Privacy policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract, nor necessary for concluding a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This only applies insofar as no other information is given in the following processing operations. "Personal data" is any information relating to an identified or identifiable natural person.

Server log files
You can visit our websites without providing any information about your person.
Each time our website is accessed, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
Processing is carried out on the basis of Art. 6 (1) (f) GDPR out of our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our offering.

Your data is thereby transferred, among other places, to Canada. For data transfers to Canada, an adequacy decision of the EU Commission exists.

Contact

Controller
Please contact us if you wish. The controller responsible for data processing is: Kevin Herbst, Neumann-Reichardt-Straße 27-33, 22041 Hamburg, Germany, +49 40 23 96 98 85, service@men-of-mayhem.com

Customer-initiated contact by email
If you contact us on your own initiative for business purposes by email, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves to handle and respond to your contact request.
If the contact serves the performance of pre-contractual measures (e.g. advice in the case of a purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) (b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) (f) GDPR out of our overriding legitimate interest in handling and responding to your request. In this case, you have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR.
We use your email address only to process your request. Your data is subsequently deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing for applications by email
Interested site visitors can apply by email for vacancies advertised on our website. In doing so, we collect your personal data only to the extent provided by you. This includes your contact details (e.g. name, email address, telephone number), information on your professional qualifications and training, information on professional further training, and performance-specific records.
The data processing serves the purpose of contacting you and deciding on the establishment of an employment relationship with you. The provision of the data is necessary to carry out the application process. The processing of your personal data is carried out on the basis of Art. 6 (1) (b) GDPR in conjunction with § 26 (1) BDSG (German Federal Data Protection Act) for the performance of pre-contractual measures (going through the application process as an initiation of an employment contract).
Insofar as you have given us consent to process personal data for inclusion in our applicant pool, e.g. by ticking a checkbox, processing is carried out on the basis of Art. 6 (1) (a) GDPR. You can revoke your consent towards us at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.
If special categories of personal data within the meaning of Art. 9 (1) GDPR are requested from applicants during the application process, such as information on the degree of severe disability, this is done on the basis of Art. 9 (2) (b) GDPR so that we can exercise the rights arising from labour law and the law of social security and social protection and fulfil our related obligations.
We store your personal data for as long as this is necessary for deciding on your application. Your data is subsequently deleted no later than six months afterwards, unless you have consented to further processing and use. If an employment relationship results following the application process, the provided data is further processed on the basis of Art. 6 (1) (b) GDPR in conjunction with § 26 (1) BDSG for the purposes of carrying out the employment relationship and subsequently transferred to the personnel file.

Customer account & orders

Customer account
When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation. Your customer account is subsequently deleted.

Collection, processing and disclosure of personal data for orders
When placing an order, we collect and process your personal data only insofar as this is necessary for the fulfilment and processing of your order and for handling your requests. The provision of the data is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. Processing is carried out on the basis of Art. 6 (1) (b) GDPR and is necessary for the performance of a contract with you.
Your data is thereby disclosed, for example, to the shipping companies and dropshipping providers you have selected, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the statutory requirements. The scope of the data transfer is limited to a minimum.

Your data is thereby transferred, among other places, to Canada. For data transfers to Canada, an adequacy decision of the EU Commission exists.

Advertising

Use of the email address for sending newsletters
We use your email address, independently of the contract processing, exclusively for our own advertising purposes to send newsletters, provided you have expressly consented to this. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation. To do so, you can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.

Your data is thereby passed on to a service provider for email marketing as part of order processing. It is not passed on to any other third parties.

Use of the email address for sending direct advertising
We use your email address, which we received in the context of the sale of goods or a service, for the electronic transmission of advertising for our own goods or services that are similar to those you have already purchased from us, insofar as you have not objected to this use. The provision of the email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. Processing is carried out on the basis of Art. 6 (1) (f) GDPR out of our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. The contact details for exercising the objection can be found in the legal notice. You can also use the link provided for this purpose in the advertising email. There are no costs for this other than the transmission costs according to the basic rates.

Use of Klaviyo

Our email newsletters are sent via the technical service provider Klaviyo (Klaviyo Inc., 125 Summer Street, Boston, MA 02111, USA / Klaviyo Ltd., 1 Mark Square, London EC2A 4EG, United Kingdom).

Legal basis and consent

The newsletter is sent either on the basis of your express consent pursuant to Art. 6 (1) (a) GDPR in conjunction with § 7 (2) no. 3 UWG (German Act Against Unfair Competition) or – if you are already a customer of ours – on the basis of our legitimate interest in direct advertising for our own similar products and services pursuant to Art. 6 (1) (f) GDPR in conjunction with § 7 (3) UWG (existing customer privilege).

For new registrations (double opt-in): When registering for our newsletter, we use the so-called double opt-in procedure: after your registration, you will receive a confirmation email in which you must confirm, by clicking a link, that you wish to receive the newsletter.

For existing customers: If you have purchased goods or services from us and provided your email address in the process, we reserve the right to regularly send you offers for similar products by email. According to the law, no separate consent is required for this. The prerequisite is that you have not objected to the use of your email address. You can object to this use at any time, without incurring any costs other than the transmission costs according to the basic rates.

Right of revocation and objection: You can revoke your consent at any time with effect for the future by clicking the unsubscribe link in each newsletter or by sending us a corresponding message. The same applies to your right of objection as an existing customer.

Data transfer and processing

The data you provide when registering for our newsletter or that we have received in the context of your order (in particular your email address and, optionally, first and last name) is transmitted to Klaviyo. This data is stored and processed on Klaviyo's servers in the USA. Klaviyo processes the data exclusively on our behalf as a processor pursuant to Art. 28 GDPR. We have concluded a data processing agreement with Klaviyo that obliges Klaviyo to protect our customers' data and not to pass it on to unauthorised third parties.

Data transfer to third countries

Klaviyo processes data partly in the USA. The transfer of personal data to the USA is carried out on the basis of the EU-U.S. Data Privacy Framework, in which Klaviyo participates as a certified company. The Data Privacy Framework ensures that an adequate level of data protection within the meaning of the GDPR is guaranteed. In addition, Klaviyo has concluded the EU standard contractual clauses pursuant to Art. 46 (2) (c) GDPR in order to provide additional guarantees for data protection.

For the data transfer to Klaviyo Ltd. in the United Kingdom, an adequacy decision of the EU Commission exists, so that an adequate level of data protection is ensured here.

Analysis and tracking

The emails sent contain web beacons or tracking pixels, by means of which we can recognise whether and when a newsletter was opened and which links were clicked. In addition, technical information is recorded (e.g. time of retrieval, IP address, browser type, operating system and device information). This data is collected pseudonymously and not assigned to a complete user profile. The evaluations serve exclusively to improve our newsletter content and to adapt it to the interests of our recipients on the basis of Art. 6 (1) (f) GDPR (legitimate interest in optimising our newsletter).

You can object to the tracking either by unsubscribing from the newsletter or by disabling the display of images by default in your email program. In this case, however, the newsletter may not be displayed in full or optimally.

Retention period

Your newsletter data is stored by us and by Klaviyo for as long as you have subscribed to the newsletter. After unsubscribing from the newsletter, your data is deleted within 90 days, unless statutory retention periods conflict with this. Data stored by us for other purposes (e.g. in the context of a purchase contract) remains unaffected.

Further information

You can find Klaviyo's privacy policy here:
https://www.klaviyo.com/legal/privacy-notice


Shipping service providers & inventory management

Disclosure of the email address to shipping companies to provide information on the shipping status
We disclose your email address to the transport company as part of the contract processing, provided you have expressly consented to this during the ordering process. The disclosure serves the purpose of informing you by email about the shipping status. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company, without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.

Use of an external inventory management system
For contract processing, we use an inventory management system as part of order processing. For this purpose, your personal data collected in the context of the order is transmitted to
Alaiko GmbH, Sandstraße 33, 80335 Munich
transmitted.

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6 (1) (b) GDPR.

Commissioning of a fulfilment service provider
For storage, order picking, shipping and the processing of returns, we use, as part of order processing, the fulfilment service provider
atrikom fulfillment GmbH, Lange Ruthe 13, 55294 Bodenheim
. For this purpose, the personal data required for order processing (in particular name, delivery address and order data) is transmitted to it. The processing serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6 (1) (b) GDPR.

Payment service providers

Use of Shopify Payments
For payment processing of orders within Germany, we use Shopify Payments, a payment service of Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify"). Via Shopify Payments, in particular credit and debit card payments as well as wallet payments (e.g. Apple Pay, Google Pay) are processed. When you choose a payment method processed via Shopify Payments, the data required for payment processing (e.g. name, billing and delivery address, payment method data, amount) is transmitted to Shopify or the payment processors involved in order to be able to fulfil the contract with you with the chosen payment method. This processing is carried out on the basis of Art. 6 (1) (b) GDPR. You can find further information on data processing by Shopify at https://www.shopify.com/legal/privacy.
Use of Klarna
We offer payment via the payment service provider Klarna Bank AB (publ) (Sveavägen 46, 11134 Stockholm, Sweden; "Klarna"). The data processing serves the purpose of being able to offer you the payment methods offered by Klarna. If you choose a Klarna payment method, the data required for payment processing is transmitted to Klarna in order to be able to fulfil the contract with you with the chosen payment method. This processing is carried out on the basis of Art. 6 (1) (b) GDPR. Klarna reserves the right to carry out an identity and credit check to verify the chosen payment method and, if necessary, to transmit data to credit agencies for this purpose; this processing is carried out on the basis of Art. 6 (1) (f) GDPR out of the overriding legitimate interest in protection against payment default. You can find further information on data processing by Klarna and on the credit agencies used in Klarna's privacy policy at https://www.klarna.com/de/datenschutz/.

Use of PayPal
We use the payment service PayPal of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, the data required for payment processing is transmitted to PayPal in order to be able to fulfil the contract with you with the chosen payment method. This processing is carried out on the basis of Art. 6 (1) (b) GDPR.

For individual payment methods via PayPal (e.g. credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal), PayPal reserves the right, if necessary, to obtain a credit report on the basis of mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognised mathematical-statistical procedures and in whose calculation, among other things, address data is included. Your legitimate interests are taken into account in accordance with the statutory provisions. The processing is carried out on the basis of Art. 6 (1) (f) GDPR out of our overriding legitimate interest in protection against payment default when PayPal makes an advance payment. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR by notifying PayPal.

All PayPal transactions are subject to the PayPal privacy policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Shop Pay
We use the payment service Shop Pay of Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. The data processing serves the purpose of being able to offer you payment via Shop Pay. By selecting and using Shop Pay, the data required for payment processing is transmitted to Shopify in order to be able to fulfil the contract with you with the chosen payment method. This processing is carried out on the basis of Art. 6 (1) (b) GDPR.
When using Shop Pay, the "Shop" app is also used or an account with Shop Pay/Shop is created, via which customers can track their orders, manage payments and interact with our brand. You can find further information on the data collected in this context in Shopify's privacy policy at https://www.shopify.com/legal/privacy and specifically about Shop at https://shop.app/legal/privacy.
Payment processing for international orders via Global-e
For orders with a delivery address outside Germany, order processing – including payment processing – is carried out by our partner Global-e (Global-e UK Ltd., 154 Clerkenwell Road, London EC1R 5AB, United Kingdom; "Global-e") as an independent seller (merchant of record). In this case, the data required for the international order and payment processing (e.g. name, delivery and billing address, email address, payment and order data) is transmitted to Global-e. Global-e is independently responsible for the data processing that takes place in the context of the international order; the payee is Global-e. This processing is carried out on the basis of Art. 6 (1) (b) GDPR for the performance of the contract. This may involve a transfer of personal data to third countries; Global-e bases such transfers on appropriate safeguards within the meaning of Art. 44 et seq. GDPR. You can find further information on data processing by Global-e in its privacy policy on the Global-e website (https://www.global-e.com/).

Cookies

Our website uses cookies. Cookies are small text files that are stored in or by the internet browser on the user's computer system. If a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is accessed again.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually about their acceptance, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies already stored can be deleted at any time. However, we point out that you may then not be able to use all functions of this website to their full extent.
Under the following links, you can find out how to manage (including deactivate) cookies in the most important browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-löschen
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
Unless otherwise stated below in the privacy policy, we only use these technically necessary cookies for the purpose of making our offering more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.
The use of cookies or comparable technologies is carried out on the basis of § 25 (2) TDDDG. The processing of your personal data is carried out on the basis of Art. 6 (1) (f) GDPR out of our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offering.
You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.

Cookie consent via Shopify (consent management)
To obtain, manage and document your consent to non-essential cookies and comparable technologies, we use Shopify's native consent management (Shopify Customer Privacy / cookie consent banner) of Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify"). Via the consent banner, you can give, refuse or revoke consent at any time with effect for the future. The consent status is stored and controls whether services requiring consent (e.g. analysis and marketing tools) are loaded. The data processing serves to fulfil our legal obligation to obtain and document consent and is carried out on the basis of Art. 6 (1) (c) GDPR. You can find further information in Shopify's privacy policy at https://www.shopify.com/legal/privacy


Analysis & advertising tracking

Use of Google Analytics 4
We use the web analysis service Google Analytics of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The data processing serves the purpose of analysing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services related to website use and internet use to the website operator.
Among other things, the following information may be collected: IP address, date and time of the page view, click path, information about the browser and the device you use, pages visited, referrer URL (website from which you accessed our website), location data, purchase activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and any other data that Google has about you.

The IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) (a) GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.

The information generated about your use of this website is generally transferred to a Google server in the USA and stored there. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thereby committed to complying with European data protection principles. Both Google and US government authorities have access to your data.

You can find further information on terms of use and data protection at https://policies.google.com/technologies/partner-sites and at https://policies.google.com/privacy?hl=de&gl=de.

Use of Microsoft Clarity
We use the service Microsoft Clarity of Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA) on our website. Microsoft Clarity enables us to analyse user behaviour on our website. In particular, clicks, mouse movements, scrolling behaviour, functions used, the time spent on individual pages and so-called "session replays" (session recordings) can be recorded.

Purpose of processing
Processing is carried out for the purpose of improving usability, optimising our online offering, troubleshooting, for marketing and analysis purposes, and increasing the security of our web presence.

Legal basis
The use of Microsoft Clarity is carried out exclusively with your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG. You can revoke this consent at any time with effect for the future via our cookie settings.

Technologies used
Microsoft Clarity uses cookies and similar technologies to record and recognise information about user behaviour. In doing so, pseudonymised data such as device information, browser data, IP addresses (shortened/anonymised where technically possible), referrer URL and individual usage profiles may also be collected.

Recipients of the data / transfer to third countries
The data collected is processed both by us and by Microsoft. This may involve a transfer of personal data to the USA. There is currently no adequacy decision of the European Commission for the USA. Microsoft bases the transfer on appropriate safeguards, such as the EU standard contractual clauses. You can find further information on this at: https://privacy.microsoft.com/de-de/privacystatement

Retention period
The data collected is stored for as long as is necessary for the analysis purposes. It is then deleted or anonymised.

Note
By using our website, you agree that we and Microsoft process and use the data collected in the manner described.

Use of Shopify statistics
We use the statistics and analysis functions of Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of order processing. Shopify is a company affiliated with Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The data processing serves the purpose of analysing this website and its visitors. For this purpose, data is stored for marketing and optimisation purposes and provided in reports, analyses and statistics. Among other things, the following device information is collected and processed: information about the web browser, the IP address, the time zone and some of the cookies installed on your device. When you navigate the website, information about pages or products accessed, the referrer URL (website from which you accessed our website) and information about how you interact with the website is also recorded. Technologies such as cookies as well as web beacons, tags and pixels (electronic files for recording information about how you navigate the website) are used for this.
The use of cookies or comparable technologies is carried out with your consent on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) (a) GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.
You can find further information on data protection at Shopify at https://www.shopify.com/de/legal/datenschutz, information on the data processing agreement at https://www.shopify.com/de/legal/dpa, and information on the cookies used at https://www.shopify.com/de/legal/cookies.

Use of Shopify Network Intelligence / Enhanced Services (Shop sales channel, Shop Campaigns)
We use the "Shopify Network Intelligence" function as well as the Enhanced Services of Shopify based on it, among other things in the context of the "Shop" sales channel (listing of our products in the Shop app) and for advertising campaigns via "Shop Campaigns". In doing so, Shopify collects and processes personal data of our customers in order to (i) enable a more personalised shopping experience, (ii) display more relevant ads on platforms such as Google, Meta/Instagram and Pinterest, and (iii) analyse the interaction with our shop and our ads.
Insofar as Shopify provides Enhanced Services in this context, Shopify relies on your consent to the processing of personal data for personalised advertising as well as on its own legitimate interests in providing and improving its products. The processing of your personal data is carried out in this respect on the basis of Art. 6 (1) (a) or (f) GDPR.
You can find further information on the data processing by Shopify in the context of Network Intelligence and Enhanced Services in Shopify's consumer privacy policy at https://www.shopify.com/legal/privacy.

Use of Stape (server-side tracking)
For the reliable and privacy-friendly collection and forwarding of event data, we use the service Stape of the Stape Group ("Stape"). Via a server-side hosted container (server-side Google Tag Manager), event and usage data (e.g. IP address, device and browser information, pages accessed, interactions, cart and purchase events) is processed and – subject to your consent – forwarded to the analysis and marketing services we use. The purpose is more reliable reach and conversion measurement. Insofar as cookies or technologies requiring consent are used in this context, processing is carried out with your consent on the basis of § 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR; otherwise on the basis of our legitimate interest in reliable reach measurement pursuant to Art. 6 (1) (f) GDPR. You can find further information at https://stape.io/privacy-policy.

Use of Lifetimely (analytics & customer lifetime value)
We use the analytics tool Lifetimely (LTV & Profit by AMP) for the business analysis of our shop, in particular to calculate metrics such as customer lifetime value (CLV), contribution margin/profit and cohort analyses. In doing so, order, revenue and usage data (e.g. purchase history, order values, device and usage information) is processed in order to evaluate and optimise our offering. Insofar as cookies or comparable technologies are used in this context, processing is carried out with your consent on the basis of § 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR; otherwise on the basis of our legitimate interest in analysing and optimising our business pursuant to Art. 6 (1) (f) GDPR.

Use of memberr (loyalty program)
For our customer loyalty program, we use the service memberr. Within the program, personal data (e.g. customer/account data, email address, order and usage data, and collected points/rewards) is processed in order to enable your participation in the loyalty program, the collection and redemption of rewards, and the associated benefits. Processing is carried out to operate the program on the basis of Art. 6 (1) (b) GDPR (in the case of contractual participation) or your consent pursuant to Art. 6 (1) (a) GDPR, and otherwise on the basis of our legitimate interest in customer retention pursuant to Art. 6 (1) (f) GDPR.

Use of the Meta Pixel
We use the Meta Pixel of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.
Meta and we are joint controllers for the collection of your data and the transmission of this data to Meta that takes place when the service is integrated. The basis for this is an agreement between us and Meta on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools. Accordingly, we are in particular responsible for fulfilling the information obligations pursuant to Art. 13, 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Art. 33, 34 GDPR, insofar as a breach of the protection of personal data concerns our obligations under the joint processing agreement. Meta is responsible for enabling the data subject rights pursuant to Art. 15-20 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and the obligations under Art. 33, 34 GDPR, insofar as a breach of the protection of personal data concerns Meta's obligations under the joint processing agreement.
The application serves the purpose of addressing the visitors of the website in a targeted manner with interest-based advertising on the social networks Facebook and Instagram. For this purpose, the remarketing tag of Meta has been implemented on the website. Via this tag, a direct connection to the Meta servers is established when the website is visited. This transmits to the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, personalised, interest-based ads are then displayed to you.
The application also serves the purpose of creating conversion statistics. Here we learn the total number of users who clicked on one of our ads and were redirected to a page provided with a conversion tracking tag, as well as which actions are taken after the redirect to this website. However, we do not receive any information with which users can be personally identified.
Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and thereby committed to complying with European data protection principles.
The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) (a) GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.
You can deactivate the "Custom Audiences" remarketing function here. You can find further information on the collection and use of the data by Meta, on your related rights and options for protecting your privacy in Meta's privacy notices at https://www.facebook.com/about/privacy/.

Use of Google Ads conversion tracking
We use the online advertising program "Google Ads" and, within this framework, conversion tracking (visit action analysis) on our website. Google conversion tracking is an analysis service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, contain no personal data and therefore do not serve for personal identification. When you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Thus, there is no possibility of cookies being tracked across the websites of Ads customers.
The information obtained with the help of the conversion cookie serves the purpose of creating conversion statistics. Here we learn the total number of users who clicked on one of our ads and were redirected to a page provided with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.
Your data may be transferred to the servers of Google LLC in the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thereby committed to complying with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) (a) GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.
You can find further information as well as Google's privacy policy at: https://www.google.de/policies/privacy/

Use of the Pinterest Tag

We use the Pinterest Tag of Pinterest Europe Limited (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland; "Pinterest") on our website.

Purpose of processing The application serves the purpose of addressing the visitors of the website in a targeted manner with interest-based advertising on the social network Pinterest. For this purpose, the conversion tag of Pinterest has been implemented on the website. Via this tag, a direct connection to the Pinterest servers is established when the website is visited. This transmits to the Pinterest server which of our pages you have visited. Pinterest assigns this information to your personal Pinterest user account if you are logged in to the social network. When you visit Pinterest, personalised, interest-based Pinterest ads are then displayed to you.

Conversion tracking When you reach our website via a pin on the social network Pinterest, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity. When you visit certain pages of our website and the cookie has not yet expired, Pinterest and we can recognise that you clicked on the pin and were redirected to this page.

Processed data The information obtained with the help of the conversion cookie serves the purpose of creating conversion statistics and thus optimising our offering. Among other things, the following information may be processed:

  • Total number of users who clicked on one of our pins and were redirected to our website
  • Subpages visited on our website (e.g. category or product pages)
  • Search queries on our website
  • Your shopping cart contents
  • Completed transactions
  • Device information (browser type, operating system, screen resolution)
  • IP address (shortened)

Data transfer to third countries Your data is transferred to the USA. Although an adequacy decision of the EU Commission exists for the USA (Trans-Atlantic Data Privacy Framework - TADPF), Pinterest is currently not certified under the TADPF. The data transfer is therefore carried out on the basis of EU standard contractual clauses pursuant to Art. 46 (2) (c) GDPR as appropriate safeguards for the protection of personal data.

Please note: When transferring personal data to the USA, US authorities may under certain circumstances access your data without you being able to take effective legal action against this. You can find further information on the standard contractual clauses at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de

Legal basis and revocation The use of cookies or comparable technologies is carried out with your consent on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) (a) GDPR.

You can revoke your consent at any time with effect for the future by:

  • adjusting your cookie settings in our cookie banner
  • deleting the cookies in your browser settings
  • sending us an email to service@men-of-mayhem.com

The revocation does not affect the lawfulness of the processing carried out up to the revocation.

You can find further information on the collection and use of the data by Pinterest, on your related rights and options for protecting your privacy in Pinterest's privacy notices at: https://policy.pinterest.com/de/privacy-policy

Use of the TikTok Pixel

We use the TikTok Pixel of TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; "TikTok Ireland") and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; "TikTok UK") on our website.

Joint responsibility Both companies are jointly responsible with us for the data processing (Art. 26 GDPR). You can view the essential contents of the agreement on joint responsibility at https://ads.tiktok.com/i18n/official/policy/controller-to-controller. You can assert your rights as a data subject both towards us and towards TikTok Ireland and TikTok UK.

Purpose of processing The data processing serves the following purposes:

  • Identification and analysis of the website access of our visitors
  • Creation of target groups for interest-based advertising
  • Placement of targeted advertisements on TikTok
  • Measurement and evaluation of the effectiveness of advertisements (conversion tracking)
  • Optimisation of our marketing measures

Processed data For this, TikTok uses technologies such as cookies and pixels that enable your browser to be recognised. Among other things, the following information may be collected and transmitted to TikTok:

  • Date and time of the visit
  • Information about the browser and device type you use
  • Screen resolution
  • IP address
  • Pages visited on our website
  • Interactions on our website (e.g. clicks, scrolling behaviour)
  • Referrer URL (website you come from)

TikTok may assign this information to your personal TikTok user account if you are logged in to TikTok. Usage profiles may be created from the data collected in this way using pseudonyms.

Data transfer to third countries Your data is transferred to third countries, in particular to the USA and possibly to China (headquarters of TikTok's parent company ByteDance).

Although an adequacy decision of the EU Commission exists for the USA (Trans-Atlantic Data Privacy Framework - TADPF), TikTok is currently not certified under the TADPF. The data transfer to the USA and to other third countries without an adequacy decision is carried out on the basis of EU standard contractual clauses pursuant to Art. 46 (2) (c) GDPR as appropriate safeguards for the protection of personal data.

Please note: When transferring personal data to third countries without an adequate level of data protection, authorities of these countries may under certain circumstances access your data. You may have only limited or no effective legal remedies against such access. This applies in particular to the USA and China. You can find further information on the standard contractual clauses at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de

Legal basis and revocation The use of cookies or comparable technologies is carried out with your consent on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) (a) GDPR.

You can revoke your consent at any time with effect for the future by:

  • adjusting your cookie settings in our cookie banner
  • deleting the cookies in your browser settings

The revocation does not affect the lawfulness of the processing carried out up to the revocation.

Further information You can find further information on data protection at TikTok at:



Plug-ins and miscellaneous

Use of Google Tag Manager
We use the Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
With this application, JavaScript tags and HTML tags are managed that are used to implement, in particular, tracking and analysis tools. The data processing serves the purpose of the needs-based design and optimisation of our website.
The Google Tag Manager itself stores neither cookies nor does it process personal data. However, it enables the triggering of further tags that may collect and process personal data.
You can find further information on terms of use and data protection here.

Use of Cloudflare
We use the content delivery network Cloudflare CDN of Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; "Cloudflare") on our website. This is a supra-regional network of servers in various data centres to which our web server connects and via which certain content of our website is delivered.
The data processing serves the purpose of optimising the loading times of our website and thereby making our offering more user-friendly.
Among other things, the following information may be collected: IP address, system configuration information, information about the traffic to and from customer websites (so-called server log files).
Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflare has certified itself under the TADPF and thereby committed to complying with European data protection principles.
The processing of your personal data is carried out on the basis of Art. 6 (1) (f) GDPR out of our overriding legitimate interest in the needs-based and targeted design of the website. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR.
You can find further information on data protection when using Cloudflare at https://www.cloudflare.com/de-de/privacypolicy/.

Use of Google Maps
We use the function for embedding Google Maps maps of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, "Google") on our website.
The function enables the visual display of geographical information and interactive maps. In doing so, Google also collects, processes and uses data of the visitors of the websites when pages in which Google Maps maps are embedded are accessed.
Your data may thereby also be transferred to the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thereby committed to complying with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) (a) GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.
You can find further information on the collection and use of the data by Google in Google's privacy notices at https://www.google.com/privacypolicy.html. There you also have the option in the data protection centre to change your settings so that you can manage and protect your data processed by Google.

Use of YouTube
We use the function for embedding YouTube videos of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
The function displays videos stored on YouTube in an iframe on the website. The "extended data protection mode" option is activated here. As a result, no information about the visitors of the website is stored by YouTube. Only when you watch a video is information about this transmitted to YouTube and stored there. Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified itself under the TADPF and thereby committed to complying with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) (a) GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.
You can find further information on the collection and use of the data by YouTube and Google, on your related rights and options for protecting your privacy in YouTube's privacy notices at https://www.youtube.com/t/privacy.

Data subject rights and retention period

Duration of storage
After complete contract processing, the data is initially stored for the duration of the warranty period, then taking into account statutory retention periods, in particular under tax and commercial law, and then deleted after expiry of the period, unless you have consented to further processing and use.

Rights of the data subject
Where the statutory requirements are met, you have the following rights under Art. 15 to 20 GDPR: the right to information, to rectification, to erasure, to restriction of processing, to data portability.
In addition, you have a right of objection under Art. 21 (1) GDPR against the processing that is based on Art. 6 (1) (f) GDPR, as well as against processing for the purpose of direct advertising.

Right to lodge a complaint with the supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you are of the opinion that the processing of your personal data is not carried out lawfully.

You can lodge a complaint, among others, with the supervisory authority responsible for us, which you can reach at the following contact details:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (Hamburg Commissioner for Data Protection and Freedom of Information)
Ludwig-Erhard-Str 22, 7. OG
20459 Hamburg, Germany
Phone: +49 40 428544040
Fax: +49 40 428544000
Email: mailbox@datenschutz.hamburg.de

Right of objection
If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR, you have the right, on grounds relating to your particular situation, to object to this processing at any time with effect for the future.
After an objection has been made, the processing of the data concerned is ended, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims.

If the personal data processing is carried out for the purposes of direct advertising, you can object to this processing at any time by notifying us. After an objection has been made, we end the processing of the data concerned for the purpose of direct advertising.

Last updated: July 2026

This English translation is provided for convenience only. The German version is legally binding.