Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obligated to provide this data. Failure to provide it will have no consequences.
This only applies insofar as no other information is provided in the processing activities described below.
"Personal data" means any information relating to an identified or identifiable natural person.
Privacy Policy
Server Log Files
You can visit our website without providing any personal information.
Whenever you access our website, usage data is transmitted to us or our web hosting / IT service provider through your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.
Your data may be transferred to and processed in countries outside the European Union, particularly Canada and the United States.
For Canada, an adequacy decision by the European Commission is in place.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
Shopify is not certified under the TADPF.
This data transfer is carried out on the basis of contractual obligations comparable to the European Commission’s Standard Contractual Clauses.
Contact
Controller
If you wish, you may contact us. The controller responsible for data processing is:
Thalib Khreis,
Uhland Str. 170,
10719 Berlin, Germany,
info@trysmile.de
Initial contact by the customer via email
If you contact us proactively by email for business purposes, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing is carried out to handle and respond to your contact request.
If the contact is made for the purpose of carrying out pre-contractual measures, for example advice regarding purchase interest or preparing an offer, or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 (1) lit. f GDPR.
We use your email address only to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing is carried out for the purpose of contacting you.
If the contact is made for the purpose of carrying out pre-contractual measures, for example advice regarding purchase interest or preparing an offer, or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 (1) lit. f GDPR.
We use your email address only to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
WhatsApp Business
If you contact us for business purposes via WhatsApp, we use the WhatsApp Business version provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA). We use your email address only to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
The data processing is carried out for the purpose of handling and responding to your contact request. For this purpose, we collect and process the mobile phone number stored in your WhatsApp account, your name if provided, and any other data you voluntarily provide to us.
For this service, we use a mobile device whose address book stores only the data of users who have contacted us via WhatsApp.
Personal data will not be shared with WhatsApp unless you have already given your consent to WhatsApp for such data processing.
Your data is transferred by WhatsApp to servers of Meta Platforms Inc. in the United States.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
Meta Platforms Inc. is certified under the TADPF and has therefore committed to complying with European data protection principles.
If the contact is made for the purpose of carrying out pre-contractual measures, for example advice regarding purchase interest or preparing an offer, or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in providing a fast and easy way to contact us and in responding to your request.
In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 (1) lit. f GDPR.
We use your personal data only for the purpose of processing your request.
Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Further information on WhatsApp’s terms of service and privacy policy can be found at https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.
Orders
Collection, processing and disclosure of personal data when placing orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your requests.
The provision of this data is required for the conclusion of the contract.
Failure to provide this data means that no contract can be concluded.
The processing is carried out on the basis of Art. 6 (1) lit. b GDPR and is necessary for the performance of a contract with you.
Your data may be shared, for example, with the shipping companies and dropshipping providers you have selected, payment service providers, order processing service providers, and IT service providers.
In all cases, we strictly comply with the applicable legal requirements.
The scope of data transfer is limited to the minimum necessary.
Your data may be transferred to and processed in countries outside the European Union, particularly Canada and the United States.
For Canada, an adequacy decision by the European Commission is in place.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
Shopify is not certified under the TADPF.
This data transfer is carried out on the basis of contractual obligations comparable to the European Commission’s Standard Contractual Clauses.
Reviews & Advertising
Google Customer Reviews Website Logo
Our website includes the Google Customer Reviews website logo provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
The purpose of this integration is to display the number and results of the reviews we have received through Google and to promote our participation in this program.
To display the logo on our website and to show you personalized advertisements on Google, Google uses cookies.
In this process, your IP address may be processed and transmitted to Google, among other data.
Your data may be transferred to the United States.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
Google is certified under the TADPF and has therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR.
The processing of your personal data is carried out on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information about the terms of use and privacy policy for Google Customer Reviews can be found at https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html and https://policies.google.com/privacy.
Review Reminder
After your order, we would like to ask you to review your purchase with us.
For this purpose, we use your personal data (name, email address, and order information), independently of the contract processing, to send you a review reminder by email after you have placed an order, provided that you have expressly consented to this.
The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent.
You may withdraw your consent at any time by using the corresponding link in the email or by notifying us directly.
The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Use of the email address for sending direct advertising
We use your email address, which we received in connection with the sale of a product or service, to send electronic advertising for our own products or services that are similar to those you have already purchased from us, provided that you have not objected to such use.
Providing your email address is required for the conclusion of the contract.
Failure to provide your email address means that no contract can be concluded.
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in direct marketing.
You may object to the use of your email address for this purpose at any time by notifying us.
The contact details for exercising your right to object can be found in the legal notice.
You may also use the unsubscribe link provided in the promotional email.
No costs other than the transmission costs according to the basic rates will be incurred.
Use of Klaviyo
We use the service provided by Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”) for sending newsletters as part of order processing.
We share the information you provide during newsletter registration (email address and, if applicable, first and last name) with Klaviyo.
The data processing is carried out for the purpose of sending newsletters and statistically evaluating them.
To evaluate newsletter campaigns, the newsletters we send contain a 1x1 pixel graphic (tracking pixel) or a tracking link.
This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links.
In this context, we collect your personal data, such as your IP address, browser type and device, as well as the time of access.
User profiles may be created from this data under a pseudonym.
The collected data is not used to personally identify you.
The collected data is used solely for statistical analysis and to improve newsletter campaigns.
Your data is generally transferred to and stored on Klaviyo servers in the United States.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
Klaviyo is certified under the TADPF and has therefore committed to complying with European data protection principles.
The processing of your personal data is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in providing a targeted, effective, and user-friendly newsletter system.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on this basis.
Further information about Klaviyo's privacy practices can be found at https://www.klaviyo.com/legal/privacy-notice and https://www.klaviyo.com/legal/data-processing-agreement.
Shipping Service Providers
Disclosure of the email address to shipping companies for shipment status notifications
As part of the contract processing, we will pass on your email address to the shipping company, provided that you have expressly consented to this during the ordering process.
The purpose of this disclosure is to inform you about the shipment status by email.
The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent.
You may withdraw your consent at any time by notifying us or the shipping company.
The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Payment Service Providers
Use of PayPal
We use the PayPal payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website.
The data processing is carried out for the purpose of offering you payment via the payment service.
By selecting and using PayPal as a payment method, the data required for payment processing will be transmitted to PayPal in order to fulfill the contract with you using the selected payment method.
This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
All PayPal transactions are subject to the PayPal Privacy Policy.
You can find it at https://www.paypal.com/webapps/mpp/ua/privacy-full
Use of PayPal Plus
We use the PayPal Plus payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website.
The data processing is carried out for the purpose of offering you payment via the payment service.
By selecting and using PayPal, credit card via PayPal, or direct debit via PayPal, the data required for payment processing will be transmitted to PayPal in order to fulfill the contract with you using the selected payment method.
This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
For certain payment methods, such as credit card via PayPal or direct debit via PayPal, PayPal reserves the right to obtain a credit check based on mathematical and statistical procedures using credit agencies.
For this purpose, PayPal transmits the personal data required for a credit assessment to a credit agency.
PayPal uses the information received regarding the statistical probability of a payment default to make a balanced decision on the establishment, execution, or termination of the contractual relationship.
The credit report may contain probability values (score values) that are calculated using scientifically recognized mathematical and statistical methods.
Among other factors, address data may be included in the calculation of these score values.
Your legitimate interests are taken into account in accordance with the applicable legal provisions.
The purpose of the data processing is to carry out a credit check prior to entering into a contract.
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protecting against payment defaults when PayPal provides services in advance.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 (1) lit. f GDPR by notifying PayPal.
The provision of the data is required for concluding the contract using your selected payment method.
Failure to provide this data means that the contract cannot be concluded using the payment method you selected.
Use of PayPal Express
We use the PayPal Express payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website.
The data processing is carried out for the purpose of offering you payment via the PayPal Express payment service.
To integrate this payment service, PayPal must collect, store, and analyze data when you access the website (e.g. IP address, device type, operating system, browser type, and the location of your device).
Cookies may also be used for this purpose.
These cookies enable your browser to be recognized.
The processing of your personal data is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in offering a customer-oriented selection of different payment methods.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
By selecting and using PayPal Express, the data required for payment processing will be transmitted to PayPal in order to fulfill the contract with you using the selected payment method.
This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
Further information about data processing when using the PayPal Express payment service can be found in the corresponding privacy policy at www.paypal.com/webapps/mpp/ua/privacy-full.
Use of PayPal Check-Out
We use the PayPal Check-Out payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website.
The data processing is carried out for the purpose of offering you payment via the payment service.
By selecting and using PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, the data required for payment processing will be transmitted to PayPal in order to fulfill the contract with you using the selected payment method.
This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
Cookies may be stored in this process, enabling your browser to be recognized.
The resulting data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in offering a customer-oriented selection of different payment methods.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
Credit Card via PayPal, Direct Debit via PayPal & “Pay Later” via PayPal
For certain payment methods, such as credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, PayPal reserves the right to obtain a credit check based on mathematical and statistical procedures using credit agencies.
For this purpose, PayPal transmits the personal data required for a credit assessment to a credit agency.
PayPal uses the information received regarding the statistical probability of a payment default to make a balanced decision on the establishment, execution, or termination of the contractual relationship.
The credit report may contain probability values (score values) that are calculated using scientifically recognized mathematical and statistical methods.
Among other factors, address data may be included in the calculation of these score values.
Your legitimate interests are taken into account in accordance with the applicable legal provisions.
The purpose of the data processing is to carry out a credit check prior to entering into a contract.
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protecting against payment defaults when PayPal provides services in advance.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 (1) lit. f GDPR by notifying PayPal.
The provision of the data is required for concluding the contract using your selected payment method.
Failure to provide this data means that the contract cannot be concluded using the payment method you selected.
Third-Party Providers
If payment is made using a third-party payment method, the data required for payment processing will be transmitted to PayPal.
This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
To process this payment method, PayPal may then forward the data to the respective provider.
This processing is also carried out on the basis of Art. 6 (1) lit. b GDPR.
Examples of local third-party providers include:
Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany)
Purchase on Invoice via PayPal
When paying by purchase on invoice, the data required for payment processing is first transmitted to PayPal.
To process this payment method, PayPal then transmits the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the selected payment method.
This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
Ratepay may carry out a credit check based on mathematical and statistical procedures, such as probability or score values, using credit agencies, according to the process already described above.
The purpose of the data processing is to carry out a credit check prior to entering into a contract.
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protecting against payment defaults when Ratepay provides services in advance.
Further information about data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
Ratepay may carry out a credit check based on mathematical and statistical procedures, such as probability or score values, using credit agencies, according to the process already described above.
The purpose of the data processing is to carry out a credit check prior to entering into a contract.
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protecting against payment defaults when Ratepay provides services in advance.
Further information about data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
Cookies may be stored in this process, enabling your browser to be recognized.
The resulting data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in offering a customer-oriented selection of different payment methods.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
“Pay Later” (Invoice), “Pay Now” (Direct Debit), “Financing” (Installment Purchase)
For certain payment methods such as “Pay Later” (invoice), “Pay Now” (direct debit), or “Financing” (installment purchase), Klarna reserves the right to obtain a credit check based on mathematical and statistical procedures using credit agencies.
For this purpose, Klarna transmits the personal data required for a credit assessment, such as your first and last name, address, gender, email address, IP address, and order-related information, to a credit agency for identity and creditworthiness verification.
Klarna uses the information received regarding the statistical probability of a payment default to make a balanced decision on the establishment, execution, or termination of the contractual relationship.
The credit report may contain probability values (score values) that are calculated using scientifically recognized mathematical and statistical methods.
Among other factors, address data may be included in the calculation of these score values.
Your legitimate interests are taken into account in accordance with the applicable legal provisions.
The purpose of the data processing is to carry out a credit check prior to entering into a contract.
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protecting against payment defaults when Klarna provides services in advance.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 (1) lit. f GDPR by notifying Klarna.
The provision of the data is required for concluding the contract using your selected payment method.
Failure to provide this data means that the contract cannot be concluded using the payment method you selected.
Further information, including details of the credit agencies to which Klarna may disclose your personal data, can be found at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.
General information about Klarna can be found at: https://www.klarna.com/.
Your personal data will be processed by Klarna in accordance with the applicable data protection regulations and as described in Klarna’s Privacy Policy available at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.
Use of SOFORT
We use the payment service provider SOFORT GmbH (Theresienhöhe 12, 80339 Munich, Germany; “SOFORT”) for payment processing on our website.
SOFORT GmbH is a company of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden).
The purpose of the data processing is to offer you various payment methods through payment processing via the SOFORT payment service.
If you choose this payment option, the data required for payment processing will be transmitted to SOFORT.
This data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
Further information about data processing when using the SOFORT payment service provider can be found at https://www.sofort.com/1.0/shared/content/legal/terms/de-DE/SOFORT/ and https://www.klarna.com/sofort/.
Use of the payment service provider Stripe
We use the Stripe payment service provided by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, on our website.
The data processing is carried out for the purpose of offering you payment via the payment service.
By selecting and using Stripe, the data required for payment processing will be transmitted to Stripe in order to fulfill the contract with you using the selected payment method.
This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
Stripe reserves the right to obtain a credit check based on mathematical and statistical procedures using credit agencies, if necessary.
For this purpose, Stripe transmits the personal data required for a credit assessment to a credit agency.
Stripe uses the information received regarding the statistical probability of a payment default to make a balanced decision on the establishment, execution, or termination of the contractual relationship.
The credit report may contain probability values (score values) that are calculated using scientifically recognized mathematical and statistical methods.
Among other factors, address data may be included in the calculation of these score values.
Your legitimate interests are taken into account in accordance with the applicable legal provisions.
The purpose of the data processing is to carry out a credit check prior to entering into a contract.
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protecting against payment defaults when Stripe provides services in advance.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 (1) lit. f GDPR by notifying Stripe.
The provision of the data is required for concluding the contract using your selected payment method.
Failure to provide this data means that the contract cannot be concluded using the payment method you selected.
All Stripe transactions are subject to Stripe’s Privacy Policy.
You can find it at https://stripe.com/privacy
Cookies
Our website uses cookies.
Cookies are small text files that are stored in the user's internet browser or by the internet browser on the user's computer system.
When a user visits a website, a cookie may be stored on the user's operating system.
This cookie contains a unique character string that enables the browser to be clearly identified when the website is visited again.
Cookies are stored on your device. Therefore, you have full control over the use of cookies.
By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain.
Cookies that have already been stored can be deleted at any time.
However, please note that if you do so, you may not be able to use all the functions of this website to their full extent.
You can find information on how to manage (including disable) cookies in the most common browsers using the links below:
Chrome: https://support.google.com/accounts/answer/61416
Microsoft Edge: https://support.microsoft.com/microsoft-edge/cookies-in-microsoft-edge
Mozilla Firefox: https://support.mozilla.org/kb/enable-and-disable-cookies-website-preferences
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically Necessary Cookies
Unless otherwise stated in this Privacy Policy, we only use these technically necessary cookies to make our website more user-friendly, effective, and secure.
In addition, cookies enable our systems to recognize your browser even after a page change and to provide you with services.
Some functions of our website cannot be provided without the use of cookies.
For these functions, it is necessary that the browser can be recognized even after changing pages.
The use of cookies or similar technologies is based on Section 25 (2) TDDDG.
The processing of your personal data is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and providing a user-friendly and effective service.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
Analytics and Advertising Tracking
Use of Google Analytics 4
We use the Google Analytics web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing is carried out for the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes.
For this purpose, Google will use the information collected on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator.
The following information may be collected, among other things: IP address, date and time of page access, click path, information about the browser and device you use, pages visited, referrer URL (the website from which you accessed our website), location data, and purchase activities.
Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and any other information Google may have about you.
Your IP address is shortened by Google within member states of the European Union or in other states that are party to the Agreement on the European Economic Area before being processed.
Google uses technologies such as cookies, web storage in the browser, and tracking pixels that enable an analysis of your use of the website.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR.
The processing of your personal data is carried out on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
The information generated about your use of this website is generally transmitted to and stored on a Google server in the United States.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
Google is certified under the TADPF and has therefore committed to complying with European data protection principles.
Both Google and U.S. government authorities may have access to your data.
Further information about Google's terms of use and privacy practices can be found at https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy.
Use of Shopify Analytics
We use the statistics and analytics features of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) on our website as part of a data processing agreement.
Shopify is affiliated with Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The purpose of the data processing is to analyze this website and its visitors.
For this purpose, data is stored for marketing and optimization purposes and made available in reports, analyses, and statistics.
The following device information may be collected and processed: information about your web browser, IP address, time zone, and some of the cookies installed on your device.
When you browse the website, information about the webpages or products you view, the referrer URL (the website from which you accessed our website), and information about how you interact with the website is also collected.
For this purpose, technologies such as cookies, web beacons, tags, and pixels (electronic files used to record information about how you navigate the website) are used.
Your data may be transferred to and processed in countries outside the European Union, particularly Canada and the United States.
For Canada, an adequacy decision by the European Commission is in place.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
Shopify is not certified under the TADPF.
This data transfer is carried out on the basis of contractual obligations comparable to the European Commission’s Standard Contractual Clauses.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR.
The processing of your personal data is carried out on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information about Shopify’s privacy practices can be found at https://www.shopify.com/legal/privacy.
Information regarding Shopify’s Data Processing Agreement (DPA) can be found at https://www.shopify.com/legal/dpa.
Information about the cookies used by Shopify can be found at https://www.shopify.com/legal/cookies.
Use of the Meta Pixel
We use the Meta Pixel provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.
Meta and we are jointly responsible for the collection of your data and the transmission of this data to Meta when this service is integrated.
This is based on an agreement between us and Meta regarding the joint processing of personal data, which defines the respective responsibilities.
The agreement can be viewed at https://www.facebook.com/legal/terms/businesstools.
Under this agreement, we are primarily responsible for fulfilling the information obligations pursuant to Articles 13 and 14 GDPR.
We are also responsible for complying with the security requirements of Article 32 GDPR regarding the correct technical implementation and configuration of the service.
In addition, we are responsible for complying with the obligations under Articles 33 and 34 GDPR, insofar as a personal data breach relates to our obligations under the joint processing agreement.
Meta is responsible for enabling data subject rights in accordance with Articles 15–20 GDPR.
Meta is also responsible for complying with the security requirements of Article 32 GDPR regarding the security of the service.
In addition, Meta is responsible for fulfilling the obligations under Articles 33 and 34 GDPR insofar as a personal data breach relates to Meta’s obligations under the joint processing agreement.
The application is used to target visitors to the website with interest-based advertising on the social networks Facebook and Instagram.
For this purpose, Meta’s remarketing tag has been implemented on the website.
When you visit the website, this tag establishes a direct connection to Meta’s servers.
This transmits to Meta’s server which of our pages you have visited.
Meta assigns this information to your personal Facebook and/or Instagram user account.
When you visit the social networks Facebook or Instagram, personalized, interest-based ads will then be shown to you.
The application is also used to create conversion statistics.
In this process, we learn the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag.
We also learn which actions are taken on this website after the redirection.
However, we do not receive any information that allows users to be personally identified.
Your data may be transferred to the United States.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
Meta is certified under the TADPF and has therefore committed to complying with European data protection principles.
The processing of your personal data is carried out on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
You can disable the “Custom Audiences” remarketing feature here.
Further information about the collection and use of data by Meta, your rights in this regard, and options for protecting your privacy can be found in Meta’s Privacy Policy at https://www.facebook.com/privacy/policy/.
Use of Google Ads Conversion Tracking
We use the online advertising program “Google Ads” on our website and, as part of this, conversion tracking.
Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad placed by Google, a cookie for conversion tracking is stored on your device.
These cookies have a limited validity period, do not contain any personal data, and therefore do not serve to personally identify users.
If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the advertisement and were redirected to that page.
Each Google Ads customer receives a different cookie.
This means that cookies cannot be tracked across the websites of different Google Ads customers.
The information collected through the conversion cookie is used to create conversion statistics.
This allows us to determine the total number of users who clicked on one of our advertisements and were redirected to a page tagged with a conversion tracking tag.
However, we do not receive any information that can be used to personally identify users.
We use the Advanced Consent Mode implementation.
Even if consent has not been granted, user data is transmitted to Google in the form of “pings” when using Advanced Consent Mode.
These pings may include information such as the IP address for determining the country based on the IP address (the IP address itself is not logged), the date and time of the page visit, the URL of the visited pages, the user agent, the referrer URL (the website from which our website was accessed), or information about triggered website events such as a conversion.
Based on this information, Google models user data in order to enable comprehensive usage analysis even when consent has been denied.
Your data may be transferred to the servers of Google LLC in the United States.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
Google is certified under the TADPF and has therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR.
The processing of your personal data is carried out on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information and Google’s Privacy Policy can be found at: https://www.google.com/policies/privacy/
Use of Google AdSense
We use the AdSense feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The data processing is carried out for the purpose of renting out advertising space on the website and targeting website visitors with interest-based advertising on that space.
This feature is used to display personalized, interest-based advertisements from the Google Display Network to visitors of the provider’s website.
Google uses cookies that enable an analysis of your use of the website.
The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the United States.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
Google is certified under the TADPF and has therefore committed to complying with European data protection principles.
Google may transfer this information to third parties where required by law or where such third parties process the data on Google's behalf.
Google will not associate your IP address with any other data held by Google.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR.
The processing of your personal data is carried out on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information and Google’s Privacy Policy can be found at:
https://www.google.com/policies/technologies/ads/
https://www.google.com/policies/privacy/
Use of Google's Remarketing or "Similar Audiences" Feature
We use the remarketing or “Similar Audiences” feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The application is used to analyze visitor behavior and visitor interests.
To carry out the analysis of website usage, which forms the basis for creating interest-based advertisements, Google uses cookies.
Visits to the website and anonymized data about website usage are collected through cookies.
No personal data of website visitors is stored.
If you subsequently visit another website within the Google Display Network, advertisements may be displayed to you that are highly likely to take into account the product and information areas you previously viewed.
Your data may be transferred to servers of Google LLC in the United States.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
Google is certified under the TADPF and has therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR.
The processing of your personal data is carried out on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information about Google Remarketing and the corresponding privacy policy can be found at: https://www.google.com/privacy/ads/
Use of the Pinterest Tag
We use the Pinterest Tag provided by Pinterest Europe Limited (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland; "Pinterest") on our website.
The application is used to target visitors to the website with interest-based advertising on the Pinterest social network.
For this purpose, Pinterest’s conversion tag has been implemented on the website.
When you visit the website, this tag establishes a direct connection to Pinterest’s servers.
This transmits to Pinterest’s servers which of our pages you have visited.
Pinterest assigns this information to your personal Pinterest user account if you are logged into the social network.
When you visit Pinterest, you may then be shown personalized, interest-based Pinterest ads.
If you access our website via a Pin on the Pinterest social network, a cookie for conversion tracking will be stored on your device.
These cookies have a limited validity period, do not contain any personal data, and therefore do not serve to personally identify users.
If you visit certain pages of our website and the cookie has not yet expired, Pinterest and we can recognize that you clicked on the Pin and were redirected to that page.
The information collected through the conversion cookie is used to create conversion statistics and thereby optimize our website.
Among other things, the following information may be processed: the total number of users who clicked on one of our Pins and were redirected to our website, subpages visited on our website (e.g. category or product pages), search queries made on our website, the contents of your shopping cart, and completed transactions.
Your data may be transferred to the United States.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
Pinterest is not certified under the TADPF.
The transfer of data is carried out, among other things, on the basis of Standard Contractual Clauses (SCCs) as appropriate safeguards for the protection of personal data.
These can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR.
The processing of your personal data is carried out on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information about the collection and use of data by Pinterest, your rights in this regard, and options for protecting your privacy can be found in Pinterest’s Privacy Policy at https://policy.pinterest.com/privacy-policy.
Use of TikTok Pixel
We use the TikTok Pixel provided by TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; “TikTok Ireland”) and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; “TikTok UK”) on our website.
Both companies are jointly responsible for data processing (hereinafter referred to as “TikTok”).
The data processing is carried out for the purpose of identifying and analyzing website visits by our customers, improving customer targeting through personalized advertising, and evaluating the effectiveness of advertisements on TikTok.
For this purpose, TikTok uses technologies such as cookies and pixels that enable your browser to be recognized.
Among other things, the following information may be collected and transmitted to TikTok:
The following information may be collected and transmitted to TikTok: the date and time of your visit, information about the browser and device type you use, screen resolution, and IP address.
TikTok may associate this information with your personal TikTok user account.
Usage profiles may be created from the collected data using pseudonyms.
However, it is not possible to personally identify users through this process.
Your data may be transferred to third countries, such as the United States.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
TikTok is not certified under the TADPF.
The transfer of data to the United States and to other third countries without an adequacy decision is carried out, among other things, on the basis of Standard Contractual Clauses (SCCs) as appropriate safeguards for the protection of personal data.
These can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR.
The processing of your personal data is carried out on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information about data protection can be found at https://www.tiktok.com/legal/page/eea/privacy-policy/en and https://ads.tiktok.com/i18n/official/policy/controller-to-controller.
Plug-ins and Other Services
Use of Google Tag Manager
We use Google Tag Manager provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application is used to manage JavaScript tags and HTML tags, which are used in particular to implement tracking and analytics tools.
The data processing is carried out for the purpose of designing and optimizing our website according to user needs.
Google Tag Manager itself does not store cookies and does not process any personal data.
However, it enables the triggering of other tags that may collect and process personal data.
Further information on the terms of use and privacy practices can be found here.
Facebook by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
https://www.facebook.com/policy.php
Your data may be transferred to the United States.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
Meta is certified under the TADPF and has therefore committed to complying with European data protection principles.
Instagram by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland) https://help.instagram.com/155833707900388.
Your data may be transferred to the United States.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
Meta is certified under the TADPF and has therefore committed to complying with European data protection principles.
Pinterest by Pinterest Inc. (635 High Street, Palo Alto, CA 94301, USA)
https://policy.pinterest.com/privacy-policy
Your data may be transferred to the United States.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
Pinterest is not certified under the TADPF.
X, formerly known as Twitter (X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
https://twitter.com/privacy
https://twitter.com/personalization
Your data may be transferred to the United States.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
X is certified under the TADPF and has therefore committed to complying with European data protection principles.
Use of YouTube
We use the YouTube video embedding feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website.
YouTube is affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
This feature displays videos stored on YouTube in an iFrame on the website.
The “enhanced privacy mode” option is activated.
As a result, YouTube does not store any information about visitors to the website.
Only when you watch a video is information about this transmitted to YouTube and stored there.
Your data may be transferred to the United States.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
YouTube is certified under the TADPF and has therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR.
The processing of your personal data is carried out on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information about the collection and use of data by YouTube and Google, your rights in this regard, and options for protecting your privacy can be found in YouTube’s Privacy Policy at https://www.youtube.com/t/privacy.
Use of Vimeo
We use plug-ins provided by Vimeo Inc. (555 West 18th Street, New York, New York 10011, USA; “Vimeo”) on our website to embed videos from the “Vimeo” platform.
When you access pages of our website that contain such a plug-in, a connection to Vimeo’s servers is established and the plug-in is displayed on the page by notifying your browser.
As a result, both your IP address and information about which of our pages you have visited are transmitted to Vimeo’s servers.
If you are logged into Vimeo at the same time, Vimeo assigns this information to your personal user account.
When using the plug-in functions, for example by starting a video by clicking the corresponding button, this information is also assigned to your Vimeo account.
Your data may be transferred to the United States.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
Vimeo is certified under the TADPF and has therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR.
The processing of your personal data is carried out on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information about the purpose and scope of data collection, as well as the further use and processing of data by Vimeo, your rights in this regard, and options for protecting your privacy can be found in Vimeo’s Privacy Policy:
https://vimeo.com/privacy
Use of Google Fonts
We use Google Fonts provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing is carried out for the purpose of ensuring a consistent display of fonts on our website.
To load the fonts, a connection to Google's servers is established when the page is accessed.
Cookies may be used in this process.
Among other things, your IP address and information about the browser you use may be processed and transmitted to Google.
This data is not linked to your Google account.
Your data may be transferred to the United States.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
Google is certified under the TADPF and has therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR.
The processing of your personal data is carried out on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information on data processing and privacy can be found at:
https://www.google.com/policies/privacy/
and
https://developers.google.com/fonts/faq
Use of Google Translate
We use the translation service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website via API integration.
The data processing is carried out for the purpose of displaying the information provided on the website in other languages.
In order for the translation into the language you have selected to be displayed automatically, the browser you use connects to Google’s servers.
Cookies may be used in this process.
Among other things, the following information may be collected and processed: IP address, URL of the visited page, date and time.
Your data may be transferred to the United States.
For the United States, an adequacy decision by the European Commission exists through the Trans-Atlantic Data Privacy Framework (TADPF).
Google is certified under the TADPF and has therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR.
The processing of your personal data is carried out on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information about the collection and use of your data by Google can be found at:
https://www.google.com/policies/privacy/
Data Subject Rights and Data Retention
Data Retention Period
After the contract has been fully completed, the data will initially be stored for the duration of the warranty period.
After that, the data will be retained in accordance with applicable legal retention obligations, in particular those under tax and commercial law.
Once the applicable retention periods have expired, the data will be deleted unless you have consented to further processing and use.
Rights of the Data Subject
Where the legal requirements are met, you are entitled to the following rights under Articles 15 to 20 GDPR: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, and the right to data portability.
In addition, pursuant to Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) lit. f GDPR, as well as to processing carried out for the purposes of direct marketing.
Right to Lodge a Complaint with a Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not lawful.
You may lodge a complaint, among others, with the supervisory authority responsible for us, which can be contacted using the following details:
Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219
Visitor Entrance: Puttkamerstr. 16–18 (5th Floor)
10969 Berlin
Phone: +49 30 13889-0
Fax: +49 30 2155050
Email: mailbox@datenschutz-berlin.de
