Privacy policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. The following information explains how we handle your personal data when you use our website. Personal data means any data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Winkler GmbH & Co. KG, Schlossstrasse 94, 33824 Werther (Westf.), Germany, Tel.: +49 (0) 52 03 - 88 28 - 0, Email: info@winkler-filtertechnik.de. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 If you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we collect only the data that your browser transmits to the website server (“server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website:

The website visited
Date and time of access
Amount of data sent in bytes
Source/referrer from which you reached the page
Browser used
Operating system used
IP address used (where applicable in anonymised form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or otherwise used. However, we reserve the right to review server log files retrospectively if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (for example orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the “https://” string and the padlock symbol in your browser address bar.

3) Hosting & Content Delivery Network

Shopify

For hosting our website and displaying page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).

Data is also transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

All data collected on our website is processed on the provider’s servers. We have concluded a data processing agreement with the provider which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4) Cookies

To make visiting our website attractive and enable the use of certain functions, we use cookies, i.e. small text files stored on your device. Some of these cookies are automatically deleted when the browser is closed (“session cookies”), while others remain on your device for longer and enable page settings to be stored (“persistent cookies”). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser.

Where personal data is processed by individual cookies used by us, the processing takes place in accordance with Art. 6(1)(b) GDPR for performance of the contract, in accordance with Art. 6(1)(a) GDPR where consent has been given, or in accordance with Art. 6(1)(f) GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the visit to our website.

You can configure your browser so that you are informed when cookies are set and decide individually whether to accept them, or exclude the acceptance of cookies in certain cases or generally.

Please note that the functionality of our website may be restricted if cookies are not accepted.

5) Contact

5.1 Shopify Inbox

This website uses the live chat system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Personal data transmitted via chat is processed either in accordance with Art. 6(1)(b) GDPR because this is necessary to initiate or perform a contract, or in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in effectively supporting visitors to our website. Subject to any statutory retention periods to the contrary, the data you transmit in this way is deleted when the matter concerned has been conclusively resolved.

In addition, cookies may be used to collect and evaluate further information for the purpose of creating pseudonymised usage profiles. This information is not used to identify you personally and is not combined with other data records. Where such information is personal data, processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation purposes.

The setting of cookies can be prevented by appropriate browser settings. The functionality of our website may then be restricted. You may object to the collection and storage of data for the purpose of creating a pseudonymised usage profile at any time with effect for the future by contacting us.

Data is also transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

We have concluded a data processing agreement with the provider which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

5.2 Klaviyo

For review reminders, we use the services of the following provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA.

Exclusively on the basis of your express consent in accordance with Art. 6(1)(a) GDPR, we transmit your email address and, where applicable, other customer data to the provider so that it can contact you by email with a review reminder.

You may withdraw your consent at any time with effect for the future by contacting us or the provider.

We have concluded a data processing agreement with the provider which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

5.3 Our own online appointment-booking function

We process your personal data as part of the online appointment-booking function provided. The data we collect for online appointment booking can be seen from the respective input form or appointment request. Where certain data is required in order to arrange an appointment online, we identify this accordingly in the input form or appointment request. If we provide a free-text field, you can describe your request in more detail there and therefore control which additional data you enter. The data you provide is stored and used exclusively for the purpose of arranging the appointment. Where personal data is required to perform a contract with you, including processing required to take steps prior to entering into a contract, Art. 6(1)(b) GDPR is the legal basis. If you have given us consent to process your data, processing is based on Art. 6(1)(a) GDPR. Consent may be withdrawn at any time by sending a message to the controller named at the beginning of this policy.

5.4 General contact

When you contact us (for example by contact form or email), personal data is processed solely for the purpose of handling and responding to your enquiry and only to the extent required for that purpose.

The legal basis for processing this data is our legitimate interest in responding to your enquiry in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at entering into a contract, Art. 6(1)(b) GDPR is an additional legal basis. Your data is deleted when the circumstances indicate that the matter concerned has been conclusively resolved, provided that there are no statutory retention obligations to the contrary.

6) Data Processing When Opening a Customer Account

In accordance with Art. 6(1)(b) GDPR, personal data continues to be collected and processed to the extent required if you provide it to us when opening a customer account. The data required to open the account can be seen in the input form on our website.

You can have your customer account deleted at any time by sending a message to the controller at the address stated above. After deletion of your customer account, your data is deleted provided that all contracts concluded through the account have been fully processed, no statutory retention periods prevent deletion and we have no legitimate interest in continued storage.

7) Use of Customer Data for Direct Advertising

7.1 Registration for our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send the newsletter is your email address. Providing further data is voluntary and is used to address you personally. We use the double opt-in procedure for sending the newsletter. This ensures that you receive newsletters only after you have expressly confirmed your consent to receive them by clicking a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. We store the IP address entered by your Internet service provider (ISP), as well as the date and time of registration, so that possible misuse of your email address can be traced at a later date. The data collected when you register for the newsletter is used strictly for this purpose.

You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the controller named at the beginning of this policy. After unsubscribing, your email address will be deleted immediately from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use data beyond this where permitted by law and described in this policy.

7.2 Klaviyo

Our email newsletters and other promotional email communications are sent via the following provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA.

On the basis of our legitimate interest in effective and user-friendly email marketing, we pass the data you provide when registering to this provider in accordance with Art. 6(1)(f) GDPR so that it can send the emails on our behalf.

Subject to your express consent in accordance with Art. 6(1)(a) GDPR, the provider also performs statistical evaluation of the success of email campaigns using web beacons or tracking pixels in the emails sent, which can measure opening rates and specific interactions with newsletter content. Device information (for example time of access, IP address, browser type and operating system) is also collected and evaluated, but is not combined with other data records.

You may withdraw your consent to email tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider which protects the data of our website visitors and prohibits disclosure to third parties.

7.3 Shopping-basket reminders by email

If you abandon a purchase with us before completing the order, you have the option of receiving a one-time email reminder about the contents of your virtual shopping basket.

The only mandatory information required to send this reminder is your email address. Providing further data is voluntary and may be used to address you personally. We use the double opt-in procedure for sending the email, which ensures that you receive a notification only after you have expressly confirmed your consent by clicking a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR to send a shopping-basket reminder. We store the IP address entered by your Internet service provider (ISP), as well as the date and time of registration, so that possible misuse of your email address can be traced at a later date. The data collected when you register for our email notification service is used strictly for this purpose.

You can unsubscribe from shopping-basket reminders at any time by sending a message to the controller named at the beginning of this policy. After unsubscribing, your email address will be deleted immediately from the distribution list set up for this purpose unless you have expressly consented to further use of your data or we reserve the right to use data beyond this where permitted by law and described in this policy.

8) Data Processing for Order Fulfilment

8.1 Transmission of image files for order processing via an upload function

On our website, we offer Customers the option of commissioning the personalisation of products by transmitting image files via an upload function. The submitted image is used as a template for personalising the selected product.

Using the upload form on the website, the Customer can transmit one or more image files directly from the storage of the device used to us by means of automated encrypted data transmission. We then collect, store and use the transmitted files exclusively to produce the personalised product in accordance with the relevant service description on our website. If the transmitted image files are passed to specialised service providers for production and order processing, you will be explicitly informed of this in the following paragraphs. No further disclosure takes place. If the transmitted files or digital images contain personal data, in particular images of identifiable persons, all of the processing operations described above are carried out exclusively for the purpose of processing your online order in accordance with Art. 6(1)(b) GDPR.

After the order has been fully processed, the transmitted image files are automatically and completely deleted.

8.2 Disclosure required for performance of the contract

To the extent required for contract processing for delivery and payment purposes, the personal data collected by us is passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6(1)(b) GDPR.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data supplied by you when ordering in order to inform you personally within the scope of our statutory information obligations in accordance with Art. 6(1)(c) GDPR. Your contact data is used strictly for the purpose of communications about updates owed by us and is processed by us only to the extent required for the respective information.

For order processing, we also work with the service provider(s) listed below, who support us wholly or partly in performing concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

8.3 Dropshipping by suppliers

To fulfil our contractual obligations, we may use direct shipment by suppliers (dropshipping). For this purpose, we pass your name and delivery address to a supplier selected by us exclusively for the purpose of delivering the goods in accordance with Art. 6(1)(b) GDPR. Where delivery of goods that cannot be sent as parcels is owed, such as freight or bulky goods, and prior telephone coordination of a delivery date is required, we also pass your telephone number to the relevant supplier in accordance with Art. 6(1)(b) GDPR.

8.4 Shopify Order Printer

For order processing we use the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Name, address and, where applicable, other personal data are passed to the provider in accordance with Art. 6(1)(b) GDPR for the purpose of processing the online order. Your data is disclosed only to the extent actually required to process the order. The provider is also used for accounting. In this context, the provider processes incoming and outgoing invoices and, where applicable, bank transactions of our company in order to record invoices automatically, match them to transactions and use them to prepare financial accounting in a partly automated process.

Where personal data is also processed in this context, processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in efficiently organising and documenting our business transactions.

8.5 Disclosure of personal data to shipping service providers

DHL

We use the following transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.

If you have given your express consent during the ordering process, we pass your email address and/or telephone number to the provider before delivery of the goods in accordance with Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date or issuing a delivery notification. Otherwise, for delivery purposes, we pass only the recipient’s name and delivery address to the provider in accordance with Art. 6(1)(b) GDPR. The data is disclosed only to the extent required to deliver the goods. In this case, prior coordination of the delivery date with the provider or a delivery notification is not possible.

Consent may be withdrawn at any time with effect for the future by contacting the controller named above or the provider.

DHL Express

We use the following transport service provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany.

Consent may be withdrawn at any time with effect for the future by contacting the controller named above or the provider.

8.6 Use of payment service providers

Amazon Pay

One or more online payment methods from the following provider are available on this website: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg.

If you select a payment method of the provider under which you make an advance payment, such as credit-card payment, the payment data you provide during the ordering process, including name, address, bank and payment-card information, currency and transaction number, as well as information about the contents of your order, is transmitted to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data is disclosed solely for the purpose of processing the payment with the provider and only to the extent required for this purpose.

Apple Pay

If you choose the “Apple Pay” payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed using the Apple Pay function on your device running iOS, watchOS or macOS by charging a payment card stored with Apple Pay. Apple Pay uses security features integrated into the hardware and software of your device to protect transactions. To authorise a payment, a code previously defined by you and verification using the Face ID or Touch ID function of your device are therefore required.

For payment processing, the information you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before the data is transmitted to the payment service provider for the payment card stored in Apple Pay. Encryption ensures that only the website through which the purchase was made can access the payment data. Once the payment has been made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm the successful payment.

Where personal data is processed in the transfers described above, processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6(1)(b) GDPR.

Apple retains anonymised transaction data, including the approximate purchase amount, approximate date and time, and information on whether the transaction was successfully completed. The anonymisation completely removes any personal reference. Apple uses the anonymised data to improve Apple Pay and other Apple products and services.

If you use Apple Pay on an iPhone or Apple Watch to complete a purchase initiated via Safari on a Mac, the Mac and the authorising device communicate over an encrypted channel on Apple servers. Apple does not process or store this information in a format that can identify you. You can disable the ability to use Apple Pay on your Mac in your iPhone settings under Wallet & Apple Pay by disabling “Allow Payments on Mac”.

Further information on data protection for Apple Pay is available at https://support.apple.com/de-de/HT203027.

EPS bank transfer

One or more online payment methods from the following provider are available on this website: PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria.

Google Pay

If you choose the “Google Pay” payment method of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), payment is processed using the Google Pay application on a mobile device running at least Android 4.4 (“KitKat”) and equipped with NFC, by charging a payment card stored with Google Pay or another verified payment system stored there, such as PayPal. For payments via Google Pay above EUR 25, your mobile device must first be unlocked using the configured verification method, for example facial recognition, password, fingerprint or pattern.

For payment processing, the information you provide during the ordering process, together with information about your order, is transmitted to Google. Google then transmits the payment information stored in Google Pay to the originating website in the form of a one-time transaction number used to verify payment. This transaction number does not contain the actual payment data of the payment methods stored in Google Pay but is created and transmitted as a one-time numerical token. For all transactions via Google Pay, Google acts only as an intermediary for processing the payment. The transaction itself takes place solely between the user and the originating website by charging the payment method stored in Google Pay.

Where personal data is processed in the transfers described above, processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6(1)(b) GDPR.

Google reserves the right to collect, store and evaluate certain transaction-specific information for every transaction made via Google Pay. This includes the date, time and amount of the transaction, merchant location and description, a description of the goods or services purchased supplied by the merchant, photos that you attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction and, where applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively in accordance with Art. 6(1)(f) GDPR on the basis of its legitimate interest in proper accounting, verification of transaction data and optimisation and maintenance of the Google Pay service.

Google also reserves the right to combine processed transaction data with further information collected and stored by Google when other Google services are used.

The Google Pay terms of use are available at https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de. Further data-protection information for Google Pay is available at https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de.

Klarna

One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If you select a payment method under which the provider makes an advance performance, such as purchase on account, instalment purchase or direct debit, you will also be asked during the ordering process to provide certain personal data, including first and last name, street, house number, postcode, town/city, date of birth, email address, telephone number and, where applicable, data relating to an alternative payment method.

To protect our legitimate interest in determining the solvency of our customers, we transmit this data to the provider for the purpose of a credit check in accordance with Art. 6(1)(f) GDPR. On the basis of the personal data provided by you and other data, such as shopping basket, invoice amount, order history and payment experience, the provider checks whether the payment option selected by you can be granted with regard to payment and/or default risks.

In making a decision during the application review, identity and credit information from credit agencies may also be taken into account alongside the provider’s internal criteria in accordance with Art. 6(1)(f) GDPR. The relevant credit agencies can be viewed at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.

The credit report may contain probability values (“score values”). Where score values influence the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data is among the information included in calculating the score values.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain entitled to process your personal data where this is required for contractual payment processing.

Masterpayment

One or more online payment methods from the following provider are available on this website: Masterpayment LTD, 483 Green Lanes, London, N13 4BS, United Kingdom.

In making a decision during the application review, identity and credit information from the following credit agencies may also be taken into account alongside the provider’s internal criteria in accordance with Art. 6(1)(f) GDPR:

Creditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss, Germany, Tel.: +49 (0)2131-109-501, Fax: -557
CRIF GmbH, Friesenweg 4, Haus 12, 22763 Hamburg, Germany, Tel.: +49 (0)40-89803-0, Fax: -419
SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Germany, Tel.: +49 (0)611-9278-0, Fax: -109

For data transfers to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

PayPal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you select a payment method of the provider under which you make an advance payment, the payment data you provide during the ordering process, including name, address, bank and payment-card information, currency and transaction number, as well as information about the contents of your order, is transmitted to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data is disclosed solely for the purpose of processing the payment with the provider and only to the extent required for this purpose.

If you select a payment method under which we make an advance performance, you will also be asked during the ordering process to provide certain personal data, including first and last name, street, house number, postcode, town/city, date of birth, email address, telephone number and, where applicable, data relating to an alternative payment method.

To protect our legitimate interest in determining your solvency in such cases, we transmit this data to the provider for the purpose of a credit check in accordance with Art. 6(1)(f) GDPR. On the basis of the personal data provided by you and other data, such as shopping basket, invoice amount, order history and payment experience, the provider checks whether the payment option selected by you can be granted with regard to payment and/or default risks.

Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

8.7 Electronic cancellation function for distance contracts

Consumers who conclude contracts on this website for which a statutory right of cancellation exists have the option of declaring cancellation via an electronic cancellation function in accordance with the applicable cancellation provisions.

To provide the electronic cancellation function, we use a solution from the following provider: 4O1layers UG (haftungsbeschraenkt), Dorothea-Erx.-Str. 1a, 40721 Hilden, Germany.

When using the cancellation function, in addition to information identifying the contract to be cancelled, further personal information such as the consumer’s first and last name and email address must be provided or confirmed.

This information is initially collected by the provider on the basis of our legitimate interest in a user-friendly, stable and process-optimised solution in accordance with Art. 6(1)(f) GDPR, then used to confirm receipt of the cancellation declaration on our behalf by email and finally transmitted to us. We subsequently process the transmitted information for the proper handling of the cancellation in accordance with Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR on the basis of our statutory obligation to provide an electronic cancellation function for consumer distance contracts subject to payment.

The information collected by the provider is routinely deleted after final processing of a cancellation, provided that no statutory retention obligations prevent deletion.

We have concluded a data processing agreement with the provider which protects the data processed as part of the cancellation function and prohibits unauthorised disclosure to third parties.

9) Online Marketing

Google AdSense

This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses cookies, i.e. text files stored on your computer that enable analysis of your use of the website. Google AdSense also uses web beacons (small invisible graphics) to collect information. These can be used to record, collect and evaluate simple actions such as visitor traffic on the website. The information generated by the cookie and/or web beacon about your use of this website, including your IP address, is generally transmitted to a Google server and stored there. Data may also be transmitted to servers of Google LLC in the USA.

Google uses the information obtained in this way to evaluate your usage behaviour with regard to AdSense advertisements. The IP address transmitted by your browser as part of Google AdSense is not combined with other Google data. Information collected by Google may be transmitted to third parties where required by law and/or where third parties process this data on Google’s behalf. All processing described above, in particular reading information from the device used via cookies and/or web beacons, takes place only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. Without this consent, Google AdSense will not be used during your visit to the website.

You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

Further information on Google’s data-protection provisions is available at https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/.

10) Web Analytics Services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies, which are small text files stored on your device and collect certain information. This information includes your IP address, although Google shortens the final digits in order to prevent direct personal identification.

The information is transmitted to Google servers and further processed there. Data may also be transferred to Google LLC in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us and provide other services associated with website and Internet use. The shortened IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. Data collected through Google Analytics 4 is stored for two months and then deleted.

All processing described above, in particular the setting of cookies on the device used, takes place only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. Without your consent, Google Analytics 4 will not be used during your visit to the website. You may withdraw consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

We have concluded a data processing agreement with Google which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

Further legal information on Google Analytics 4 is available at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de and https://policies.google.com/technologies/partner-sites.

Demographic characteristics

Google Analytics 4 uses the special “demographic characteristics” function and can use it to create statistics concerning the age, gender and interests of website visitors. This is done by analysing advertising and information from third parties. This makes it possible to identify target groups for marketing activities. However, the collected data cannot be assigned to a specific person and is deleted after being stored for two months.

Google Signals

As an extension to Google Analytics 4, Google Signals may be used on this website to create cross-device reports. If you have activated personalised advertisements and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Art. 6(1)(a) GDPR, analyse your usage behaviour across devices and create database models, including cross-device conversions. We do not receive personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable “Personalised advertising” in your Google account settings. Instructions are available at https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de. Further information on Google Signals is available at https://support.google.com/analytics/answer/7532985?hl=de.

User IDs

As an extension to Google Analytics 4, the “User IDs” function may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6(1)(a) GDPR, created an account on this website and log in to that account on different devices, your activities, including conversions, can be analysed across devices.

11) Retargeting/Remarketing and Conversion Tracking

Google Ads Conversion Tracking

This website uses the online advertising programme “Google Ads” and, within Google Ads, conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our offers on external websites using advertising materials, known as Google Ads. Based on advertising campaign data, we can determine how successful individual advertising measures are. Our aim is to show you advertising that is of interest to you, make our website more interesting for you and achieve fair calculation of advertising costs incurred.

The conversion-tracking cookie is set when a user clicks on an Ads advertisement placed by Google. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages of this website while the cookie is still valid, Google and we can recognise that the user clicked on the advertisement and was redirected to this page. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie, including your IP address, is used to create conversion statistics for Google Ads customers who have opted into conversion tracking. Customers receive the total number of users who clicked on their advertisement and were redirected to a page containing a conversion-tracking tag. However, they do not receive information that can personally identify users. When Google Ads is used, personal data may also be transferred to servers of Google LLC in the USA.

Details of processing initiated by Google Ads conversion tracking and Google’s handling of data from websites are available at https://policies.google.com/technologies/partner-sites.

All processing described above, in particular setting cookies to read information from the device used, takes place only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

You can also permanently object to cookies being set by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de.

Please note that certain functions of this website may not be available or may be restricted if you disable the use of cookies. Google’s privacy policies are available at https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/.

12) Website Functions

12.1 Google Maps API

To check certain entries in the address form during the ordering process of our online shop for input errors in real time, we use services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transmitted to Google LLC, USA.

The provider validates the address entered, verifies the spelling and, where applicable, adds missing data. If addresses are ambiguous, correct alternatives are displayed. For this purpose, the address data you enter is transmitted to the provider, stored there and evaluated.

This processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in correctly recording accurate customer address data in order to fulfil our contractual delivery obligations diligently and prevent problems with performance of the contract.

The provider processes the data concerned separately and does not combine it with other data records, and deletes it as soon as its status or correctness has been confirmed, but no later than after 30 days.

Further information on Google’s data-protection provisions is available at https://business.safety.google/intl/de/privacy/.

12.2 Google reCAPTCHA

On this website we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transmitted to Google LLC, USA.

For the visual design of the CAPTCHA window, the provider uses Google Fonts, i.e. fonts downloaded from Google via the Internet. No information beyond that already transmitted to Google by the reCAPTCHA functionality is processed for this purpose.

The service checks whether an input is made by a natural person or abusively by machine and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. To ensure that an action is performed by a human rather than an automated bot, the provider collects the IP address of the device used, identifying data relating to the browser and operating-system type used, as well as the date and duration of the visit, and transmits this information to the provider’s servers for evaluation. Cookies, i.e. small text files stored in the browser of the device, may be used for this purpose.

Where the processing described above is based on cookies, these are set only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

If the processing described above is carried out without cookies, the legal basis is our legitimate interest in establishing individual responsibility on the Internet and preventing abuse and spam in accordance with Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

12.3 Google Translate

This website uses the Google Translate service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) via an API integration. In order for the translation into the language you select to be displayed automatically, the browser you use connects to Google servers. Certain browser information, including your IP address, is transmitted to Google.

Google may use cookies, i.e. small text files stored on your device, to save language settings. Information generated by the cookie about your use of this website, including the shortened IP address, is generally transmitted to a Google server and stored there.

The processing described above may also involve transfers to servers of Google LLC in the USA.

Where cookies are also set when Google Translate is used, the processing described above takes place only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

If no cookies are set, processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in optimally marketing our offering and designing our website to reach a broad audience.

Further information on Google’s data-protection provisions is available at https://business.safety.google/intl/de/privacy/.

12.4 Google Customer Reviews (formerly Google Certified Shops programme)

We work with Google as part of the “Google Customer Reviews” programme. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This programme enables us to obtain customer reviews from users of our website. After using our services, you will be asked on our website whether you would like to participate in an email survey by Google.

If you give your consent in accordance with Art. 6(1)(a) GDPR, we transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchasing experience on our website. The rating you submit is then combined with our other ratings and displayed in our Google Customer Reviews badge and in our Merchant Center dashboard. Your rating is also used for Google Seller Ratings. When Google Customer Reviews is used, personal data may also be transferred to servers of Google LLC in the USA.

You may withdraw your consent at any time by contacting the controller or Google.

Further information on Google’s data-protection provisions is available at https://business.safety.google/intl/de/privacy/.

13) Tools and Other Services

Cookie Consent Tool

This website uses a cookie consent tool to obtain valid user consent for cookies and cookie-based applications requiring consent. The cookie consent tool is displayed to users when they access the website in the form of an interactive user interface in which consent can be given for certain cookies and/or cookie-based applications by ticking the relevant boxes. By using the tool, all cookies/services requiring consent are loaded only if the respective user gives the relevant consent. This ensures that such cookies are set on the user’s device only where consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. As a general rule, personal user data is not processed in this context.

If, in individual cases, personal data such as the IP address is processed for the purpose of storing, assigning or recording cookie settings, this is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly cookie consent management and therefore in a legally compliant design of our website.

A further legal basis for processing is Art. 6(1)(c) GDPR. As controller, we are subject to the legal obligation to make the use of technically non-essential cookies dependent on the respective user’s consent.

Where required, we have concluded a data processing agreement with the provider which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

Further information on the operator and the settings available in the cookie consent tool can be found directly in the relevant user interface on our website.

14) Rights of the Data Subject

14.1 Applicable data-protection law grants you the following rights as a data subject with regard to the processing of your personal data by the controller. The legal basis referred to applies to the respective conditions for exercising each right:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to information pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent granted pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

14.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

15) Duration of Storage of Personal Data

The duration for which personal data is stored is determined by the respective legal basis, the purpose of processing and, where applicable, additionally by the relevant statutory retention period, for example retention periods under commercial and tax law.

Where personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

Where statutory retention periods exist for data processed in connection with contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, this data is routinely deleted after the retention periods expire, provided that it is no longer required for performance or initiation of a contract and/or we have no legitimate interest in continued storage.

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Where personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the other information in this policy concerning specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Version: 11 August 2026, 03:59:38