5) Contacting us

When you contact us (e.g., via contact form or e-mail), personal data is processed—exclusively for the purpose of handling and responding to your inquiry and only to the extent necessary for that purpose.

 

The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your contact aims to conclude a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted when the circumstances indicate that the matter in question has been conclusively resolved, provided there are no statutory retention obligations to the contrary.

 

6) Data processing for order fulfillment

6.1 To the extent necessary for contract fulfillment regarding delivery and payment, the personal data we collect is passed on to the commissioned transport company and the commissioned financial institution pursuant to Art. 6(1)(b) GDPR.

 

If we are obliged under a relevant contract to provide updates for goods with digital elements or for digital products, we process the contact details you provided during the order process in order to inform you personally, in compliance with our statutory information obligations pursuant to Art. 6(1)(c) GDPR. In this context, your contact details are used strictly for the purpose of communicating updates we are obliged to provide, and we process them for this purpose only to the extent necessary for the specific notification.

 

To process your order, we also work with the service provider(s) listed below, who assist us—in whole or in part—in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the information below.

6) Data processing for order processing

6.1 To the extent necessary for the performance of the contract regarding delivery and payment, the personal data collected by us will be passed on to the commissioned transport company and the commissioned financial institution in accordance with Art. 6 (1) (b) GDPR.

 

If we are obliged to provide you with updates for goods with digital elements or for digital products based on a corresponding contract, we will process the contact details you submitted during the order process in order to inform you personally, in compliance with our statutory information obligations pursuant to Art. 6 (1) (c) GDPR. In this context, your contact details will be used strictly for the purpose of communicating updates we are obliged to provide, and we will process them for this purpose only to the extent necessary for the specific notification.

 

To process your order, we also work with the service provider(s) listed below, who assist us—either wholly or partially—in the execution of concluded contracts. Certain personal data are transmitted to these service providers in accordance with the information below.

 

6.2 Use of payment service providers

 

– PayPal

 

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

 

If you select a payment method from this provider that requires advance payment, the payment data you provided during the ordering process (including name, address, bank and payment card details, currency, and transaction number) as well as information regarding the content of your order will be transmitted to the provider in accordance with Art. 6 (1) (b) GDPR. In this case, your data is transmitted solely for the purpose of processing the payment with the provider and only to the extent necessary for that purpose. If you select a payment method where we provide the service or goods in advance (advance performance), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, details regarding an alternative payment method).

 

To safeguard our legitimate interest in determining your creditworthiness in such cases, we forward this data to the provider for the purpose of a credit check, in accordance with Art. 6(1)(f) GDPR. Based on the personal data you have provided as well as other data (such as shopping cart contents, invoice amount, order history, and payment history), the provider assesses whether the payment method you selected can be granted, taking into account risks of non-payment or default.

 

The credit report may contain probability values ​​(so-called “score values”). Where score values ​​are included in the credit report result, they are based on a scientifically recognized mathematical-statistical method. Address data, among other factors, is included in the calculation of these score values.

 

You may object to this processing of your data at any time by notifying us or the provider. However, the provider may still be entitled to process your personal data if this is necessary for processing the payment in accordance with the contract.

 

6.3 Electronic withdrawal function for distance contracts

 

Consumers who conclude contracts on this website that are subject to a statutory right of withdrawal have the option to declare their withdrawal using an electronic withdrawal function, in accordance with the applicable withdrawal provisions.

 

When using the withdrawal function, in addition to details identifying the contract to be withdrawn, the consumer must provide or confirm further personal information, such as their first and last name and email address. The collection of this information and its transmission to us takes place in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for the proper processing of the revocation. The personal data provided is also used—based on Art. 6(1)(b) GDPR—to confirm receipt of the notice of revocation via email. A further legal basis for the processing is Art. 6(1)(c) GDPR. We are legally required to provide an electronic revocation function for consumer distance contracts involving payment.

7) Tools and Miscellaneous

Cookie Consent Tool

 

This website uses a “cookie consent tool” to obtain valid user consent for cookies and cookie-based applications that require consent. When users visit the site, the “cookie consent tool” is displayed as an interactive user interface where consent for specific cookies and/or cookie-based applications can be granted by checking the appropriate boxes. Through the use of this tool, cookies or services requiring consent are only loaded if the user has granted the corresponding consent by checking the boxes. This ensures that such cookies are only placed on the user’s device if consent has been given.

 

The tool sets technically necessary cookies to store your cookie preferences. As a general rule, no personal user data is processed in this process.

 

If, in an individual case, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in legally compliant, user-specific, and user-friendly cookie consent management—and thus in the legally compliant design of our website.

 

A further legal basis for the processing is Art. 6(1)(c) GDPR. As the data controller, we are subject to a legal obligation to make the use of cookies that are not technically necessary conditional upon user consent.

 

Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

 

Further information regarding the operator and the configuration options of the cookie consent tool can be found directly within the corresponding user interface on our website.

8) Rights of the Data Subject

8.1 Applicable data protection law grants you the following rights vis-à-vis the controller regarding the processing of your personal data (rights of access and intervention); please refer to the cited legal basis for the respective conditions for exercising these rights:

 

Right of access pursuant to Art. 15 GDPR;

Right to rectification pursuant to Art. 16 GDPR;

Right to erasure pursuant to Art. 17 GDPR;

Right to restriction of processing pursuant to Art. 18 GDPR;

Right to be informed pursuant to Art. 19 GDPR;

Right to data portability pursuant to Art. 20 GDPR;

Right to withdraw consent pursuant to Art. 7(3) GDPR;

Right to lodge a complaint pursuant to Art. 77 GDPR.

 

8.2 RIGHT TO OBJECT

 

WHERE WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTERESTS WITHIN THE SCOPE OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

 

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights, and fundamental freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

 

If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing. You may exercise this right to object as described above.

 

If you exercise your right to object, we will cease processing the data concerned for direct marketing purposes.

9) Duration of storage of personal data

The duration for which personal data is stored is determined by the respective legal basis, the purpose of processing, and—where applicable—any relevant statutory retention periods (e.g., retention periods under commercial and tax law).

 

When personal data is processed based on express consent pursuant to Art. 6(1)(a) GDPR, the data in question is stored until you revoke your consent.

 

If statutory retention periods apply to data processed in the context of contractual or quasi-contractual obligations pursuant to Art. 6(1)(b) GDPR, such data is routinely deleted after the retention periods expire, provided it is no longer required for the performance or initiation of the contract and/or we no longer have a legitimate interest in continued storage.

 

When personal data is processed based on Art. 6(1)(f) GDPR, the data is stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

 

When personal data is processed for direct marketing purposes based on Art. 6(1)(f) GDPR, the data is stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

 

Unless otherwise stated in other sections of this policy regarding specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.