NEONA
Lieferschutz
Dein Paket ist, abgesichert.
Egal was auf dem Weg passiert.
DATA PROTECTION DECLARATION
1. name and address of the responsible person
We, Neona Living GmbH, are the data protection controller within the meaning of Art. 4 No. 7 DSGVO for the website including online shop (hereinafter jointly referred to as "Online Shop") available at https://www.neona.store/ and the associated data processing. If offers from other providers ("third-party offers") are accessible from our online shop, our data protection declaration does not apply to these third-party offers. In this case, we are also not responsible for the processing of your personal data within the scope of such third-party offers.
Our contact details are:
Neona Living GmbH
Düsseldorfer Straße 26
51379 Leverkusen
Phone: 0049 (0)214 50680266
E-mail: support@neona.store
If you have any questions regarding data protection, you can also contact datenschutz@neona.store
2. Type and scope of data processing
2.1 Provision of the online shop and log files
When you use our online shop for information purposes only, i.e. if you do not register or otherwise provide us with information and only inform us about our products, we only process the data that your browser transmits to our server. When you visit our online shop, we process the data that is technically necessary to display our online shop to you and to ensure its stability and security.
We process the following data for this purpose:
- IP address (anonymised)
- date and time of the request
- time zone difference to Greenwich Mean Time (GMT)
- content of the request (specific page)
- access status/HTTP status code
- amount of data transferred in each case
- website from which the request comes
- browser
- language and version of the browser software.
The IP address can be a personal data, because under certain circumstances it is possible to find out the identity of the owner of the Internet access used by obtaining information from the respective Internet provider. However, we only process the IP address in anonymised form so that it no longer has any personal reference.
The aforementioned data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the online shop, this is the case when the respective session has ended.
In the case of storage of data in so-called log files, this is the case after seven days at the latest.
2.2 Processing your enquiries
We process the personal data that you voluntarily provide to us when contacting us, in particular by e-mail, via our contact form or via our chat form.
The data you provide in this regard (such as your e-mail address, your name if applicable, your telephone number, documents uploaded to the chat form or your message to us) will only be processed for correspondence with you and for the purpose for which you have provided us with the data as part of the communication, for example to answer your questions or to contact you at your request.
The legal basis for the processing of the data is therefore your consent pursuant to Art. 6 (1) a) DSGVO. Insofar as the processing is necessary to fulfil a contract with you or to carry out pre-contractual measures at your request, the legal basis for the processing is Art. 6 para. 1 lit. b) DSGVO.
We delete the data accruing in this context after the storage is no longer necessary to achieve the purpose, in particular after the processing of the enquiry has been completed, unless statutory retention obligations stipulate storage beyond this.
If you contact us by e-mail and/or request that we contact you by post, e-mail or telephone, you must at least provide us with your contact details if you want us to contact you.
2.3 Processing for newsletter registration
We offer a newsletter in our online shop to inform you regularly about our products and services.
The newsletter is sent via the provider Klaviyo, 125 Summer St., Boston, MA 02110, USA.
Klaviyo may also process the data you provide for us in the USA. We therefore expressly point out that, in the opinion of the European Court of Justice, there is in principle no adequate level of data protection in the USA that could guarantee the protection of your personal data.
For this reason, Klaviyo undertakes to us by concluding so-called standard data protection clauses to establish a level of data protection comparable to that in the European Union, and thus also appropriate, even when processing your data in the USA. These standard data protection clauses have been supplemented by additional individual obligations on the part of Klaviyo.
The transfer of your personal data to the USA is therefore based (in addition to your consent, see below) on Art. 46 para. 2 lit. c) DSGVO.
Further information on the standard data protection clauses at Klaviyo can be found at https://www.klaviyo.com/legal/data-processing-agreement.
Further general information on data protection at Klaviyo can be found at: https://www.klaviyo.com/legal/privacy/privacy-notice.
As a subscriber, you may also be informed about circumstances relevant to the newsletter service or the registration itself (e.g. changes to the newsletter offer or technical reasons) in addition to the actual newsletter. Such information will also be sent to the e-mail address you have provided.
To register for the newsletter, it is sufficient to provide your e-mail address (mandatory field). If you do not provide us with your e-mail address, we will not be able to send our newsletter to you.
In order to verify that a registration has actually been made by the owner of the registered e-mail address, we use the so-called "double opt-in" procedure. For this purpose, after submitting your e-mail address, you will receive a confirmation e-mail from us in which you must confirm your registration for the newsletter by clicking on a link. Only after this confirmation will your e-mail address be included in the newsletter distribution list. As proof for us, we log the registration for the newsletter, the sending of the confirmation e-mail and the receipt of the requested confirmation. The time of registration and confirmation as well as your IP address are also stored.
No other data is collected. All collected data is processed exclusively for sending the newsletter.
The data is stored for the duration of the subscription to our newsletter and deleted after unsubscribing from the newsletter, unless legal retention periods require longer storage.
The legal basis for sending the newsletter is your consent according to Art. 6 para. 1 lit. a) DSGVO. The legal basis for logging the aforementioned data is the protection of our legitimate interest pursuant to Art. 6 (1) f) DSGVO.
You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. For this purpose, there is a corresponding unsubscribe link in every newsletter. You can also inform us of your revocation at any time via the above-mentioned contact options.
In order to be able to improve our newsletter, we may collect data for statistical evaluation and success measurement of the newsletter. This is done exclusively on the basis of the consent you give when registering for the newsletter, Art. 6 para. 1 lit. a) DSGVO. You can revoke this consent at any time with effect for the future.
2.4 Orders via our online shop
When you place an order via our online shop, we process the following information
Name
Delivery address
Email address, telephone number
Payment information (IBAN, credit card information, PayPal, Sofortüberweisung, Klarna)
optional: company, flat, room, etc.
(hereinafter: "order data")
If you do not provide us with the mandatory order data, we will not be able to process your order.
In addition, we store your IP address (anonymised) as well as the date and time of the order.
We process your order data as described above for the purpose of processing the purchase contract. The data is processed accordingly on the basis of Art. 6 para. 1 lit. b) DSGVO.
We transmit your address data as well as your name to the company commissioned with the delivery. If it is necessary for the processing of the contract, we also transmit your e-mail address or your telephone number to the company commissioned with the delivery in order to coordinate a delivery date.
Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years.
2.5 Data protection notice on the use of WhatsApp
You can use WhatsApp to contact us and start a conversation, for example to receive further information about our products. For offering and using WhatsApp, we use the software solution of Charles GmbH, Gartensstr. 86-87, 10115 Berlin ("Charles"), under a contract processing agreement. Charles stores all personal data in the EU. As an official WhatsApp partner, Charles uses the WhatsApp Business API with the consequence that no other third parties or WhatsApp gain access to your communication content within the scope of our responsibility.
Your use of WhatsApp is subject to the agreements you have with WhatsApp. In accordance with the WhatsApp terms of use, we have your telephone number, your user name and, if applicable, your status including your profile photo when you contact us. We also use this and other information provided by you to recognise you and your preferences and to reply to your WhatsApp messages. The legal basis here is your consent pursuant to Art. 6(1)(a) DSGVO.
We will also send you newsletters via WhatsApp if you have given us your consent to do so.
You can revoke your consent at any time with effect for the future. To do so, you can inform us of your revocation via WhatsApp or via the contact addresses given above.
For further information, please refer to:
Charles GmbH: https://www.hello-charles.com/c-com-blog/whatsapp-newsletters
WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland: https://www.whatsapp.com/legal/privacy-policy-eea
2.6 SMS-Marketing
You also have the option of subscribing to our text notifications. For this we need your mobile phone number.
If you provide us with this, we will use your phone number to send you information about our products and services at regular intervals by text message. This may incur messaging and data charges depending on the mobile tariff you have taken out.
The legal basis for SMS marketing is your consent within the meaning of Art. 6 Para. 1 lit. a) DSGVO. You can revoke this with effect at any time by responding to our messages with responses such as "STOP", "END", "CANCEL", "UNSUBSCRIBE" or "QUIT" or by contacting us at the above addresses.
We will keep your phone number for as long as you are registered for our SMS marketing. If you revoke your consent, you may only receive one more message confirming your revocation (i.e. your unsubscription) for technical reasons.
2.7 Transfer to third countries
If we transfer data to a third country outside the European Economic Area, e.g. because we commission service providers there, we are entitled to do so in particular if you have expressly consented, if we thereby fulfil contractual or pre-contractual obligations or if the respective recipient of the data has concluded standard data protection clauses with us that are adapted to the individual case. You will be informed separately in the context of this data protection declaration about any transfers to a third country in individual cases.
2.8 Use of cookies, tracking and marketing tools
In addition to the aforementioned data, cookies are stored on your end device when you use our online shop. Cookies are data records that are stored by the internet browser on your end device. A cookie contains, for example, a string of characters that enables your browser to be uniquely identified when you return to our online shop. Cookies cannot execute programs or transmit viruses to your end device. They are used, for example, to make our website more user-friendly and effective overall.
As a rule, you can set your browser so that you are informed about the setting of cookies, the setting of cookies is excluded for certain cases or in general, or you only allow the setting of cookies in individual cases. You can also delete stored cookies in the settings of your browser. Without cookies, however, the functionality of our online shop may be limited.
We use both cookies that are absolutely necessary for the operation of our online shop ("technically necessary cookies") and cookies that are used for analysis, marketing or other convenience purposes ("other cookies"). We may then also pass on information about your use of our online shop to the providers of such cookies. They may combine the information they receive with other data that you have provided to them or that they have collected in the course of your use of our online shop.
The use of all those cookies that are not technically necessary and the associated processing of your (personal) data takes place exclusively on the basis of your consent, Art. 6 para. 1 lit. a) DSGVO or § 25 para. 1 TTDSG.
You can revoke your consent at any time with effect for the future by clicking on the link in the footer "Cookie settings" in our online shop.
Insofar as technically necessary cookies are used to process personal data, the legal basis is Art. 6 para. 1 lit. f) DSGVO, as we and you both have a legitimate interest in the secure and customer-friendly display of our online shop. Any interests, fundamental rights and freedoms on your part in the non-processing of personal data do not outweigh this, as the use of technically necessary cookies is a basic requirement for the functioning of the Internet and can therefore also be expected from you.
IMPORTANT NOTE: Insofar as the use of cookies and the associated processing of your (personal) data is accompanied by a transfer of your data to a third country outside the European Economic Area, you consent at the same time pursuant to Art. 49 (1) a) DSGVO to your data being transferred to the third country then described in the individual case (but in particular to the USA) and processed there.
In detail, we use the following cookies:
|
Cookie |
|
|
|
1P_JAR |
Marketing |
A cookie from Google LLC. to provide advertising that is tailored to the user. |
|
_ab |
technically necessary |
Used in conjunction with access to admin. |
|
_abck |
technically necessary |
A "TikTok" cookie to protect against unauthorised access to the TikTok network and to prevent tampering with TikTok data. |
|
AEC |
technically necessary |
A cookie from Google LLC. to prevent spam, fraud and abuse. The cookie ensures that requests within a browser session are made by the user and not by other websites. |
|
AID |
technically necessary |
A cookie from Google LLC to optimise Google services. |
|
APISID |
Marketing |
A cookie from Google LLC to optimise the "Google Adwords" service. |
|
_bc_c_set |
technically necessary |
Required to comply with data protection standards |
|
_biz_uid |
|
A cookie set by Adobe Marketo Measure. Adobe Marketo Measure provides us with information to improve our marketing strategies. |
|
Cart |
technically necessary |
Used in conjunction with the shopping trolley. |
|
cart_currency |
technically necessary |
Required to display prices in the online shop in the applicable currency. |
|
cart_sig |
technically necessary |
Required to be able to ensure the security of the online shop. |
|
cart_ts |
technically necessary |
Required to be able to carry out the payment process. |
|
cart_ver |
technically necessary |
Required to be able to fill the shopping cart. |
|
__cfduid |
Technically necessary |
The _cfduid cookie helps Cloudflare detect malicious visitors to our customers' websites and minimise blocking of legitimate users. |
|
checkout_session_lookup |
technically necessary |
Required to complete the payment process. |
|
checkcout_session_token |
technically necessary |
Required to complete the payment process. |
|
CONSENT |
technically necessary |
A cookie of Google LLC, which together with the cookie "CONSENT" stores the data on the user's consents within the meaning of the DSGVO and TTDSG ("cookie decisions"). |
|
cookie_check |
technically necessary |
This cookie is set when the PayPal payment method is selected and is required for this payment method. |
|
c_user |
Marketing |
A "Facebook" cookie from Facebook Inc. that stores the user IDs of individual users and can thus assign the page collected on our site to individual users. |
|
datr |
technically necessary |
A cookie from Facebook Inc. to prevent spam, fraud and abuse. The cookie ensures that requests within a browser session are made by the user and not by other websites |
|
ddi |
technisch notwendig |
This cookie is set when the PayPal payment method is selected and is required for this payment method. |
|
d_id |
technically necessary |
This cookie is set when the PayPal payment method is selected and is required for this payment method. |
|
DSID |
Marketing |
A "Google Analytics" cookie from Google LLC. that stores user habits and thus enables Google LLC to improve its marketing offer. |
|
DV |
Marketing |
A cookie from Google LLC. to provide advertising that is tailored to the user. |
|
enforce_policy |
technisch notwendig |
This cookie is set when the PayPal payment method is selected and is required for this payment method. |
|
_fbp |
|
A "Facebook" cookie from Facebook Inc. to store and count page views. |
|
FPID |
|
A "Google Analytics" cookie from Google LLC to store and count page views. |
|
_ga |
|
A "Google Analytics" cookie from Google LLC to store and count page views. |
|
_ga_SFD46GHZ7S |
|
A "Google Analytics" cookie from Google LLC to store and count page views. |
|
Gdpr_legal_cookie_session |
technically necessary |
Used in conjunction with GDPR legal cookie. |
|
HSID |
technically necessary |
A cookie from Google LLC. to prevent spam, fraud and abuse. The cookie ensures that requests within a browser session are made by the user and not by other websites. |
|
IDE |
|
A "Google Analytics" cookie from Google LLC. to provide advertising that is customised to the user. |
|
_landing_page |
|
Enables the user behaviour to be evaluated when calling up the landing page (https://www.neona.store/). |
|
LANG |
technically necessary |
This cookie is set when the PayPal payment method is selected and is required for this payment method. The cookie is required in order to be able to play PayPal in the applicable language version. |
|
mid |
|
An "Instagram" cookie from Instagram LLC (subsidiary of Meta Inc.) to optimise the services and offers of Instagram LLC. The cookie sets a unique user ID. |
|
NID |
|
A cookie from Google LLC. to provide advertising that is tailored to the user. It also stores user habits and thus enables Google LLC to improve its marketing offer. |
|
nsid |
technically necessary |
This cookie is set when the PayPal payment method is selected and is required for this payment method. |
|
OGP |
|
A "Google Adwords" cookie from Google LLC. to provide advertising that is customised to the user. |
|
oo |
|
A "Facebook" cookie from Facebook Inc. that stores users' usage behaviour and thus enables Facebook Inc. to improve its marketing offer. |
|
_orig_referrer |
|
Required to use the online shop. |
|
OTZ |
|
This cookie is set when the payment method "Google Pay" is selected and is required for this payment method. |
|
_pin_unauth |
|
A "Pinterest" cookie from Pinterest Inc. that stores user behaviour and thus enables Pinterest Inc. to improve its marketing offer. |
|
SOFUEB |
|
A "Sofortüberweisung" cookie from Sofort GmbH, which stores the session ID and enables the user to pay with the "Sofortüberweisung" payment service during the payment process. |
|
rmuc |
|
This cookie is set when the payment method "PayPal" is selected and is required for this payment method. |
|
_s |
|
Shopify Analyse Cookie. |
|
SAPISID |
|
This cookie improves the function of "Google Adwords" of the provider Google LLC. |
|
sb |
|
A "Facebook" cookie from Facebook Inc. that stores details about the browser the user is using. |
|
secret |
|
Used by Shopify for the payment process. |
|
Secure_customer_digest |
|
Required for login to the online shop |
|
secure_customer_sig |
|
Required so that users are recognised by our online shop after logging in and do not have to repeatedly enter their login data. |
|
_secure_session_id |
|
Used in conjunction with navigation through a shop window. |
|
__Secure-1PAPISID |
|
A cookie set by Google LLC that helps the company to create a usage profile of individual online shop visitors and thus helps to improve Google LLC's personalised advertising. |
|
_shopify _shopify_d _shopify_fs _shopify_s _shopify_sa_p _shopify_sa_t _shopify_uniq _shopify_visit _shopify_y _ab_test_* _ki_r _kr_t |
|
A cookie set by Shopify Ltd. that helps us to evaluate the usage behaviour of our online shop. |
|
_shopify_tm |
|
Used to manage the privacy settings of clients. |
|
_shopify_tw |
|
Used to manage the privacy settings of clients. |
|
_shopify_m |
|
Used to manage the privacy settings of clients. |
|
_shopify_u |
|
Used to manage the privacy settings of clients. |
|
SID |
|
The cookie protects data traffic when using the "Google Maps" service and helps to protect against misuse and manipulation of the service. |
|
SOCS |
|
A cookie of Google LLC, which together with the cookie "CONSENT" stores the data on the user's consents within the meaning of the GDPR and TTDSG ("cookie decisions") for the Google services. |
|
SSID |
|
A cookie set by Google LLC that helps the company to create a usage profile of individual online shop visitors and thus helps to improve Google LLC's personalised advertising. |
|
_storefront_u |
|
Used to facilitate the updating of customer account information. |
|
Storefron_digest |
|
Required so that users are recognised by our online shop after logging in and do not have to repeatedly enter their login data. |
|
_tracking_consent |
|
For Shopify User Consent Tracking. |
|
Tracked_start_checkout |
|
Shopify analysis regarding the checkout. |
|
ts |
|
This cookie is set when the payment method "PayPal" is selected and is required for this payment method. |
|
_tt_enable_cookie |
|
A cookie set by TikTok Ltd. that ensures the functioning of other marketing cookies set by TikTok Ltd. |
|
_ttp |
|
A cookie set by TikTok Ltd. that evaluates usage behaviour on our online shop in order to tailor personalised advertising on the TikTok platform to the user. |
|
_uetvid |
|
A "Microsoft Clarity" cookie from Microsoft Inc. to store and count page views. |
|
ui_experience |
|
This cookie is set when the payment method "PayPal" is selected and is required for this payment method. |
|
x-pp-s |
|
This cookie is set when the payment method "PayPal" is selected and is required for this payment method. |
|
xs |
|
A "Facebook" cookie from Facebook Inc., which assigns a session ID to each call to this online shop and can thus store the data collected in a session ID. |
|
XSRF-Token |
|
Used in conjunction with GDPR legal cookie. |
|
_y |
|
Collects data that helps us to evaluate the usage behaviour of our online shop. |
2.8.1 Use of Google Analytics
This online shop uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The information generated by the Google Analytics cookies about your use of this online shop (including your IP address) may be transmitted to and stored by Google on servers in the United States. However, we use the function "anonmyizeIP to ensure anonymised collection of IP addresses (so-called IP masking). This means that your IP address is shortened within the member states of the EU or in other contracting states of the Agreement on the European Economic Area before being transmitted to Google. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Google will use this information on our behalf for the purpose of evaluating your use of the online shop, compiling reports on online shop activity and providing other services relating to online shop activity and internet usage to us.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
The legal basis for the data processing is your consent within the meaning of § 25 TTDSG and, insofar as personal data should be processed, Art. 6 para. 1 lit. a) DSGVO. A possible transfer of data to the USA is based on your express consent, Art. 49 para. 1 lit. a) DSGVO. You can revoke your consent at any time with effect for the future. To do so, you can change your cookie settings via the link in the footer in our online shop.
The personal data will be deleted or anonymised after 14 months at the latest.
Further details on data processing within the scope of Google Analytics are also available at https://privacy.google.com/businesses/processorterms/. http://www.google.com/analytics/terms/de.html, http://www.google.de/intl/de/policies/privacy.
Note: Please note the further information on the use of services under 2.8.6.
2.8.2 Use of Google Remarketing
This online shop uses Google Remarketing, a service of Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, whose parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The legal basis for data processing is your consent within the meaning of Section 25 TTDSG and, insofar as personal data should be processed, Art. 6 (1) a) DSGVO. A possible transfer of data to the USA is based on your express consent, Art. 49 para. 1 lit. a) DSGVO. You can revoke your consent at any time with effect for the future. To do so, you can change your cookie settings via the link in the footer in our online shop.
Google Remarketing is an application that enables us to recognise you after you have visited our online shop and to address you via individual product displays or advertising.
This application works in such a way that Google recognises your visit to our online shop and your clicking on certain content in our online shop and displays our advertising in a targeted manner when you continue to use the Internet (so-called remarketing). For this purpose, Google places cookies in your browser, which are used to store and analyse your behaviour when visiting various websites.
With regard to the analysis, Google declares that the data collected in the course of remarketing will not be merged with your personal data stored by Google. According to Google, all data is also processed pseudonymously and only pseudonymous visitor profiles are created.
Even after you have given your consent, you can permanently deactivate the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: https://www.google.com/settings/ads/plugin.
Further information on Google's data protection policy can be found at: https://policies.google.com/technologies/ads, https://policies.google.com/privacy or https://adssettings.google.com/.
Note: Please note the further information on the use of services under 2.8.6.
2.8.3 Use of Google Adwords Conversion Tracking
This online shop uses Google Ads, a service of Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, whose parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The legal basis for data processing is your consent within the meaning of Section 25 TTDSG and, insofar as personal data should be processed, Art. 6 (1) a) DSGVO. A possible transfer of data to the USA is based on your express consent, Art. 49 para. 1 lit. a) DSGVO. You can revoke your consent at any time with effect for the future. To do so, you can change your cookie settings via the link in the footer in our online shop.
Google Ads is an online advertising programme with which we place ads in search engines. As part of this programme, we also use conversion tracking. Google Conversion Tracking is an analysis service offered by Google. When you click on an ad placed by Google, a conversion tracking cookie is placed on your terminal. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used to personally identify individuals.
If you visit certain parts of our online shop and the cookie has not yet expired, Google and we can recognise that you clicked on our ad and were redirected to our online shop. Each Google Ads customer receives a different cookie. So there is no way to track cookies across Ads customers' websites.
The information obtained using the conversion cookie is processed to create conversion statistics for Google Ads customers. This tells us the total number of visitors who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that would allow us to personally identify visitors.
Details on Google's conversion tracking can be found at https://support.google.com/google-ads/answer/1722022.
For more information about Google's privacy policy, please visit: https://policies.google.com/technologies/ads, https://policies.google.com/privacy or https://adssettings.google.com/.
Note: Please refer to the further notes on the use of the services under 2.8.6.
2.8.4 Google Tag Manager
We use the Google Tag Manager of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, whose parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, in our online shops.
This is an organisational tool that enables us to integrate and manage other website tools, so-called "tags" (e.g. for marketing or analysis purposes) in our online shops.
The Google Tag Manager enables us to use tags (which are marked separately in this privacy policy) without having to integrate them individually into the source code of the website. Instead, the integration is carried out centrally via the Tag Manager.
No data is processed via the Google Tag Manager itself; it merely acts as a "manager" for the integrated tags. Only via these tags can cookies be set or (personal) data about the use of our online shop be processed. This is done exclusively on the basis of your consent within the meaning of § 25 TTDSG and, insofar as personal data should be processed, Art. 6 para. 1 lit. a) DSGVO. A possible transfer of data to the USA is based on your express consent, Art. 49 para. 1 lit. a) DSGVO. You can revoke your consent at any time with effect for the future. To do so, you can change your cookie settings via the link in the footer in our online shop.
We have agreed to the transfer of anonymised data to Google in the account settings of the tag manager. However, this is only data about the application and use of the tag manager, but not data relating to you. Furthermore, Google only receives this data in anonymised form, so that it is impossible to draw conclusions about an identified or identifiable person. Furthermore, Google removes all information that could identify our online shop. Google combines this data with numerous other anonymous website data and creates user trends as part of benchmarking measures. In benchmarking, one's own results can be compared with those of competitors. In this way, processes can ultimately be optimised.
Further information on Google Tag Manager can be found at https://www.google.com/intl/de/tagmanager/faq.html.
Note: Please note the further information on the use of the services under 2.8.6.
2.8.5 Google Maps
We use the function for embedding GoogleMaps maps of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") in our online shop.
This function enables the visual display of geographical information and interactive maps. In doing so, Google also collects, processes and uses data of the visitors of the online shop when calling up the pages in which GoogleMaps maps are integrated.
The legal basis for the data processing is your consent within the meaning of § 25 TTDSG and, insofar as personal data should be processed, Art. 6 para. 1 lit. a) DSGVO. A possible transfer of data to the USA is based on your express consent, Art. 49 para. 1 lit. a) DSGVO. You can revoke your consent at any time with effect for the future. To do so, you can change your cookie settings via the link in the footer in our online shop.
Note: Please note the further information on the use of services under 2.8.6.
2.8.6 Further notes on the use of the services of Google Ireland Limited
You can prevent the collection and transmission of the data generated by the cookies and related to your use of the online shop (incl. your IP address) to Google as well as the processing of this data by Google by setting your browser software accordingly or by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Please note that you will need to reinstall the browser add-on to disable Google's cookies again if your browser or device is later deleted, formatted or reinstalled.
We use Google services to be able to analyse and regularly improve the use of our online shop. The statistics obtained enable us to improve our offer and make it more interesting for you as a user.
However, the legal basis for the use is exclusively your consent in the sense of § 25 TTDSG and, insofar as personal data should be processed, Art. 6 para. 1 lit. a) DSGVO.
You can revoke your consent at any time with effect for the future. To do so, you can change your cookie settings via the link in the footer in our online shop.
Note: If you consent to the use of Google services, you also consent to your personal data being processed in the USA. According to the European Court of Justice, the level of data protection in the USA is inadequate compared to the European Union. In particular, there is a risk that US authorities may access your data. If you do not consent to the use of Google services, your personal data will not be transferred to the USA.
Recipients of the data may be Google Ireland Ltd. and Google LLC.
2.8.7 Google Pay
In our online shop, we use the online payment provider Google Pay of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, whose parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
If you choose to select this service as a payment option during the ordering process, your data will automatically be transmitted to the service provider. The transmitted data is usually your name, e-mail address, IP address, telephone number and other data that is necessary to process the payment. Also necessary are such personal data that are related to the respective order. In particular, there may be a mutual exchange of payment information, such as bank details, card number, validity date and CVC code, number of items, item number, data on goods and services, prices and tax levies, information on previous purchasing behaviour or other information on your financial situation.
The legal basis for the processing is § 25 II No.2 TTDSG and, insofar as personal data is processed, Art. 6 (1) lit. b) DSGVO. A possible transfer of data to the USA is based on Art. 49 para. 1 lit. b) DSGVO.
Note: Personal data may also be processed in the USA. According to the assessment of the European Court of Justice, there is only an insufficient level of data protection in the USA compared to the European Union. In particular, there is a risk that US authorities may access your data. If you do not select Google Pay as a payment service during the ordering process, your personal data will not be transferred to the USA.
Recipients of the data may be Google Ireland Ltd. and Google LLC.
For more information about Google's privacy policy, please visit: https://policies.google.com/technologies/ads, https://policies.google.com/privacy or https://adssettings.google.com/.
2.8.8 Facebook Pixel, Custom Audiences and Facebook Conversion
Our online shop uses the so-called "Facebook Pixel" of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are a resident of the EU, by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). Facebook is a subsidiary of Meta Platforms Inc.
The legal basis for the data processing is your consent within the meaning of Section 25 TTDSG and, insofar as personal data should be processed, Art. 6 (1) lit. a) DSGVO. A possible data transfer to the USA is based on your explicit consent, Art. 49 para. 1 lit. a) DSGVO. If you have once consented to the collection by the Facebook pixel and the use of your data for the placement of Facebook ads, you can revoke this consent at any time with effect for the future. To do so, you can change your cookie settings via the link in the footer in our online shop.
Note: If you consent to the use of Facebook Pixel, you also consent to your personal data being processed in the USA. According to the European Court of Justice, the level of data protection in the USA is inadequate compared to the European Union. In particular, there is a risk that US authorities may access your data. If you do not consent to the use of Facebook Pixel, your personal data will not be transferred to the USA.
With the help of the Facebook Pixel, it is possible for Facebook to determine the visitors to our online shop as a target group for the placement of advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook pixel to display the Facebook ads we place only to Facebook visitors who are also interested in our online shop or who have certain characteristics (e.g. interest in similar topics or products as in our online shop; determined on the basis of the websites you have previously visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also try to ensure that our Facebook ads match your potential interest and do not annoy you. With the help of the Facebook pixel, we can also track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether you were also redirected to our online shop after clicking on our Facebook ad (so-called "conversion").
To set which types of advertisements are displayed to you within Facebook, you can visit the page set up by Facebook and follow the instructions there for the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads. To do this, you will need to log in to Facebook. The settings are made independently of the platform and apply to all devices you use for Facebook.
The recipient of the data may be Facebook Inc.
Specific information and details about the Facebook pixel and how it works can be found here: https://www.facebook.com/business/help/651294705016616.
The processing of data by Facebook takes place within the framework of Facebook's data policy: https://www.facebook.com/about/privacy/update?ref=old_policy.
2.8.9 Instagram
We use Instagram features on our site. Instagram is a social media platform of the company Instagram LLC, 1601 Willow Rd, Menlo park CA 94025, USA. Instagram has been a subsidiary of Meta Platforms Inc. since 2012.
The legal basis for data processing is your consent within the meaning of Section 25 TTDSG and, insofar as personal data should be processed, Article 6 (1) a) DSGVO. A possible data transfer to the USA is based on your explicit consent, Art. 49 para. 1 lit. a) DSGVO. Once you have consented to the use of Instagram, you can revoke this consent at any time with effect for the future. To do so, you can change your cookie settings via the link in the footer in our online shop.
Note: If you consent to the use of Instagram, you also consent to your personal data being processed in the USA. According to the European Court of Justice, the level of data protection in the USA is inadequate compared to the European Union. In particular, there is a risk that US authorities will access your data. If you do not consent to the use of Instagram, your personal data will not be transferred to the USA.
The recipient of the data may be Instagram LLC, but also any subsidiary of Meta Platforms.
The processing of data by Instagram takes place within the framework of Instagram's data policy: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.
2.8.10 Shopify
We use for the provision of our online shop due Dineste of the provider Shopify. The service provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
We have concluded an order processing contract with Shopify, under which Shopify processes your personal data for us, which is generated when you use this online shop, in particular in the context of orders.
The legal basis for the processing of your personal data in this regard by us is Art. 6 (1) lit. b) DSGVO, as this is necessary for the performance of the contract concluded with you.
The data is stored within the framework of the statutory retention periods.
As far as Shopify uses cookies, which should not be technically necessary, this is done exclusively on the basis of your consent, § 25 TTDSG and, as far as personal data should be processed, Art. 6 para. 1 lit. a) DSGVO. You can revoke such consent at any time with future effect by changing your cookie settings via the link in the footer in our online shop.
For more information about the data processed through the use of shopify, please refer to the Privacy Policy at https://www.shopify.de/legal/datenschutz or https://help.shopify.com/en/manual/youraccount/privacy/GDPR/gdpr-faq#will-shopify-sign-standardcontractual-clauses.
2.8.11 Adobe Marketo Measure
In our online shop, we use Adobe Marketo Measure, a marketing analysis service from Adobe Inc. The Irish company Adobe Systems Software Ireland Companies, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, is responsible for the European region.
Adobe evaluates the usage behaviour of our online shop visitors and grants us information that shows us how - based on this data - we can increase our marketing measures.
The legal basis for data processing is your consent within the meaning of § 25 TTDSG and, insofar as personal data should be processed, Art. 6 para. 1 lit. a) DSGVO. A possible transfer of data to the USA is based on your express consent, Art. 49 para. 1 lit. a) DSGVO. You can revoke such consent at any time with future effect by changing your cookie settings via the link in the footer in our online shop.
Note: If you consent to the use of Adobe Marketo Measure, you also consent to your personal data being processed in the USA. According to the European Court of Justice, the level of data protection in the USA is inadequate compared to the European Union. In particular, there is a risk that US authorities may access your data. If you do not consent to the use of Adobe Marketo Measure, your personal data will not be transferred to the USA.
For more information about the data processed through the use of Adobe Marketo Measure, please visit https://experienceleague.adobe.com/docs/marketo-measure/using/security-and-compliance/compliance-related-resources/ensuring-consent-for-gdpr-in-marketo-measure-js.html?lang=de and https://www.adobe.com/de/privacy.html.
2.8.12 Microsoft Clarity
We use the service of Microsoft Corporation ("Microsoft"), One Mirosoft Way, Redmond, WA 98052 USA, for user analysis in our online shop.
"Microsoft Clarity" is a Microsoft procedure that enables user analysis on the basis of a pseudonymous user ID and thus on the basis of pseudonymous data, such as the evaluation of data on mouse movements or website performance data.
In particular, we process usage data (e.g. sub-pages visited in our online shop, interest in content, access times), meta and communication data (e.g. device information, IP addresses), location data (information on the geographical position of a device or a person), movement data (e.g. mouse movements) in pseudonymised form. We have made the corresponding settings in such a way that the data collection by Microsoft already takes place at least in pseudonymised form.
The legal basis for the data processing is your consent within the meaning of § 25 TTDSG and, insofar as personal data should be processed, Art. 6 para. 1 lit. a) DSGVO. A possible transfer of data to the USA is based on your express consent, Art. 49 para. 1 lit. a) DSGVO. You can revoke such consent at any time with future effect by changing your cookie settings via the link in the footer in our online shop.
Note: If you consent to the use of Microsoft Clarity, you also consent to your personal data being processed in the USA. According to the European Court of Justice, the level of data protection in the USA is inadequate compared to the European Union. In particular, there is a risk that US authorities may gain access to your data. If you do not consent to the use of Microsoft Clarity, your personal data will not be transferred to the USA.
2.8.13 Apple Pay
We use the services of Apple Pay, a service for online payment processes, in our online shop. The service provider is Apple Inc, Infinite Loop, Cupertino, CA 95014, USA.
If you select this service as a payment option during the ordering process, your data will automatically be transmitted to the service provider. The transmitted data is usually the name, e-mail address, IP address, telephone number and other data that is necessary for processing the payment. Also necessary are such personal data that are related to the respective order. In particular, there may be a mutual exchange of payment information, such as bank details, card number, validity date and CVC code, number of items, item number, data on goods and services, prices and tax levies, information on previous purchasing behaviour or other information on your financial situation.
The legal basis for the processing is § 25 II No.2 TTDSG and, insofar as personal data is processed, Art. 6 (1) lit. b) DSGVO. A possible transfer of data to the USA is based on Art. 49 para. 1 lit. b) DSGVO.
Note: Personal data may also be processed in the USA. According to the assessment of the European Court of Justice, there is only an insufficient level of data protection in the USA compared to the European Union. In particular, there is a risk that US authorities will access your data. If you do not select Apple Pay as a payment service during the ordering process, your personal data will not be transferred to the USA.
You can find out more about the data processed through the use of Apple Pay in the Privacy Policy at https://www.apple.com/legal/privacy/de-ww/.
2.8.14 PayPal
We use the online payment service PayPal in our online shop. The service provider is the American company PayPal Inc. The company PayPal Europe (S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) is responsible for the European region.
Payments are processed via so-called PayPal accounts, which represent virtual private or business accounts. In addition, PayPal offers the possibility of processing virtual payments via credit cards if you do not have a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also assumes trustee functions and offers buyer protection services.
If you select this service as a payment option during the ordering process, your data is automatically transmitted to the service provider. The transmitted data usually includes your name, e-mail address, IP address, telephone number and other data necessary for processing the payment. Personal data that is related to the respective order is also necessary. In particular, there may be a mutual exchange of payment information, such as bank details, card number, validity date and CVC code, number of items, item number, data on goods and services, prices and tax charges, information on previous purchasing behaviour or other information on your financial situation.
The legal basis for the processing is § 25 II No.2 TTDSG and, insofar as personal data is processed, Art. 6 (1) lit. b) DSGVO. A possible transfer of data to the USA is based on Art. 49 para. 1 lit. b) DSGVO.
Note: Personal data may also be processed in the USA. According to the assessment of the European Court of Justice, there is only an insufficient level of data protection in the USA compared to the European Union. In particular, there is a risk that US authorities may access your data. If you do not select PayPal as a payment service during the ordering process, your personal data will not be transferred to the USA.
The recipient of the data may be PayPal Inc.
You can find out more information about the data processed through the use of PayPal in the privacy policy at https://www.paypal.com/webapps/mpp/ua/privacy-full?tid=331674042761.
2.8.15 iDEAL
We use iDEAL, a service for payment systems, in our online shop. The service provider is the Dutch company Currence B.V., Gustav Mahlerplein 33-35, Amsterdam, Noord-Holland 1082 MS, Netherlands.
If you select this service as a payment option during the ordering process, your data will automatically be transmitted to the service provider. The data transmitted is usually your name, e-mail address, IP address, telephone number and other data that is necessary to process the payment. Also necessary are such personal data that are related to the respective order. In particular, there may be a mutual exchange of payment information, such as bank details, card number, validity date and CVC code, number of items, item number, data on goods and services, prices and tax levies, information on previous purchasing behaviour or other information on your financial situation.
The legal basis for the processing is § 25 II No.2 TTDSG and, insofar as personal data is processed, Art. 6 (1) lit. b) DSGVO.
You can find out more information about the data processed through the use of PayPal in the privacy policy at https://www.ideal.nl/en/disclaimer-privacy-statement/.
2.8.16 Klarna
We use Klarna, a service for payment systems, in our online shop. The service provider is the Swedish company Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.
If you select this service as a payment option during the ordering process, your data is automatically transmitted to the service provider. The transmitted data is usually the name, e-mail address, IP address, telephone number and other data that are necessary for processing the payment. Also necessary are such personal data that are related to the respective order. In particular, there may be a mutual exchange of payment information, such as bank details, card number, validity date and CVC code, number of items, item number, data on goods and services, prices and tax levies, information on previous purchasing behaviour or other information on your financial situation.
The legal basis for the processing is § 25 II No.2 TTDSG and, insofar as personal data is processed, Art. 6 (1) lit. b) DSGVO.
You can find out more information about the data processed by using Klarna in the privacy policy at https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf.
2.8.17 Instant bank transfer
We use "Sofortüberweisung", a service for payment systems, in our online shop. The service provider is the company Sofort GmbH, Theresienhöhe 12, 80339 Munich. Sofort GmbH is a subsidiary of Klarna AB, Sveavägen 46, 111 34 Stockholm.
If you select this service as a payment option during the ordering process, your data will automatically be transmitted to the service provider. The transmitted data is usually the name, e-mail address, IP address, telephone number and other data necessary for processing the payment. Also necessary are such personal data that are related to the respective order. In particular, there may be a mutual exchange of payment information, such as bank details, card number, validity date and CVC code, number of items, item number, data on goods and services, prices and tax levies, information on previous purchasing behaviour or other information on your financial situation.
The legal basis for the processing is § 25 II No.2 TTDSG and, insofar as personal data is processed, Art. 6 (1) lit. b) DSGVO.
You can find out more information about the data processed through the use of Klarna in the privacy policy at https://www.sofort.com/datenschutz.html?tid=331674120728.
2.8.18 Pinterest
We use elements (buttons and widgets) of the social media network Pinterest, of the company Pinterest Inc, 808 Brannan Street, San Francisco, CA 94103, USA, in our online shop. The Irish company Pinteres Europe Ltd. (Palmerston House, 2nd Floor, Fenian Steet, Dublin 2, Ireland) is responsible for the European region.
Pinterest is a social media platform that specialises in graphic elements, especially photographs. Pinterest sorts the various user-generated content by hobbies and interests so that users can more easily share common hobbies and interests.
We use Pinterest so that you can also share information about our products via Pinterest. The data collected may also be used for web purposes so that we can show web messages to exactly those people who are interested in our products.
When using Pinterest, so-called log data may be stored. This includes information about your browser, your IP address, your activities within our online shop (such as search queries), the date and time of your visit as well as further cookie and device data. Cookies are stored in particular when you interact with an embedded Pinterest element. In this case, you will also be regularly redirected to the Pinterest page itself.
If you yourself have an account on Pinterest and are logged in with it, the data collected via our online shop can be added to your account and used for web purposes.
The legal basis for data processing is your consent within the meaning of § 25 TTDSG and, insofar as personal data should be processed, Art. 6 para. 1 lit. a) DSGVO. A possible transfer of data to the USA is based on your express consent, Art. 49 para. 1 lit. a) DSGVO. You can revoke such consent at any time with future effect by changing your cookie settings via the link in the footer in our online shop.
Note: If you consent to the use of Pinterest, you also consent to your personal data being processed in the USA. According to the European Court of Justice, the level of data protection in the USA is inadequate compared to the European Union. In particular, there is a risk that US authorities may access your data. If you do not consent to the use of Pinterest, your personal data will not be transferred to the USA.
The recipient of the data may be Pinterest Inc.
The processing of data by Pinterest takes place within the framework of Pinterest's data policy: https://policy.pinterest.com/de/privacy-policy.
2.8.19 TikTok
We use TikTok, a social media service, in our online shop. The service provider is the company Beijing Bytedance Technology Ltd. The company responsible for the European area is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
TikTok is a social media platform that specialises in short user-generated video elements.
The legal basis for data processing is your consent within the meaning of Section 25 TTDSG and, insofar as personal data should be processed, Art. 6 (1) lit. a) DSGVO. A possible transfer of data to the People's Republic of China is based on your express consent, Art. 49 para. 1 lit. a) DSGVO. You can revoke such consent at any time with future effect by changing your cookie settings via the link in the footer in our online shop.
Note: If you consent to the use of TikTok, you also consent to your personal data being processed in the People's Republic of China. There is no level of data protection there comparable to that in the European Union. In particular, extensive access by the Chinese authorities is possible. If you do not consent to the use of TikTok, your personal data will not be transferred to the People's Republic of China.
The processing of data by TikTok takes place within the framework of TikTok's data policy: https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE.
3. YOUR RIGHTS
You have the following rights in connection with the processing of your personal data by us:
3.1 Revocation of consent given
You can revoke any consent given to us at any time with effect for the future.
3.2 Information
Pursuant to Article 15 of the GDPR, you have the right to obtain confirmation as to whether or not we are processing personal data relating to you. Insofar as we process personal data relating to you, you have the right to be informed about the information listed in Art. 15 of the GDPR.
3.3 Correction and deletion
In addition, you have the right to have inaccurate personal data corrected and incomplete personal data completed in accordance with Article 16 of the GDPR and to have your personal data deleted if the conditions of Article 17 of the GDPR are met.
3.4 Restriction of processing
You can restrict the processing of your personal data under the conditions set out in Art. 18 of the GDPR.
3.5 Release of data and data transmission
In addition, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right, where technically feasible, to have us transfer this data to another controller at your instruction. The right to data transfer only exists for personal data where the processing is based on consent pursuant to Art. 6 (1) (a) DSGVO or on a contract pursuant to Art. 6 (1) (b) DSGVO and the processing is carried out with the help of automated procedures.
The right to transfer data to another controller is excluded if this would impair the rights and freedoms of other persons (e.g. personal data of third parties, our business and trade secrets or copyrights).
3.6 Right of objection
Pursuant to Art. 21 DSGVO, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation, insofar as this is carried out on the basis of Art. 6 para. 1 lit. e) or lit. f) DSGVO. In the event of such an objection, we will no longer process this data unless we can demonstrate that there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
Insofar as we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. In this case, we will no longer process your personal data for the purpose of direct marketing.
The assertion of all the above-mentioned rights is in principle free of charge for you.
However, in the case of manifestly unfounded or - especially in the case of frequent repetition - excessive requests relating to the rights under II. to VI. above, we may, in accordance with Article 12 (5) of the GDPR, either
(i) charge a reasonable fee which takes into account the administrative costs of informing or notifying you or implementing the requested measure; or
(ii) refuse to act on the request.
To exercise your rights, please contact us at the contact addresses above, in particular by e-mail.
3.7 Right of appeal
If you are of the opinion that we are not properly fulfilling our obligations under data protection law, you can contact the data protection supervisory authorities at any time.
You can reach the supervisory authority ultimately responsible for us as follows:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia Kavalleriestr. 2-4 40213 Düsseldorf, Germany.
Telephone: 0211/38424-0
Fax: 0211/38424-999
E-mail: poststelle@ldi.nrw.de
4. obligation to provide data
There is no legal or contractual obligation to provide us with personal data. However, the provision of data that is absolutely necessary for the provision of the respective service (see above) is necessary if you would like to make use of these services
5. updating this privacy policy
From time to time, it may be necessary to update this data protection declaration, for example due to new legal or official requirements or new offers within the framework of our online shop. We will then inform you here. In general, we recommend that you call up this data protection declaration regularly to check whether there have been any changes. You can recognise such changes, among other things, by the fact that the status indicated at the very bottom of this document has been updated.
Status: January 2023
