Privacy policy

1) Introduction and Contact Details of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data means any data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Abraham Mukalazi Kiwanuka, Legatum Noctis, Zeller Weg 4, 36304 Alsfeld, Germany, Tel.: 0173 5790249, Email: contact@legatumnoctis.com. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the page server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Website visited
Date and time of access
Amount of data sent in bytes
Source/referrer from which you accessed the page
Browser used
Operating system used
IP address used (where applicable, in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or otherwise used. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the padlock symbol in your browser bar.

3) Hosting & Content Delivery Network

3.1 Framer

For hosting our website and displaying its content, we use the system of the following provider: Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands.

All data collected on our website is processed on the provider’s servers.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

As part of the aforementioned services, data may also be transferred to Framer Inc. in the USA for further processing on our behalf.

For the transfer of data to the USA, the provider relies on the European Commission’s Standard Contractual Clauses, which are intended to ensure compliance with European data protection standards.

3.2 Shopify

For hosting our website and displaying its content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

All data collected on our website is processed on the provider’s servers. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your device for a longer period and allow page settings to be stored (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of the cookie settings of your web browser.

If individual cookies used by us also process personal data, processing is carried out in accordance with Art. 6(1)(b) GDPR either for the performance of the contract, in accordance with Art. 6(1)(a) GDPR where consent has been given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and in a customer-friendly and effective design of the website visit.

You can configure your browser to inform you when cookies are being set and to decide individually whether to accept them, or to generally exclude the acceptance of cookies or exclude them in specific cases.

Please note that refusing cookies may restrict the functionality of our website.

5) Contacting Us

5.1 Loox

For review reminders, we use the services of the following provider: Loox Online Ltd., Rehov Har Sinai 2, 6581602 Tel Aviv-Yafo, Israel.

Solely on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR, we transmit your email address and, where applicable, additional customer data to the provider so that it can contact you by email with a review reminder.

You may withdraw your consent at any time with effect for the future, either by contacting us or the provider.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

5.2 Google Calendar

For providing an online appointment booking function, we use the services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transferred to: Google LLC, USA.

For the purpose of scheduling appointments, first and last name and email address (and, where applicable, telephone number if a telephone appointment is requested) are collected pursuant to Art. 6(1)(b) GDPR and, pursuant to Art. 6(1)(f) GDPR, transferred to the provider on the basis of our legitimate interest in effective customer management and efficient appointment administration, where they are stored for appointment organization.

After the appointment has taken place or after the agreed appointment period has expired, your data will be deleted by the provider.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with European data protection standards.

5.3 WhatsApp Business

You have the option of contacting us via the WhatsApp messaging service operated by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called “Business Version” of WhatsApp.

If you contact us via WhatsApp in connection with a specific transaction (for example, an order you have placed), we store and use the mobile phone number you use for WhatsApp and, if provided, your first and last name pursuant to Art. 6(1)(b) GDPR to process and respond to your request. On the same legal basis, we may ask you via WhatsApp to provide additional data (order number, customer number, address, or email address) in order to assign your inquiry to a specific transaction.

If you use our WhatsApp contact for general inquiries (e.g. regarding our range of services, availability, or our website), we store and use the mobile phone number you use for WhatsApp and, if provided, your first and last name pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in providing the requested information efficiently and promptly.

Your data will only be used to respond to your request via WhatsApp. It will not be disclosed to third parties.

Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server operated by the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact details of users who have also contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, when first using the app on their device, to the transfer of their WhatsApp telephone number from the address books of their chat contacts pursuant to Art. 6(1)(a) GDPR by accepting WhatsApp’s Terms of Service. The transfer of data relating to users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

For information regarding the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your related rights and privacy settings, please refer to WhatsApp’s privacy information: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.

As part of the processing described above, data may be transferred to servers operated by Meta Platforms Inc. in the USA.

5.4 When contacting us (e.g. via contact form or email), personal data is processed solely for the purpose of processing and responding to your inquiry and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

6) Data Processing When Opening a Customer Account

Pursuant to Art. 6(1)(b) GDPR, personal data shall continue to be collected and processed to the extent necessary when you provide it to us when opening a customer account. The data required to open an account can be found in the input form provided on our website.

You may delete your customer account at any time by sending a message to the controller at the address stated above. After deletion of your customer account, your data will be deleted provided that all contracts concluded through the account have been fully processed, there are no statutory retention periods to the contrary, and we have no legitimate interest in retaining the data.

7) Use of Customer Data for Direct Advertising

7.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send the newsletter is your email address. Providing additional information is voluntary and is used to address you personally.

For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive newsletters after expressly confirming your consent to receive newsletters by clicking a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. In this context, we store the IP address assigned by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you subscribe to the newsletter is used strictly for the specified purpose.

You may unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this to the extent permitted by law and about which we inform you in this privacy policy.

7.2 Kit

Our email newsletters are sent via the following provider: Kit, Inc., 750 W Bannock Street 761, Boise, ID 83702, USA.

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we transmit the data you provided when subscribing to the newsletter to this provider pursuant to Art. 6(1)(f) GDPR so that the provider can send the newsletter on our behalf.

Subject to your express consent pursuant to Art. 6(1)(a) GDPR, the provider also performs statistical analysis of newsletter campaigns using web beacons or tracking pixels contained in the emails sent, which can measure open rates and specific interactions with newsletter content. Device information (e.g. time of access, IP address, browser type, and operating system) is also collected and analyzed but is not combined with other data sets.

You may withdraw your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits unauthorized disclosure to third parties.

7.3 Klaviyo

Our email newsletters and other promotional email communications are sent via the following provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA.

On the basis of our legitimate interest in effective and user-friendly email marketing, we transmit the data you provided when subscribing to this provider pursuant to Art. 6(1)(f) GDPR so that the provider can send emails on our behalf.

Subject to your express consent pursuant to Art. 6(1)(a) GDPR, the provider also performs statistical analysis of email campaigns using web beacons or tracking pixels contained in the emails sent, which can measure open rates and specific interactions with newsletter content. Device information (e.g. time of access, IP address, browser type, and operating system) is also collected and analyzed but is not combined with other data sets.

You may withdraw your consent to email tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits unauthorized disclosure to third parties.

7.4 Shopify Email

Our email newsletters are sent via the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we transmit the data you provided when subscribing to this provider pursuant to Art. 6(1)(f) GDPR so that the provider can send the newsletter on our behalf.

You may withdraw your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits unauthorized disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

7.5 Email Notifications When Products Become Available

For temporarily unavailable items, you can subscribe to receive email notifications when the relevant product becomes available. We will send you a one-time email notifying you of the availability of the selected item.

The only mandatory information required to send this notification is your email address. Providing additional information is voluntary and may be used to address you personally.

For sending the email, we use the so-called double opt-in procedure, which ensures that you only receive a notification after expressly confirming your consent by clicking a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. In this context, we store the IP address assigned by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data collected when subscribing to our product-availability notification service is used strictly for the specified purpose.

You may unsubscribe from availability notifications at any time by sending a corresponding message to the controller named above. After unsubscribing, your email address will be immediately deleted from the distribution list established for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this to the extent permitted by law and about which we inform you in this privacy policy.

7.6 Abandoned Cart Email Reminders

If you abandon your purchase before completing the order, you have the option of receiving a one-time email reminder about the contents of your virtual shopping cart.

The only mandatory information required to send this reminder is your email address. Providing additional information is voluntary and may be used to address you personally.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR for sending an abandoned-cart reminder. In this context, we store the IP address assigned by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data collected when subscribing to our email notification service is used strictly for the specified purpose.

You may unsubscribe from abandoned-cart reminders at any time by sending a corresponding message to the controller named above. After unsubscribing, your email address will be immediately deleted from the distribution list established for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this to the extent permitted by law and about which we inform you in this privacy policy.

8) Data Processing for Order Processing

8.1 To the extent necessary for the processing of contracts for delivery and payment purposes, the personal data collected by us shall be transferred pursuant to Art. 6(1)(b) GDPR to the commissioned transport company and the commissioned financial institution.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided when placing your order in order to personally inform you of such updates as part of our statutory information obligations pursuant to Art. 6(1)(c) GDPR. Your contact details are used strictly for the purpose of informing you about updates owed by us and are processed only to the extent necessary for the respective notification.

For the processing of your order, we also work with the following service provider(s), who support us in whole or in part in carrying out concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the information below.

8.2 Use of Payment Service Providers

Apple Pay

If you choose the “Apple Pay” payment method provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing takes place via the “Apple Pay” function of your device running iOS, watchOS, or macOS by charging a payment card stored in Apple Pay.

Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. Authorization of a payment therefore requires the entry of a code previously defined by you and verification using the “Face ID” or “Touch ID” function of your device.

For payment processing, the information you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay for payment processing.

The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your Device Account Number and a transaction-specific dynamic security code to the originating website to confirm successful payment.

Where personal data is processed in connection with the transfers described above, such processing is carried out solely for payment processing purposes pursuant to Art. 6(1)(b) GDPR.

Apple retains anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was successfully completed. The anonymization completely prevents the data from being associated with an individual. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.

If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made via Safari on your Mac, the Mac and the authorization device communicate via an encrypted channel on Apple’s servers. Apple does not process or store this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in the settings of your iPhone. Go to “Wallet & Apple Pay” and disable “Allow Payments on Mac.”

Further information on data protection with Apple Pay can be found at: https://support.apple.com/de-de/HT203027

Google Pay

If you choose the “Google Pay” payment method provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), payment processing takes place via the “Google Pay” application on your mobile device running at least Android 4.4 (“KitKat”) and equipped with NFC functionality by charging a payment card stored in Google Pay or a verified payment system stored there (e.g. PayPal).

To authorize a Google Pay payment exceeding €25, you must first unlock your mobile device using the verification method configured on it (e.g. facial recognition, password, fingerprint, or pattern).

For payment processing, the information you provide during the ordering process, together with information about your order, is transmitted to Google. Google then transmits the payment information stored in Google Pay to the originating website in the form of a one-time transaction number, which is used to verify that payment has been made.

This transaction number does not contain any information about the actual payment details of the payment method stored in Google Pay. Instead, it is generated and transmitted as a one-time numerical token. In all transactions via Google Pay, Google acts solely as an intermediary for processing the payment. The transaction itself takes place exclusively between the user and the originating website by charging the payment method stored in Google Pay.

Where personal data is processed in connection with the transfers described above, such processing is carried out solely for payment processing purposes pursuant to Art. 6(1)(b) GDPR.

Google reserves the right to collect, store, and evaluate certain transaction-specific information for every transaction made via Google Pay. This includes the date, time, and amount of the transaction; merchant location and description; a description of the goods or services purchased provided by the merchant; photographs attached to the transaction; the name and email address of the seller and buyer or sender and recipient; the payment method used; your description of the reason for the transaction; and, where applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively pursuant to Art. 6(1)(f) GDPR on the basis of its legitimate interest in proper accounting, verification of transaction data, and optimization and maintenance of the Google Pay service.

Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when you use other Google services.

The Google Pay Terms of Service can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

Further information on data protection with Google Pay can be found at:

https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

Klarna

One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If you select a payment method offered by the provider where you pay in advance (e.g. credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) and information about the contents of your order shall be transmitted pursuant to Art. 6(1)(b) GDPR.

In this case, your data is transmitted solely for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

If you select a payment method where the provider pays in advance (e.g. purchase on account, installment purchase, or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, where applicable, information regarding an alternative payment method).

In order to safeguard our legitimate interest in determining the creditworthiness of our customers, we transmit this data to the provider for the purpose of a credit assessment pursuant to Art. 6(1)(f) GDPR.

The provider assesses, on the basis of the personal data you provide and other data (such as shopping cart contents, invoice amount, order history, and payment experience), whether the selected payment method can be granted with regard to payment and/or default risks.

In addition to the provider’s internal criteria, identity and creditworthiness information from the following credit agencies may be included in the decision pursuant to Art. 6(1)(f) GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called “score values”). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other information, is included in the calculation of score values.

You may object to this processing of your data at any time by notifying us or the provider. However, the provider may continue to be entitled to process your personal data if this is necessary for contractual payment processing.

Mollie

One or more online payment methods from the following provider are available on this website: Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands.

In this case, your data is transmitted solely for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

PayPal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you select a payment method offered by the provider where you pay in advance, your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) and information about the contents of your order shall be transmitted pursuant to Art. 6(1)(b) GDPR.

In this case, your data is transmitted solely for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

If you select a payment method where we pay in advance, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, where applicable, information regarding an alternative payment method).

In such cases, in order to safeguard our legitimate interest in determining your creditworthiness, we transmit this data to the provider for the purpose of a credit assessment pursuant to Art. 6(1)(f) GDPR.

Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

In this case, your data is transmitted solely for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

Stripe

One or more online payment methods from the following provider are available on this website: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

If you select a payment method offered by the provider, your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) and information about the contents of your order shall be transmitted pursuant to Art. 6(1)(b) GDPR.

In this case, your data is transmitted solely for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

9) Web Analytics Services

9.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables us to analyze your use of our website.

By default, Google Analytics 4 sets cookies when you visit the website. These are small text files stored on your device that collect certain information. This information also includes your IP address, which is shortened by Google by the last digits in order to prevent direct identification of individuals.

The information is transmitted to Google servers and processed there. This may also involve transfers to Google LLC in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide other services related to website and Internet usage. The shortened IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. Data collected as part of the use of Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, particularly the setting of cookies on the device used, takes place only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR.

Without your consent, Google Analytics 4 will not be used during your visit to our website. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further legal information regarding Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de, and https://policies.google.com/technologies/partner-sites.

Demographic Characteristics

Google Analytics 4 uses the special “demographic characteristics” function and can generate statistics regarding the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third parties. This allows target groups to be identified for marketing activities. However, the collected data cannot be attributed to a specific person and is deleted after being stored for a period of two months.

Google Signals

As an extension of Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized advertising and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including models concerning cross-device conversions.

We do not receive personal data from Google, but only statistics. If you wish to stop cross-device analysis, you can disable the “Personalized Advertising” function in your Google account settings. Follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de

Further information about Google Signals can be found at: https://support.google.com/analytics/answer/7532985?hl=de

User IDs

As an extension of Google Analytics 4, the “User IDs” function may be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6(1)(a) GDPR, have created an account on this website, and log in to this account on different devices, your activities, including conversions, may be analyzed across devices.

9.2 Google Tag Manager

This website uses “Google Tag Manager”, a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).

Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analytics services, and calibrating, controlling, and linking them to conditions via a unified user interface.

Google Tag Manager itself does not store information on users’ devices or read such information. The service also does not independently perform data analyses. However, when a page is accessed, Google Tag Manager transmits your IP address to Google, where it may be stored. Data may also be transferred to servers operated by Google LLC in the USA.

This processing only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without such consent, Google Tag Manager will not be used during your visit to our website. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further legal information regarding Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de.

10) Retargeting/Remarketing and Conversion Tracking

Meta Pixel with Advanced Matching

Within our online offering, we use the “Meta Pixel” service with Advanced Matching provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”).

If a user clicks on an advertisement placed by us on Facebook or Instagram, the URL of our linked page is supplemented with a parameter using the “Meta Pixel”. After the user is redirected, this URL parameter is then entered into the user’s browser by a cookie set by our linked page itself.

In addition, this cookie collects specific customer data, such as the email address, which we collect on the website linked to the Facebook or Instagram advertisement during processes such as purchases, account registrations, or other registrations (Advanced Matching). The cookie is then read and enables the transmission of the data, including the specific customer data, to Meta.

We use “Meta Pixel” with Advanced Matching to make our advertisements (“Ads”) on Facebook and/or Instagram more effective and to ensure that they correspond to users’ interests or exhibit certain characteristics (e.g. interests in specific topics or products determined on the basis of the websites visited) that we transmit to Meta (so-called “Custom Audiences”).

We also analyze the effectiveness of our advertisements by tracking whether users are redirected to our website after clicking an advertisement (conversion). Compared with the standard version of “Meta Pixel”, the Advanced Matching function helps us measure the effectiveness of our advertising campaigns more accurately by recording more attributed conversions.

All data transmitted is stored and processed by Meta, allowing it to be associated with the respective user profile, and Meta may use the data for its own advertising purposes in accordance with Meta’s data usage policies (https://www.facebook.com/about/privacy/). The data may enable Meta and its partners to display advertisements on and outside Facebook.

All processing described above, particularly the setting of cookies to read information on the device used, only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

The information generated by Meta is generally transmitted to and stored on a Meta server. In this context, data may also be transferred to servers operated by Meta Platforms Inc. in the USA.

11) Website Functionalities

11.1 Facebook Plugins

Our website uses plugins from the social network operated by the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins enable direct interaction with content on the social network.

To increase the protection of your data when visiting our website, the plugins are initially disabled and integrated into the website using a so-called “2-click” or “Shariff” solution.

This integration ensures that when you access a page of our website containing such plugins, no connection is initially established with the provider’s servers.

Only when you activate the plugins and thereby give your consent to the transfer of data pursuant to Art. 6(1)(a) GDPR does your browser establish a direct connection with the provider’s servers. Regardless of whether you are logged into an existing user profile, certain information about your device (including your IP address), your browser, and your browsing history is transmitted to the provider and may be further processed there.

If you are logged into an existing user profile on the provider’s social network, information about interactions carried out via the plugins may also be published there and displayed to your contacts.

You may withdraw your consent at any time by clicking the activated plugin again to deactivate it. However, withdrawal does not affect data that has already been transmitted to the provider.

Data may also be transferred to: Meta Platforms Inc., USA.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

11.2 Instagram Plugins

Our website uses plugins from the social network operated by the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins enable direct interaction with content on the social network.

To increase the protection of your data when visiting our website, the plugins are initially disabled and integrated into the website using a so-called “2-click” or “Shariff” solution.

This integration ensures that when you access a page of our website containing such plugins, no connection is initially established with the provider’s servers.

You may withdraw your consent at any time by clicking the activated plugin again to deactivate it. However, withdrawal does not affect data that has already been transmitted to the provider.

Data may also be transferred to: Meta Platforms Inc., USA.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

11.3 Loox Widget

Our website incorporates graphic elements from the following provider for displaying external customer reviews: Loox Online Ltd., Rehov Har Sinai 2, 6581602 Tel Aviv-Yafo, Israel.

When you access a page of our website containing such graphic elements, your browser establishes a direct connection to the provider’s servers in order to load the elements properly. Certain browser information, including your IP address, is transmitted to the provider.

If personal data is also processed in this context, processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in optimally marketing our offering and designing our website in an appealing manner.

For data transfers to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

11.4 Google Meet

For conducting online meetings, video conferences, and/or webinars, we use the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transferred to servers operated by Google LLC in the USA.

The provider processes various types of data, with the scope of the processed data depending on what information you provide before or during participation in an online meeting, video conference, or webinar. Your data as a communication participant is processed and stored on the provider’s servers. This may include, in particular, your registration data (name, email address, telephone number (optional), and password) and session data (topic, participant IP address, device information, description (optional)).

In addition, participants’ video and audio contributions as well as voice inputs in chats may be processed.

For the processing of personal data necessary for the performance of a contract with you (this also applies to processing operations necessary to carry out pre-contractual measures), Art. 6(1)(b) GDPR serves as the legal basis. Where you have given us consent to process your data, processing is based on Art. 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future.

Otherwise, the legal basis for data processing when conducting online meetings, video conferences, or webinars is our legitimate interest pursuant to Art. 6(1)(f) GDPR in effectively conducting the online meeting, webinar, or video conference.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further information regarding Google’s data protection provisions can be found at: https://business.safety.google/intl/de/privacy/

11.5 Zoom

For conducting online meetings, video conferences, and/or webinars, we use the following provider: Zoom Video Communications Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA.

In addition, participants’ video and audio contributions as well as voice inputs in chats may be processed.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

11.6 Forms App

For conducting surveys or using online forms, we use the services of the following provider: FORMS APP OÜ, Lasnamäe tn 4b-26, 11412 Harju, Tallinn, Estonia.

The provider enables us to create and evaluate surveys and online forms. In addition to the personal data you enter into the forms, information regarding your operating system, browser, date and time of your visit, referrer URL, and IP address is collected, transmitted to the provider, and stored on the provider’s servers.

The information you enter into the forms is stored in password-protected form to ensure that third-party access is excluded and that only we can evaluate the data for the purpose specified in the respective form.

For the processing of personal data necessary for the performance of a contract with you (this also applies to processing operations necessary to carry out pre-contractual measures), Art. 6(1)(b) GDPR serves as the legal basis. If you have given us consent to process your data, processing is based on Art. 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

11.7 Google Forms

For conducting surveys or using online forms, we use the services of the following provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

In addition to transfers to the provider’s location stated above, data may also be transferred to Google LLC, USA.

For the processing of personal data necessary for the performance of a contract with you (this also applies to processing operations necessary to carry out pre-contractual measures), Art. 6(1)(b) GDPR serves as the legal basis. If you have given us consent to process your data, processing is based on Art. 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further information regarding Google’s data protection provisions can be found at: https://business.safety.google/intl/de/privacy/

11.8 Typeform

For conducting surveys or using online forms, we use the services of the following provider: TYPEFORM SL, Carrer de Can Rabia 3-5, 4th Floor, 08017 Barcelona, Spain.

For the processing of personal data necessary for the performance of a contract with you (this also applies to processing operations necessary to carry out pre-contractual measures), Art. 6(1)(b) GDPR serves as the legal basis. If you have given us consent to process your data, processing is based on Art. 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

12) Tools and Other Services

12.1 Accountable

For accounting purposes, we use the cloud-based accounting software provided by: Accountable SA, 22 drève des Weigélias, 1170 Brussels, Belgium.

The provider processes incoming and outgoing invoices and, where applicable, our company’s bank transactions in order to automatically record invoices, match them to transactions, and create financial accounting records through a partially automated process.

Where personal data is also processed in this context, processing is carried out on the basis of our legitimate interest in the efficient organization and documentation of our business transactions pursuant to Art. 6(1)(f) GDPR.

12.2 Cookie Consent Tool

This website uses a so-called “Cookie Consent Tool” to obtain valid user consent for cookies and cookie-based applications that require consent.

The “Cookie Consent Tool” is displayed to users when they access the website in the form of an interactive user interface through which users can grant consent for specific cookies and/or cookie-based applications by selecting the relevant checkboxes.

The tool ensures that cookies/services requiring consent are only loaded if the respective user has granted the relevant consent.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data such as the IP address is processed for the purpose of storing, assigning, or logging cookie preferences, this processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly cookie consent management and, consequently, in ensuring that our website is legally compliant.

An additional legal basis for processing is Art. 6(1)(c) GDPR. As the controller, we are legally obliged to make the use of technically unnecessary cookies dependent on the respective user’s consent.

Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further information about the operator and the settings available for the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

13) Rights of Data Subjects

13.1 Applicable data protection law grants you the following rights against the controller with regard to the processing of your personal data (rights of access and intervention), whereby the respective legal basis is referred to for the conditions governing their exercise:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

14) Retention Period for Personal Data

The retention period for personal data is determined on the basis of the respective legal basis, the purpose of processing, and, where applicable, additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned shall be stored until you withdraw your consent.

If statutory retention periods exist for data processed in the context of contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, such data shall be routinely deleted after the retention periods have expired, provided that it is no longer necessary for the performance or initiation of the contract and/or we no longer have a legitimate interest in retaining it.

When personal data is processed on the basis of Art. 6(1)(f) GDPR, the data shall be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

When personal data is processed for direct advertising purposes on the basis of Art. 6(1)(f) GDPR, the data shall be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the other information in this privacy policy regarding specific processing situations, stored personal data shall otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Privacy policy

1) Introduction and Contact Details of the Data Controller

2) Data Collection When Visiting Our Website

3) Hosting & Content Delivery Network

4) Cookies

5) Contacting Us

6) Data Processing When Opening a Customer Account

7) Use of Customer Data for Direct Advertising

8) Data Processing for Order Processing

9) Web Analytics Services

10) Retargeting/Remarketing and Conversion Tracking

11) Website Functionalities

12) Tools and Other Services

13) Rights of Data Subjects

14) Retention Period for Personal Data

0 Products

Your cart is empty