Privacy Policy
Tom Heinze
Sachsenhausener Straße 23A
16515 Oranienburg
Unless otherwise stated below, providing your personal data is neither legally nor contractually required and is not required for concluding a contract. You are not obliged to provide the data. Failure to provide it has no consequences, except where otherwise stated for the processing operations below. "Personal data" means any information relating to an identified or identifiable natural person.
Server Log Files
You can visit our website without providing information about yourself. Each time our website is accessed, usage data is transmitted to us or to our web host / IT service provider by your Internet browser and stored in log data, known as server log files. This stored data includes, for example, the name of the page accessed, date and time of access, IP address, amount of data transferred and requesting provider. Processing is carried out on the basis of Art. 6 (1) lit. f GDPR from our legitimate interest in ensuring trouble-free operation of our website and improving our offering.
Customer Account
When you open a customer account, we collect your personal data to the extent specified there. Data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is based on Art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of consent before withdrawal. Your customer account will then be deleted.
In addition, when a comment is submitted, your IP address is stored to prevent misuse of the comment function and to ensure the security of our information technology systems. By sending the comment, you consent to the processing of the transmitted data. Processing is based on Art. 6 (1) lit. a GDPR with your consent. You may withdraw this consent at any time by notifying us, without affecting the lawfulness of processing carried out before withdrawal. Your IP address will then be deleted.
Collection, Processing and Transfer of Personal Data for Orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and handle your inquiries. Providing this data is required for conclusion of the contract. Failure to provide it means that no contract can be concluded. Processing is based on Art. 6 (1) lit. b GDPR and is necessary for performance of a contract with you.
Your data is transferred, for example, to the shipping companies and dropshipping providers selected by you, payment service providers, order-processing service providers and IT service providers. In all cases, we strictly observe the legal requirements. The scope of data transfer is limited to the minimum necessary.
Use of Email Address for Newsletters
Independently of contract processing, we use your email address exclusively for our own advertising purposes for newsletter delivery if you have expressly consented to this. Processing is based on Art. 6 (1) lit. a GDPR with your consent. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. You can unsubscribe using the relevant link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.
Use of Email Address for Direct Advertising
We use your email address, which we received in connection with the sale of goods or services, for electronic advertising of our own goods or services similar to those you have already purchased from us, unless you have objected to this use. Providing the email address is required for concluding the contract. Processing is based on Art. 6 (1) lit. f GDPR from our legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. Contact details for exercising your objection can be found in the imprint. You may also use the link provided in the advertising email. No costs other than transmission costs at basic rates will arise.
Use of PayPal
All PayPal transactions are subject to the PayPal privacy policy, available at https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=de_DE
Payment Method: PayPal Privacy Provisions
The controller has integrated PayPal components on this website. PayPal is an online payment service provider. Payments are processed through PayPal accounts, which represent virtual private or business accounts. PayPal can also process virtual payments via credit cards when a user does not maintain a PayPal account. A PayPal account is managed via an email address, so there is no classic account number. PayPal enables online payments to third parties and receipt of payments, and also provides trustee functions and buyer protection services.
The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
If the data subject selects PayPal as the payment option during the order process in our online shop, data relating to the data subject is automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transfer of personal data required for payment processing.
Personal data transmitted to PayPal generally includes first name, last name, address, email address, IP address, telephone number, mobile phone number or other data necessary for payment processing. Personal data connected with the respective order is also necessary for processing the purchase contract.
The purpose of the data transfer is payment processing and fraud prevention. The controller will transmit personal data to PayPal in particular where a legitimate interest in the transfer exists. Personal data exchanged between PayPal and the controller may be transmitted by PayPal to credit agencies for identity and credit checks.
PayPal may disclose personal data to affiliated companies, service providers or subcontractors where this is necessary to fulfill contractual obligations or where data is to be processed on behalf of PayPal. The data subject may withdraw consent to PayPal's handling of personal data at any time. A withdrawal does not affect personal data that must be processed, used or transmitted for contractual payment processing.
The applicable PayPal privacy provisions can be accessed at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Stripe
If you choose a payment method offered through the payment service provider Stripe, payment processing is carried out via Stripe Payments Europe Ltd., C/O A&L Goodbody, IFSC, North Wall Quay, Dublin 1, Ireland. We transfer the information you provided during the order process together with information about your order, such as name, address, account number, bank code, any credit card number, invoice amount, currency and transaction number, in accordance with Art. 6 (1) lit. b GDPR. Your data is transferred exclusively for payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. More information about Stripe data protection is available at https://stripe.com/de/privacy.
SOFORT
If you select the SOFORT payment method, payment processing is carried out via SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany, to whom we transfer the information you provided during the order process together with information about your order in accordance with Art. 6 (1) lit. b GDPR. Sofort GmbH is part of Klarna Group, Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden. Your data is transferred exclusively for payment processing with SOFORT and only to the extent necessary. More information is available at https://www.klarna.com/sofort/datenschutz.
Cookies
Our website uses cookies. Cookies are small text files stored in or by the Internet browser on a user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is accessed again.
We use cookies to make our offering more user-friendly, effective and secure. Cookies also allow our systems to recognize your browser after a page change and provide services to you. Some functions of our website cannot be offered without cookies. We also use cookies to analyze the browsing behavior of our website visitors.
Processing is based on Section 15 (3) TMG and Art. 6 (1) lit. f GDPR from our legitimate interest in the purposes stated above. Data collected in this way is pseudonymized by technical measures and can no longer be assigned to you. The data is not stored together with your other personal data. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data based on Art. 6 (1) lit. f GDPR.
Cookies are stored on your computer, so you have full control over their use. By selecting the appropriate technical settings in your Internet browser, you can prevent storage of cookies and transmission of the data they contain. Cookies already stored can be deleted at any time. Please note, however, that you may then not be able to use all functions of this website in full.
Information on managing cookies in common browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=en
Internet Explorer: https://support.microsoft.com/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Use of YouTube
We use the function for embedding YouTube videos from YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube is affiliated with Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The function displays videos stored on YouTube in an iframe on the website. The enhanced privacy mode option is activated, meaning YouTube does not store information about website visitors until they watch a video. When you watch a video, information is transmitted to YouTube and stored there. Further information on the collection and use of data by YouTube and Google, your related rights and privacy protection options can be found in YouTube's privacy notices at https://www.youtube.com/t/privacy.
Facebook
The controller has integrated Facebook components on this website. Facebook is a social network, an online community that generally enables users to communicate with each other and interact in a virtual space. Facebook allows users to create private profiles, upload photos and connect through friend requests, among other functions.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller for processing personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Each time one of the individual pages of this website on which a Facebook component is integrated is accessed, the browser on the data subject's system is automatically prompted by the Facebook component to download a display of the corresponding Facebook component from Facebook. During this technical process, Facebook becomes aware of which specific subpage of our website was visited.
If the data subject is logged into Facebook at the same time, Facebook recognizes with each visit to our website and for the duration of the visit which specific subpage is being viewed. This information is collected by the Facebook component and assigned by Facebook to the data subject's Facebook account. If the data subject clicks a Facebook button or posts a comment, Facebook assigns this information to the personal Facebook user account and stores the personal data.
Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is logged into Facebook when accessing our website, regardless of whether the Facebook component is clicked. If this transfer to Facebook is not desired, it can be prevented by logging out of Facebook before visiting our website.
Facebook's published data policy, available at https://www.facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook and explains privacy settings. Applications are also available that can suppress transmission of data to Facebook.
Use of Facebook Social Media Plugins
Based on our legitimate interest in analysis, optimization and operation of our online offering within the meaning of Art. 6 (1) lit. f GDPR, this website uses Facebook social plugins operated by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. The integrations can be recognized by the Facebook logo or terms such as Like or Share in Facebook's colors. Information about Facebook plugins is available at https://developers.facebook.com/docs/plugins/.
The plugin establishes a direct connection between your browser and Facebook servers. The website operator has no influence on the nature or scope of data transmitted by the plugin to Facebook Inc. Information is available at https://www.facebook.com/help/186325668085084.
The plugin informs Facebook Inc. that you have visited this website. Your IP address may be stored. If you are logged into your Facebook account while visiting this website, the information mentioned is linked to that account. If you use the plugin functions, such as sharing or liking a post, the corresponding information is also transmitted to Facebook Inc. To prevent Facebook Inc. from linking this data to your Facebook account, please log out of Facebook before visiting this website and delete stored cookies.
Settings for advertising data processing are available in your Facebook profile at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You can also use the US opt-out page http://optout.aboutads.info/?c=2#!/ or the European opt-out page http://optout.networkadvertising.org/?c=1#!/. Details on what data Facebook collects, uses and processes, for what purpose and to what extent, and your rights and settings to protect your privacy, can be found at https://www.facebook.com/about/privacy/.
Instagram
The controller has integrated components of the Instagram service on this website. Instagram is an audiovisual platform that enables users to share photos and videos and redistribute such data in other social networks. The operating company of Instagram services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.
Each time one of the individual pages of this website on which an Instagram component is integrated is accessed, the browser on the data subject's system is automatically prompted by the Instagram component to download a display of the corresponding Instagram component. During this technical process, Instagram becomes aware of which specific subpage of our website was visited.
If the data subject is logged into Instagram at the same time, Instagram recognizes with each visit to our website and for the duration of the visit which specific subpage is being viewed. This information is collected by the Instagram component and assigned to the data subject's Instagram account. If the data subject clicks an Instagram button, the transmitted data and information are assigned to the personal Instagram user account and stored and processed by Instagram.
Instagram always receives information via the Instagram component that the data subject has visited our website if the data subject is logged into Instagram when accessing our website, regardless of whether the component is clicked. To prevent this transfer, log out of Instagram before visiting our website. Further information and Instagram's applicable privacy provisions are available at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.
Contact Form
Visitors to our website can contact us via a contact form. The information transmitted through the contact form, with mandatory information marked by an asterisk, is used exclusively to process your request. The legal bases are your consent under Art. 6 (1) lit. a GDPR and Art. 6 (1) lit. f GDPR. Proper processing of your request is a legitimate interest within the meaning of the GDPR. If your contact relates to a contractual relationship, Art. 6 (1) lit. b GDPR is also the legal basis for data processing. You may withdraw your consent at any time with effect for the future free of charge by sending a short message to the contact details given above. The lawfulness of processing based on your consent before withdrawal remains unaffected. From the time of any withdrawal, processing your request may no longer be possible. Unless consent is withdrawn, data relating to your inquiry will be deleted after your request has been processed.
Data Security
All personal data you transmit, including payment data, is transmitted using the generally accepted secure SSL (Secure Socket Layer) standard. SSL is a secure and proven standard also used in online banking, for example. You can recognize a secure SSL connection by the appended s in http, meaning https://, in your browser's address bar or by the lock symbol in your browser. We also use suitable technical and organizational security measures to protect personal data stored by us against manipulation, partial or complete loss and unauthorized access by third parties.
SSL or TLS Encryption
For security reasons and to protect transmission of confidential content, such as orders or inquiries you send to us as site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection when the browser address line changes from "http://" to "https://" and by the lock symbol in your browser line. When SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.
Storage Period
After complete contract processing, data is initially stored for the duration of the warranty period, then stored in accordance with statutory retention periods, especially tax and commercial law retention periods, and deleted after expiry of those periods unless you have consented to further processing and use.
Rights of the Data Subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: right of access, rectification, erasure, restriction of processing and data portability. You also have a right to object under Art. 21 (1) GDPR to processing based on Art. 6 (1) lit. f GDPR and to processing for direct advertising purposes.
Please contact us if you wish. Contact details can be found in our imprint.
Right to lodge a complaint with the supervisory authority
Under Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that your personal data is being processed unlawfully.
Right to Object
Where the personal data processing listed here is based on our legitimate interest under Art. 6 (1) lit. f GDPR, you have the right, on grounds relating to your particular situation, to object to this processing at any time with effect for the future. After an objection, processing of the relevant data will stop unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or processing serves the establishment, exercise or defense of legal claims.
If personal data is processed for direct advertising purposes, you may object to this processing at any time by notifying us. After objection, we will stop processing the relevant data for direct advertising purposes.
Last updated: 01/04/2019