Privacy Policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for entering into a contract. You are not obligated to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other information is provided in the following processing operations. "Personal data" means any information relating to an identified or identifiable natural person.

Server log files
You can visit our websites without providing any personal information. 
Each time you access our website, your internet browser transmits usage data to us or our web host/IT service provider, which is then stored in log files (server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.
The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our services. 
 

Your data will be transferred to Canada, among other places. The EU Commission has issued an adequacy decision for data transfers to Canada.

contact

Responsible
Please contact us if you wish. The data controller is: Kevin Herbst, Neumann-Reichardt-Straße 27-33, 22041 Hamburg Germany, 040 / 23 96 98 85, service@men-of-mayhem.com

Customer initiates contact via email
If you contact us proactively via email, we collect your personal data (name, email address, message text) only to the extent that you provide it. This data processing serves the purpose of processing and responding to your inquiry.
If the contact is for the purpose of carrying out pre-contractual measures (e.g., providing advice on purchase interest, preparing an offer) or relates to a contract already concluded between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) of the GDPR.
We will only use your email address to process your request.Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing of data for applications submitted via email 
Visitors to our website can apply for open positions advertised on our site via email. We collect your personal data only to the extent that you provide it. This includes your contact details (e.g., name, email address, telephone number), information about your professional qualifications and education, details of professional development courses, and performance-related documentation.
The data processing serves the purpose of establishing contact and deciding on the establishment of an employment relationship with you. Providing this data is necessary to conduct the application process. Your personal data is processed on the basis of Art. 6 (1) (b) GDPR in conjunction with Section 26 (1) BDSG (German Federal Data Protection Act) for the implementation of pre-contractual measures (completion of the application process as the initiation of an employment contract).
If you have given us your consent to process personal data for inclusion in our applicant pool, e.g., by checking a box, the processing will be based on Art. 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.
If, during the application process, special categories of personal data within the meaning of Article 9(1) GDPR are requested from applicants, such as information on the degree of disability, this is done on the basis of Article 9(2)(b) GDPR, so that we can exercise the rights arising from employment law and social security and social protection law and fulfill our obligations in this regard.
We store your personal data for as long as necessary to process your application. Your data will then be deleted no later than six months after this period, unless you have consented to further processing and use. If an employment relationship is established following the application process, the data provided will be further processed for the purposes of carrying out the employment relationship, based on Article 6 Paragraph 1 Letter b GDPR in conjunction with Section 26 Paragraph 1 BDSG, and subsequently transferred to your personnel file.
 

Customer account Orders      

Customer account
When you open a customer account, we collect your personal data to the extent specified there. This data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is based on Article 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on the consent before its withdrawal. Your customer account will then be deleted.

Collection, processing and transfer of personal data during orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Providing this data is necessary for entering into a contract. Failure to provide this data will result in the contract not being concluded. This processing is based on Article 6(1)(b) GDPR and is necessary for the performance of a contract with you. 
Your data will be shared with, for example, your chosen shipping companies and dropshipping providers, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly adhere to legal requirements. The scope of data transfer is limited to the minimum necessary.
 

Your data will be transferred to Canada, among other places. The EU Commission has issued an adequacy decision for data transfers to Canada.

Advertising      

Use of the email address for sending newsletters
We use your email address, independently of contract processing, exclusively for our own advertising purposes to send you newsletters, provided you have expressly consented to this. This processing is based on Article 6(1)(a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. 

Your data will be shared with an email marketing service provider as part of order processing. It will not be shared with any other third parties.

Use of the email address for sending direct marketing.
We use your email address, which we obtained in connection with the sale of goods or services, to send you electronic advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. Providing your email address is necessary for the conclusion of the contract. Failure to provide it will result in the contract not being concluded. This processing is based on Article 6(1)(f) GDPR, due to our overriding legitimate interest in direct marketing. You can object to this use of your email address at any time by notifying us. The contact details for exercising your right to object can be found in the legal notice. You can also use the link provided in the promotional email. No costs other than standard transmission fees will be incurred.

Using Klaviyo

Our email newsletters are sent via the technical service provider Klaviyo (Klaviyo Inc., 125 Summer Street, Boston, MA 02111, USA / Klaviyo Ltd., 1 Mark Square, London EC2A 4EG, United Kingdom).

Legal basis and consent

Newsletters are sent either on the basis of your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with § 7 para. 2 no. 3 UWG or – if you are already a customer with us – on the basis of our legitimate interest in direct marketing for our own similar products and services pursuant to Art. 6 para. 1 lit. f GDPR in conjunction with § 7 para. 3 UWG (existing customer privilege).

For new registrations (double opt-in): When you subscribe to our newsletter, we use the so-called double opt-in procedure: After you subscribe, you will receive a confirmation email in which you must confirm that you wish to receive the newsletter by clicking on a link.

For existing customers: If you have purchased goods or services from us and provided your email address, we reserve the right to send you regular offers for similar products via email. Legally, no separate consent is required for this. The prerequisite is that you have not objected to the use of your email address. You can object to this use at any time without incurring any costs other than the standard transmission fees.

Right of withdrawal and objection: You can withdraw your consent at any time with effect for the future by clicking the unsubscribe link in each newsletter or by sending us a corresponding message. The same applies to your right to object as an existing customer.

Data transmission and processing

The data you provide when subscribing to our newsletter, or which we receive as part of your order (in particular your email address and optionally your first and last name), will be transmitted to Klaviyo. This data is stored and processed on Klaviyo's servers in the USA. Klaviyo processes the data exclusively on our behalf as a data processor in accordance with Article 28 of the GDPR. We have concluded a data processing agreement with Klaviyo, which obligates Klaviyo to protect our customers' data and not to disclose it to unauthorized third parties.

Data transfer to third countries

Klaviyo processes some data in the USA. The transfer of personal data to the USA is based on the EU-U.S. Privacy Shield.SKlaviyo participates in the Data Privacy Framework as a certified company. This framework ensures an adequate level of data protection in accordance with the GDPR. In addition, Klaviyo has concluded the EU Standard Contractual Clauses pursuant to Art. 46 para. 2 lit. c GDPR to provide further guarantees for data protection.

The EU Commission has issued an adequacy decision for the transfer of data to Klaviyo Ltd. in the United Kingdom, thus ensuring an adequate level of data protection.

Analysis and tracking

The emails we send contain web beacons or tracking pixels that allow us to see if and when a newsletter was opened and which links were clicked. We also collect technical information (e.g., time of access, IP address, browser type, operating system, and device information). This data is collected pseudonymously and is not used to create a complete user profile. The analysis is used solely to improve our newsletter content and tailor it to the interests of our recipients, based on Article 6(1)(f) GDPR (legitimate interest in optimizing our newsletter).

You can opt out of tracking by either unsubscribing from the newsletter or disabling the default image display in your email program. However, in this case, the newsletter may not be displayed completely or optimally.

storage duration

Your newsletter data will be stored with us and with Klaviyo for as long as you are subscribed to the newsletter. After unsubscribing, your data will be deleted within 90 days, unless statutory retention periods apply. Data stored with us for other purposes (e.g., in connection with a purchase agreement) will remain unaffected.

additional Information

Klaviyo's privacy policy can be found here:
https://www.klaviyo.com/legal/privacy-notice


Shipping service provider, inventory management      

Sharing of the email address with shipping companies to inform about the shipping status
We will share your email address with the shipping company as part of the order processing, provided you have expressly consented to this during the ordering process. This sharing is for the purpose of informing you about the shipping status via email. This processing is based on Article 6(1)(a) of the GDPR with your consent. You can withdraw your consent at any time by notifying us or the shipping company, without affecting the lawfulness of processing based on consent before its withdrawal.

Use of an external merchandise management system
We use an enterprise resource planning (ERP) system for contract processing as part of order processing. For this purpose, your personal data collected during the ordering process will be transferred to
Alaiko GmbH, Sandstraße 33, 80335 Munich 
transmitted.

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is based on Art. 6 para. 1 lit. b GDPR.

Payment service provider      

Using PayPal
We use the PayPal payment service from PayPal (Europe) on our website. S.à.rl et Cie, S.CA (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of offering you payment via the payment service. By selecting and using payment via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Article 6(1)(b) GDPR.

All PayPal transactions are subject to the PayPal Privacy Statement. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Using PayPal Plus
We use the PayPal Plus payment service from PayPal (Europe) on our website. S.à.rl et Cie, S.CA (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of offering you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, or direct debit via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6 Paragraph 1 Letter b GDPR.
 
For certain payment methods, such as credit card and direct debit via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical methods using credit reference agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit reference agency and uses the information received about the statistical probability of payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) calculated using scientifically recognized mathematical-statistical methods, which incorporate, among other things, address data. Your legitimate interests are protected in accordance with legal regulations. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when PayPal provides advance payment. 
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (f) of Article 6(1) of the GDPR, by notifying PayPal. Providing this data is necessary for concluding the contract with your chosen payment method. Failure to provide this data will result in the contract not being able to be concluded with your selected payment method.
 

Using PayPal Express
We use the PayPal Express payment service from PayPal (Europe) on our website. S.à.rl et Cie, S.CA (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of enabling you to offer payment via the PayPal Express payment service.
To integrate this payment service, PayPal needs to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when you access the website. Cookies may also be used for this purpose. These cookies enable your browser to be recognized.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1. S. 1 TTDSG  In conjunction with Article 6 paragraph 1 letter a GDPR. The processing of your personal data is based on your consent pursuant to Article 6 paragraph 1 letter a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.
By selecting and using PayPal Express, the data required for payment processing will be transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Article 6(1)(b) GDPR.
Further information on data processing when using the PayPal Express payment service can be found in the corresponding privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS

Using PayPal Checkout
We use the PayPal Check-Out payment service from PayPal (Europe) on our website. S.à.rl et Cie, S.CA (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of enabling you to offer payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing will be transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6 Paragraph 1 Letter b GDPR.

Cookies may be stored that enable your browser to be recognized. The resulting data processing is based on Article 6 Paragraph 1 Letter f GDPR, due to our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you.

Credit card via PayPal, direct debit via PayPal & "Pay later" via PayPal 
For certain payment methods, such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical methods using credit reference agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit reference agency and uses the information received about the statistical probability of payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) that are calculated using scientifically recognized mathematical-statistical methods and whose calculation incorporates, among other things, address data. Your legitimate interests will be respected in accordance with legal regulations. The data processing serves the purpose of credit assessment for the initiation of a contract. This processing is based on Article 6(1)(f) GDPR, due to our overriding legitimate interest in protecting against payment defaults when PayPal provides advance payment. 
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (f) of Article 6(1) of the GDPR, by notifying PayPal. Providing this data is necessary for concluding the contract with your chosen payment method. Failure to provide this data will result in the contract not being able to be concluded with your selected payment method.

Third-party providers
When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Article 6(1)(b) GDPR. To process this payment method, PayPal may then forward the data to the respective provider. This processing is also based on Article 6(1)(b) GDPR. Local third-party providers may include, for example:

  • Immediately (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
  • giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)


Purchase on account via PayPal 
When paying via invoice, the data required for payment processing is initially transmitted to PayPal. To process this payment method, PayPal then transmits the data to Ratepay GmbH (Franklinstrasse 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6 Paragraph 1 Letter b GDPR. Ratepay may conduct a credit check using mathematical-statistical methods (probability or score values) with credit agencies, following the procedure described above. The data processing serves the purpose of credit assessment for initiating a contract. This processing is based on Article 6 Paragraph 1 Letter f GDPR, due to our overriding legitimate interest in protecting against payment defaults when Ratepay provides services in advance. Further information on data protection and which credit agencies Ratpay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/. 

Further information on data processing when using PayPal can be found in the corresponding privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of SOFORT
We use the payment service provider SOFORT GmbH (Theresienhöhe 12, 80339 Munich, Germany; "SOFORT") for payment processing on our website. SOFORT GmbH is a company of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The data processing serves the purpose of offering you various payment methods through payment processing via the payment service provider SOFORT. If you have chosen a payment option, the data required for payment processing will be transmitted to SOFORT. This data processing is based on Article 6 Paragraph 1 Letter b GDPR. You can find more information about data processing when using the payment service provider SOFORT at [link to SOFORT's privacy policy]. https://www.sofort.com/1.0/shared/content/legal/terms/de-DE/SOFORT/ and https://www.klarna.com/sofort/.
 
Using the payment service provider Stripe
We use the payment service Stripe, provided by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, on our website. The data processing serves the purpose of offering you the option of payment via this service. By selecting and using Stripe, the data required for payment processing is transmitted to Stripe in order to fulfill the contract with you using the chosen payment method. This processing is based on Article 6(1)(b) GDPR. 
Stripe reserves the right to obtain a credit report, if necessary, based on mathematical-statistical methods using credit reference agencies. For this purpose, Stripe transmits the personal data required for a credit check to a credit reference agency and uses the information received about the statistical probability of payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) calculated using scientifically recognized mathematical-statistical methods, which incorporate, among other things, address data. Your legitimate interests are taken into account in accordance with legal regulations. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is based on Article 6(1)(f) of the GDPR. f GDPR based on our overriding legitimate interest in protection against payment default when Stripe provides advance payment. 
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (f) of Article 6(1) of the GDPR, by notifying Stripe. Providing this data is necessary for concluding the contract with your chosen payment method. Failure to provide this data will result in the contract not being able to be concluded with your selected payment method.
All Stripe transactions are subject to the Stripe Privacy Policy. You can find it at https://stripe.com/de/privacy 
 
Using the payment service provider Mollie
We use the payment service provider Mollie BV (Keizersgracht 313, 1016 EE Amsterdam, Netherlands; "Mollie") for payment processing on our website. The data processing serves the purpose of offering you various payment methods through payment processing via Mollie. If you have chosen one of Mollie's payment options, the data required for payment processing will be transmitted to Mollie. This includes your payment details (for example, bank account number or credit card number), your IP address, your internet browser and device type, and in some cases, your first and last name, your address, and information about the product or service you have purchased from us. This data processing is based on Article 6(1)(b) GDPR. Further information on data processing when using the payment service provider Mollie can be found in the corresponding privacy policy. https://www.mollie.com/de/privacy

Cookies

Our website uses cookies. Cookies are small text files that are stored in or by the internet browser on a user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is visited again.
 
Cookies are stored on your computer. Therefore, you have full control over their use. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, please note that you may then not be able to fully utilize all the functions of this website.
 
The links below provide information on how to manage (including disable) cookies in the most common browsers:
 
Technically necessary cookies
Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies to make our website more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after you navigate to a different page and to offer you services. Some features of our website cannot be offered without the use of cookies. For these features, it is necessary that the browser is recognized even after a page change.
 
The use of cookies or similar technologies is based on Section 25 Paragraph 2 of the German Telecommunications and Telemedia Data Protection Act (TTDSG). The processing of your personal data is based on Article 6 Paragraph 1 Letter f of the GDPR, due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our services.
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you.
 

Using GDPR Compliance Pro
We use the cookie consent tool GDPR Compliance Pro 2018 from PrestaChamps.com of SC Wedis Complany SRL (Strada Tudor Vladimirescu nr. 19, Târgu Mureș, Romania; "PrestaChamps") on our website.
The plug-in allows you to grant consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw previously granted consent. The data processing serves the purpose of obtaining and documenting necessary consents to data processing and thus complying with legal obligations.
Cookies are used for this purpose, among other things to store the consent status and, if necessary, to transfer it to PrestaChamps. This data will not be shared with any other third parties.
The data processing is carried out to fulfill a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR.
Further information on data protection at PrestaChamps can be found at: https://www.prestachamps.com/en/content/10-privacy-policy


Ad tracking analysis      

Use of Google Analytics 4
We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. To this end, Google, on behalf of the operator of this website, will use the information obtained to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. 
This can include, among other things... The following information will be collected: IP address, date and time of page access, click path, information about the browser and device you are using, pages visited, referrer URL (website from which you accessed our website), location data, and purchase activity. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.

Google will shorten the IP address beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

Your personal data is processed with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.

The information generated about your use of this website is generally transmitted to and stored on a Google server in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to complying with European data protection principles. Both Google and US government authorities have access to your data.

Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites and under https://policies.google.com/privacy?hl=de&gl=de.

Using Microsoft Clarity
We use the service on our website Microsoft Clarity Microsoft Clarity, a service of Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA), allows us to analyze user behavior on our website. This includes, in particular, recording clicks, mouse movements, scrolling behavior, used functions, time spent on individual pages, and so-called "session replays" (session recordings).

Purpose of processing
The processing is carried out for the purpose of improving user-friendliness, optimizing our online offer, troubleshooting, marketing and analysis purposes, and increasing the security of our website.

Legal basis
The use of Microsoft Clarity is based solely on your consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TTDSG. You can revoke this consent at any time with effect for the future via our cookie settings.

Technologies used
Microsoft Clarity uses cookies and similar technologies to collect and recognize information about user behavior. This may include the collection of pseudonymized data such as device information, browser data, IP addresses (truncated/anonymized where technically possible), referrer URLs, and individual usage profiles.

Recipients of the data / Transfer to third countries
The collected data is processed by both us and Microsoft. This may involve the transfer of personal data to the USA. Currently, the European Commission has not issued an adequacy decision for the USA. Microsoft bases the transfer on appropriate safeguards, such as the EU Standard Contractual Clauses. Further information can be found here:
https://privacy.microsoft.com/de-de/privacystatement

Storage duration
The collected data will be stored for as long as necessary for analysis purposes. Afterwards, it will be deleted or anonymized.

Notice
By using our website, you agree that we and Microsoft may process and use the collected data in the manner described.



Using Shopify statistics
We use the statistics and analytics functions of Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of order processing. Shopify is a service provided by Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada) affiliated company
The data processing serves the purpose of analyzing this website and its visitors. For this purpose, data is stored for marketing and optimization purposes and made available in reports, analyses, and statistics. This includes, among other things, the following device information: information about the web browser, the IP address, the time zone, and some of the cookies installed on your device. When you navigate the website, information about the web pages or products you visit, the referrer URL (the website from which you accessed our website), and information about how you interact with the website are also collected. Technologies such as cookies, web beacons, tags, and pixels (electronic files used to collect information about how you navigate the website) are used for this purpose.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1. S. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. Your personal data is processed with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.
You can find more information about data protection at Shopify here. https://www.shopify.com/de/legal/datenschutz, Information on the data processing agreement can be found at https://www.shopify.com/de/legal/dpa as well as information about the cookies used under https://www.shopify.com/de/legal/cookies.

Using the Meta Pixel
We use the Meta Pixel of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.
Meta and we are jointly responsible for the collection of your data and its transfer to Meta when you use this service. This is based on an agreement between us and Meta regarding the joint processing of personal data, which defines our respective responsibilities. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools accessible. We are then specifically responsible for fulfilling the information obligations pursuant to Articles 13 and 14 of the GDPR, for complying with the security requirements of Article 32 of the GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Articles 33 and 34 of the GDPR, insofar as a personal data breach affects our obligations under the joint controllership agreement. Meta is responsible for ensuring the data subject rights pursuant to Articles 13 and 14 of the GDPR. 15 - 20 GDPR, to comply with the security requirements of Art. 32 GDPR with regard to the security of the service and to fulfil the obligations under Art. 33, 34 GDPR, insofar as a breach of the protection of personal data affects Meta's obligations under the joint processing agreement.
The application serves the purpose of targeting website visitors with interest-based advertising on the social networks Facebook and Instagram. For this purpose, the Meta remarketing tag has been implemented on the website. This tag establishes a direct connection to the Meta servers when you visit the website. This transmits to the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will then be shown personalized, interest-based ads.
The application also serves the purpose of generating conversion statistics. This allows us to see the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag, as well as what actions they took after being redirected to that website. However, we do not receive any personally identifiable information.
Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta is certified under the TADPF and has therefore committed to complying with European data protection principles.
Your personal data is processed with your consent on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
You can deactivate the "Custom Audiences" remarketing feature here. Further information about the collection and use of data by Meta, your related rights, and options for protecting your privacy can be found in Meta's privacy policy at [link to Meta privacy policy]. https://www.facebook.com/about/privacy/.

 

Using Google Ads conversion tracking
We use the online advertising program "Google Ads" on our website and, within this framework, conversion tracking (visit action evaluation). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad served by Google, a conversion tracking cookie is placed on your computer. These cookies have a limited lifespan, do not contain any personally identifiable information, and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. This means that cookies cannot be tracked across the websites of different Ads customers.
The information collected using the conversion cookie is used to generate conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can personally identify users.
Your data may be transferred to Google LLC servers in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). has certified itself according to the TADPF and has therefore committed itself to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1. S. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. Your personal data is processed with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.
Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/
 

Use of the Pinterest tag

We use the Pinterest tag of Pinterest Europe Limited (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland; "Pinterest") on our website.

Purpose of processing This application is designed to target website visitors with interest-based advertising on the social network Pinterest. To achieve this, the Pinterest conversion tag has been implemented on the website. This tag establishes a direct connection to Pinterest's servers when you visit the website. This transmits information to Pinterest's servers about which of our pages you have visited. Pinterest associates this information with your personal Pinterest user account if you are logged into the social network. When you visit Pinterest, you will then be shown personalized, interest-based Pinterest ads.

Conversion tracking If you access our website via a pin on the social network Pinterest, a conversion tracking cookie will be stored on your computer. These cookies have a limited lifespan of [PLEASE INSERT SPECIFIC DURATION, e.g., "30 days"]. If you visit certain pages of our website and the cookie has not yet expired, Pinterest and we can recognize that you clicked on the pin and were redirected to this page.

Processed data The information collected using the conversion cookie is used to generate conversion statistics and thus optimize our offerings. This may include, but is not limited to, the following information:

  • Total number of users who clicked on one of our pins and were redirected to our website.
  • Subpages visited on our website (e.g. category or product pages)
  • Search queries on our website
  • Your shopping cart contents
  • Completed transactions
  • Device information (browser type, operating system, screen resolution)
  • IP address (truncated)

Data transfer to third countries Your data will be transferred to the USA. While the EU Commission has issued an adequacy decision for the USA (Trans-Atlantic Data Privacy Framework - TADPF), Pinterest is not currently certified under the TADPF. Therefore, the data transfer is based on EU Standard Contractual Clauses pursuant to Art. 46 para. 2 lit. c GDPR as suitable safeguards for the protection of personal data.

Please note: When transferring personal data to the USA, US authorities may, under certain circumstances, access your data without you having effective legal recourse. Further information on the Standard Contractual Clauses can be found at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de

Legal basis and revocation The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1. S. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. Your personal data is processed with your consent on the basis of Art. 6 para. 1 lit. a GDPR.

You can withdraw your consent at any time with effect for the future by:

  • Adjust your cookie settings in our cookie banner.
  • Delete cookies in your browser settings
  • Send us an email to [YOUR CONTACT EMAIL]

The revocation does not affect the lawfulness of the processing carried out until the revocation.

For more information about how Pinterest collects and uses data, your related rights, and options for protecting your privacy, please see Pinterest's privacy policy at: https://policy.pinterest.com/de/privacy-policy

Use of TikTok Pixel

We use the TikTok Pixel on our website, provided by TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; "TikTok Ireland") and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; "TikTok UK").

Joint responsibility Both companies are jointly responsible with us for data processing (Art. 26 GDPR). You can find the key details of the joint controllership agreement at [link to agreement]. https://ads.tiktok.com/i18n/official/policy/controller-to-controller You can view your rights as a data subject both against us and against TikTok Ireland and TikTok UK.

Purpose of processing The data processing serves the following purposes:

  • Identification and analysis of website visits by our visitors
  • Creating target groups for interest-based advertising
  • Running targeted ads on TikTok
  • Measurement and evaluation of the effectiveness of advertisements (conversion tracking)
  • Optimization of our marketing measures

Processed data TikTok uses technologies such as cookies and pixels to recognize your browser. The following information, among other things, may be collected and transmitted to TikTok:

  • Date and time of visit
  • Information about the browser and device type you are using
  • Screen resolution
  • IP address
  • Pages visited on our website
  • Interactions on our website (e.g. clicks, scrolling behavior)
  • Referrer URL (website you came from)

TikTok can associate this information with your personal TikTok user account if you are logged in to TikTok. Usage profiles can be created from the data collected in this way using pseudonyms.

Data transfer to third countries Your data will be transferred to third countries, in particular the USA and possibly China (headquarters of TikTok's parent company ByteDance).

While the EU Commission has issued an adequacy decision for the USA (Trans-Atlantic Data Privacy Framework - TADPF), TikTok is not currently certified under the TADPF. Data transfers to the USA and other third countries without an adequacy decision are based on EU Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR as appropriate safeguards for the protection of personal data.

Please note: When transferring personal data to third countries without an adequate level of data protection, authorities in those countries may, under certain circumstances, access your data. You may have limited or no effective legal remedies against such access. This applies in particular to the USA and China. Further information on the Standard Contractual Clauses can be found at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de

Legal basis and revocation The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1. S. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. Your personal data is processed with your consent on the basis of Art. 6 para. 1 lit. a GDPR.

You can withdraw your consent at any time with effect for the future by:

  • Adjust your cookie settings in our cookie banner.
  • Delete cookies in your browser settings

The revocation does not affect the lawfulness of the processing carried out until the revocation.

Further information Further information on data protection at TikTok can be found at:



Plugins and Miscellaneous

Using Google Tag Manager
We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. 
This application manages JavaScript and HTML tags used to implement tracking and analytics tools. The data processing serves the purpose of tailoring and optimizing our website to user needs.
The Google Tag Manager itself does not store cookies, nor does it process personal data. However, it enables the triggering of other tags that may collect and process personal data.
You can find more information about terms of use and data protection here. here.
 

Using Cloudflare
We use the Cloudflare CDN content delivery network from Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; “Cloudflare”) on our website. This is a geographically dispersed network of servers in various data centers to which our web server connects and through which certain content from our website is delivered.
The data processing serves the purpose of optimizing the loading times of our website and thus making our offer more user-friendly.
The following information may be collected, among other things: IP address, system configuration information, information about traffic to and from customer websites (so-called server log files).
Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflare has certified itself according to the TADPF and has therefore committed itself to complying with European data protection principles.
Your personal data is processed on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest. on the needs-based and targeted design of the website. You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) of the GDPR.
For more information about data protection when using Cloudflare, please see [link to privacy policy]. https://www.cloudflare.com/de-de/privacypolicy/.

Using Google Maps
We use the Google Maps embedding function on our website, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, "Google").
This function enables the visual display of geographical information and interactive maps. When pages containing embedded Google Maps are accessed, Google also collects, processes, and uses data from website visitors.
Your data may also be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and has therefore committed itself to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1. S. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. Your personal data is processed with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.
Further information on the collection and use of data by Google can be found in Google's privacy policy at https://www.google.com/privacypolicy.html. There, in the Privacy Center, you also have the option to change your settings so that you can manage and protect your data processed by Google.

Using YouTube
We use the YouTube video embedding function on our website, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”). YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
This feature displays videos hosted on YouTube within an iFrame on the website. The "Enhanced Privacy Mode" option is enabled. This means that YouTube does not store any information about visitors to the website. Information is only transmitted to and stored by YouTube when you watch a video. Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified itself according to the TADPF and has therefore committed itself to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1. S. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. Your personal data is processed with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.
For more information about how YouTube and Google collect and use data, your related rights and options for protecting your privacy, please see YouTube's privacy policy at [link to YouTube's privacy policy]. https://www.youtube.com/t/privacy.

Data subject rights and storage period

Storage duration
After complete contract fulfillment, the data will initially be stored for the duration of the warranty period, then taking into account legal, in particular tax and commercial law retention periods, and then deleted after the expiry of the period, unless you have consented to further processing and use.

Rights of the data subject
Provided the legal requirements are met, you have the following rights under Art. Articles 15 to 20 of the GDPR address: the right to information, to rectification, to erasure, to restriction of processing, and to data portability.
Furthermore, pursuant to Article 21 Paragraph 1 GDPR, you have the right to object to processing based on Article 6 Paragraph 1 f GDPR, as well as to processing for direct marketing purposes.

Right to lodge a complaint with the supervisory authority
According to Article 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is unlawful.

You can lodge a complaint with the supervisory authority responsible for us, which you can reach using the following contact details:

Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str 22, 7th floor
20459 Hamburg
Tel.+49 40 428544040
Fax: +49 40 428544000
E-mail: mailbox@datenschutz.hamburg.de

Right to object
If the processing of personal data listed here is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation.
After an objection has been lodged, the processing of the data in question will cease, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.

If personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. After receiving your objection, we will cease processing the data in question for direct marketing purposes.

Last updated: November 26, 2025