Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

2. General information on data processing

We process personal data only to the extent necessary to provide our website, process orders, communicate with customers, handle payments, deliver goods and comply with legal obligations.

3. Hosting and server log files

When you access our website, the hosting provider may process technically necessary information. This may include your IP address, date and time of access, pages or files requested, browser type, operating system and referrer URL.

This processing is necessary for the secure and reliable provision of the website and is based on Art. 6(1)(f) GDPR. Our legitimate interest is the technical functionality, stability and security of our online service.

4. Orders and contract fulfilment

When you place an order through our online shop, we process the data necessary to fulfil that order. This may include your name, billing and delivery address, email address, order information and information relating to the selected payment and delivery methods.

The legal basis is Art. 6(1)(b) GDPR. Where we are required to retain data under commercial or tax law, processing is based on Art. 6(1)(c) GDPR.

5. Shopify

We use Shopify for the technical operation of our online shop. Shopify processes data required to provide commerce functions and to process orders as part of the operation of the shop.

6. Payment processing

The data required for payment processing is transmitted to the payment provider selected by you during checkout. The payment methods currently available are displayed during the checkout process. Processing is necessary for performance of the contract pursuant to Art. 6(1)(b) GDPR.

Where payment information is processed directly by a payment provider, we receive only the information required to confirm and administer the order and payment.

7. Shipping and delivery

To deliver your order, we transmit the data required for delivery, particularly your name and delivery address and, where necessary, other information required for delivery, to the shipping provider. We use DHL in particular for shipping. The legal basis is Art. 6(1)(b) GDPR.

8. Customer account

Where a customer account is offered on our website, we process the data required to create and use that account. This may include your name, email address, delivery details and order information. Processing is necessary to provide the account functions requested by you pursuant to Art. 6(1)(b) GDPR.

9. Contact

If you contact us by email, we process the information you provide in order to handle your enquiry. Where the enquiry relates to a contract or pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR. Otherwise, processing is based on our legitimate interest in responding to enquiries pursuant to Art. 6(1)(f) GDPR.

10. Technically necessary cookies

Our website uses technically necessary functionality to provide the shopping cart. In particular, a shopping-cart identifier may be stored in a cookie so that the cart can be assigned and maintained while the shop is being used.

Technically necessary cookies are not used for advertising or analytics.

11. Analytics and marketing services

We currently do not use optional analytics or marketing services on this website that are activated without the corresponding consent.

12. Retention period

We retain personal data only for as long as necessary for the relevant processing purpose or for as long as statutory retention obligations apply. Once the purpose no longer applies and statutory retention periods have expired, the data is deleted unless another legal basis permits its continued storage.

13. Recipients and service providers

Personal data may be disclosed, to the extent necessary, to service providers that support us in operating the online shop, processing payments, hosting the website and delivering orders. Data is disclosed only where necessary for the relevant purpose and permitted under applicable data-protection law.

14. Your rights

Under the GDPR, you have in particular the following rights:

• Right of access under Art. 15 GDPR
• Right to rectification under Art. 16 GDPR
• Right to erasure under Art. 17 GDPR
• Right to restriction of processing under Art. 18 GDPR
• Right to data portability under Art. 20 GDPR
• Right to object under Art. 21 GDPR
• Right to lodge a complaint with a data protection supervisory authority

15. Competent supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW) is, in particular, the supervisory authority responsible for us.