2) Data Collection When Visiting Our Website

When you use our website solely for informational purposes—that is, if you do not register or otherwise provide us with information—we collect only the data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

- The page you visited

- Date and time of access

- Amount of data transmitted in bytes

- Source/referrer from which you accessed the page

- Browser used

- Operating system used

- IP address used (if applicable: in anonymized form)

Data processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively should there be concrete indications of unlawful use.

Please note that you can configure your browser to notify you when cookies are set, allowing you to decide on a case-by-case basis whether to accept them, or to block cookies in specific cases or generally. Each browser manages cookie settings differently. This is described in each browser’s Help menu, which explains how to change your cookie settings. You can find these for the respective browsers at the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) Contacting Us

Personal data is collected when you contact us (e.g., via the contact form or email). The specific data collected when using a contact form is indicated on the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) of the GDPR. If your contact is aimed at entering into a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. Your data will be deleted once your inquiry has been fully processed. This is the case when it is evident from the circumstances that the matter in question has been conclusively resolved and provided that no statutory retention obligations preclude this.

- UPS

If the goods are delivered by the shipping provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we will disclose your email address to UPS prior to delivery of the goods in accordance with Article 6(1)(a) of the GDPR for the purpose of coordinating a delivery date or providing a delivery notification, provided that you have given your express consent to this during the ordering process. Otherwise, for the purpose of delivery in accordance with Article 6(1)(b) of the GDPR, we will only provide UPS with the recipient’s name and the delivery address. This information is disclosed only to the extent necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with UPS in advance or to receive status updates regarding the delivery.

You may revoke your consent at any time with future effect by contacting the data controller named above or the shipping service provider UPS.

7.3 Use of Payment Service Providers (Payment Services)

- BS PAYONE

If you choose a payment method offered by the payment service provider BS PAYONE, payment processing is handled by the payment service provider BS PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt/Main, to whom we disclose the information you provided during the ordering process, along with information about your order, in accordance with Article 6(1)(b) of the GDPR. Your data is transferred exclusively for the purpose of payment processing with the payment service provider PAYONE and only to the extent necessary for this purpose.

PayPal

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—“Purchase on Account” or “Installment Payment” via PayPal, we will disclose your payment information to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). This transfer is made in accordance with Art. 6(1)(b) of the GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to conduct a credit check for the following payment methods: credit card via PayPal, direct debit via PayPal, or—if offered—“purchase on account” or “installment payment” via PayPal. For this purpose, your payment data may be shared with credit bureaus in accordance with Article 6(1)(f) of the GDPR, based on PayPal’s legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check—specifically, the statistical probability of default—to determine whether to make the respective payment method available. The credit report may contain probability values (so-called “score values”). To the extent that score values are included in the credit report’s results, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values includes, among other things but not exclusively, address data. For further information regarding data protection, including details on the credit bureaus used, please refer to PayPal’s Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

8) Use of Social Media: Social Plugins

Facebook Plugins with the Shariff Solution

Our website uses so-called social plugins (“plugins”) from the social network Facebook, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).

To enhance the protection of your data when you visit our website, these buttons are not integrated as plugins without restriction, but are embedded in the page using only an HTML link. This method of integration ensures that no connection to Facebook’s servers is established when you visit a page on our website that contains such buttons. When you click on the button, a new browser window opens and loads the Facebook page, where you can interact with the plugins there (after entering your login credentials, if necessary).

For information on the purpose and scope of data collection, as well as the further processing and use of the data by Facebook, and your related rights and settings options for protecting your privacy, please refer to Facebook’s privacy policy: https://www.facebook.com/policy.php

9) Rights of the Data Subject

9.1 Applicable data protection law grants you the following rights as a data subject (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data; please refer to the cited legal basis for the respective conditions for exercising these rights:

- Right of access pursuant to Art. 15 of the GDPR;

- Right to rectification pursuant to Art. 16 of the GDPR;

- Right to erasure pursuant to Art. 17 of the GDPR;

- Right to restriction of processing pursuant to Art. 18 of the GDPR;

- Right to be informed pursuant to Art. 19 of the GDPR;

- Right to data portability pursuant to Art. 20 of the GDPR;

- Right to withdraw consent pursuant to Article 7(3) of the GDPR;

- Right to lodge a complaint pursuant to Article 77 of the GDPR.

9.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR SPECIFIC SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THIS RIGHT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.

10) Retention Period for Personal Data

The retention period for personal data is determined based on the respective legal basis, the purpose of processing, and—where applicable—the applicable statutory retention period (e.g., retention periods under commercial and tax law).

When personal data is processed on the basis of explicit consent pursuant to Article 6(1)(a) of the GDPR, such data is retained until the data subject revokes their consent.

If statutory retention periods exist for data processed in connection with contractual or quasi-contractual obligations based on Article 6(1)(b) of the GDPR, this data is routinely deleted upon expiration of the retention periods, provided that it is no longer necessary for the performance of a contract or for entering into a contract and/or we no longer have a legitimate interest in continuing to store it.

When processing personal data on the basis of Article 6(1)(f) of the GDPR, this data is stored until the data subject exercises their right to object under Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.