Privacy policy

The controller responsible within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:

VONMÄHLEN GmbH
Vor dem Bardowicker Tore 49
21339 Lüneburg
Germany

Phone: +49 (0) 4131 220 95 25
Email: d.stumpf@vonmaehlen.com

The data protection officer of the controller is:

D-ISO GmbH
Thomas Seßner
Hofstettener Weg 1
91154 Roth

0175/7230808
Thomas.Sessner@d-iso.com

Pursuant to Art. 13 GDPR, we inform you of the legal bases of our data processing activities. Unless the legal basis is specifically stated in the privacy notice, the following applies:
The legal basis for obtaining consent is Art. 6(1)(a) in conjunction with Art. 7 GDPR. The legal basis for processing to fulfil our services and carry out contractual measures, as well as to respond to inquiries, is Art. 6(1)(b) GDPR. The legal basis for processing to fulfil our legal obligations is Art. 6(1)(c) GDPR. Where processing of your data is necessary to safeguard a legitimate interest of our company or a third party, and where the interests, fundamental rights and freedoms of the data subject do not override that interest, Art. 6(1)(f) GDPR serves as the legal basis for processing. Should processing of personal data be necessary to protect the vital interests of the data subject or of another natural person, Art. 6(1)(d) GDPR serves as the legal basis.

We adhere to the principles of data minimisation pursuant to Art. 5(1)(c) GDPR and storage limitation pursuant to Art. 5(1)(e) GDPR. We store your personal data only for as long as necessary to achieve the purposes stated here, or as required by statutory retention periods. Once the respective purpose no longer applies or the retention periods expire, the corresponding data is deleted as promptly as possible.

Our website also incorporates tools from companies based in third countries. If these tools are active, your personal data may be transmitted to the servers of the respective companies. The level of data protection in third countries generally does not correspond to EU data protection law. This means there is a risk that your data may be passed on to authorities in those countries. We have no influence over these processing activities.

This website may contain links to third-party websites or to other websites under our responsibility. If you follow a link to a website outside our responsibility, please note that such websites have their own privacy notices. We assume no responsibility or liability for these external websites or their privacy notices. Before using such websites, please check whether you agree with their privacy policies.

External links can be recognised either by a colour that differs slightly from the surrounding text or by underlining. Your cursor will indicate an external link when you move it over such a link. Only when you click on an external link will your personal data be transmitted to the destination of the link. In doing so, the operator of the other website receives, in particular, your IP address, the time at which you clicked the link, the page on which you clicked the link, and further information which you can find in the respective provider's privacy notice. 

Please also note that individual links may lead to a transfer of data outside the European Economic Area. This could allow foreign authorities to gain access to your data. You may not have any legal remedies against such data access. If you do not want your personal data to be transmitted to the link destination, or possibly be exposed to unwanted access by foreign authorities, please do not click on any links. 

As a data subject within the meaning of the GDPR, you have the option to assert various rights. The data subject rights arising from the GDPR are the right to information (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to lodge a complaint with a supervisory authority, and the right to data portability (Article 20).

Right of withdrawal:

Some data processing operations can only take place with your express consent. You have the option to withdraw your given consent at any time. However, the lawfulness of the data processing carried out up until the withdrawal remains unaffected.

Right to object:

If processing is based on Art. 6(1)(e) or (f) GDPR, you, as a data subject, have the right to object at any time to the processing of your personal data for reasons arising from your particular situation. This right also applies to profiling based on these provisions within the meaning of Art. 4(4) GDPR. Unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims, we will cease processing your data following an objection.

If personal data is processed for the purpose of direct marketing, you also have the right to object at any time. The same applies to profiling connected with direct marketing. In this case too, we will no longer process personal data once you object.

Right to lodge a complaint with a supervisory authority:

If you believe that the processing of your personal data violates the GDPR, you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or place of the alleged infringement.

Right to data portability:

If your data is processed automatically on the basis of consent or in performance of a contract, you have the right to receive that data in a structured, commonly used and machine-readable format. You also have the right to request the transfer of that data to another controller, insofar as this is technically feasible.

Right to information, rectification and erasure:

You have the right to receive information about your processed personal data regarding the purpose of processing, the categories of data, the recipients, and the duration of storage. If you have questions on this or other topics relating to personal data, you are welcome to contact us using the contact details provided in the imprint.

Right to restriction of processing:

You may request the restriction of the processing of your personal data at any time. To do so, one of the following conditions must be met: 

• You dispute the accuracy of the personal data. For the duration of the verification of accuracy, you have the right to request a restriction of processing.
• If processing is unlawful, you may, instead of requesting erasure, request restriction of the use of the data.
• If we no longer need your personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims, you may, instead of requesting erasure, request restriction of processing.
• If you have objected to processing pursuant to Art. 21(1) GDPR, a balancing of your interests against ours will be carried out. Until that balancing has taken place, you have the right to request a restriction of processing.

A restriction of processing means that, apart from storage, personal data may only be processed with your consent or for the assertion, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a member state.

Our website is hosted by:

Shopify International Ltd.
2nd Floor 1 and 2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32
Ireland

The server location is Canada.

When you visit our website, we automatically collect and store information in so-called server log files. This information is automatically transmitted to our server, or to the server of our hosting provider, by your browser.

This includes:

• IP address of the website visitor's device
• Device used
• Host name of the accessing computer
• Visitor's operating system
• Browser type and version
• Name of the retrieved file
• Time of the server request
• Amount of data transferred
• Information on whether the retrieval of the data was successful

This data is not merged with other data sources.

Instead of operating this website on our own server, we may also have it operated on the server of an external service provider (hosting company), which we have named above where applicable. The personal data collected via this website is then stored on the hosting company's servers. In addition to the data mentioned above, the web host also stores, on our behalf, e.g. contact inquiries, contact details, names, website access data, meta and communication data, contract data, and other data generated via a website.

The legal basis for processing this data is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free presentation and optimisation of this website. If the website is accessed in order to enter into contract negotiations with us or to conclude a contract, Art. 6(1)(b) GDPR serves as an additional legal basis.  If we have engaged a hosting company, a data processing agreement exists with that service provider.

Our website uses local storage items, session storage items and/or cookies. Local storage is a mechanism that allows data to be stored within the browser on your device. This data usually contains user preferences, such as a website's "day" or "night" mode, and remains until you delete it manually. Session storage is very similar to local storage, except that the storage period only lasts for the duration of the current session, i.e. until the current tab is closed. After that, the session storage items are deleted from your device. Cookies are pieces of information that a web server (a server that provides web content) stores on your device in order to identify that device. They are either stored temporarily for the duration of a session (session cookies) and deleted after your visit to a website ends, or stored permanently (persistent cookies) on your device until you delete them yourself or they are automatically deleted by your web browser.

These objects may also be stored on your device by third-party companies when you visit our site (third-party requests). This enables us, as the operator, and you, as a visitor to this website, to make use of certain services provided by third parties installed on this website. Examples of this include the processing of payment services or the display of videos.

These mechanisms have a wide range of applications. They can improve the functionality of a website, control shopping cart functions, increase the security and convenience of website use, and enable analyses of visitor traffic and behaviour. Depending on the individual functions, they are classified differently under data protection law. If they are necessary for the operation of the website and for providing certain functions (shopping cart function), or serve to optimise the website (e.g. cookies for measuring visitor behaviour), they are used on the basis of Art. 6(1)(f) GDPR. As the website operator, we have a legitimate interest in storing local storage items, session storage items and cookies for the technically error-free and optimised provision of our services. In all other cases, local storage items, session storage items and cookies are only stored with your express consent (Art. 6(1)(a) GDPR).

Where local storage items, session storage or cookies are used by third-party companies or for analytical purposes, we inform you of this separately within this privacy notice. Your required consent is requested and can be withdrawn at any time.

External services are used on our website. External services are services provided by third-party providers that are used on our website. This may occur for various reasons, for example to embed videos or to secure the website. When these services are used, personal data is also passed on to the respective providers of these external services. If we have no legitimate interest in using these services, we obtain your consent, as a visitor to our website, before use, which can be withdrawn at any time (Art. 6(1)(a) GDPR).

To analyse user behaviour, we process the personal data of website visitors. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This allows us to improve the user-friendliness of our website. Using the analytics tools employed, for example, user profiles could be created for the delivery of targeted or interest-based advertising messages, returning website visitors could be recognised on their next visit, their click/scroll behaviour and downloads could be measured, heat maps could be created, page views could be recorded, visit duration or bounce rates could be measured, and the origin of website visitors (city, country, referring page) could be traced. Analytics tools help us improve our market research and marketing activities.

Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing does not take place in the manner described above. If you withdraw your consent (e.g. via the consent banner or other means provided on this website), we will stop this data processing. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

We use the Google Analytics service on our website. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy notices at the following URL: https://business.safety.google/privacy.

The service uses the following cookies on our website:

We use the Microsoft Clarity service on our website. The provider of the service is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.

Using the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy notices at the following URL: https://privacy.microsoft.com/de-de/privacystatement.

The service uses cookies on our website and stores data in the browser's local or session storage:

We use the Shopify Analytics service on our website. The provider of the service is Shopify International Ltd., 2nd Floor 1 and 2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland.

Using the service may result in data being transferred to a third country (Canada). The European Commission has confirmed an adequate level of data protection for this country via an adequacy decision.

Further information can be found in the provider's privacy notices at the following URL: https://www.shopify.com/legal/privacy?shpxid=1c1444d0-C70E-43BB-AD1E-BB3774A7C8C0.

The service uses the following cookies on our website:

We use the Stape service on our website. The provider of the service is Stape Inc., 8 The Green, Suite # 12892 Dover, DE 19901, USA.

Since this service is hosted locally on the web server, no data is transferred to third parties.

The service stores the following data in the browser's local or session storage:

We use review platforms to display collected reviews on our website and thereby build trust with users. The reviews collected are published on our website. When the website is accessed, a connection is established to the respective provider and data of the website visitor is transmitted. Personal data processed in this context includes, for example, the IP address.

Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing does not take place in the manner described above. If you withdraw your consent (e.g. via the consent banner or other means provided on this website), we will stop this data processing. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

We use the Judge.me service on our website. The provider of the service is Judge.me Ltd, Buckworths, 1-3 Worship Street, London EC2A 2AB, United Kingdom.

Using the service may result in data being transferred to a third country (United Kingdom). The European Commission has confirmed an adequate level of data protection for this country via an adequacy decision.

Further information can be found in the provider's privacy notices at the following URL: https://judge.me/privacy.

The service stores the following data in the browser's local or session storage:

We use a Content Delivery Network (CDN) to optimise the performance and availability of our website. To do this, the service provider operating this network processes your IP address as well as information about when you visited our website. Further information on data processing by this service provider can be found in its privacy notices.

We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).

Our legitimate interest in using a Content Delivery Network lies in being able to display our website as quickly, securely and reliably as possible.

We use the Amazon CloudFront service on our website. The provider of the service is Amazon Web Services EMEA S.à r.l., 38 Avenue John F. Kennedy L-1855, Luxembourg.

Using the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy notices at the following URL: https://aws.amazon.com/de/privacy/.

We use the Google APIs CDN service on our website. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy notices at the following URL: https://business.safety.google/privacy.

We use tools that help us optimise image content on the website. This allows us to make our website more visually appealing and easier to navigate.

Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing does not take place in the manner described above. If you withdraw your consent (e.g. via the consent banner or other means provided on this website), we will stop this data processing. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

We use the ImgIX service on our website. The provider of the service is Zebrafish Labs Inc., 423 Tehama St, San Francisco, California, 94103, USA.

Using the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy notices at the following URL: https://imgix.com/privacy.

Hosting refers to the provision of web space and the files located on it at a web host.

This involves the transmission and storage of personal data on the web host's servers. In particular, IP addresses, meta and communication data of users, as well as data on website visits, are processed. When a website visitor accesses the site, a connection is established to the web host's servers. This involves the processing of the website visitor's personal data.

We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).

Our legitimate interest lies in being able to present our website and make it available on the internet.

We use the Amazon Web Services service on our website. The provider of the service is Amazon Web Services EMEA S.à r.l., 38 Avenue John F. Kennedy L-1855, Luxembourg.

Using the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy notices at the following URL: https://aws.amazon.com/de/privacy/.

Our website uses tools that provide services related to campaigns, web analytics, and personalisation. This enables a central, cross-cutting collection of all data needed to optimise and plan digital campaigns. These services may be set and used on our website by our advertising partners in order to build a profile of your interests and show you relevant advertisements on other websites.

Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing does not take place in the manner described above. If you withdraw your consent (e.g. via the consent banner or other means provided on this website), we will stop this data processing. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

We use the Acceleration Partners service on our website. The provider of the service is Acceleration Partners Ltd, 6 Liberty Square, PMB 96813, Boston, MA 02109, USA.

Using the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy notices at the following URL: https://www.accelerationpartners.com/privacy-policy/.

We use the Bidswitch service on our website. The provider of the service is IPONWEB Limited, 4th Floor, 16 Garrick Street, Covent Garden, London, WC2E 9BA, United Kingdom.

Using the service may result in data being transferred to a third country (United Kingdom). The European Commission has confirmed an adequate level of data protection for this country via an adequacy decision.

Further information can be found in the provider's privacy notices at the following URL: https://www.iponweb.com/policies-legal/iponweb-privacy-policy/.

We use the FastBundle service on our website. The provider of the service is FastBundle, USA.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the provider's privacy notices at the following URL: https://fastbundle.co/privacyPolicy/.

We use the MediaMath service on our website. The provider of the service is MediaMath, Inc., 4 World Trade Center, 46th Floor, New York, NY 10007, USA.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the provider's privacy notices at the following URL: https://www.mediamath.com/privacy-policy/.

We use the Neory service on our website. The provider of the service is Neory GmbH, Brandschachtstraße 2, 44149 Dortmund, Germany.

Further information can be found in the provider's privacy notices at the following URL: https://www.neory.com/privacy-policy.

The service uses the following cookies on our website:

We use the PushOwl service on our website. The provider of the service is Creatorbox Softwares Private Limited, 463, Shri Krishna Temple Rd, Indira Nagar 1st Stage, Bengaluru-560038, Karnataka, India.

Since this service is hosted locally on the web server, no data is transferred to third parties.

The service stores the following data in the browser's local or session storage:

As part of our marketing, we offer you the option to subscribe to our newsletter via our website. To subscribe to the newsletter, you go through a registration process during which we verify that you are the holder of the email address provided and that you agree to receive our newsletter. The data remains with us, or with the newsletter service provider engaged by us, for the duration of your voluntary subscription until you unsubscribe from the newsletter. If you unsubscribe from the newsletter, you will be removed from the distribution list. This list is not merged with other data. Unsubscribing from the newsletter does not, however, result in the deletion of data stored for other purposes (e.g. customer accounts).

Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing does not take place in the manner described above. If you withdraw your consent (e.g. via the consent banner or other means provided on this website), we will stop this data processing. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

We use the Brevo service on our website. The provider of the service is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Further information can be found in the provider's privacy notices at the following URL: https://de.sendinblue.com/legal/privacypolicy/.

We use the Klaviyo service on our website. The provider of the service is Klaviyo, Inc., 125 Summer St, Floor 6 Boston, MA 02111, USA.

Using the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy notices at the following URL: https://www.klaviyo.com/legal/privacy-policy.

The service stores the following data in the browser's local or session storage:

The use of a project management tool enables clear planning, control and monitoring of upcoming projects. This allows us to carry out upcoming projects more efficiently and to better monitor ongoing processes. This involves the processing of personal data such as names, personnel numbers, or working time records.

Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing does not take place in the manner described above. If you withdraw your consent (e.g. via the consent banner or other means provided on this website), we will stop this data processing. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

We use the Adform Flow service on our website. The provider of the service is Adform, Silkegade 3B, ST. & 1., 1113 Copenhagen, Denmark.

Further information can be found in the provider's privacy notices at the following URL: https://site.adform.com/privacy-center/platform-privacy/product-and-services-privacy-policy/.

The service uses the following cookies on our website:

Business processes run more cost-effectively, faster and with fewer errors when automated using interfaces via software. This allows them to be efficiently integrated into company processes via our own website or via social networks. We use interface software on our website to link different applications together and to securely transfer personal data from one application to another.

Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing does not take place in the manner described above. If you withdraw your consent (e.g. via the consent banner or other means provided on this website), we will stop this data processing. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

We use the Google APIs service on our website. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy notices at the following URL: https://business.safety.google/privacy.

To make content on our website easier to find, a search engine from a third-party provider has been integrated. Integrating the search engine on the website results in the transmission of technical data, such as the IP address, to the third-party provider.

Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing does not take place in the manner described above. If you withdraw your consent (e.g. via the consent banner or other means provided on this website), we will stop this data processing. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

We use the Google service on our website. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy notices at the following URL: https://business.safety.google/privacy.

We use social media plugins to connect our website with our social media channels. Integrating these plugins is intended to make it easier for visitors to our website to follow our channels on social networks, and to share, like or comment on content. Some social media plugins allow visitors' behaviour on our website to be analysed in relation to their behaviour on social networks. The use of these plugins is intended to increase the visibility and follower count of our channels.

The plugins also process personal data and transmit data to these social networks. This transmission occurs as soon as the website is accessed. Data processed includes, for example: name, address, email address, phone number, access time, device information, IP address.

Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing does not take place in the manner described above. If you withdraw your consent (e.g. via the consent banner or other means provided on this website), we will stop this data processing. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

We use the Facebook service on our website. The provider of the service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Dublin, D02x525, Ireland.

Using the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy notices at the following URL: https://www.facebook.com/privacy/policy.

The service uses cookies on our website and stores data in the browser's local or session storage:

We use the Facebook Connect service on our website. The provider of the service is Meta Platforms Ireland Limited (Marketplace), 4 Grand Canal Square Grand Canal Harbour Dublin 2, Ireland.

Using the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy notices at the following URL: https://de-de.facebook.com/policy.php.

On our website, we use tools that protect against unauthorised access, spam or other attacks. This increases the security of our website.

We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).

Our legitimate interest lies in being able to ensure the security of our website and to protect ourselves against unauthorised access, spam and other attacks.

We use the GSI service on our website. The provider of the service is GP One GmbH, Zur Linspher 3, 35108 Allendorf, Germany.

Further information can be found in the provider's privacy notices at the following URL: https://www.gsi-one.org/de/privacy-policy.html.

The service uses the following cookies on our website:

We offer our products and/or services via our web shop. As part of the sale of products and/or services, we collect, process and use your personal data (e.g. your name, contact details, but also access times, device information or your IP address) for the handling of the purchase and payment process.

We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).

Our legitimate interest lies in the error-free presentation and optimisation of our web shop.

We use the Shopify service on our website. The provider of the service is Shopify International Ltd., 2nd Floor 1 and 2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland.

Using the service may result in data being transferred to a third country (Canada). The European Commission has confirmed an adequate level of data protection for this country via an adequacy decision.

Further information can be found in the provider's privacy notices at the following URL: https://www.shopify.com/legal/privacy?shpxid=1c1444d0-C70E-43BB-AD1E-BB3774A7C8C0.

The service uses the following cookies on our website:

Our website uses tools that facilitate or enable the placement of advertising and the evaluation of the success of ads placed. This involves the processing of personal data, in particular the IP address, access times, and device information.

Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing does not take place in the manner described above. If you withdraw your consent (e.g. via the consent banner or other means provided on this website), we will stop this data processing. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

We use the adrule service on our website. The provider of the service is adrule mobile GmbH, Feilnerstrasse 10, 10969 Berlin, Germany.

Further information can be found in the provider's privacy notices at the following URL: https://adrule.net/de/datenschutz/.

The service uses the following cookies on our website:

We use the Google Ads service on our website. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy notices at the following URL: https://business.safety.google/privacy.

We use the Google AdSense service on our website. The provider of the service is Google Ireland Limited (GV), Gordon House, Barrow Street, Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy notices at the following URL: https://business.safety.google/privacy.

The service uses the following cookies on our website:

We use the Google Double Click service on our website. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy notices at the following URL: https://business.safety.google/privacy.

The service uses the following cookies on our website:

We use the Index Exchange service on our website. The provider of the service is Index Exchange, Inc., 74 Wingold Ave, Toronto, Ontario, M6B1P5, Canada.

Using the service may result in data being transferred to a third country (Canada). The European Commission has confirmed an adequate level of data protection for this country via an adequacy decision.

Further information can be found in the provider's privacy notices at the following URL: https://www.indexexchange.com/privacy/.

The service uses the following cookies on our website:

We use the MicrosoftInvest service on our website. The provider of the service is Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.

Further information can be found in the provider's privacy notices at the following URL: https://privacy.microsoft.com/de-de/privacystatement.

The service uses the following cookies on our website:

We use the Xandr Monetize service on our website. The provider of the service is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.

Using the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy notices at the following URL: https://privacy.microsoft.com/de-de/privacystatement.

The service uses the following cookies on our website:

Some of the above-mentioned service providers are based in countries outside the European Union or the European Economic Area (in particular the USA, Canada, and the United Kingdom). If these services are active, personal data may be transmitted to servers in these countries.
For these cases, we ensure — through appropriate safeguards within the meaning of Art. 46 GDPR (e.g. standard contractual clauses, adequacy decisions such as the EU-U.S. Data Privacy Framework) — that a level of data protection comparable to that of the EU is maintained. Nevertheless, it cannot be ruled out that authorities in third countries may need to access the data without you, as the data subject, always having a level of legal protection comparable to that of the EU.

We use the affiliate and marketing network "Acceleration Partners" on our website. The provider is Acceleration Partners Ltd, 6 Liberty Square, PMB 96813, Boston, MA 02109, USA. Through this network we can run affiliate campaigns and measure their success. For this purpose, cookies and similar technologies are used which, for example, record which partner referred a user to our site and whether a purchase resulted.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. A transfer of data to the USA is possible; the safeguard mechanisms under Art. 46 GDPR apply (in particular standard contractual clauses/Data Privacy Framework). Further information can be found in Acceleration Partners' privacy notices.

We use services from Adform A/S, Silkegade 3B, ST. 1., 1113 Copenhagen, Denmark (e.g. "Adform Flow") on our website to deliver personalised advertising and measure the effectiveness of advertising campaigns. For this purpose, cookies are set that, among other things, create pseudonymous usage profiles and store information about pages visited and interactions.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Data processing takes place within the EU; in individual cases, a transfer to third countries may occur, which is safeguarded by appropriate guarantees under Art. 46 GDPR.

Our website uses advertising services from adrule mobile GmbH, Hamburg, to display and optimise online advertising. Cookies are used to analyse usage behaviour (e.g. products viewed, pages visited) and to display interest-based advertisements.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Processing takes place within the EU.

We use the Content Delivery Network "Amazon CloudFront" from Amazon Web Services EMEA S.à r.l., 38 Avenue John F. Kennedy, L-1855 Luxembourg, to deliver our website worldwide with high performance and security. In doing so, your IP address is transmitted to servers of the CDN and stored in log files.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in a fast and stable delivery of our online offerings. A transfer of data to third countries (in particular the USA) is possible and takes place on the basis of appropriate safeguards under Art. 46 GDPR.

In addition to Shopify, we use infrastructure from Amazon Web Services (AWS) to provide individual functions of our website. This involves the processing of server log files and other technical data required for the operation and security of the website.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the reliable and secure operation of the website. A transfer of data to the USA is possible; it takes place on the basis of appropriate safeguards under Art. 46 GDPR.

We use services from IPONWEB Limited ("Bidswitch"), which are involved in the programmatic trading of advertising space. Pseudonymous data on your usage behaviour is collected in order to optimise the placement of advertising in real time.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. A transfer to third countries (in particular the UK/USA) is possible and takes place on the basis of appropriate safeguards under Art. 46 GDPR.

To display special promotions and free products ("free gifts"), we may use a service such as Bounce Commerce. This involves the use of local storage entries (e.g. salePifyStoreAccessToken, tl-free-gift-local-storage) to store the status of the promotion.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR, insofar as these functions go beyond mere contract performance; additionally Art. 6(1)(b) GDPR.

Our website uses marketing functions from Meta Platforms Ireland Limited (e.g. via the "_fbp" cookie) to measure conversions and display interest-based advertising on Facebook/Instagram.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. A transfer to the USA is possible; it takes place using the safeguards employed by Meta under Art. 46 GDPR.

On our website we use the "FastBundle" service from FastBundle Inc. (USA) to display and evaluate product bundles and combined offers in the shop. Cookies may be used for this purpose, storing information about the shopping cart and products viewed.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. A transfer of data to the USA is possible; it takes place on the basis of appropriate safeguards under Art. 46 GDPR.

We use various Google marketing services such as Google Ads, Google AdSense and DoubleClick (provider: Google Ireland Limited) to serve advertisements and measure their success. For this purpose, Google sets cookies (e.g. gclid/gclau, IDE) which are used to evaluate your usage behaviour and show you interest-based advertising.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. A transfer of data to the USA is possible and takes place on the basis of the EU-U.S. Data Privacy Framework or standard contractual clauses pursuant to Art. 46 GDPR.

To secure our website, we use security services from GP One GmbH ("GSI"). This involves the use of cookies such as "AnalyseUnique" and local storage entries ("gsitrix") to detect attacks and ensure the stability of our website.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and error-free provision of our website.

To optimise and quickly deliver images, we use the ImgIX service (Zebrafish Labs Inc., USA). In doing so, your IP address is transmitted to ImgIX servers when image content is loaded.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR (where the service is integrated in a way controllable via the consent tool); otherwise Art. 6(1)(f) GDPR, with the legitimate interest lying in a performant presentation of our website.

We use the "Judge.me" service (Judge.me Ltd, London/United Kingdom) to collect and display product reviews on our website. This involves the use of local storage entries (e.g. jdgm_widget_interactions) to technically map interactions with review widgets.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in transparent product reviews); insofar as tracking takes place for marketing purposes, we base this on your consent pursuant to Art. 6(1)(a) GDPR.

We use the shop extension "Kaching" to provide certain offer and discount functions in the shop. This may involve creating local and session storage entries (e.g. kaching_session_id, kaching_visited_deal_blocks) which store information about current offers and shopping cart contents.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR, insofar as these are not strictly necessary functions; otherwise Art. 6(1)(b) GDPR (contract initiation/performance).

We use Klaviyo (Klaviyo Inc., 125 Summer St, Floor 6, Boston, MA 02111, USA) to manage newsletter subscriptions, send emails, and for marketing automation. Klaviyo uses cookies and local/session storage entries (e.g. __kl_key, __kla_viewed, klaviyoOnsite) to evaluate open and click rates as well as user behaviour, and to personalise emails.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR (newsletter registration), as well as, where applicable, Art. 6(1)(f) GDPR for statistical evaluations based on a legitimate interest in effective marketing measures. A transfer of data to the USA is possible and takes place on the basis of appropriate safeguards under Art. 46 GDPR.

We use the advertising service MediaMath Inc., 4 World Trade Center, 150 Greenwich Street, 45th floor, New York, NY 10007, USA, to serve and optimise online advertising. MediaMath uses cookies to create pseudonymous user profiles and display personalised advertisements on our website and on third-party websites.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Data processing may take place in the USA; the safeguards provided for under Art. 46 GDPR (e.g. standard contractual clauses/Data Privacy Framework) are applied.

We use advertising technologies from Microsoft/Xandr (e.g. via the domain adnxs.com) to serve interest-based advertising. Cookies are set in this process which collect pseudonymous usage data (e.g. pages viewed, ad clicks).
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. A transfer of data to the USA is possible; it takes place on the basis of appropriate safeguards under Art. 46 GDPR.

We use marketing services from Neory GmbH, Brandschachtstraße 2, 44149 Dortmund, Germany. Neory uses tracking cookies (e.g. jg2kf3qb0kis_uid, u8x7eovwf3h6_uid, ntm_tps__273) to manage campaigns and analyse user behaviour on our website.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Processing takes place within the EU.

An external returns portal ("Easyreturns" or similar) may be used to process returns. This involves the processing of data necessary for handling returns (e.g. order and contact details).
The legal basis is Art. 6(1)(b) GDPR (contract performance). Insofar as integration takes place via external service providers in third countries, this occurs using appropriate safeguards pursuant to Art. 46 GDPR.

We use the "Snitcher" service to analyse company visits to our website. Cookies and local storage entries (e.g. snitcher_device_id, snitcher_session) are used to associate visits to our website with specific company IP addresses.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Data processing takes place pseudonymously; no direct inference regarding individual persons is intended.

We use the "Stape" service (Stape Inc., USA) for the server-side transmission of tracking events (e.g. to analytics and marketing tools). For this purpose, local storage entries ("stape_events") are used in the browser, which hold event data.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. A transfer to the USA is possible; it takes place on the basis of appropriate safeguards under Art. 46 GDPR.

Klar! Insights