of creating conversion statistics and optimizing our website. This may include processing the following information: total number of users who clicked on one of our Pins and were directed to our website, subpages visited on our website (e.g., category or product pages), search queries on our website, shopping cart contents, completed transactions.
Your data may be transferred to the USA. An adequacy decision by the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under TADPF. Data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for protection of personal data, available at https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
DieThe use of cookies or similar technologies is based on your consent under Section 25(1) sentence 1 TDDDG in connection with Article 6(1)(a) GDPR. Processing of your personal data is based on your consent under Article 6(1)(a) GDPR. You can revoke consent at any time without affecting the lawfulness of processing based on consent until revocation.
Further information about data collection and use by Pinterest, your related rights and options for protecting your privacy can be found in Pinterest's privacy policy at https://policy.pinterest.com/de/privacy-policy.
Plug-insTools and other services
Use of Google Tag Manager
We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application manages JavaScript tags and HTML tags used to implement tracking and analysis tools in particular. Data processing serves the purpose of tailored design and optimization of our website. Google Tag Manager itself does not store cookies or process personal data. However, it enables triggering of other tags that may collect and process personal data.
Further information about terms of use and privacy can be found here.
Use of hCaptcha
We use the hCaptcha service from Intuition Machines Inc. (1065 SW 8th St #704, Miami, FL 33130, USA; "hCaptcha") on our website as part of contract processing.
hCaptcha protects our website from spam and misuse through automated access (bots). By implementing hCaptcha, we ensure that certain actions on our website are only performed by real people, ensuring the security and integrity of our online services.
When using hCaptcha, the following data may be collected and processed: user's IP address, information about the device used (e.g., browser and operating system), mouse movements and interactions on the website, time spent on the website, user input behavior.
Your data may be transferred to the USA. An adequacy decision by the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). hCaptcha has certified itself under TADPF and committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent under Section 25(1) sentence 1 TDDDG in connection with Article 6(1)(a) GDPR. Processing of your personal data is based on your consent under Article 6(1)(a) GDPR. You can revoke consent at any time without affecting the lawfulness of processing based on consent until revocation.
Further information about data processing and privacy at hCaptcha can be found at https://www.hcaptcha.com/gdpr.
VerwendungYouTube videos
We use the YouTube video embedding function from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is an affiliate of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
The function displays videos stored on YouTube in an iFrame on the website. The "Enhanced Privacy Mode" option is enabled. This prevents YouTube from storing information about website visitors. Information is only transmitted to and stored by YouTube when you watch a video. Your data may be transferred to the USA. An adequacy decision by the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified itself under TADPF and committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent under Section 25(1) sentence 1 TDDDG in connection with Article 6(1)(a) GDPR. Processing of your personal data is based on your consent under Article 6(1)(a) GDPR. You can revoke consent at any time without affecting the lawfulness of processing based on consent until revocation.
Further information about data collection and use by YouTube and Google, your related rights and options for protecting your privacy can be found in YouTube's privacy policy at https://www.youtube.com/t/privacy.
VerwendungVimeo videos
We use plugins from Vimeo Inc. (555 West 18th Street, New York, New York 10011, USA; "Vimeo") on our website to embed videos from the "Vimeo" portal.
When you visit pages of our website that include such a plugin, a connection is established to Vimeo's servers and the plugin is displayed in your browser. Your IP address and information about which of our pages you visited are transmitted to Vimeo's servers.
If you are logged into Vimeo, Vimeo associates this information with your personal user account. When you use plugin functions (e.g., by starting a video by clicking the appropriate button), this information is also associated with your Vimeo account.
Your data may be transferred to the USA. An adequacy decision by the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Vimeo has certified itself under TADPF and committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent under Section 25(1) sentence 1 TDDDG in connection with Article 6(1)(a) GDPR. Processing of your personal data is based on your consent under Article 6(1)(a) GDPR. You can revoke consent at any time without affecting the lawfulness of processing based on consent until revocation.
Further information about the purpose and scope of data collection and further use and processing of data by Vimeo as well as your related rights and options for protecting your privacy can be found in Vimeo's privacy policy at https://vimeo.com/privacy.
VerwendungGoogle Fonts
We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
Data processing serves the purpose of displaying fonts uniformly on our website. To load the fonts, a connection to Google's servers is established when you visit the page. Cookies may be used for this. Your IP address and information about the browser you use are processed and transmitted to Google. This data is not linked to your Google account.
Your data may be transferred to the USA. An adequacy decision by the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under TADPF and committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent under Section 25(1) sentence 1 TDDDG in connection with Article 6(1)(a) GDPR. Processing of your personal data is based on your consent under Article 6(1)(a) GDPR. You can revoke consent at any time without affecting the lawfulness of processing based on consent until revocation.
Further information about data processing and privacy can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.
VerwendungGoogle Translate
We use the translation service from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website via API integration.
Data processing serves the purpose of displaying information provided on the website in other languages. So that the translation in your chosen language is displayed automatically, the browser you use establishes a connection to Google's servers. Cookies may be used for this. The following information may be collected and processed, among other things: IP address, URL of the visited page, date and time.
Your data may be transferred to the USA. An adequacy decision by the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under TADPF and committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent under Section 25(1) sentence 1 TDDDG in connection with Article 6(1)(a) GDPR. Processing of your personal data is based on your consent under Article 6(1)(a) GDPR. You can revoke consent at any time without affecting the lawfulness of processing based on consent until revocation.
Further information about data collection and use by Google can be found at https://www.google.com/policies/privacy/.
BetroffenenrechteDuration and storage
Duration of storage
After complete contract fulfillment, data is initially stored for the duration of the warranty period, then in consideration of legal, in particular tax and commercial retention periods, and subsequently deleted after the period expires, unless you have consented to further processing and use.
Rights of the data subject
You have the following rights under Articles 15-20 GDPR where the legal requirements are met: right to access, right to rectification, right to erasure, right to restrict processing, right to data portability.
Additionally, you have under Article 21(1) GDPR a right to object to processing based on Article 6(1)(f) GDPR, and to processing for direct marketing purposes.
Right to lodge a complaint with the supervisory authority
You have the right under Article 77 GDPR to lodge a complaint with the supervisory authority if you believe that processing of your personal data is not lawful.
You can lodge a complaint with the supervisory authority responsible for us among others at the following contact details:
Data Protection Officer and Freedom of Information, North Rhine-Westphalia, P.O. Box 20 04 44, 40102 Düsseldorf, Germany, Tel.: +49 211 384240, Fax: +49 211 38424999, E-mail: poststelle@ldi.nrw.de
Right to object
If the personal data processing listed here is based on our legitimate interest under Article 6(1)(f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, effective for the future.
After you object, processing of the affected data will cease, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or if processing serves to assert, exercise or defend legal claims.
If personal data processing is for direct marketing purposes, you can object to this processing at any time by notifying us. After you object, we will cease processing of the affected data for direct marketing purposes.









