Data protection

1. Name and address of the person responsible

We, Neona Living GmbH, are responsible for data protection within the meaning of Art. 4 No. 7 DSGVO for the website and online shop that can be accessed at https://www.neona.store/ (hereinafter jointly "online shop") and the associated data processing. If offers from other providers ("third-party offers") can be reached from our online shop, our data protection declaration does not apply to these third-party offers. In this case, we are also not responsible for the processing of your personal data in the context of such third-party offers.

Our contact details are:

Neona Living GmbH
Düsseldorfer Strasse 26
51379 Leverkusen

Telephone: 0049 (0)214 50680266
Email: support@neona.store

If you have any questions about data protection law, you can also contact datenschutz@neona.store .

2. Type and scope of data processing

2.1 Provision of the online shop and log files

If you only use our online shop for informational purposes, i.e. if you do not register or otherwise provide us with information and only provide information about our products, we only process the data that your browser transmits to our server. When you visit our online shop, we process the data that is technically necessary to be able to show you our online shop and to guarantee its stability and security.

For this we process the following data:

– IP address (anonymized )
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access Status/HTTP Status Code
– each transmitted amount of data
– Website from which the request comes
– browsers
– Language and version of the browser software.

The IP address can be personal data because, under certain conditions, it is possible to find out the identity of the owner of the Internet access used by providing information from the respective Internet provider. However, we only process the IP address in an anonymous form, so that it no longer has any personal reference.

The aforementioned data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the online shop, this is the case when the respective session has ended.

If the data is stored in so-called log files, this is the case after seven days at the latest.

2.2 Processing of your requests

We process the personal data that you voluntarily provide to us when contacting us, in particular by e-mail, via our contact form or via our chat form.

The data you provide in this regard (e.g. your e-mail address, possibly your name, your telephone number, documents loaded into the chat form or your message to us) will only be processed for correspondence with you and for the purpose of which you have given us the data as part of the communication, for example to answer your questions or to contact you at your request.

The legal basis for the processing of the data is therefore your consent in accordance with Article 6 (1) (a) GDPR. Insofar as the processing is necessary to fulfill a contract with you or to carry out pre-contractual measures at your request, the legal basis for the processing is Article 6 (1) (b) GDPR.

We delete the data arising in this context after the storage is no longer necessary to achieve the purpose, in particular after the request has been processed, unless statutory storage requirements prescribe storage beyond this.

If you contact us by e-mail and/or request us to contact you by post, e-mail or telephone, you must at least provide your contact details if we are to contact you accordingly.

2.3 Processing when registering for the newsletter

We offer a newsletter in our online shop to inform you regularly about our products and services.

The newsletter is sent via the provider Klaviyo, 125 Summer St., Boston, MA 02110, USA .

Klaviyo can also process the data you provide for us in the USA. We therefore expressly point out that, according to the European Court of Justice, there is basically no adequate level of data protection in the USA that could guarantee the protection of your personal data.

For this reason, Klaviyo commits to us by concluding so-called standard data protection clauses, also when processing your data in the USA, to create a data protection level that is comparable to that of the European Union and is therefore also appropriate. These standard data protection clauses have been supplemented with additional individual obligations by Klaviyo.

The transmission of your personal data to the USA is therefore based (in addition to your consent, see below) on Article 46 (2) (c) GDPR.

For more information on Klaviyo's standard data protection clauses, see https://www.klaviyo.com/legal/data-processing-agreement .

Further general information on data protection at Klaviyo can be found at: https://www.klaviyo.com/legal/privacy/privacy-notice .

As a subscriber, in addition to the actual newsletter, you can also be informed about circumstances that are relevant to the newsletter service or the registration itself (e.g. changes to the newsletter offer or technical reasons). Such information will also be sent to the email address you have provided.

To register for the newsletter, it is sufficient to enter your e-mail address (mandatory field). If you do not provide us with your email address, we cannot send our newsletter to you.

In order to check that a registration was actually made by the owner of the entered e-mail address, we use the so-called "double opt-in" procedure. For this purpose, after submitting your email address, you will receive a confirmation email from us in which you must confirm your registration for the newsletter by clicking on a link. Only after this confirmation will your e-mail address be included in the newsletter distribution list. As proof for us, we log the registration for the newsletter, the sending of the confirmation e-mail and the receipt of the requested confirmation. The time of registration and confirmation as well as your IP address are also saved.

Further data is not collected. All data collected will only be used to send the newsletter.

The data is stored for the duration of the subscription to our newsletter and deleted after unsubscribing from the newsletter, unless statutory retention periods require longer storage.

The legal basis for sending the newsletter is your consent in accordance with Article 6 Paragraph 1 Letter a) GDPR. The legal basis for logging the aforementioned data is safeguarding our legitimate interest in accordance with Article 6 (1) (f) GDPR.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. For this purpose, there is a corresponding unsubscribe link in every newsletter. You can also inform us of your revocation at any time using the above-mentioned contact options.

In order to be able to improve our newsletter, we may collect data for statistical evaluation and measuring the success of the newsletter. This is done exclusively on the basis of your consent, which you give when registering for the newsletter, Article 6 (1) (a) GDPR. You can revoke this consent at any time with effect for the future.

2.4 Orders via our online shop

If you place an order via our online shop, we process

Surname
delivery address
email address, telephone number
Payment information (IBAN, credit card information, PayPal, Sofortüberweisung, Klarna)
optional: company, apartment, room etc.

(hereinafter: "order data")

If you do not provide us with the mandatory order data, we cannot process your order.

In addition, we store your IP address (anonymized) and the date and time of the order.

We process your order data as described above to process the purchase contract. The data is processed accordingly on the basis of Article 6 (1) (b) GDPR.

We transmit your address data and your name to the company commissioned with the delivery. If it is necessary to process the contract, we will also send your e-mail address or your telephone number to the company commissioned with the delivery to coordinate a delivery date.

.

Due to commercial and tax regulations, we are obliged to store your address, payment and order data for a period of ten years.

2.5 Data protection notice for the use of WhatsApp

You can contact us via WhatsApp and start a conversation, for example to get more information about our products. To offer and use WhatsApp, we use the software solution from Charles GmbH, Gartensstr. 86-87, 10115 Berlin ("Charles"), as part of an order processing contract. Charles stores all personal data in the EU. As an official WhatsApp partner, Charles uses the WhatsApp Business API with the result that no other third parties or WhatsApp have access to your communication content within the scope of our responsibility.

 

The use of WhatsApp is subject to the agreements you have made with WhatsApp. In accordance with the WhatsApp terms of use, we have your telephone number, your user name and, if applicable, your status including profile photo when you contact us. We also use this and other information you provide to recognize you and your preferences and to reply to your WhatsApp messages. The legal basis here is your consent in accordance with Art. 6 Paragraph 1 lit. a) GDPR.

 

We will also send you newsletters via WhatsApp if you have given us your consent to do so.

 

You can revoke the consent you have given at any time with effect for the future. You can inform us about your revocation via WhatsApp or via the contact addresses given above.

 

For more information please refer to:

Charles GmbH: https://www.hello-charles.com/c-com-blog/whatsapp-newsletters

WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland: https://www.whatsapp.com/legal/privacy-policy-eea

2.6 SMS Marketing

You also have the option of subscribing to our text notifications. For this we need your mobile phone number.

If you provide this to us, we will use your telephone number to send you information about our products and services via SMS at regular intervals. Message and data tariffs may apply depending on the cell phone tariff you have taken out.

The legal basis for SMS marketing is your consent within the meaning of Article 6(1)(a) GDPR. You can revoke this at any time with effect by responding to our messages with answers such as "STOP", "END", "CANCEL", "UNSUBSCRIBE" or "QUIT" or by contacting the above addresses.

We store your phone number for as long as you are registered for our SMS marketing. If you revoke your consent, it is possible that for technical reasons you will receive another message confirming your revocation (i.e. your cancellation of the subscription).

2.7 Transfer to third countries

If we transmit data to a third country outside the European Economic Area, e.g. because we commission service providers there, we are particularly entitled to do so if you have given your express consent, if we thereby fulfill contractual or pre-contractual obligations or if the respective recipient of the data communicates with us accordingly has concluded standard data protection clauses adapted to the individual case. You will be informed separately about individual transfers to a third country within the framework of this data protection declaration.

2.8 Use of cookies, use of tracking and marketing tools

In addition to the aforementioned data, cookies are stored on your end device when you use our online shop. Cookies are data sets that are stored on your end device by the internet browser. A cookie contains a character string that enables your browser to be clearly identified when you visit our online shop again. Cookies cannot run programs or transfer viruses to your end device. They serve, for example, to make our website more user-friendly and effective overall.

You can usually set your browser so that you are informed about the setting of cookies, the setting of cookies is excluded for certain cases or in general, or you only allow the setting of cookies in individual cases. You can also delete saved cookies in your browser settings. Without cookies, however, the functionality of our online shop may be limited.

We use both those cookies that are absolutely necessary for the operation of our online shop ("technically necessary cookies") and those cookies that serve analysis, marketing or other convenience purposes ("other cookies"). We can then also pass on information about your use of our online shop to the providers of such cookies. They may combine the information received with other data that you have provided to them or that they have collected as part of your use of our online shop.

The use of all those cookies that are not technically necessary and the associated processing of your (personal) data takes place exclusively on the basis of your consent, Art. 6 Para. 1 lit. a) DSGVO or § 25 Para. 1 TTDSG.

You can revoke your consent at any time with effect for the future by clicking on the link in the footer "Cookie settings" in our online shop.

Insofar as personal data is processed by technically necessary cookies, the legal basis is Art. 6 Para. 1 lit. f) GDPR, since we and you both have a legitimate interest in the secure and customer-friendly display of our online shop. Any interests, fundamental rights and fundamental freedoms on your part in the non-processing of personal data do not prevail, since the use of technically necessary cookies is a basic requirement for the functioning of the Internet and can therefore also be expected from you.

IMPORTANT NOTE : If the use of cookies and the associated processing of your (personal) data is accompanied by a transfer of your data to a third country outside the European Economic Area, you consent to this at the same time in accordance with Article 49 (1) (a) GDPR that your data will be transmitted to the third country described in the individual case (but in particular to the USA) and processed there.

Specifically, we use the following cookies:

cookie

1P_JAR

marketing

A cookie from Google LLC. to provide advertising tailored to the user.

_away

technically necessary

Used in connection with access to admin.

_abck

technically necessary

A "TikTok" cookie to protect against unauthorized access to the TikTok network and to prevent manipulation of TikTok's data.

AEC

technically necessary

A cookie from Google LLC. to prevent spam, fraud and abuse. The cookie ensures that requests within a browser session are made by the user and not by other websites.

aid

technically necessary

A cookie from Google LLC to optimize Google services.

APISID

marketing

A cookie from Google LLC to optimize the "Google Adwords" service.

_bc_c_set

technically necessary

Required to comply with data protection standards

_biz_uid

A cookie set by Adobe Marketo Measure. Through Adobe Marketo Measure we receive information to improve our marketing strategies.

cart

technically necessary

Used in conjunction with the shopping cart.

cart_currency

technically necessary

Required to display prices in the online store in the applicable currency.

cart_sig

technically necessary

Required to ensure the security of the online shop.

cart_ts

technically necessary

Required to complete the payment process.

cart_ver

technically necessary

Required to fill the shopping cart.

__cfduid

Technically necessary

The _cfduid cookie helps Cloudflare recognize malicious visitors on our customers' websites and minimize blocking of legitimate users.

checkout_session_lookup

technically necessary

Required to complete the payment process.

checkout_session_token

technically necessary

Required to complete the payment process.

CONSENT

technically necessary

A cookie from Google LLC that, together with the "CONSENT" cookie, stores the data on the user's consent within the meaning of the GDPR and TTDSG ("cookie decisions").

cookie_check

technically necessary

This cookie is set when you select the PayPal payment method and is required for this payment method.

c_user

marketing

A "Facebook" cookie from Facebook Inc. that stores the user ID of each user and can thus assign the page collected on our site to individual users.

datr

technically necessary

A cookie set by Facebook Inc. to prevent spam, fraud and abuse. The cookie ensures that requests within a browser session are made by the user and not by other websites

ddi

technically necessary

This cookie is set when you select the PayPal payment method and is required for this payment method

d_id

technically necessary

This cookie is set when you select the PayPal payment method and is required for this payment method

DSID

marketing

A "Google Analytics" cookie from Google LLC., which saves user habits and thus enables Google LLC to improve its marketing offer.

dv

marketing

A cookie from Google LLC. to provide advertising tailored to the user.

enforce_policy

technically necessary

This cookie is set when you select the PayPal payment method and is required for this payment method.

_fbp

A "Facebook" cookie from Facebook Inc. to store and count page views

FPID
FPLC
FPAU

A "Google Analytics" cookie from Google LLC to store and count page views

_ga

A "Google Analytics" cookie from Google LLC to store and count page views

_ga_SFD46GHZ7S

A "Google Analytics" cookie from Google LLC to store and count page views

Gdpr_legal_cookie_session

technically necessary

Used in connection with GDPR legal cookie.

HSID

technically necessary

A cookie from Google LLC. to prevent spam, fraud and abuse. The cookie ensures that requests within a browser session are made by the user and not by other websites.

IDE

A "Google Analytics" cookie from Google LLC. to provide advertising tailored to the user.

_landing_page

Makes it possible to evaluate usage behavior when calling up the landing page ( https://www.neona.store/ ).

LONG

technically necessary

This cookie is set when you select the PayPal payment method and is required for this payment method. The cookie is required to be able to display PayPal in the correct language version.

middle

An "Instagram" cookie set by Instagram LLC (subsidiaries of Meta Inc.) to optimize Instagram LLC's services and offerings. The cookie defines a unique user ID.

NID

A cookie from Google LLC. to provide advertising tailored to the user. It also saves user habits, enabling Google LLC to improve its marketing offering.

nsid

technically necessary

This cookie is set when you select the PayPal payment method and is required for this payment method.

OGP
OGPC

A "Google Adwords" cookie from Google LLC. to provide advertising tailored to the user.

ooh

A "Facebook" cookie from Facebook Inc. that stores user behavior and thus enables Facebook Inc. to improve its marketing offering.

_orig_referrer

Required to use the online shop.

OTZ

This cookie is set when you select the "Google Pay" payment method and is required for this payment method.

_pin_unauth

A "Pinterest" cookie from Pinterest Inc. that saves user behavior and thus enables Pinterest Inc. to improve its marketing offer.

SOFUEB

A "Sofortüberweisung" cookie from Sofort GmbH that stores the session ID and enables the user to pay with the "Sofortüberweisung" payment service during the payment process.

rmuc

This cookie is set when you select the "PayPal" payment method and is required for this payment method.

_s

Shopify analytics cookie.

SAPISID

This cookie improves the function of "Google Adwords" from the provider Google LLC.

sb

A "Facebook" cookie from Facebook Inc. that stores details about the user's browser.

secret

Used by Shopify for the checkout process.

Secure_customer_digest

Required to log in to the online shop

secure_customer_sig

Required so that users are recognized by our online shop after logging in and do not have to repeatedly enter their login data.

_secure_session_id

Used in connection with navigating through a storefront.

__Secure-1PAPISID
__Secure-1PSID
__Secure-1PSIDCC
__Secure-3PAPISID
__Secure-3PSID
__Secure-3PSIDCC
__Secure ENID

A cookie set by Google LLC that helps the company to create a usage profile of individual online shop visitors and thus helps to improve Google LLC's personalized advertising.

_shopify

_shopify_d

_shopify_fs

_shopify_s

_shopify_sa_p

_shopify_sa_t

_shopify_uniq

_shopify_visit

_shopify_y

_ab_test_*

_ki_r

_kr_t

One from Shopify Ltd. set cookie that helps us to evaluate the usage behavior of our online shop.

_shopify_tm

Used to manage customer privacy preferences.

_shopify_tw

Used to manage customer privacy preferences.

_shopify_m

Used to manage customer privacy preferences.

_shopify_u

Used to manage customer privacy preferences.

SID
SIDCC

The cookie protects data traffic when using the "Google Maps" service and helps protect against misuse and manipulation of the service.

SOCS

A Google LLC cookie that, together with the "CONSENT" cookie, stores the data on the user's consent within the meaning of the GDPR and TTDSG ("cookie decisions") for Google services.

SSID

A cookie set by Google LLC that helps the company to create a usage profile of individual online shop visitors and thus helps to improve Google LLC's personalized advertising.

_storefront_u

Used to facilitate updating customer account information.

Storefron_digest

Required so that users are recognized by our online shop after logging in and do not have to repeatedly enter their login data.

_tracking_consent

For Shopify user consent tracking.

Tracked_start_checkout

Shopify analysis regarding the checkout.

ts
ts_c
ts_rce

This cookie is set when you select the "PayPal" payment method and is required for this payment method.

_tt_enable_cookie

One from TikTok Ltd. set cookie that enables the functioning of other TikTok Ltd. set marketing cookies guaranteed.

_ttp

One from TikTok Ltd. set cookie that evaluates the usage behavior on our online shop in order to adapt the personalized advertising on the TikTok platform to the user.

_uetvid

A "Microsoft Clarity" cookie from Microsoft Inc. to store and count page views.

ui_experience

This cookie is set when you select the "PayPal" payment method and is required for this payment method.

x-pp-s

This cookie is set when you select the "PayPal" payment method and is required for this payment method.

xs

A "Facebook" cookie from Facebook Inc., which assigns a session ID to each visit to this online shop and can thus save the data collected in a session ID.

XSRF token

Used in connection with GDPR legal cookie.

_y

Collects data that helps us to evaluate the usage behavior of our online shop.

 

 

2.8.1 Use of Google Analytics

This online shop uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Parent company Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

The information generated by the Google Analytics cookies about the use of this online shop (including your IP address) can be transmitted to a Google server in the USA and stored there. However, we use the "anonmyizeIP" function to ensure anonymous collection of IP addresses (so-called IP masking). This means that your IP address within the member states of the EU or in other contracting states of the Agreement on the European Economic Area before transmission shortened to Google Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.

On our behalf, Google will use this information to evaluate your use of the online shop, to compile reports on activities in the online shop and to provide us with other services related to the use of the online shop and internet use.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The legal basis for data processing is your consent within the meaning of Section 25 TTDSG and, insofar as personal data are to be processed, Article 6 Paragraph 1 lit. a) GDPR. A possible data transfer to the USA takes place on the basis of your express consent, Article 49 (1) (a) GDPR. You can revoke your consent at any time with effect for the future. You can change your cookie settings via the link in the footer of our online shop.

The personal data will be deleted or made anonymous after 14 months at the latest.

Further details on data processing within the framework of Google Analytics are also available at
https://privacy.google.com/businesses/processorterms/ . http://www.google.com/analytics/terms/de.html , http://www.google.de/intl/de/policies/privacy .

Note: Please note the additional information on using the services under 2.8.6.

2.8.2 Use of Google Remarketing

This online shop uses Google Remarketing, a service provided by Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, whose parent company is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. The legal basis for data processing is your consent within the meaning of Section 25 TTDSG and, insofar as personal data are to be processed, Article 6 Paragraph 1 lit. a) GDPR. A possible data transfer to the USA takes place on the basis of your express consent, Article 49 (1) (a) GDPR. You can revoke your consent at any time with effect for the future. You can change your cookie settings via the link in the footer of our online shop.

Google Remarketing is an application that enables us to recognize you after visiting our online shop and to address you with individual product advertisements or advertising.

This application works in such a way that Google recognizes your visit to our online shop and the clicking on certain content in our online shop and displays our advertising in a targeted manner if you continue to use the Internet (so-called remarketing). For this purpose, Google places cookies in your browser, which are used to save and analyze your behavior when visiting different websites.

With regard to the analysis, Google declares that the data collected as part of remarketing will not be merged with your personal data stored by Google. According to Google, all data is also processed pseudonymously and only pseudonymous visitor profiles are created.

Even after you have given your consent, you can permanently disable the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: https://www.google.com/settings/ads/plugin .

For more information about Google's privacy policy, visit: https://policies.google.com/technologies/ads , https://policies.google.com/privacy or https://adssettings.google.com/.

Note: Please note the additional information on using the services under 2.8.6.

2.8.3 Use of Google Adwords conversion tracking

This online shop uses Google Ads, a service provided by Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, whose parent company is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. The legal basis for data processing is your consent within the meaning of Section 25 TTDSG and, insofar as personal data are to be processed, Article 6 Paragraph 1 lit. a) GDPR. A possible data transfer to the USA takes place on the basis of your express consent, Article 49 (1) (a) GDPR. You can revoke your consent at any time with effect for the future. You can change your cookie settings via the link in the footer of our online shop.

Google Ads is an online advertising program that we use to place ads on search engines. We also use conversion tracking as part of this program. Google Conversion Tracking is an analytics service provided by Google. If you click on an ad placed by Google, a conversion tracking cookie will be placed on your device. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used to personally identify people.

If you visit certain parts of our online shop and the cookie has not yet expired, we and Google can recognize that you clicked on our ad and were forwarded to our online shop. Each Google Ads customer receives a different cookie. So there is no way to track cookies across Ads advertisers' websites.

The information obtained using the conversion cookie is processed to create conversion statistics for Google Ads customers. This tells us the total number of visitors who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information that would allow us to personally identify visitors.

For details on Google's conversion tracking, see https://support.google.com/google-ads/answer/1722022 .

For more information about Google's privacy policy, see : https://policies.google.com/technologies/ads, https://policies.google.com/privacy or https://adssettings.google.com/ .

Note: Please note the additional information on using the services under 2.8.6.

2.8.4 Google Tag Manager

In our online shop we use the Google Tag Manager from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, whose parent company is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

This is an organizational tool that allows us to integrate and manage other website tools, so-called "tags" (e.g. for marketing or analysis purposes) in our online shops.

The Google Tag Manager enables us to use tags (which are marked separately in this data protection declaration) without having to integrate them individually into the website's source code. Instead, the integration takes place centrally via the Tag Manager.

No data is processed via the Google Tag Manager itself; it merely acts as a "manager" for the built-in tags. Cookies can only be set or (personal) data about the use of our online shop can be processed via these tags. This is done exclusively on the basis of your consent within the meaning of Section 25 TTDSG and, insofar as personal data are to be processed, Article 6 Paragraph 1 lit. a) GDPR. A possible data transfer to the USA takes place on the basis of your express consent, Article 49 (1) (a) GDPR. You can revoke your consent at any time with effect for the future. You can change your cookie settings via the link in the footer of our online shop.

We have consented to the transfer of anonymous data to Google in the Tag Manager account settings. However, this is only data about the application and use of the tag manager, not data that relates to you. In addition, Google only receives this data in an anonymous form, so that it is not possible to draw any conclusions about an identified or identifiable person. In addition, Google removes all information that could identify our online shop. Google combines this data with numerous other anonymous website data and creates user trends as part of benchmarking measures. With benchmarking, you can compare your own results with those of your competitors. In this way, processes can ultimately be optimized.

You can find more information about Google Tag Manager at https://www.google.com/intl/de/tagmanager/faq.html .

Note: Please note the additional information on using the services under 2.8.6.

2.8.5 Google Maps

In our online shop we use the function for embedding Google Maps maps from Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google").

The function enables the visual representation of geographic information and interactive maps. Google also collects, processes and uses data from visitors to the online shop when the pages in which Google Maps are integrated are accessed.

The legal basis for data processing is your consent within the meaning of Section 25 TTDSG and, insofar as personal data are to be processed, Article 6 Paragraph 1 lit. a) GDPR. A possible data transfer to the USA takes place on the basis of your express consent, Article 49 (1) (a) GDPR. You can revoke your consent at any time with effect for the future. You can change your cookie settings via the link in the footer of our online shop.

 

Note: Please note the additional information on using the services under 2.8.6.

2.8.6 Further information on using the services of Google Ireland Limited

You can prevent the collection and transmission of the data generated by the cookies and related to your use of the online shop (including your IP address) to Google and the processing of this data by Google by setting your browser software accordingly or by Download and install the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de . Please note that if your browser or device is later erased, formatted, or reinstalled, you must reinstall the browser add-on to disable Google's cookies again.

We use Google services to analyze and regularly improve the use of our online shop. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.

However, the legal basis for use is exclusively your consent within the meaning of Section 25 TTDSG and, insofar as personal data are to be processed, Article 6 (1) (a) GDPR.

You can revoke your consent at any time with effect for the future. You can change your cookie settings via the link in the footer of our online shop.

Note : If you consent to the use of Google services, you also consent to your personal data being processed in the USA. According to the assessment of the European Court of Justice, the level of data protection in the USA is insufficient compared to that in the European Union. In particular, there is a risk that US authorities will gain access to your data. If you do not consent to the use of Google services, your personal data will not be transferred to the USA.

Recipients of the data can be Google Ireland Ltd. and Google LLC.

2.8.7 Google Pay

In our online shop we use the online payment provider Google Pay from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, whose parent company is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

If you decide to select this service as a payment option during the ordering process, your data will be automatically transmitted to the service provider. The data transmitted is usually the name, e-mail address, IP address, telephone number and other data required to process the payment. Personal data related to the respective order are also required. In particular, there may be a mutual exchange of payment information such as bank details, card number, expiry date and CVC code, number of items, item number, data on goods and services, prices and taxes, information on previous purchasing behavior or other information on your financial situation.

The legal basis for processing is Section 25 II No. 2 TTDSG and, insofar as personal data is processed, Article 6 Paragraph 1 lit. b) GDPR. A possible data transfer to the USA takes place on the basis of Article 49 (1) (b) GDPR.

Note: The personal data can also be processed in the USA. According to the assessment of the European Court of Justice, the level of data protection in the USA is insufficient compared to that in the European Union. In particular, there is a risk that US authorities will gain access to your data. If you do not select Google Pay as the payment service during the ordering process, your personal data will not be transmitted to the USA.

Recipients of the data can be Google Ireland Ltd. and Google LLC.

For more information about Google's privacy policy, see : https://policies.google.com/technologies/ads, https://policies.google.com/privacy or https://adssettings.google.com/ .

2.8.8 Facebook Pixel, Custom Audiences, and Facebook Conversion

Our online shop uses the so-called "Facebook pixel" from the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are resident in the EU, by the Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). Facebook is a subsidiary of Meta Platforms Inc.

The legal basis for data processing is your consent within the meaning of Section 25 TTDSG and, insofar as personal data are to be processed, Article 6 Paragraph 1 lit. a) GDPR. A possible data transfer to the USA takes place on the basis of your express consent, Article 49 (1) (a) GDPR. Once you have consented to the collection by the Facebook pixel and the use of your data to place Facebook ads, you can revoke this consent at any time with effect for the future. You can change your cookie settings via the link in the footer of our online shop.

Note : If you agree to the use of Facebook Pixel, you also agree that your personal data will also be processed in the USA. According to the assessment of the European Court of Justice, the level of data protection in the USA is insufficient compared to that in the European Union. In particular, there is a risk that US authorities will gain access to your data. If you do not consent to the use of Facebook Pixel, your personal data will not be transmitted to the USA.

With the help of the Facebook pixel, Facebook is able to determine the visitors of our online shop as a target group for the placement of advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook pixel to only display the Facebook ads we have placed to those Facebook visitors who are also interested in our online shop or who have certain characteristics (e.g. interest in similar topics or products as in our online shop). Shop; determined based on the websites you previously visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also try to ensure that our Facebook ads are relevant to your potential interest and do not annoy you. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether you were also redirected to our online shop after clicking on our Facebook ad (so-called "conversion"). .

To set what types of ads you see on Facebook, you can visit the page set up by Facebook and follow the instructions for usage-based advertising settings: https://www.facebook.com/settings?tab=ads . To do this, you must log in to Facebook. The settings are made platform-independent and apply to all devices that you use for Facebook.

Facebook Inc. may be the recipient of the data.

Specific information and details about the Facebook pixel and how it works can be found here: https://www.facebook.com/business/help/651294705016616 .

The processing of the data by Facebook takes place within the framework of Facebook's data policy: https://www.facebook.com/about/privacy/update?ref=old_policy .

2.8.9 Instagram

We use Instagram features on our site. Instagram is a social media platform operated by Instagram LLC, 1601 Willow Rd, Menlo park CA 94025, USA. Instagram has been a subsidiary of Meta Platforms Inc since 2012.

 

The legal basis for data processing is your consent within the meaning of Section 25 TTDSG and, insofar as personal data are to be processed, Article 6 Paragraph 1 lit. a) GDPR. A possible data transfer to the USA takes place on the basis of your express consent, Article 49 (1) (a) GDPR. Once you have consented to the use of Instagram, you can revoke this consent at any time with effect for the future. You can change your cookie settings via the link in the footer of our online shop.

Note : If you agree to the use of Instagram, you also agree that your personal data will also be processed in the USA. According to the assessment of the European Court of Justice, the level of data protection in the USA is insufficient compared to that in the European Union. In particular, there is a risk that US authorities will gain access to your data. If you do not consent to the use of Instagram, your personal data will not be transferred to the USA.

The recipient of the data can be Instagram LLC, but also any subsidiary of Meta Platforms.

Instagram processes the data in accordance with Instagram's data policy: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect .

 

2.8.10 Shopify

We use the service provided by Shopify to provide our online shop. The service provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

We have concluded an order processing contract with Shopify, in the context of which Shopify processes your personal data for us, which arise when using this online shop, in particular in the context of orders.

The legal basis for our processing of your personal data in this regard is Art. 6 (1) (b) GDPR, as this is necessary for the performance of the contract concluded with you.

The data is stored within the legal retention periods.

Insofar as Shopify uses cookies that are not technically necessary, this is done exclusively on the basis of your consent, Section 25 TTDSG and, if personal data is to be processed, Article 6 Paragraph 1 lit. a) GDPR. You can revoke such consent at any time with effect for the future by changing your cookie settings via the link in the footer of our online shop.

You can find more information about the data processed by using shopify in the privacy policy at https://www.shopify.de/legal/datenschutz or https://help.shopify.com/en/manual /youraccount/privacy/GDPR/gdpr-faq#will-shopify-sign-standardcontractual-clauses .

2.8.11 Adobe Marketo Measure

In our online shop we use Adobe Marketo Measure, a marketing analysis service from Adobe Inc. The Irish company Adobe Systems Software ireland Companies, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, is responsible for the European area .

 

Adobe evaluates the usage behavior of our online shop visitors and provides us with information that shows us how we can increase our marketing measures based on this data.

 

The legal basis for data processing is your consent within the meaning of Section 25 TTDSG and, insofar as personal data are to be processed, Article 6 Paragraph 1 lit. a) GDPR. A possible data transfer to the USA takes place on the basis of your express consent, Article 49 (1) (a) GDPR. You can revoke such consent at any time with effect for the future by changing your cookie settings via the link in the footer of our online shop.

 

Note : If you agree to the use of Adobe Marketo Measure, you also agree that your personal data will also be processed in the USA. According to the assessment of the European Court of Justice, the level of data protection in the USA is insufficient compared to that in the European Union. In particular, there is a risk that US authorities will gain access to your data. If you do not consent to the use of Adobe Marketo Measure, your personal data will not be transferred to the USA.

 

For more information about the data processed by using Adobe Marketo Measure, visit https://experienceleague.adobe.com/docs/marketo-measure/using/security-and-compliance/compliance-related-resources/ ensuring-consent-for-gdpr-in-marketo-measure-js.html?lang=de and https://www.adobe.com/de/privacy.html .

 

2.8.12Microsoft Clarity

We use the service of Microsoft Corporation ("Microsoft"), One Microsoft Way, Redmond, WA 98052 USA, for user analysis in our online shop.

"Microsoft Clarity" refers to a Microsoft process that enables user analysis based on a pseudonymous user ID and thus on the basis of pseudonymous data, such as the evaluation of data on mouse movements or performance data from a website.

In particular, we process usage data (e.g. subpages visited in our online shop, interest in content, access times), meta and communication data (e.g. device information, IP addresses), location data (information on the geographic position of a device or a person) , movement data (e.g. mouse movements) in pseudonymised form. We have made the appropriate settings in such a way that the data is already collected by Microsoft, at least in pseudonymised form.

The legal basis for data processing is your consent within the meaning of Section 25 TTDSG and, insofar as personal data are to be processed, Article 6 Paragraph 1 lit. a) GDPR. A possible data transfer to the USA takes place on the basis of your express consent, Article 49 (1) (a) GDPR. You can revoke such consent at any time with effect for the future by changing your cookie settings via the link in the footer of our online shop.

 

Note : If you agree to the use of Microsoft Clarity, you also agree that your personal data will also be processed in the USA. According to the assessment of the European Court of Justice, the level of data protection in the USA is insufficient compared to that in the European Union. In particular, there is a risk that US authorities will gain access to your data. If you do not consent to the use of Microsoft Clarity, your personal data will not be transferred to the USA.

2.8.13 Apple Pay

In our online shop we use the services of Apple Pay, a service for online payment methods. Service provider is Apple Inc., Infinite Loop, Cupertino, CA 95014, USA.

If you select this service as a payment option during the ordering process, your data will be automatically transmitted to the service provider. The data transmitted is usually the name, e-mail address, IP address, telephone number and other data required to process the payment. Personal data related to the respective order are also necessary. In particular, there may be a mutual exchange of payment information such as bank details, card number, expiry date and CVC code, number of items, item number, data on goods and services, prices and taxes, information on previous purchasing behavior or other information on your financial situation.

The legal basis for processing is Section 25 II No. 2 TTDSG and, insofar as personal data is processed, Article 6 Paragraph 1 lit. b) GDPR. A possible data transfer to the USA takes place on the basis of Article 49 (1) (b) GDPR.

Note: The personal data can also be processed in the USA. According to the assessment of the European Court of Justice, the level of data protection in the USA is insufficient compared to that in the European Union. In particular, there is a risk that US authorities will gain access to your data. If you do not select Apple Pay as the payment service during the ordering process, your personal data will not be transmitted to the USA.

You can find out more about the data processed through the use of Apple Pay in the privacy policy at https://www.apple.com/legal/privacy/de-ww/ .

2.8.14 PayPal

We use the online payment service PayPal in our online shop. The service provider is the American company PayPal Inc. The company PayPal Europe (S.à.rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg) is responsible for the European area.

Payments are processed via so-called PayPal accounts, which represent virtual private or business accounts. PayPal also offers the option of processing virtual payments via credit cards if you do not have a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to trigger online payments to third parties or to receive payments. PayPal also assumes trustee functions and offers buyer protection services.

If you select this service as a payment option during the ordering process, your data will be automatically transmitted to the service provider. The transmitted data is usually the name, e-mail address, IP address, telephone number and other data required to process the payment. Personal data related to the respective order are also necessary. In particular, there may be a mutual exchange of payment information such as bank details, card number, expiry date and CVC code, number of items, item number, data on goods and services, prices and taxes, information on previous purchasing behavior or other information on your financial situation.

The legal basis for processing is Section 25 II No. 2 TTDSG and, insofar as personal data is processed, Article 6 Paragraph 1 lit. b) GDPR. A possible data transfer to the USA takes place on the basis of Article 49 (1) (b) GDPR.

Note: The personal data can also be processed in the USA. According to the assessment of the European Court of Justice, the level of data protection in the USA is insufficient compared to that in the European Union. In particular, there is a risk that US authorities will gain access to your data. If you do not select PayPal as the payment service during the ordering process, your personal data will not be transmitted to the USA.

PayPal Inc. may be the recipient of the data.

For more information about the data processed by using PayPal, see the privacy policy at https://www.paypal.com/webapps/mpp/ua/privacy-full?tid=331674042761 .

2.8.15 iDEAL

In our online shop we use iDEAL, a service for payment systems. Service provider is the Dutch company Currence BV, Gustav Mahlerplein 33-35, Amsterdam, Noord-Holland 1082 MS, The Netherlands.

If you select this service as a payment option during the ordering process, your data will be automatically transmitted to the service provider. The data transmitted is usually the name, e-mail address, IP address, telephone number and other data required to process the payment. Personal data related to the respective order are also required. In particular, there may be a mutual exchange of payment information such as bank details, card number, expiry date and CVC code, number of items, item number, data on goods and services, prices and taxes, information on previous purchasing behavior or other information on your financial situation.

The legal basis for processing is Section 25 II No. 2 TTDSG and, insofar as personal data is processed, Article 6 Paragraph 1 lit. b) GDPR.

For more information about the data processed through the use of PayPal, see the privacy statement at https://www.ideal.nl/en/disclaimer-privacy-statement/ .

8/2/16 Klarna

In our online shop we use Klarna, a service for payment systems. Service provider is the Swedish company Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If you select this service as a payment option during the ordering process, your data will be automatically transmitted to the service provider. The data transmitted is usually the name, e-mail address, IP address, telephone number and other data required to process the payment. Personal data related to the respective order are also necessary. In particular, there may be a mutual exchange of payment information such as bank details, card number, expiry date and CVC code, number of items, item number, data on goods and services, prices and taxes, information on previous purchasing behavior or other information on your financial situation.

The legal basis for processing is Section 25 II No. 2 TTDSG and, insofar as personal data is processed, Article 6 Paragraph 1 lit. b) GDPR.

You can find more information about the data processed by using Klarna in the data protection declaration at https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf .

2.8.17 Sofortüberweisung

In our online shop we use "Sofortüberweisung", a service for payment systems. The service provider is Sofort GmbH, Theresienhöhe 12, 80339 Munich. Sofort GmbH is a subsidiary of Klarna AB, Sveavägen 46, 111 34 Stockholm.

If you select this service as a payment option during the ordering process, your data will be automatically transmitted to the service provider. The data transmitted is usually the name, e-mail address, IP address, telephone number and other data required to process the payment. Personal data related to the respective order are also required. In particular, there may be a mutual exchange of payment information such as bank details, card number, expiry date and CVC code, number of items, item number, data on goods and services, prices and taxes, information on previous purchasing behavior or other information on your financial situation.

The legal basis for processing is Section 25 II No. 2 TTDSG and, insofar as personal data is processed, Article 6 Paragraph 1 lit. b) GDPR.

You can find more information about the data processed by using Klarna in the data protection declaration at https://www.sofort.com/datenschutz.html?tid=331674120728 .

8/2/18 Pinterest

In our online shop we use elements (buttons and widgets) from the social media network Pinterest, the company Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA. For the European area, the Irish company Pinteres Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland).

Pinterest is a social media platform that specializes in graphic elements, especially photographs. Pinterest sorts the various user-generated content by hobbies and interests, making it easier for users to share common hobbies and interests.

We use Pinterest so that you can also exchange information about our products via Pinterest. The data collected can also be used for advertising purposes, so that we can show advertising messages to precisely those people who are interested in our products.

When using Pinterest, so-called log data can be stored. This includes information about your browser, your IP address, your activities within our online shop (e.g. search queries), the date and time of your visit as well as further cookie and device data. Cookies are saved in particular when you interact with an embedded Pinterest element. In this case, you will also be regularly redirected to the Pinterest page itself.

If you have an account with Pinterest yourself and are logged in with it, the data collected via our online shop can be added to your account and used for web purposes.

The legal basis for data processing is your consent within the meaning of Section 25 TTDSG and, insofar as personal data are to be processed, Article 6 Paragraph 1 lit. a) GDPR. A possible data transfer to the USA takes place on the basis of your express consent, Article 49 (1) (a) GDPR. You can revoke such consent at any time with effect for the future by changing your cookie settings via the link in the footer of our online shop

Note : If you agree to the use of Pinterest, you also agree that your personal data will also be processed in the USA. According to the assessment of the European Court of Justice, the level of data protection in the USA is insufficient compared to that in the European Union. In particular, there is a risk that US authorities will gain access to your data. If you do not consent to the use of Pinterest, your personal data will not be transferred to the USA.

Pinterest Inc. may be the recipient of the data.

Pinterest processes the data in accordance with Pinterest's data policy: https://policy.pinterest.com/de/privacy-policy .

2.8.19 Tiktok

We use TikTok, a social media service, in our online shop. The service provider is Beijing Bytedance Technology Ltd. The company TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland is responsible for the European area.

TikTok is a social media platform specializing in short user-generated video assets.

The legal basis for data processing is your consent within the meaning of Section 25 TTDSG and, insofar as personal data are to be processed, Article 6 Paragraph 1 lit. a) GDPR. A possible data transfer to the People's Republic of China takes place on the basis of your express consent, Article 49 (1) (a) GDPR. You can revoke such consent at any time with effect for the future by changing your cookie settings via the link in the footer of our online shop.

Note : If you consent to the use of TikTok, you also consent to your personal data being processed in the People's Republic of China. There is no data protection level comparable to that of the European Union. In particular, extensive access by the Chinese authorities is possible. If you do not consent to the use of TikTok, your personal data will not be transferred to the People's Republic of China

The processing of the data by TikTok takes place within the framework of the TikTok data policy: https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE .

3. Your Rights

In connection with the processing of your personal data by us, you have the following rights:

3.1 Revocation of granted consent

You can revoke any consent given to us at any time with effect for the future.

3.2 Information

According to Art. 15 GDPR, you have the right to receive confirmation as to whether or not we are processing personal data relating to you. Insofar as we process personal data relating to you, you have the right to information about the information listed in Art. 15 GDPR.

3.3 Rectification and Deletion

In addition, you have the right to correct incorrect and complete incomplete personal data in accordance with Art. 16 GDPR and to delete your personal data if the requirements of Art. 17 GDPR are met.

3.4 Restriction of Processing

Under the conditions of Art. 18 GDPR, you can restrict the processing of your personal data.

3.5 Release of Data and Data Transfer

In addition, you have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format. You also have the right, insofar as this is technically feasible, for us to transmit this data to another person responsible on your instruction. The right to data transfer only exists for personal data for which the processing is based on consent in accordance with Article 6 Paragraph 1 Letter a) GDPR or on a contract in accordance with Article 6 Paragraph 1 Letter b) GDPR and the processing is carried out with the help of automated procedures.

The right to transfer data to another responsible person is excluded if this would affect the rights and freedoms of other persons (e.g. personal data of third parties, our business and trade secrets or copyrights).

3.6 Right to Object

Pursuant to Article 21 GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation, insofar as this is based on Article 6 Paragraph 1 lit. e) or lit. f ) GDPR. In the event of such an objection, we will no longer process this data unless we can prove that there are compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is necessary to assert, exercise or defend legal claims serves.

If we process your personal data in order to operate direct advertising , you have the right to object at any time to the processing of your personal data for the purpose of such advertising . In this case, we will no longer process your personal data for direct marketing purposes

 

Asserting all of the above rights is basically free of charge for you.

In the case of manifestly unfounded or - especially in the case of frequent repetition - excessive requests for the rights under II. to VI. However, we can either

(i) charge a reasonable fee, taking into account the administrative costs of providing the information or communication or taking the requested action, or

(ii) refuse to act on the request.

To exercise your rights, please use the contact addresses given above, in particular email.

3.7 Right to Complain

If you believe that we are not properly complying with our data protection obligations, you can contact the data protection supervisory authorities at any time.

You can reach the supervisory authority ultimately responsible for us as follows:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestr. 2-4
40213 Dusseldorf

Telephone: 0211/38424-0
Fax: 0211/38424-999
Email: poststelle@ldi.nrw.de

4. Obligation to Provide Data

There is no legal or contractual obligation to provide us with personal data. In the case of the data that is absolutely necessary for the provision of the respective service (see above), however, it is necessary to provide it if you want to make use of these services

5. Updating this Privacy Policy

It may be necessary to update this data protection declaration from time to time, for example due to new legal or official requirements and new offers in our online shop. We will inform you at this point. In general, we recommend that you visit this data protection declaration regularly to check whether there have been any changes. You can recognize such changes, among other things, by the fact that the status specified at the bottom of this document has been updated.

Status: January 2023