1) Introduction and contact details of the responsible party
1.1 We appreciate your visit to our website and thank you for your interest. Below you will find information about how we handle your personal data when you use our website. Personal data includes all data that can be used to identify you personally.
1.2 The party responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Jaroslaw Pigula Labbrarosso, Gaußstr.82b, 70193 Stuttgart, Germany, Tel.: +491629813563, Email: [email protected]. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
2) Data collection when you visit our website
2.1 When using our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our website that you visited
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you accessed the page
- Browser used
- Operating system used
- IP address used (possibly in anonymized form)
The processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible). You can recognize an encrypted connection by the string “https: //” and the lock symbol in your browser line.
3) Hosting & Content Delivery Network
For hosting our website and displaying the page content, we use a provider that provides its services, either directly or through selected subcontractors, exclusively on servers within the European Union.
All data collected on our website is processed on these servers.
We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
4) Cookies
To make your visit to our website more appealing and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called 'session cookies'), while others remain on your device for a longer period and allow the storage of page settings (so-called 'persistent cookies'). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser.
If personal data is also processed through individual cookies used by us, the processing takes place in accordance with Art. 6 Para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the event of granted consent, or in accordance with Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can configure your browser to inform you about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for specific cases or in general.
Please note that the functionality of our website may be limited if cookies are not accepted.
5) Contacting Us
5.1 WhatsApp Business
You have the option of contacting us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called 'Business version' of WhatsApp.
If you contact us via WhatsApp in connection with a specific transaction (for example, an order placed), we store and use the mobile phone number you use on WhatsApp, as well as – if provided – your first and last name in accordance with Art. 6 Para. 1 lit. b. GDPR for processing and responding to your request. Based on the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address or email address) in order to be able to assign your request to a specific process.
If you use our WhatsApp contact for general inquiries (e.g. about the range of services, availability or our website), we store and use the mobile phone number you use on WhatsApp, as well as - if provided - your first and last name in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in the efficient and timely provision of the desired information.
Your data will only be used to answer your request via WhatsApp. It will not be passed on to third parties.
Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device in whose address book only the WhatsApp contact details of those users are stored who have also contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact details are stored in our address book has already consented to the transmission of their WhatsApp telephone number from the address books of their chat contacts in accordance with Art. 6 Para. 1 lit. a GDPR by accepting the WhatsApp terms of use when using the app on their device for the first time. A transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
Please refer to WhatsApp's privacy policy for the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your rights and setting options in this regard to protect your privacy: https://www.whatsapp.com
We have entered into a data processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.
As part of the above-mentioned processing, data may be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European level of data protection.
5.2 When you contact us (e.g. via contact form or e-mail), personal data will be processed - exclusively for the purpose of processing and answering your request and only to the extent necessary.
The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact aims at a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal storage obligations to the contrary.
6) Comment Function
As part of the comment function on this website, in addition to your comment, information on the time the comment was created and the commentator name you selected will also be stored and published on this website. Furthermore, your IP address will be logged and saved. This storage of the IP address takes place for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content through a submitted comment. We need your email address in order to contact you if a third party should object to your published content as illegal.
The legal basis for storing your data is Art. 6 Para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are reported as illegal by third parties.
7) Data processing when opening a customer account
In accordance with Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent required if you provide it to us when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website.
Your customer account can be deleted at any time by sending a message to the above-mentioned address of the responsible party. After your customer account has been deleted, your data will be deleted, provided that all contracts concluded through it have been fully processed, there are no statutory retention periods to the contrary, and we no longer have a legitimate interest in continuing to store it.
8) Use of customer data for direct advertising
8.1 Subscribing to our email newsletter
If you subscribe to our email newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your email address. Providing further data is voluntary and will be used to address you personally. For the newsletter dispatch, we use the so-called double opt-in procedure, which ensures that you only receive newsletters when you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the specified email address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. We store your IP address registered by the Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later point in time. The data collected by us when registering for the newsletter is used strictly for the intended purpose.
You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the responsible party named at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.
8.2 Sending the email newsletter to existing customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular offers for similar goods or services from our range by email, such as those already purchased. For this, we do not need to obtain separate consent from you in accordance with § 7 Para. 3 UWG. The data processing is based solely on our legitimate interest in personalized direct advertising in accordance with Art. 6 Para. 1 lit. f GDPR. If you have initially objected to the use of your email address for this purpose, we will not send you any emails.
You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by sending a message to the responsible party named at the beginning. For this, you will only incur transmission costs according to the basic rates. After receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.
8.3 Omnisend
Our email newsletters are sent via this provider: Soundest Ltd., Unit a3, Gateway Tower, 32 Western Gateway, London E16 1YL, England
Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on your data provided during newsletter registration to this provider in accordance with Art. 6 Para. 1 lit. f GDPR so that they can take over the newsletter dispatch on our behalf.
Subject to your express consent in accordance with Art. 6 Para. 1 lit. a GDPR, the provider also carries out a statistical success analysis of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure opening rates and specific interactions with the content of the newsletter. Device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but not merged with other data.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have entered into a data processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.
In the event of data transmission to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.
8.4 WhatsApp Newsletter
If you subscribe to our WhatsApp newsletter, we will send you regular information about our offers via WhatsApp. The only mandatory information for sending the newsletter is your mobile phone number.
To receive the newsletter, save our provided mobile phone number in the address book contacts of your mobile device and send us the message "Start" via WhatsApp. By sending this WhatsApp message, you give us your consent for the use of your personal data in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of sending the newsletter. We will then add you to our newsletter distribution list.
The data collected by us when registering for the newsletter will be processed exclusively for the purpose of advertising by means of the newsletter. You can unsubscribe from the newsletter at any time by sending us the message "Stop" via WhatsApp. After unsubscribing, your mobile phone number will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.
Please note that WhatsApp Business receives access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA.
For sending our WhatsApp newsletter, we therefore use a mobile device in whose address book only the WhatsApp contact data of our newsletter recipients are stored. This ensures that every person whose WhatsApp contact data is stored in our address book has already consented to the transmission of their WhatsApp telephone number from the address books of their chat contacts in accordance with Art. 6 Para. 1 lit. a GDPR when using the app for the first time by accepting the WhatsApp terms of use. A transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
Please refer to WhatsApp's privacy policy for the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your rights and setting options in this regard to protect your privacy: https://www.whatsapp.com
We have concluded a data processing agreement with WhatsApp, which protects the data of our newsletter recipients and prohibits its disclosure to third parties.
As part of the above-mentioned processing, data may be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European level of data protection.
8.5 Shopping cart reminders via email
If you interrupt your purchase with us before completing the order, you have the option to receive a one-time email reminder of the contents of your virtual shopping cart.
The only mandatory information required for sending this reminder is your email address. Providing additional data is voluntary and may be used to address you personally. For sending emails, we use the so-called double opt-in procedure, which ensures that you will only receive a notification if you have expressly confirmed your consent by clicking on a verification link sent to the specified email address.
By activating the confirmation link, you grant us your consent for the use of your personal data in accordance with Art. 6 Para. 1 lit. a GDPR for sending a shopping cart reminder. We store your IP address registered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later point in time. The data collected by us when registering for our email notification service will be used strictly for the intended purpose.
You can unsubscribe from the shopping cart reminders at any time by sending a corresponding message to the responsible party named above. After you unsubscribe, your email address will be immediately deleted from our distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.
9) Data processing for order processing
9.1 Insofar as it is necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the transport company and the credit institution commissioned in accordance with Art. 6 Para. 1 lit. b GDPR.
If, based on a corresponding agreement, we owe you updates for goods with digital elements or for digital products, we will process the contact details you provided when placing the order in order to personally inform you within the framework of our legal information obligations in accordance with Art. 6 Para. 1 lit. c GDPR. Your contact data will be used strictly for the purpose of notifications about updates owed by us and will only be processed by us to the extent that this is necessary for the respective information.
To process your order, we also work with the following service provider(s) who support us in full or in part in the execution of contracts that have been concluded. Certain personal data is transmitted to these service providers in accordance with the following information.
9.2 Disclosure of personal data to shipping service providers
- DHL
We use the following provider as our transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
We pass on your email address and/or telephone number to the provider in accordance with Art. 6 Para. 1 lit. a GDPR before the goods are delivered for the purpose of coordinating a delivery date or to announce delivery, provided that you have given your express consent for this in the order process. Otherwise, for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR, we only pass on the name of the recipient and the delivery address to the provider. The data is only passed on if this is necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the provider or announce the delivery in advance.
Consent can be withdrawn at any time with effect for the future from the controller designated above or from the provider.
9.3 Use of payment service providers
- Apple Pay
If you choose the “Apple Pay” payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed via the “Apple Pay” function of your device operated with iOS, watchOS or macOS by charging a payment card stored with “Apple Pay”. Apple Pay uses security features that are integrated into the hardware and software of your device to protect your transactions. To authorize a payment, you must enter a code that you have previously set and verify it using the “Face ID” or “Touch ID” function of your device.
For the purpose of payment processing, your information provided during the order process, together with information about your order, will be passed on to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay in order to process the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the success of the payment.
If personal data is processed during the described transmissions, the processing takes place exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.
Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was completed successfully. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve “Apple Pay” and other Apple products and services.
When you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made through Safari on your Mac, the Mac and the authorizing device communicate via an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you. You can disable the ability to use Apple Pay on your Mac in your iPhone's settings. Go to "Wallet & Apple Pay" and turn off "Allow Payments on Mac".
Further information on data protection at Apple Pay can be found at the following internet address: https://support.apple.com
- Google Pay
If you choose the “Google Pay” payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), payment is processed via the “Google Pay” application on your mobile device, which is operated with at least Android 4.4 (“KitKat”) and has an NFC function, by charging a payment card stored with Google Pay or a payment system verified there (e.g. PayPal). To authorize a payment via Google Pay in the amount of more than €25, you must first unlock your mobile device using the verification measure set up in each case (e.g. face recognition, password, fingerprint or pattern).
For payment processing purposes, your information provided during the order process, along with details about your order, will be shared with Google. Google will then transmit your payment information stored in Google Pay to the originating website in the form of a unique transaction number, which verifies the completed payment. This transaction number contains no information about your actual payment details stored in Google Pay; instead, it is created and transmitted as a unique numerical token. In all transactions via Google Pay, Google acts solely as an intermediary for processing the payment. The transaction is executed exclusively between the user and the originating website by charging the payment method stored in Google Pay.
If personal data is processed during the described transmissions, the processing takes place exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.
Google reserves the right to collect, store, and analyze certain transaction-specific information for each transaction made via Google Pay. This includes the date, time, and amount of the transaction, the merchant's location and description, a description of the purchased goods or services provided by the merchant, photos you have attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction, and, if applicable, the offer associated with the transaction.
According to Google, this processing is carried out exclusively in accordance with Art. 6 Para. 1 lit. f GDPR, based on the legitimate interest in proper accounting, verification of transaction data, and the optimization and maintenance of the Google Pay service.
Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when using other Google services.
The Google Pay terms of service can be found here:
https://payments.google.com
Further information on data protection at Google Pay can be found at the following internet address:
https://payments.google.com
- Stripe
This website offers one or more online payment methods from the following provider: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
If you choose a payment method from this provider that requires advance payment (such as credit card payment), your payment data (including name, address, bank and payment card information, currency, and transaction number) and information about the contents of your order will be transmitted to them in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data will only be disclosed for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
If you choose a payment method where the provider makes an advance payment (such as invoice, installment purchase or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, data for an alternative payment method) during the order process.
To protect our legitimate interest in determining the creditworthiness of our customers, this data will be forwarded by us to the provider for a credit check in accordance with Art. 6 Para. 1 lit. f GDPR. The provider checks on the basis of the personal data you have provided and other data (such as shopping cart, invoice amount, order history, payment experiences) whether the payment option you have selected can be granted with regard to payment and/or default risks.
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual payment processing.
10) Web analysis services
Google Analytics 4
This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows an analysis of your use of our website.
By default, when you visit the website, Google Analytics 4 sets cookies, which are small text files that are stored on your device and collect certain information. The scope of this information also includes your IP address, which is shortened by Google to remove the last digits in order to prevent it from being directly linked to you.
The information is transferred to Google's servers for further processing. This may also involve transfers to Google LLC, which is based in the USA.
Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is shortened and will not be merged with other Google data. The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.
All processing described above, especially the setting of cookies on your device, will only take place if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with Google that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
Further legal information about Google Analytics 4 can be found at https://business.safety.google
Demographic characteristics
Google Analytics 4 uses the special function "demographic characteristics" to create statistics that provide information about the age, gender, and interests of site visitors. This is done by analyzing advertising and information from third-party providers, which allows target groups for marketing activities to be identified. However, the collected data cannot be assigned to a specific person and will be deleted after being stored for two months.
Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google can, subject to your consent to the use of Google Analytics in accordance with Art. 6 Para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, but only statistics. If you wish to stop cross-device analysis, you can deactivate the "Personalized advertising" function in the settings of your Google account. To do this, follow the instructions on this page: https://support.google.com
More information about Google Signals can be found at the following link: https://support.google.com
UserIDs
As an extension to Google Analytics 4, the "UserIDs" function can be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 Para. 1 lit. a GDPR, have set up an account on this website and log in to this account on different devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.
11) Page functionalities
11.1 Facebook plugins
Our website uses plugins from the following social network provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
These plugins enable direct interaction with content on the social network.
To enhance the protection of your data when you visit our website, the plugins are initially deactivated using a '2-click' or 'Shariff' solution.
This integration ensures that when you access a page on our website containing such plugins, no connection is established with the provider's servers.
Only when you activate the plugins and thereby give your consent to data transmission in accordance with Art. 6 para. 1 lit. a GDPR, does your browser establish a direct connection to the provider's servers. In this process, regardless of whether you are logged into an existing user profile, certain information about your device (including your IP address), your browser, and your browsing history is transmitted to the provider and may be further processed there.
If you are logged into an existing user profile on the provider's social network, information about interactions performed via the plugins will also be published there and displayed to your contacts.
You can withdraw your consent at any time by deactivating the activated plugin again by clicking on it. However, the withdrawal has no influence on the data that has already been transmitted to the provider.
Data may also be transferred to: Meta Platforms Inc., USA
We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European level of data protection.
11.2 Instagram Plugins
Our website uses plugins from the following social network provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland
These plugins enable direct interaction with content on the social network.
To enhance the protection of your data when you visit our website, the plugins are initially deactivated using a '2-click' or 'Shariff' solution.
This integration ensures that when you access a page on our website containing such plugins, no connection is established with the provider's servers.
Only when you activate the plugins and thereby give your consent to data transmission in accordance with Art. 6 para. 1 lit. a GDPR, does your browser establish a direct connection to the provider's servers. In this process, regardless of whether you are logged into an existing user profile, certain information about your device (including your IP address), your browser, and your browsing history is transmitted to the provider and may be further processed there.
If you are logged into an existing user profile on the provider's social network, information about interactions performed via the plugins will also be published there and displayed to your contacts.
You can withdraw your consent at any time by deactivating the activated plugin again by clicking on it. However, the withdrawal has no influence on the data that has already been transmitted to the provider.
Data may also be transferred to: Meta Platforms Inc., USA
We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.
11.3 Apple Maps
This website uses an online map service provided by: Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland.
The online map service is a tool for displaying interactive maps to visually represent geographical information. Using this service, our location is displayed to you, and any geolocalization is made easier.
When you access the subpages where the provider's map is integrated, information about your use of our website (such as your IP address) is transmitted to the provider's servers and stored there.
The processing of your personal data occurs according to Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the needs-oriented design of our website. If you do not agree with the future transmission of your data to the provider, you can completely deactivate the provider's online map service by deactivating JavaScript in your browser. The online map service on this website can then no longer be used.
To the extent required by law, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. To exercise your revocation, please follow the possibility described above for making an objection.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
11.4 Google Maps
This website uses an online map service provided by: Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Google Maps is a web service for displaying interactive maps to visually represent geographical information. Using this service, our location is displayed to you, and directions are made easier.
When you access the subpages where the map from Google Maps is integrated, information about your use of our website (such as your IP address) is transmitted to Google's servers and stored there; this may also involve transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment to your profile on Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.
The collection, storage, and evaluation occur according to Art. 6 para. 1 lit. f GDPR based on Google's legitimate interest in displaying personalized advertising, market research, and/or the needs-oriented design of Google websites. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree with the future transmission of your data to Google as part of the use of Google Maps, you can also completely deactivate the Google Maps web service by deactivating the JavaScript application in your browser. Google Maps and therefore the map display on this website can then no longer be used.
To the extent required by law, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. To exercise your revocation, please follow the possibility described above for making an objection.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.
Further information on Google's data protection regulations can be found here: https://business.safety.google
11.5 Google Customer Reviews (formerly Google Certified Shops Program)
We collaborate with Google as part of the “Google Customer Reviews” program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program allows us to obtain customer reviews from users of our website. After making a purchase on our website, you will be asked whether you would like to participate in an email survey from Google.
If you grant your consent in accordance with Art. 6 para. 1 lit. a GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchasing experience on our website. The rating you submit will then be aggregated with our other ratings and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. In addition, your rating will be used for Google Seller Ratings. As part of the use of Google Customer Reviews, personal data may also be transferred to the servers of Google LLC. in the USA.
You can revoke your consent at any time by sending a message to the data controller or to Google.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.
Further information on Google's data protection regulations can be found here: https://business.safety.google
12) Rights of the Data Subject
12.1 Applicable data protection law grants you the following rights as a data subject (rights to information and intervention) with regard to the processing of your personal data by the controller, whereby the stated legal basis is referenced for the respective conditions of exercise:
- Right to information according to Art. 15 GDPR;
- Right to rectification according to Art. 16 GDPR;
- Right to erasure according to Art. 17 GDPR;
- Right to restriction of processing according to Art. 18 GDPR;
- Right to notification according to Art. 19 GDPR;
- Right to data portability according to Art. 20 GDPR;
- Right to withdraw consent granted according to Art. 7 para. 3 GDPR;
- Right to lodge a complaint according to Art. 77 GDPR.
12.2 RIGHT TO OBJECT
IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING SHALL REMAIN RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
13) Duration of storage of personal data
The duration of the storage of personal data is based on the respective legal basis, the purpose of processing and – if applicable – additionally on the respective statutory retention period (e.g. commercial and tax retention periods).
When processing personal data on the basis of express consent in accordance with Art. 6 para. 1 lit. a GDPR, the data concerned will be stored until you withdraw your consent.
If statutory retention periods exist for data that is processed within the framework of legal or quasi-legal obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after expiry of the retention periods, provided that it is no longer required for contract fulfilment or contract initiation and/or we no longer have a legitimate interest in continued storage.
When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until you exercise your right to object under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object under Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
