Privacy policy

Data protection regulations

We have created this privacy policy (version 06.10.2020-111425658) to explain what information we collect, how we use data and what choices users of our website have, in accordance with the guidelines of the General Data Protection Regulation (EU) 2016/679.
Unfortunately, the nature of these topics makes them sound rather technical, but we have made every effort to describe the most important things as simply and clearly as possible.

Automatic data storage

Every time you visit a website these days, certain information is automatically created and stored, as is the case on this website.When you visit our website as you are doing, our web server (computer on which this website is saved/stored) automatically saves data such as:

  • die Adresse (URL) the address (URL) of the website accessed
  • Browser and browser version
  • the operating system used
  • the address (URL) of the previously visited page (referrer URL)
  • the host name and IP address of the device from which the website is accessed
  • Date (and time)

  • This data is stored in files (web server log files). Web server log files are usually stored for two weeks and are then automatically deleted. We do not pass this information on, but we cannot rule out the possibility that this data may be viewed in the event of unlawful behavior.

    Cookies

    Our website uses HTTP cookies to store user-specific data. For a better understanding of the following privacy policy, we explain below what cookies are and why they are used.

    What exactly are cookies?

    Every time you surf the internet, you use a browser. Common browsers include Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.

    What cannot be denied is that cookies are very useful little helpers. Almost all websites use cookies. To be more precise, these are HTTP cookies, as there are also other cookies for other purposes. HTTP cookies are small files that our website stores on your computer. These cookie files are automatically stored in the cookie folder, which is like the "brain" of your browser. A cookie consists of a name and a value. In addition, one or more attributes must be specified to define a cookie.

    Cookies store certain parts of your user data

    When you open our website again, your browser transmits this "user-specific" information back to our website. Thanks to cookies, our website knows who you are and offers you the settings you are familiar with. In some browsers, each cookie has its own file; in others, such as Firefox, all cookies are stored in a single file.

    Difference between first-party cookies and third-party cookies

    First-party cookies are created directly by our website, while third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie is individual, as each cookie stores different data. The expiry time of a cookie also varies - it can be a few minutes or up to several years. Cookies are not software programs and do not contain computer viruses, Trojans or other malware. Cookies also cannot access your PC's information.

    What types of cookies are there?
    There are 4 different types of cookies:

  • Essential cookies
  • Purposeful cookies
  • Targeted cookies
  • Advertising cookies

  • When you visit a website for the first time, you are usually asked which of these types of cookie you wish to accept. Of course, this decision is also stored in a cookie.

    How can I delete cookies?

    You yourself decide whether and how you want to use cookies. Regardless of the service or website from which cookies originate, you always have the option to delete, deactivate or only partially allow them.

    Further information on deleting cookies in various browsers can be found here:

    Storage of personal data

    All personal data that you transmit to us electronically on this website, such as your name, e-mail address, home address or other personal information, will be used exclusively for the stated purpose and stored securely. This data will not be passed on to third parties.

    We only use personal data for communication with those users who have expressly requested to be contacted and for the performance of the services and products offered on this website. We do not pass on your personal data without your consent, but we cannot rule out the possibility of this data being viewed in the event of unlawful behavior.

    Rights under the General Data Protection Regulation (GDPR)

    • Right to rectification(Art. 16 GDPR)
    • Right to erasure ("right to be forgotten") (Art. 17 GDPR)
    • Right to restriction of processing (Art. 18 GDPR)
    • Right to notification - notification obligation regarding rectification or erasure of personal data or restriction of processing (Art. 19 GDPR)
    • Right to data portability(Art. 20 GDPR)
    • Right to object (Art. 21 GDPR)
    • Right not to be subject to a decision based solely on automated processing, including profiling(Art. 22 GDPR)

    If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can lodge a complaint with the competent supervisory authority. For Austria, this is the data protection authority, whose website you can reach at https://www.datenschutzbehorde.gv.at.

    Evaluation of visitor behavior

    In the following privacy policy, we inform you whether and how we analyze data from your visit to this website. The evaluation is always anonymous; it is not possible for us to draw any conclusions about your behavior on this website.

    Embedded social media elements Privacy policy

    We have embedded elements of social media services on our website to display images, videos and text. When you visit pages that contain such elements, data is transmitted from your browser to the respective social media service and stored there. We have no access to this data.

    The following links lead to the pages of the respective social media services, where you can find an explanation of how your data is handled:

    Instagram privacy policy

    We have integrated Instagram functions on our website. Instagram is a social media platform of the company Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA. Instagram has been a subsidiary of Facebook Inc. since 2012 and is one of Facebook's products. The integration of content from Instagram on our website is referred to as embedding. This allows us to show you Instagram content such as buttons, photos or videos directly on our website.

    The remaining details can be found in the Instagram privacy policy. We hope this guide has helped you to optimize the structure of the privacy policy.

    Integration of the Trusted Shops Trustbadge / other Widgets

    Trusted Shops widgets are integrated in this website to display Trusted Shops services (e.g. Trustmark, collected reviews) and to offer buyers Trusted Shops products after they have placed an order.

    This serves to protect our legitimate interests in optimized marketing by enabling secure shopping in accordance with Art. 6 (1) (f) GDPR, which prevail in the context of a balancing of interests.

    The trust badge and the services advertised with it are an offer of Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops").

    We and Trusted Shops are joint controllers in data protection terms pursuant to Art. 26 GDPR. In the following section, we inform you about the essential contents of the joint controllership agreement according to Art. 26 (2) GDPR.

    When interacting with the Trustbadge AI+, session cookies are set to save the login status and display the so-called "welcome Layer," which shows details about the respective online shop (company information, reviews, information about buyer protection) as well as the #trstd secret.

    A cookie is set to recognize logged-in users and is stored for a maximum of 400 days after login. In addition, session cookies are set to send push notifications when using the app, provided the user has enabled them.

    This is necessary so that Trusted Shops can provide the digital service you have requested. Trusted Shops is responsible for data processing when interacting with the Trustbadge AI+.

    Within the framework of the joint responsibility existing between us and Trusted Shops SE, please preferably contact Trusted Shops using the contact options provided in the privacy policy,

    if you have any data protection questions and wish to assert your rights. Irrespective of this, however, you can always contact the person responsible of your choice. Your enquiry will then, if necessary, be passed on to the other person responsible for a response.

    1.  Data processing when integrating the Trustbadge/other widgets

    The Trustbadge is provided by a US-American CDN provider (content delivery network).

    An adequate level of data protection is ensured by an adequacy decision of the EU Commission, which can be accessed here for the USA.

    Service providers from the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here.

    Where service providers are not certified under the DPF, standard contractual clauses have been concluded as a suitable guarantee.

    When the Trustbadge is called up, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of the call-up, the amount of data transferred and the requesting provider (access data) and the call-up.

    Immediately after the data collection the IP address is anonymised so that the stored data cannot be assigned to you personally.

    The anonymised data are used in particular for statistical purposes and for error analysis.

    2. Data processing after order completion After the order has been completed, order information (order total, order number, product purchased, if applicable) and your email address, which has been hashed using a cryptological one-way function, are transmitted to Trusted Shops.

    The legal basis for this processing is Art. 6 (1) (f) GDPR.

    This serves to verify whether you are already registered for services with Trusted Shops and is therefore necessary for the fulfilment of our and Trusted Shops' overriding legitimate interests in the provision of the buyer protection linked to the specific order in each case and the transactional evaluation services in accordance with Art. 6 (1) (f) GDPR.

    If this is the case, further processing will be carried out in accordance with the contractual agreement between you and Trusted Shops.

    If you have not yet registered for the services, you will subsequently be given the opportunity to do so for the first time.

    Further processing after registration also depends on the contractual agreement with Trusted Shops.

    If you do not register, all transmitted data will be automatically deleted by Trusted Shops and a personal reference is no longer possible.

    Trusted Shops uses service providers in the areas of hosting, monitoring and logging.

    The legal basis is Art. 6 (1) (f) GDPR for the purpose of ensuring trouble-free operation.

    Processing may take place in third countries (USA and Israel).

    An adequate level of data protection is ensured in each case by an adequacy decision of the EU Commission, which can be accessed here for the USA and here for Israel.

    Service providers from the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here.

    Where service providers are not certified under the DPF, standard contractual clauses have been concluded as a suitable guarantee.