Privacy policy

1) Introduction and Contact Information of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data refers to all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Justin Utermann, RacingProjectGermany - Justin Utermann, Auf dem Kamp 33, 58455 Witten, Germany, Tel.: +4917648734097, E-mail: info@rpg-tuning.de. The controller responsible for processing personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data collection when visiting our website

2.1 When you use our website purely for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/referrer from which you came to the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. Data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser's address bar.

3) Hosting & Content Delivery Network

3.1 For hosting our website and displaying the site content, we use a provider who provides its services either itself or through selected subcontractors exclusively on servers within the European Union.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

3.2 Cloudflare

We use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, page content, or scripts more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

3.3 imgix

We use a content delivery network from the following provider: Zebrafish Labs Inc., 423 Tehama St., San Francisco, CA 94103. USA

4) Cookies

To make your visit to our website more attractive and to enable the use of certain features, we use cookies—small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for a longer period and allow your site settings to be saved (so-called "persistent cookies"). For the latter, you can find the storage duration in the cookie settings overview of your web browser.

If any personal data is processed through individual cookies we use, such processing is carried out in accordance with Art. 6(1)(b) GDPR either for the performance of a contract, in accordance with Art. 6(1)(a) GDPR if consent has been given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly, efficient website experience.

You can set your browser to notify you about the setting of cookies and decide individually whether to accept them, or to exclude the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

5.1 Judge.me

For review reminders, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

We will only transmit your email address and, if applicable, other customer data to the provider based solely on your explicit consent in accordance with Art. 6(1)(a) GDPR, so that they can contact you with a review reminder via email.

You may revoke your consent at any time with effect for the future, either to us or to the provider.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

If data is transferred to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

5.2 WhatsApp Business

You have the option to contact us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this, we use the so-called "Business Version" of WhatsApp.

If you contact us via WhatsApp for a specific business matter (such as an order you have placed), we will store and use the mobile number you use on WhatsApp as well as—if provided—your first and last name in accordance with Art. 6(1)(b) GDPR to process and respond to your inquiry. On the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address, or email address) in order to assign your inquiry to a specific transaction.

If you use our WhatsApp contact for general inquiries (such as about our range of services, availability, or our website), we will store and use the mobile number you use on WhatsApp as well as—if provided—your first and last name in accordance with Art. 6(1)(f) GDPR, based on our legitimate interest in providing the requested information efficiently and promptly.

Your data will only be used to respond to your inquiry via WhatsApp. It will not be shared with third parties.

Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose, and that phone numbers stored in the address book are automatically transmitted to a server of the parent company, Meta Platforms Inc., in the USA. For operating our WhatsApp Business account, we use a mobile device whose address book only contains the WhatsApp contact details of users who have also contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact details are stored in our address book has already, by accepting the WhatsApp terms of use when first using the app on their device, consented to the transmission of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6(1)(a) GDPR. The transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

For information about the purpose and scope of data collection, the further processing and use of data by WhatsApp, as well as your rights in this regard and settings options to protect your privacy, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have entered into a data processing agreement with the provider, which protects the data of our website visitors and prohibits disclosure to third parties.

As part of the aforementioned processing activities, data may be transferred to servers of Meta Platforms Inc. in the USA.

5.3 When you contact us (e.g., via contact form or email), personal data is processed—exclusively for the purpose of handling and responding to your inquiry, and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at entering into a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once it is clear from the circumstances that the matter in question has been conclusively resolved and provided there are no statutory retention requirements.

6) Comment function

When using the comment function on this website, in addition to your comment, information about the time the comment was created and the commenter name you selected will be stored and published on this website. Your IP address will also be logged and stored. This storage of the IP address is for security reasons and in case the person concerned violates the rights of third parties or posts illegal content through a comment. We require your email address so we can contact you if a third party objects to your published content as unlawful.

The legal bases for storing your data are Art. 6(1)(b) and (f) GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties.

7) Data processing when opening a customer account

According to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. The data required to open the account can be found in the input fields of the relevant form on our website.

You can delete your customer account at any time by sending a message to the address of the controller mentioned above. After your customer account is deleted, your data will also be deleted, provided all contracts concluded through it have been fully processed, there are no statutory retention periods, and we have no legitimate interest in continuing to store your data.

8) Use of customer data for direct advertising

8.1 Subscribing to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending newsletters, which ensures that you only receive newsletters after you have expressly confirmed your consent to receiving them by clicking a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. In this process, we store the IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data collected by us during newsletter registration will be used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the controller mentioned at the beginning. After you unsubscribe, your email address will be promptly deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this statement.

8.2 Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. For this, we do not need to obtain separate consent from you in accordance with Section 7(3) UWG. Data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails.

You have the right to object to the use of your email address for the above-mentioned advertising purpose at any time with effect for the future by notifying the controller mentioned at the beginning. For this, you will only incur transmission costs according to the basic rates. Once we receive your objection, the use of your email address for advertising purposes will be stopped immediately.

8.3 Klaviyo

Our email newsletters are sent via the following provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA

Based on our legitimate interest in effective and user-friendly newsletter marketing, we forward the data you provided when signing up for the newsletter to this provider in accordance with Art. 6(1)(f) GDPR, so that they can send the newsletter on our behalf.

With your express consent in accordance with Art. 6(1)(a) GDPR, the provider also conducts statistical performance analysis of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the newsletter content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and analyzed, but not merged with other data sets.

You may revoke your consent to newsletter tracking at any time with effect for the future.

We have entered into a data processing agreement with the provider, which protects the data of our website visitors and prohibits disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

8.4 Product Availability Notification by Email

For items that are temporarily unavailable, you can sign up to receive email notifications about product availability. In this case, we will send you a one-time email notification regarding the availability of the specific item you selected. The only required information for this notification is your email address. Providing additional information is optional and may be used to address you personally. We use the so-called double opt-in procedure for sending emails, which ensures that you only receive a notification after you have expressly confirmed your consent by clicking a verification link sent to the email address you provided.

By activating the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. In this process, we store the IP address entered by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later time. The data we collect when you sign up for our email availability notification service is used strictly for this purpose.

You may unsubscribe from the availability notifications at any time by sending a message to the contact named above. After you unsubscribe, your email address will be promptly deleted from our distribution list for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes as permitted by law and about which we inform you in this statement.

8.5 Shopping Cart Reminders by Email

If you abandon your purchase with us before completing your order, you have the option to receive a one-time reminder of the contents of your virtual shopping cart by email.

The only required information for sending this reminder is your email address. Providing additional information is optional and may be used to address you personally. We use the so-called double opt-in procedure for sending emails, which ensures that you only receive a notification after you have expressly confirmed your consent by clicking a verification link sent to the email address you provided.

By activating the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR for sending a shopping cart reminder. In this process, we store the IP address entered by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later time. The data we collect when you sign up for our email notification service is used strictly for this purpose.

You may unsubscribe from the shopping cart reminders at any time by sending a message to the contact named above. After you unsubscribe, your email address will be promptly deleted from our distribution list for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes as permitted by law and about which we inform you in this statement.

9) Data Processing for Order Fulfillment

9.1 To the extent necessary for contract fulfillment for delivery and payment purposes, the personal data we collect will be forwarded to the contracted shipping company and the contracted credit institution in accordance with Art. 6(1)(b) GDPR.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data you provided when placing your order in order to personally inform you within the scope of our legal information obligations in accordance with Art. 6(1)(c) GDPR. Your contact data will be used strictly for notifications about updates owed by us and will only be processed by us to the extent necessary for this information.

To process your order, we also work with the following service provider(s), who assist us in fulfilling contracts that have been concluded. Certain personal data will be transmitted to these service providers in accordance with the information below.

9.2 Order Printer Pro

For order processing, we use the following provider: FORSBERG+TWO, Tranegårdsvej 74, 2900, Hellerup, Denmark

Name, address, and, where applicable, other personal data will be shared with the provider in accordance with Art. 6(1)(b) GDPR for the purpose of processing the online order. Your data will only be shared to the extent necessary for processing the order. The provider is also used for accounting purposes. The provider processes incoming and outgoing invoices as well as, if applicable, our company's bank transactions, in order to automatically record invoices, match them to transactions, and, through a semi-automated process, generate financial accounting records.

If personal data is processed in this context, the processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in efficiently organizing and documenting our business operations.

9.3 Post & DHL Shipping (official)

For preparing shipments, we use the services of the following provider: Deutsche Post DHL Research And Innovation GmbH, Kurt-Schumacher-Str. 1, 53113 Bonn
In accordance with Art. 6(1)(b) GDPR, we transmit digital shipping labels with your delivery information solely for the purpose of fulfilling your online order from our order processing system to the provider, who then sends these to our local printers to enable printing. Data is only shared to the extent actually necessary for processing.

9.4 Transfer of personal data to shipping service providers

- Deutsche Post

As a shipping service provider, we use the following company: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

We will share your email address and/or phone number with the provider in accordance with Art. 6(1)(a) GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or providing delivery notifications, provided you have given your express consent during the ordering process. Otherwise, for delivery purposes, we will only provide the recipient's name and delivery address to the provider in accordance with Art. 6(1)(b) GDPR. Data is only shared to the extent necessary for delivery. In this case, it is not possible to coordinate the delivery date or provide delivery notifications in advance.

Consent may be withdrawn at any time with effect for the future by notifying the above-named data controller or the provider.
- DHL

As a shipping service provider, we use the following company: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

Consent may be withdrawn at any time with effect for the future by notifying the above-named data controller or the provider.

9.5 Use of payment service providers (payment services)

- Klarna

One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you select a payment method from the provider that requires you to pay in advance (such as credit card payment), your payment data provided during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about your order will be shared with the provider in accordance with Art. 6(1)(b) GDPR. Your data will only be shared for the purpose of processing payment with the provider and only to the extent required for this purpose.

If you select a payment method for which the provider pays in advance (such as invoice or installment purchase, or direct debit), you will also be asked during the order process to provide certain personal information (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and, if applicable, details of an alternative payment method).

To protect our legitimate interest in assessing the creditworthiness of our customers, this data will be forwarded to the provider for a credit check in accordance with Art. 6(1)(f) GDPR. The provider will use the personal data you provide, as well as other data (such as shopping cart, invoice amount, order history, payment experience), to determine whether the payment method you have selected can be granted with regard to payment and/or default risk.

For the purpose of making a decision during the application review, in addition to internal provider criteria, identity and credit information from the following credit agencies may also be included, in accordance with Art. 6(1)(f) GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may include probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, among other things, but not exclusively, address data.

You may object to this processing of your data at any time by sending us a message or by contacting the provider directly. However, the provider may still be entitled to process your personal data if this is necessary for the proper execution of payment under the contract.
- Paypal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from the provider where you pay in advance, the payment data you provide during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about your order content will be forwarded to the provider in accordance with Art. 6 (1) (b) GDPR. Your data will be shared solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

If you select a payment method where we pay in advance, you will also be asked during the order process to provide certain personal information (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and, if applicable, information about an alternative payment method).

In such cases, to protect our legitimate interest in determining your ability to pay, we will forward this data to the provider for a credit check in accordance with Art. 6 (1) (f) GDPR. Based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment experiences), the provider will check whether the payment option you selected can be granted with regard to payment and/or default risks.

This website uses PayPal Checkout, an online payment system from PayPal that consists of PayPal's own payment methods and local payment methods from third-party providers.

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—'Pay Later' via PayPal, we forward your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") for payment processing. The transfer is carried out in accordance with Art. 6 (1) (b) GDPR and only to the extent necessary for payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal, or—if offered—'Pay Later' via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be forwarded to credit agencies in accordance with Art. 6 (1) (f) GDPR, based on PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check, specifically the statistical probability of default, to decide whether to provide the respective payment method. The credit report may include probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, among other things, but not exclusively, address data. You may object to this processing of your data by PayPal at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the proper execution of payment under the contract.

If the PayPal payment method 'purchase on account' is available and selected, your payment data will first be transmitted to PayPal to prepare the payment, after which PayPal will forward it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") for payment execution. The legal basis in each case is Art. 6 (1) (b) GDPR. In this case, Ratepay will carry out an identity and credit check in its own name to determine your ability to pay, as described above, and will forward your payment data to credit agencies based on the legitimate interest in determining your ability to pay in accordance with Art. 6 (1) (f) GDPR. A list of the credit agencies Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/

When using a local third-party payment method, your payment data will initially be forwarded to PayPal in preparation for payment in accordance with Art. 6 (1) (b) GDPR. Depending on your selection of an available local payment method, PayPal will then transmit your payment data to the respective provider for the purpose of processing the payment in accordance with Art. 6 (1) (b) GDPR:

- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further information on data protection, please refer to PayPal’s Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
- Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

10) Online Marketing

10.1 Google AdSense

This website uses Google AdSense, a web advertising service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies, which are text files stored on your computer that enable an analysis of your use of the website. In addition, Google AdSense also uses so-called "web beacons" (small invisible graphics) to collect information, which allow simple actions such as visitor traffic on the website to be recorded, collected, and analyzed. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transferred to a server of Google and stored there. This may also result in transmission to the servers of Google LLC in the USA.

Google uses the information obtained in this way to analyze your usage behavior with regard to AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties if required by law and/or if third parties process this data on behalf of Google.
All of the above processing, in particular the reading of information from the device used via cookies and/or web beacons, will only take place if you have given us your explicit consent in accordance with Art. 6 (1) (a) GDPR. Without this consent, Google AdSense will not be used during your visit to our website.

You can revoke your consent at any time with effect for the future by disabling this service in the "cookie consent tool" provided on the website.

Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

10.2 Own Affiliate Program

In connection with the product presentations on our website, we maintain our own affiliate program, through which we provide interested third-party website operators with partner links to place on their websites that lead to our offers. Cookies are used for the affiliate program, which are generally set on the partner site after clicking on a corresponding partner link, for which we are not responsible in terms of data protection. Cookies are small text files placed on your device to track the origin of transactions (e.g., "sales leads") generated via such links. This allows us, among other things, to recognize that you have clicked the partner link and were redirected to our website. This information is required for payment processing between us and the affiliate partners. If the information also contains personal data, the processing described is based on our legitimate financial interest in processing commission payments in accordance with Art. 6 (1) (f) GDPR.

If you wish to block the analysis of user behavior via cookies, you can configure your browser to inform you about the setting of cookies and allow you to decide individually on their acceptance or to exclude the acceptance of cookies for certain cases or in general.

11) Web Analytics Services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables us to analyze your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies, which are small text files stored on your device that collect certain information. This includes your IP address, which, however, is shortened by Google by removing the last digits to prevent direct personal identification.

The information is transmitted to and further processed on Google servers. This may also involve transfers to Google LLC, based in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The IP address transmitted and shortened by your browser as part of Google Analytics is not merged with other Google data. Data collected through Google Analytics 4 is stored for two months and then deleted.

All of the processing described above, especially the setting of cookies on your device, only takes place if you have given us your explicit consent in accordance with Art. 6 (1) (a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to our site. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the "cookie consent tool" provided on the website.

We have entered into a data processing agreement with Google to ensure the protection of our website visitors' data and to prohibit unauthorized disclosure to third parties.

Further legal information about Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic Features
Google Analytics 4 uses the special "demographic features" function and can generate statistics about the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third-party providers. This allows target groups for marketing activities to be identified. However, the collected data cannot be linked to a specific person and is deleted after being stored for two months.

Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized ads and linked your devices with your Google account, Google may, with your consent to the use of Google Analytics in accordance with Art. 6 (1) (a) GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the "Personalized Advertising" function in your Google account settings. Please follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de For more information about Google Signals, see the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the "UserIDs" feature may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 (1) (a) GDPR, have created an account on this website, and log in with this account on different devices, your activities, including conversions, can be analyzed across devices.

12) Retargeting/Remarketing and Conversion Tracking

12.1 Meta Pixel with Advanced Data Matching

Within our online offering, we use the "Meta Pixel" service in advanced data matching mode, provided by the following vendor: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta")

If a user clicks on an ad we have placed on Facebook or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel." After redirection, this URL parameter is entered into the user's browser by a cookie set by our linked page. In addition, this cookie collects specific customer data such as the email address, which we collect on our website linked to the Facebook or Instagram ad during actions like purchases, account logins, or registrations (advanced data matching). The cookie is then read and enables the transmission of the data, including specific customer data, to Meta.

We use the "Meta Pixel" with enhanced data matching to make our ads (so-called "Ads") on Facebook and/or Instagram more effective and to ensure that they match users' interests or display certain characteristics (e.g., interests in specific topics or products determined by visited websites), which we transmit to Meta (so-called "Custom Audiences").

In addition, we analyze the effectiveness of our ads by tracking whether users are redirected to our website after clicking on an ad (conversion). Compared to the standard version of the "Meta Pixel," the enhanced data matching feature helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.

All transmitted data is stored and processed by Meta, so that it can be associated with the respective user profile and Meta can use the data for its own advertising purposes in accordance with Meta's data usage policy (https://www.facebook.com/about/privacy/). The data may also enable Meta and its partners to display ads on and off Facebook.

All processing described above, especially the setting of cookies to read information on the device used, will only take place if you have given us your explicit consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by disabling this service in the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

The information generated by Meta is usually transferred to a Meta server and stored there; in this context, it may also be transmitted to servers of Meta Platforms Inc. in the USA.

12.2 TikTok Pixel

This website uses the conversion tracking technology of the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland

If you arrive at our website from an ad on the provider's domain, cookies and/or similar technologies (tracking pixels, web beacons, pings, or HTTP requests) can be used to track the success of the ad.

For this purpose, certain device and browser information, including your IP address if applicable, is read via the tracking technology in order to record and evaluate predefined user actions (e.g., completed transactions, leads, searches on the website, product page views) defined by us. This allows us to create statistics about user behavior on our website after being redirected from an ad, which help us optimize our offering.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

13) Site functionalities

13.1 Judge.me

Our website integrates graphic elements from the following provider to display external customer reviews and/or an externally awarded quality seal: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

When you access a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers to properly load the elements. Certain browser information, including your IP address, is transmitted to the provider in this process.

If personal data is processed in this context, it is done in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in optimal marketing of our offering and the appealing design of our online presence.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

If data is transferred to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

13.2 Google Maps

This website uses an online map service from the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service for displaying interactive (land) maps to visually present geographic information. By using this service, our location is shown to you and directions may be made easier.

As soon as you access any subpage that includes the Google Maps map, information about your use of our website (such as your IP address) is transmitted to Google's servers and stored there; this may also involve transmission to servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data is directly associated with your account. If you do not want this association with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.

The collection, storage, and analysis are carried out in accordance with Art. 6 (1) lit. f GDPR based on Google's legitimate interest in displaying personalized advertising, market research, and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, but to exercise this right, you must contact Google. If you do not agree to the future transmission of your data to Google as part of your use of Google Maps, you also have the option to completely disable the Google Maps web service by turning off the JavaScript application in your browser. Google Maps and thus the map display on this website will then no longer be available.

Where legally required, we have obtained your consent for the above-described processing of your data in accordance with Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time with effect for the future. To exercise your revocation, please follow the aforementioned instructions on how to object.

Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/

13.3 Google Maps API

To enable real-time validation of certain entries in the address form during the checkout process of our webshop for input errors, we use the services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC., USA

The provider validates the entered address, verifies the spelling, and supplements any missing data if necessary. For ambiguous addresses, correct alternative suggestions are displayed. For this purpose, the address data you enter is transmitted to the provider, stored there, and analyzed.

This processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in the proper recording of the customer's correct address data to diligently fulfill our contractual delivery obligations and to prevent problems in contract execution.

The provider processes the relevant data separately and does not combine it with other data sets, and deletes it as soon as their status or correctness has been confirmed, but no later than after 30 days.

Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/

13.4 Google Web Fonts

This site uses so-called web fonts from the following provider to ensure a uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you access a page, your browser loads the required web fonts into its browser cache to correctly display texts and fonts and establishes a direct connection to the provider's servers. In this process, certain browser information, including your IP address, is transmitted to the provider.

Data may also be transmitted to: Google LLC, USA

The processing of personal data in connection with establishing contact with the font provider only takes place if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future by disabling this service via the “cookie consent tool” provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.

Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/

13.5 Google Customer Reviews (formerly Google Certified Merchant Program)

We work with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program gives us the opportunity to collect customer reviews from users of our website. After making a purchase on our website, you will be asked whether you would like to participate in an email survey from Google.

If you give your consent in accordance with Art. 6 (1) lit. a GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchase experience on our website. The review you submit will then be aggregated with our other reviews and displayed in our Google Customer Reviews logo as well as in our Merchant Center dashboard. Your review will also be used for Google Seller Ratings. In the course of using Google Customer Reviews, personal data may also be transmitted to the servers of Google LLC. in the USA.

You can withdraw your consent at any time by sending a message to the data controller or to Google.

Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/

13.6 Shopsync for Shopify

This website uses the Shopify app "Shopsync" by ShopSync LLC, PO Box 252, Jefferson City, TN 37760, USA.
With ShopSync, the newsletter service "Mailchimp" is synchronized with our Shopify account so that, on the one hand, updates to Mailchimp email lists (such as a newsletter recipient opting out) are automatically reflected in Shopify, and on the other hand, new contact information generated through contracts on Shopify is automatically transferred to Mailchimp's email lists.

In the former case, data processing takes place in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in effective and cross-system management of advertising recipient records and efficient compliance with legally significant status changes.

In the latter case, only based on the user's explicit consent in accordance with Art. 6(1)(a) GDPR, after a contract is concluded on Shopify, the user's first and last name, address, and email address, along with transaction-related information (purchase amount, time, and date of purchase), are transferred by ShopSync to Mailchimp for inclusion in the Mailchimp list.

Data transferred in this way is not stored or retained by ShopSync after synchronization. All information synchronized between Shopify and Mailchimp is transmitted using SSL technology (Secure Socket Layer), and all transmitted information remains encrypted during the synchronization process.

The synchronization process requires the transfer of information over a secure connection to servers hosted by Amazon Web Services in the USA.

For further privacy information regarding ShopSync, please see: https://www.shop-sync.com/privacy-policy

14) Tools and Miscellaneous

14.1 - PayJoe

To handle our accounting, we use the service "PayJoe" by NetConnections GmbH, Jesinger Str. 52, 73230 Kirchheim unter Teck ("PayJoe").

PayJoe acts as an interface between the payment service providers used and our accounting software by preparing individual transactions from the payment service providers and enriching them with receipt data. This allows incoming payments, refunds, fees, and payout amounts from payment service providers to be automatically recorded and processed in the accounting software we use. In addition, PayJoe enables the automatic and properly formatted transfer of physical or digital incoming invoices to the accounting software for recording there.
If personal data is processed during these procedures, the processing is based on our legitimate interests in efficient organization and documentation of our business operations as well as proper and seamless accounting processing in accordance with Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with NetConnections GmbH as the operator of PayJoe, obligating the company to protect our customers' data and not to disclose it to third parties.
- sevDesk

To handle our accounting, we use the service of the cloud-based accounting software from the following provider: sevDesk GmbH, Hauptstraße 115, 77652 Offenburg, Germany

The provider processes incoming and outgoing invoices as well as, if applicable, our company's bank transactions in order to automatically record invoices, match them to transactions, and use them to create financial accounting in a semi-automated process.

If personal data is processed in this context, processing is carried out on the basis of our legitimate interest in efficient organization and documentation of our business operations in accordance with Art. 6(1)(f) GDPR.

14.2 Cookie Consent Tool

This website uses a so-called "cookie consent tool" to obtain valid user consent for cookies and cookie-based applications that require consent. The "cookie consent tool" is displayed to users as an interactive user interface when the page is accessed, where consent for certain cookies and/or cookie-based applications can be given by checking boxes. Through the use of this tool, all cookies/services requiring consent are only loaded if the respective user has given consent by checking the corresponding box. This ensures that such cookies are only set on the user's device if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, the processing of personal data (such as IP addresses) becomes necessary for the purpose of storing, assigning, or logging cookie settings, this processing takes place in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in providing a legally compliant, user-specific, and user-friendly consent management for cookies and thus in ensuring the legal conformity of our online presence.

Another legal basis for processing is Art. 6(1)(c) GDPR. As the responsible party, we are legally obligated to make the use of non-essential cookies dependent on the respective user's consent.

Where necessary, we have entered into a data processing agreement with the provider to ensure the protection of our website visitors' data and to prohibit unauthorized disclosure to third parties.

For more information about the operator and the cookie consent tool's settings, please refer directly to the corresponding user interface on our website.

14.3 Cloudflare

For security purposes, this website uses the services of the following provider: Cloudflare, Inc., 101 Townsend St. San Francisco, CA 94107, USA

The provider protects the website and its associated IT infrastructure from unauthorized third-party access, cyberattacks, as well as viruses and malware. The provider collects users' IP addresses and, if applicable, additional data about your behavior on our website (in particular, accessed URLs and header information) to detect and prevent illegitimate website access and threats. The collected IP address is compared against a list of known attackers. If the IP address is identified as a security risk, the provider may automatically block it from accessing the website. The information collected in this way is transmitted to a server of the provider and stored there.

The described data processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interests in protecting the website from harmful cyberattacks and in maintaining the integrity and security of its structure and data.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

14.4 Judge.me

To verify and publish customer reviews, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

If you submit a review on our website, your first and last name, email address, order date and number, as well as the name and international references (GTIN/ISDNF) are collected, transmitted to the provider, and evaluated there to determine the legitimacy of a customer review for a specific order. This processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in ensuring the authenticity of customer reviews by verifying their transaction relevance and preventing review abuse. After the review check and approval are completed, the data is deleted by the provider.

If data is transferred to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

15) Rights of the Data Subject

15.1 Applicable data protection law grants you the following rights as a data subject with respect to the processing of your personal data by the controller (rights to information and intervention), with reference to the legal basis indicated for the conditions of exercise of each right:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent given pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

15.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION. FURTHER PROCESSING WILL ONLY BE PERMITTED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ESTABLISH, EXERCISE, OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION FOR DIRECT MARKETING PURPOSES.

16) Duration of storage of personal data

The duration of storage of personal data is determined by the applicable legal basis, the purpose of processing, and—if relevant—additionally by the respective statutory retention period (e.g., commercial and tax law retention periods).

When processing personal data based on explicit consent pursuant to Art. 6(1)(a) GDPR, the data concerned will be stored until you revoke your consent.

If there are statutory retention periods for data processed in the context of contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, such data will be routinely deleted after the retention periods have expired, provided they are no longer required for contract fulfillment or initiation and/or we no longer have a legitimate interest in retaining them.

When processing personal data on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

When processing personal data for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise specified in other information in this statement regarding specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

As of: 07/28/2025, 2:01:35 PM