Privacy

You can revoke your consent for the future by making a change to your selection in the cookie settings HERE. For the past, the legality of the processing carried out on the basis of the consent remains intact. Alternatively, you can prevent the storage of cookies by installing the browser add-on to deactivate Google Analytics or by rejecting cookies via the cookie settings dialog. However, rejecting all cookies may restrict the functionality of our website. You can find more information on the terms of use of Google Analytics and on data protection at Google at https://marketingplatform.google.com/about/analytics/terms/de/ and at
https://policies.google.com/?hl=de. 

We also use a service called Google ReCAPTCHA from "Google" on our website. "Google" is a group of companies consisting of Google Ireland Ltd (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC. The use of Google ReCAPTCHA is intended to prevent machines, computer programs or malware (usually bots) from accessing our website in order to participate in registrations or comment functions. Further information on Google ReCAPTCHA can be found in Google's privacy policy. Please note that due to American laws, American authorities could possibly gain access to personal data that is inevitably exchanged with Google due to the Internet protocol when this service is integrated. 

We also use Google Fonts on our website. These are Google fonts from Google Inc. that are made available to users free of charge - the controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Fonts enables us to use web-optimized fonts on our website, which we do not have to upload to our own server beforehand. This ensures a uniform and attractive display on different devices. When you visit our website, the corresponding fonts are loaded via a Google server. With the request for reloading, data is transmitted to the Google server - Google recognizes that your IP address is visiting the website. Google Fonts stores CSS and font requests with Google. Google stores requests for CSS assets for one day on its servers, most of which are located outside the EU. This allows the fonts to be used with the help of a Google stylesheet (a format template that can be used to easily change the design or font of a website, for example). The fonts files are stored by Google for one year in order to improve the loading time of the website. 

With every Google Fonts request, information such as IP address, language settings, browser name, browser version and screen resolution of the browser are automatically transmitted to the Google servers. Unfortunately, Google does not clearly communicate whether this data is stored. The data that Google stores for one day or one year cannot simply be deleted because the data is automatically transmitted to Google when the page is accessed. To request deletion of the data before the end of storage, please contact Google support at https://support.google.com/?hl=de&tid=231717121089. In this case, you can only prevent data storage if you do not visit our website. If you give your consent to the use of Google Fonts, this forms the legal basis for data processing within the meaning of Art. 6 para. 1 lit. a GDPR. Our legitimate interest lies in optimizing the functionality of our website (Art. 6 para. 1 lit. f GDPR). 

For more information on data processing at Google Fonts, visit
https://www.google.com/intl/de/policies/privacy/ and
https://developers.google.com/fonts/faq?tid=231717121089.
Unfortunately, Google does not provide any detailed information on data storage there. Please note that due to American laws, American authorities could possibly gain access to personal data that is inevitably exchanged with Google due to the Internet Protocol when this service is integrated. 

Our website enables the processing of payment transactions in the online store via the payment service provider "PayPal" (Paypal Europe S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). When you use this payment method, we pass on the following data to PayPal, insofar as this is necessary for the respective fulfillment of the contract: Name of the cardholder, e-mail address, telephone number, customer number, order number, payment method (i.e. credit card, debit card or account number including bank sort code), in each case with validity period and any verification number, your billing or alternative delivery address and, in some cases, your transaction history. This data is required for authentication purposes without being required by law or contract. However, payment via PayPal cannot be carried out without the transmission of your personal data. The alternative is to select a different payment method. The processing is necessary for the performance of a contract to which you are a party (see Art. 6 para. 1 lit. b GDPR). The use of the service also requires your consent (Art. 6 para. 1 lit. a GDPR), insofar as the use of cookies is necessary. The data collected will be stored until the completion of payment processing, which also includes the necessary period for processing refunds, collections and fraud prevention.

If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, Trusted Shops widgets are integrated on this website to display the Trusted Shops services (e.g. seal of approval, collected reviews) and to offer Trusted Shops products to buyers after an order. The Trustbadge and the services advertised with it are an offer from Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops"), with whom we are jointly responsible under data protection law in accordance with Art. 26 GDPR. In the context of this data protection information, we inform you below about the essential contents of the contract in accordance with Art. 26 para. 2 GDPR. 
Within the framework of the joint responsibility existing between us and Trusted Shops, please contact Trusted Shops in the event of data protection issues and to assert your rights using the contact options provided in the data protection information. Irrespective of this, you can always contact the controller of your choice. If necessary, your request will then be forwarded to the other responsible party for answering. 

1. data processing when integrating the Trustbadge / other widgets 
The trust badge is provided by a US CDN provider (content delivery network). An adequate level of data protection is ensured in each case by an adequacy decision of the EU Commission, which can be accessed here for the USA. Service providers used from the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information can be found here. If the service providers used are not certified under the DPF, standard contractual clauses have been concluded as a suitable guarantee. When the Trustbadge is accessed, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data) and documents the access. The IP address is anonymized immediately after collection so that the stored data cannot be assigned to your person. The anonymized data is used in particular for statistical purposes and for error analysis. 

2. data processing after order completion
If you have given your consent, the Trustbadge accesses the order information stored in your end device (order total, order number, product purchased if applicable) and e-mail address after the order has been completed and your e-mail address is hashed using a cryptological one-way function. The hash value is then transmitted to Trusted Shops with the order information in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. This serves to check whether you are already registered for Trusted Shops services. If this is the case, further processing will take place in accordance with the contractual agreement concluded between you and Trusted Shops. If you are not yet registered for the services or do not give your consent to automatic recognition via the Trustbadge, you will then be given the opportunity to register manually for the use of the services or to complete the protection as part of your existing user contract.

For this purpose, the Trustbadge accesses the following information, which is stored in the end device you are using, after you have completed your order: Order total, order number and e-mail address. This is necessary so that we can offer you buyer protection. The data will only be transmitted to Trusted Shops if you actively decide to take out buyer protection by clicking on the correspondingly labeled button in the so-called Trustcard. If you decide to use the services, the further processing is based on the contractual agreement with Trusted Shops in accordance with Art. 6 para. 1 lit. b GDPR in order to complete your registration for buyer protection and to secure the order and, if necessary, to be able to send you evaluation invitations by e-mail afterwards.