Privacy Policy
1) Information on the collection of personal data and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data is all data with which you can be personally identified.
1.2 The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Fatu Rouissi, Oh Chapô, Innstrasse 50, 83022 Rosenheim, Deutschland, Tel.: 01775254513, E-Mail: info@oh-chapo.de. The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller). You can recognise an encrypted connection by the character string ‘https://’ and the lock symbol in your browser line.
2) Data collection when visiting our website
When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called ‘server log files’). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymised form)
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.
3) Hosting & content delivery network
Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (‘Shopify’), for the purpose of hosting and displaying the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of Shopify's aforementioned services, data may also be transferred to Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc, Shopify Payments (USA) Inc or Shopify (USA) Inc as part of further processing on our behalf. In the event that data is transferred to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by an adequacy decision of the European Commission. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz
Any further processing on Shopify servers other than those mentioned above will only take place within the scope specified below.
4) Cookies
We use cookies, i.e. small text files that are stored on your end device, to make visiting our website attractive and to enable the use of certain functions. Some of these cookies are automatically deleted after you close your browser (so-called ‘session cookies’), while others remain on your device for longer and allow you to save page settings (so-called ‘persistent cookies’). In the latter case, you can find the storage period in the cookie settings overview of your web browser.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be restricted.
5) Making contact
5.1 Rating reminder by Trustpilot
If you have given us your express consent to this during or after your order in accordance with Art. 6 para. 1 lit. a GDPR, we will send your email address to the Trustpilot review platform of Trustpilot A/S, Pilestræde 58, 1112 Copenhagen K, Denmark (www.trustpilot.com) so that they can send you a review reminder by email.
You can revoke your consent at any time by sending a message to the data controller or to the rating platform.
5.2 When you contact us (e.g. via contact form or email), personal data will be processed exclusively for the purpose of processing and responding to your enquiry and only to the extent necessary for this purpose. The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
6) Use of customer data for direct advertising
Registration for our e-mail newsletter
If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending newsletters, which ensures that you only receive newsletters if you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the email address provided
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. We store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data we collect when you register for the newsletter is used strictly for the intended purpose. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the controller named at the beginning. Once you have cancelled your subscription, your e-mail address will be deleted from our newsletter mailing list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
7) Data processing for order processing
7.1 Insofar as necessary for contract processing for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data (name, address, e-mail address) provided by you when placing the order in order to inform you personally by suitable means of communication (e.g. by post or e-mail) about upcoming updates within the legally prescribed period in accordance with our statutory information obligations pursuant to Art. 6 para. 1 lit. c GDPR. Your contact details will be used strictly for the purpose of notifying you of updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.
To process your order, we also work together with the following service provider(s), who support us in whole or in part in the fulfilment of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
7.2 Use of payment service providers (payment services)
- PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - ‘purchase on account’ or ‘payment by instalments’ via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter ‘PayPal’), as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - ‘purchase on account’ or ‘payment by instalments’ via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Further data protection information, including information on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be authorised to process your personal data if this is necessary for contractual payment processing.
- Shopify Payments
We use the payment service provider ‘Shopify Payments’, 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered via the payment service provider Shopify Payments, payment processing is carried out by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on your information provided during the ordering process together with the information about your order (name, address, account number, bank sort code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent that it is necessary for this purpose. You can find more information about Shopify Payments' data protection at the following Internet address: https://www.shopify.com/legal/privacy.
Data protection information on Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy
8) Online marketing
Facebook pixel for the creation of custom audiences with extended data synchronisation (with cookie consent tool)
Within our online offer, the so-called ‘Facebook pixel’ of the social network Facebook is used in the mode of extended data synchronisation, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (‘Facebook’).
On the basis of the user's express consent, when a user clicks on an advert displayed on Facebook and placed by us, Facebook Pixel adds an addendum to the URL of our linked page. This URL parameter is then written into the user's browser via a cookie after redirection, which our linked page sets itself. In addition, this cookie collects specific customer data such as the email address that we collect on our website linked to the Facebook ad during transactions such as purchases, account logins or registrations (extended data synchronisation). The cookie is then read by Facebook Pixel and enables the data, including the specific customer data, to be forwarded to Facebook.
With the help of the Facebook pixel with extended data synchronisation, Facebook is able to precisely determine the visitors to our online offer as a target group for the display of advertisements (so-called ‘Facebook ads’). Accordingly, we use the Facebook pixel with extended data synchronisation to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Facebook (so-called ‘custom audiences’). With the help of the Facebook pixel with extended data synchronisation, we also want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying. This allows us to further analyse the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called ‘conversion’). Compared to the standard version of Facebook Pixel, the extended data synchronisation function helps us to better measure the effectiveness of our advertising campaigns by recording more associated conversions.
All transmitted data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy (https://www.facebook.com/about/privacy/). The data can enable Facebook and its partners to place adverts on and off Facebook.
These processing operations are only carried out if express consent is given in accordance with Art. 6 para. 1 lit. a GDPR.
The information generated by Facebook is usually transmitted to a Facebook server and stored there; it may also be transmitted to the servers of Meta Platforms Inc. in the USA. You can revoke your consent at any time with effect for the future by deactivating this service in the ‘Cookie Consent Tool’ provided on the website.
9) Web analysis services
9.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). Google (Universal) Analytics uses so-called ‘cookies’, which are text files that are stored on your end device and enable your use of the website to be analysed. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server and stored there; it may also be transmitted to the servers of Google LLC. in the USA.
This website uses Google (Universal) Analytics exclusively with the extension ‘_anonymizeIp()’, which ensures anonymisation of the IP address by shortening it and excludes direct personal reference. This extension means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC server in the USA and truncated there. Google will use this information on our behalf to analyse your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.
Google Analytics also uses a special function, the so-called ‘demographic characteristics’, to create statistics with statements about the age, gender and interests of site visitors on the basis of an evaluation of interest-based advertising and with the use of third-party information. This allows the definition and differentiation of user groups of the website for the purpose of target group-optimised marketing measures. However, data records collected via the ‘demographic characteristics’ cannot be assigned to a specific person.
Details on the processing triggered by Google Analytics and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of Google Analytics cookies for reading information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Google Analytics will not be used during your visit to our website.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the ‘cookie consent tool’ provided on the website. We have concluded an order processing contract with Google for the use of Google Analytics, which obliges Google to protect the data of our website visitors and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de
9.2 Google (Universal) Analytics without Cookies
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
This website uses Google (Universal) Analytics exclusively without the use of cookies, which means the service does not set cookies on your device at any time. Instead, the local storage of your browser is used to store a unique ID assigned by Google (Universal) Analytics, enabling the analysis of your website usage. Certain user information is processed through this ID.
The information generated by the ID about your use of this website (including the truncated IP address) is usually transmitted to a Google server and stored there. This may involve transmission to the servers of Google LLC in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures that IP addresses are anonymized by truncation, thereby excluding direct personal identification. With this extension, your IP address is shortened by Google within member states of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google LLC server in the USA and shortened there. On our behalf, Google uses this information to evaluate your website usage, compile reports on website activities, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other Google data.
Google Analytics also enables the creation of statistics about the age, gender, and interests of website visitors through its "demographics" feature, based on evaluations of interest-based advertising and third-party information. This allows the definition and differentiation of user groups on the website to target marketing activities more effectively. However, data collected through the "demographics" feature cannot be linked to a specific individual.
Details about the data processing initiated by Google Analytics and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites.
All processing activities described above are carried out only if you have given us your express consent under Article 6(1)(a) of the GDPR. Without your consent, Google Analytics will not be used during your visit to this website.
You may revoke your consent at any time with future effect. To do so, you can download and install the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Alternatively, you can withdraw your consent within browsers on mobile devices by clicking the following link to set an opt-out cookie, which will prevent future data collection by Google Analytics on this website (this opt-out cookie works only in this browser and only for this domain. If you delete your cookies in this browser, you must click this link again):
<a onclick="alert('Google Analytics has been disabled');" href="javascript:gaOptout()">Disable Google Analytics</a>
We have entered into a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our website visitors and not share it with third parties.
For the transfer of data from the EU to the USA, Google relies on the so-called Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European data protection level in the USA.
Further information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=en&gl=en.
10) Retargeting/Remarketing/Recommendation Advertising
Google Ads Remarketing
Our website uses the features of Google Ads Remarketing to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
For this purpose, Google places a cookie in your device's browser, enabling interest-based advertising through a pseudonymous cookie ID and based on the pages you visit. Additional data processing only occurs if you have agreed with Google that your web and app browsing history is linked to your Google account and that information from your Google account is used to personalize ads you view online.
If you are logged in to Google during your visit to our website, Google uses your data in combination with Google Analytics data to create and define target audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to form target groups.
The use of Google Ads Remarketing may involve the transmission of personal data to Google LLC servers in the USA.
Details about data processing triggered by Google Ads Remarketing and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites.
You can permanently object to Google Ads Remarketing cookies by downloading and installing the browser plugin available at the following link:
https://support.google.com/ads/answer/7395996?hl=en.
Further information about advertising and Google's privacy policies can be found here:
https://www.google.com/policies/technologies/ads/.
All processing described above, especially the setting of cookies for reading information on the device used, will only be carried out if you have given your express consent under Article 6(1)(a) GDPR. You can withdraw your consent at any time with future effect by disabling this service in the "Cookie-Consent-Tool" provided on the website.
TikTok Pixel
This website uses the "TikTok Pixel," a tracking technology provided by the social network "TikTok," operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok").
Using cookies (small text files stored on your device), information about browsing behavior on our website is collected in pseudonymized form, transmitted to TikTok, stored, and analyzed. This enables interest-based and personalized product recommendations to be displayed on TikTok. The data collected and pseudonymously processed generally includes the device ID, device type, timestamp, operating system, and IP address. This information can be linked to the user's identity with additional data stored by TikTok, such as account ownership on the TikTok social network.
TikTok may combine the information collected via the Pixel with other data obtained from other websites and/or through the use of the TikTok social network, creating pseudonymized usage profiles. Under no circumstances can the collected information be used to personally identify visitors to this website.
The TikTok Pixel also allows us to measure the effectiveness of ads on TikTok. If a user is redirected to this website from a TikTok ad and the cookies have not yet expired, the Pixel tracks certain predefined user actions, such as completed transactions, leads, website searches, or product page visits. When such an action occurs, your browser sends an HTTP request from the cookie via the TikTok Pixel to TikTok's server, transmitting specific information about the action. TikTok can use this data to create statistics on user behavior on our website after being redirected from a TikTok ad, helping us optimize our offerings.
All processing described above, especially the setting of cookies for reading information on the device used, will only be carried out if you have given your express consent under Article 6(1)(a) GDPR. You can withdraw your consent at any time with future effect by disabling this service in the "Cookie-Consent-Tool" provided on the website.
We have entered into a data processing agreement with TikTok for the use of the TikTok Pixel, which obliges TikTok to protect the data of our website visitors and not share it with third parties. TikTok generally transfers collected information outside the European Economic Area and relies on the Standard Contractual Clauses of the European Commission to ensure compliance with European data protection standards.
11) Tools and Miscellaneous
Cookie-Consent-Tool
This website uses a "Cookie-Consent-Tool" to obtain valid user consents for cookies and cookie-based applications that require consent. The "Cookie-Consent-Tool" is displayed to users as an interactive user interface when the website is accessed, allowing users to grant consent for specific cookies and/or cookie-based applications by ticking checkboxes.
Through this tool, all cookies/services requiring consent are only loaded if the respective user grants consent by ticking the corresponding checkbox. This ensures that such cookies are only set on the user's device if consent is explicitly provided.
The tool uses technically necessary cookies to store your cookie preferences. Generally, personal user data is not processed during this operation.
If personal data (such as the IP address) is processed for purposes such as storing, assigning, or logging cookie settings, this processing is based on Article 6(1)(f) GDPR, reflecting our legitimate interest in legally compliant, user-specific, and user-friendly cookie consent management, and ensuring compliance with our legal obligations regarding the deployment of cookies.
Another legal basis for this processing is Article 6(1)(c) GDPR, as we are legally obligated to ensure that technically unnecessary cookies are deployed only after obtaining user consent.
Further information about the operator and settings of the Cookie-Consent-Tool can be found directly in the user interface provided on our website.
12) Rights of the Data Subject
12.1 Data Subject Rights
Under applicable data protection law, you are entitled to the following rights regarding the processing of your personal data. Each right's exercise conditions are based on the cited legal grounds:
- Right of access pursuant to Article 15 GDPR.
- Right to rectification pursuant to Article 16 GDPR.
- Right to erasure ("Right to be forgotten") pursuant to Article 17 GDPR.
- Right to restriction of processing pursuant to Article 18 GDPR.
- Right to notification pursuant to Article 19 GDPR.
- Right to data portability pursuant to Article 20 GDPR.
- Right to withdraw consent pursuant to Article 7(3) GDPR.
- Right to lodge a complaint pursuant to Article 77 GDPR.
12.2 Right to Object
If we process your personal data on the basis of a legitimate interest under a balancing of interests, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.
If you exercise your right to object, we will stop processing the affected data. However, further processing is reserved if we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing serves to establish, exercise, or defend legal claims.
If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. You can exercise the right to object as described above.
If you exercise your right to object, we will stop processing the affected data for direct marketing purposes.
13) Duration of Storage of Personal Data
The duration of the storage of personal data depends on the respective legal basis, the processing purpose, and—where applicable—statutory retention periods (e.g., commercial and tax retention periods).
When processing personal data based on explicit consent under Article 6(1)(a) GDPR, the data will be stored until the data subject withdraws their consent.
If statutory retention periods exist for data processed under Article 6(1)(b) GDPR for contractual or similar obligations, the data will be routinely deleted after the retention periods expire unless they are still necessary for contract performance or initiation, or unless we have a legitimate interest in continuing to store them.
When processing personal data under Article 6(1)(f) GDPR, the data will be stored until the data subject exercises their right to object under Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves to establish, exercise, or defend legal claims.
When processing personal data for direct marketing purposes under Article 6(1)(f) GDPR, the data will be stored until the data subject exercises their right to object under Article 21(2) GDPR.
Unless otherwise stated in specific processing situations within this declaration, stored personal data will be deleted once they are no longer necessary for their intended purpose.
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data is all data with which you can be personally identified.
1.2 The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Fatu Rouissi, Oh Chapô, Innstrasse 50, 83022 Rosenheim, Deutschland, Tel.: 01775254513, E-Mail: info@oh-chapo.de. The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller). You can recognise an encrypted connection by the character string ‘https://’ and the lock symbol in your browser line.
2) Data collection when visiting our website
When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called ‘server log files’). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymised form)
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.
3) Hosting & content delivery network
Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (‘Shopify’), for the purpose of hosting and displaying the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of Shopify's aforementioned services, data may also be transferred to Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc, Shopify Payments (USA) Inc or Shopify (USA) Inc as part of further processing on our behalf. In the event that data is transferred to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by an adequacy decision of the European Commission. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz
Any further processing on Shopify servers other than those mentioned above will only take place within the scope specified below.
4) Cookies
We use cookies, i.e. small text files that are stored on your end device, to make visiting our website attractive and to enable the use of certain functions. Some of these cookies are automatically deleted after you close your browser (so-called ‘session cookies’), while others remain on your device for longer and allow you to save page settings (so-called ‘persistent cookies’). In the latter case, you can find the storage period in the cookie settings overview of your web browser.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be restricted.
5) Making contact
5.1 Rating reminder by Trustpilot
If you have given us your express consent to this during or after your order in accordance with Art. 6 para. 1 lit. a GDPR, we will send your email address to the Trustpilot review platform of Trustpilot A/S, Pilestræde 58, 1112 Copenhagen K, Denmark (www.trustpilot.com) so that they can send you a review reminder by email.
You can revoke your consent at any time by sending a message to the data controller or to the rating platform.
5.2 When you contact us (e.g. via contact form or email), personal data will be processed exclusively for the purpose of processing and responding to your enquiry and only to the extent necessary for this purpose. The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
6) Use of customer data for direct advertising
Registration for our e-mail newsletter
If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending newsletters, which ensures that you only receive newsletters if you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the email address provided
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. We store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data we collect when you register for the newsletter is used strictly for the intended purpose. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the controller named at the beginning. Once you have cancelled your subscription, your e-mail address will be deleted from our newsletter mailing list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
7) Data processing for order processing
7.1 Insofar as necessary for contract processing for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data (name, address, e-mail address) provided by you when placing the order in order to inform you personally by suitable means of communication (e.g. by post or e-mail) about upcoming updates within the legally prescribed period in accordance with our statutory information obligations pursuant to Art. 6 para. 1 lit. c GDPR. Your contact details will be used strictly for the purpose of notifying you of updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.
To process your order, we also work together with the following service provider(s), who support us in whole or in part in the fulfilment of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
7.2 Use of payment service providers (payment services)
- PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - ‘purchase on account’ or ‘payment by instalments’ via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter ‘PayPal’), as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - ‘purchase on account’ or ‘payment by instalments’ via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Further data protection information, including information on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be authorised to process your personal data if this is necessary for contractual payment processing.
- Shopify Payments
We use the payment service provider ‘Shopify Payments’, 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered via the payment service provider Shopify Payments, payment processing is carried out by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on your information provided during the ordering process together with the information about your order (name, address, account number, bank sort code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent that it is necessary for this purpose. You can find more information about Shopify Payments' data protection at the following Internet address: https://www.shopify.com/legal/privacy.
Data protection information on Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy
8) Online marketing
Facebook pixel for the creation of custom audiences with extended data synchronisation (with cookie consent tool)
Within our online offer, the so-called ‘Facebook pixel’ of the social network Facebook is used in the mode of extended data synchronisation, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (‘Facebook’).
On the basis of the user's express consent, when a user clicks on an advert displayed on Facebook and placed by us, Facebook Pixel adds an addendum to the URL of our linked page. This URL parameter is then written into the user's browser via a cookie after redirection, which our linked page sets itself. In addition, this cookie collects specific customer data such as the email address that we collect on our website linked to the Facebook ad during transactions such as purchases, account logins or registrations (extended data synchronisation). The cookie is then read by Facebook Pixel and enables the data, including the specific customer data, to be forwarded to Facebook.
With the help of the Facebook pixel with extended data synchronisation, Facebook is able to precisely determine the visitors to our online offer as a target group for the display of advertisements (so-called ‘Facebook ads’). Accordingly, we use the Facebook pixel with extended data synchronisation to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Facebook (so-called ‘custom audiences’). With the help of the Facebook pixel with extended data synchronisation, we also want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying. This allows us to further analyse the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called ‘conversion’). Compared to the standard version of Facebook Pixel, the extended data synchronisation function helps us to better measure the effectiveness of our advertising campaigns by recording more associated conversions.
All transmitted data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy (https://www.facebook.com/about/privacy/). The data can enable Facebook and its partners to place adverts on and off Facebook.
These processing operations are only carried out if express consent is given in accordance with Art. 6 para. 1 lit. a GDPR.
The information generated by Facebook is usually transmitted to a Facebook server and stored there; it may also be transmitted to the servers of Meta Platforms Inc. in the USA. You can revoke your consent at any time with effect for the future by deactivating this service in the ‘Cookie Consent Tool’ provided on the website.
9) Web analysis services
9.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). Google (Universal) Analytics uses so-called ‘cookies’, which are text files that are stored on your end device and enable your use of the website to be analysed. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server and stored there; it may also be transmitted to the servers of Google LLC. in the USA.
This website uses Google (Universal) Analytics exclusively with the extension ‘_anonymizeIp()’, which ensures anonymisation of the IP address by shortening it and excludes direct personal reference. This extension means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC server in the USA and truncated there. Google will use this information on our behalf to analyse your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.
Google Analytics also uses a special function, the so-called ‘demographic characteristics’, to create statistics with statements about the age, gender and interests of site visitors on the basis of an evaluation of interest-based advertising and with the use of third-party information. This allows the definition and differentiation of user groups of the website for the purpose of target group-optimised marketing measures. However, data records collected via the ‘demographic characteristics’ cannot be assigned to a specific person.
Details on the processing triggered by Google Analytics and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of Google Analytics cookies for reading information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Google Analytics will not be used during your visit to our website.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the ‘cookie consent tool’ provided on the website. We have concluded an order processing contract with Google for the use of Google Analytics, which obliges Google to protect the data of our website visitors and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de
9.2 Google (Universal) Analytics without Cookies
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
This website uses Google (Universal) Analytics exclusively without the use of cookies, which means the service does not set cookies on your device at any time. Instead, the local storage of your browser is used to store a unique ID assigned by Google (Universal) Analytics, enabling the analysis of your website usage. Certain user information is processed through this ID.
The information generated by the ID about your use of this website (including the truncated IP address) is usually transmitted to a Google server and stored there. This may involve transmission to the servers of Google LLC in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures that IP addresses are anonymized by truncation, thereby excluding direct personal identification. With this extension, your IP address is shortened by Google within member states of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google LLC server in the USA and shortened there. On our behalf, Google uses this information to evaluate your website usage, compile reports on website activities, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other Google data.
Google Analytics also enables the creation of statistics about the age, gender, and interests of website visitors through its "demographics" feature, based on evaluations of interest-based advertising and third-party information. This allows the definition and differentiation of user groups on the website to target marketing activities more effectively. However, data collected through the "demographics" feature cannot be linked to a specific individual.
Details about the data processing initiated by Google Analytics and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites.
All processing activities described above are carried out only if you have given us your express consent under Article 6(1)(a) of the GDPR. Without your consent, Google Analytics will not be used during your visit to this website.
You may revoke your consent at any time with future effect. To do so, you can download and install the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Alternatively, you can withdraw your consent within browsers on mobile devices by clicking the following link to set an opt-out cookie, which will prevent future data collection by Google Analytics on this website (this opt-out cookie works only in this browser and only for this domain. If you delete your cookies in this browser, you must click this link again):
<a onclick="alert('Google Analytics has been disabled');" href="javascript:gaOptout()">Disable Google Analytics</a>
We have entered into a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our website visitors and not share it with third parties.
For the transfer of data from the EU to the USA, Google relies on the so-called Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European data protection level in the USA.
Further information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=en&gl=en.
10) Retargeting/Remarketing/Recommendation Advertising
Google Ads Remarketing
Our website uses the features of Google Ads Remarketing to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
For this purpose, Google places a cookie in your device's browser, enabling interest-based advertising through a pseudonymous cookie ID and based on the pages you visit. Additional data processing only occurs if you have agreed with Google that your web and app browsing history is linked to your Google account and that information from your Google account is used to personalize ads you view online.
If you are logged in to Google during your visit to our website, Google uses your data in combination with Google Analytics data to create and define target audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to form target groups.
The use of Google Ads Remarketing may involve the transmission of personal data to Google LLC servers in the USA.
Details about data processing triggered by Google Ads Remarketing and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites.
You can permanently object to Google Ads Remarketing cookies by downloading and installing the browser plugin available at the following link:
https://support.google.com/ads/answer/7395996?hl=en.
Further information about advertising and Google's privacy policies can be found here:
https://www.google.com/policies/technologies/ads/.
All processing described above, especially the setting of cookies for reading information on the device used, will only be carried out if you have given your express consent under Article 6(1)(a) GDPR. You can withdraw your consent at any time with future effect by disabling this service in the "Cookie-Consent-Tool" provided on the website.
TikTok Pixel
This website uses the "TikTok Pixel," a tracking technology provided by the social network "TikTok," operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok").
Using cookies (small text files stored on your device), information about browsing behavior on our website is collected in pseudonymized form, transmitted to TikTok, stored, and analyzed. This enables interest-based and personalized product recommendations to be displayed on TikTok. The data collected and pseudonymously processed generally includes the device ID, device type, timestamp, operating system, and IP address. This information can be linked to the user's identity with additional data stored by TikTok, such as account ownership on the TikTok social network.
TikTok may combine the information collected via the Pixel with other data obtained from other websites and/or through the use of the TikTok social network, creating pseudonymized usage profiles. Under no circumstances can the collected information be used to personally identify visitors to this website.
The TikTok Pixel also allows us to measure the effectiveness of ads on TikTok. If a user is redirected to this website from a TikTok ad and the cookies have not yet expired, the Pixel tracks certain predefined user actions, such as completed transactions, leads, website searches, or product page visits. When such an action occurs, your browser sends an HTTP request from the cookie via the TikTok Pixel to TikTok's server, transmitting specific information about the action. TikTok can use this data to create statistics on user behavior on our website after being redirected from a TikTok ad, helping us optimize our offerings.
All processing described above, especially the setting of cookies for reading information on the device used, will only be carried out if you have given your express consent under Article 6(1)(a) GDPR. You can withdraw your consent at any time with future effect by disabling this service in the "Cookie-Consent-Tool" provided on the website.
We have entered into a data processing agreement with TikTok for the use of the TikTok Pixel, which obliges TikTok to protect the data of our website visitors and not share it with third parties. TikTok generally transfers collected information outside the European Economic Area and relies on the Standard Contractual Clauses of the European Commission to ensure compliance with European data protection standards.
11) Tools and Miscellaneous
Cookie-Consent-Tool
This website uses a "Cookie-Consent-Tool" to obtain valid user consents for cookies and cookie-based applications that require consent. The "Cookie-Consent-Tool" is displayed to users as an interactive user interface when the website is accessed, allowing users to grant consent for specific cookies and/or cookie-based applications by ticking checkboxes.
Through this tool, all cookies/services requiring consent are only loaded if the respective user grants consent by ticking the corresponding checkbox. This ensures that such cookies are only set on the user's device if consent is explicitly provided.
The tool uses technically necessary cookies to store your cookie preferences. Generally, personal user data is not processed during this operation.
If personal data (such as the IP address) is processed for purposes such as storing, assigning, or logging cookie settings, this processing is based on Article 6(1)(f) GDPR, reflecting our legitimate interest in legally compliant, user-specific, and user-friendly cookie consent management, and ensuring compliance with our legal obligations regarding the deployment of cookies.
Another legal basis for this processing is Article 6(1)(c) GDPR, as we are legally obligated to ensure that technically unnecessary cookies are deployed only after obtaining user consent.
Further information about the operator and settings of the Cookie-Consent-Tool can be found directly in the user interface provided on our website.
12) Rights of the Data Subject
12.1 Data Subject Rights
Under applicable data protection law, you are entitled to the following rights regarding the processing of your personal data. Each right's exercise conditions are based on the cited legal grounds:
- Right of access pursuant to Article 15 GDPR.
- Right to rectification pursuant to Article 16 GDPR.
- Right to erasure ("Right to be forgotten") pursuant to Article 17 GDPR.
- Right to restriction of processing pursuant to Article 18 GDPR.
- Right to notification pursuant to Article 19 GDPR.
- Right to data portability pursuant to Article 20 GDPR.
- Right to withdraw consent pursuant to Article 7(3) GDPR.
- Right to lodge a complaint pursuant to Article 77 GDPR.
12.2 Right to Object
If we process your personal data on the basis of a legitimate interest under a balancing of interests, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.
If you exercise your right to object, we will stop processing the affected data. However, further processing is reserved if we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing serves to establish, exercise, or defend legal claims.
If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. You can exercise the right to object as described above.
If you exercise your right to object, we will stop processing the affected data for direct marketing purposes.
13) Duration of Storage of Personal Data
The duration of the storage of personal data depends on the respective legal basis, the processing purpose, and—where applicable—statutory retention periods (e.g., commercial and tax retention periods).
When processing personal data based on explicit consent under Article 6(1)(a) GDPR, the data will be stored until the data subject withdraws their consent.
If statutory retention periods exist for data processed under Article 6(1)(b) GDPR for contractual or similar obligations, the data will be routinely deleted after the retention periods expire unless they are still necessary for contract performance or initiation, or unless we have a legitimate interest in continuing to store them.
When processing personal data under Article 6(1)(f) GDPR, the data will be stored until the data subject exercises their right to object under Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves to establish, exercise, or defend legal claims.
When processing personal data for direct marketing purposes under Article 6(1)(f) GDPR, the data will be stored until the data subject exercises their right to object under Article 21(2) GDPR.
Unless otherwise stated in specific processing situations within this declaration, stored personal data will be deleted once they are no longer necessary for their intended purpose.