Privacy policy

1) Introduction and Contact Details of the Controller

2) Data Collection When Visiting Our Website

3) Hosting & Content Delivery Network

4) Cookies

5) Contact

6) Data Processing When Opening a Customer Account

7) Use of Customer Data for Direct Marketing

8) Data Processing for Order Fulfilment

9) Web Analytics Services

10) Website Functionalities

11) Tools and Miscellaneous

12) Rights of the Data Subject

13) Duration of Storage of Personal Data

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data refers to all data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Mike Gauweiler, Moissanite Mode, Ludwigstraße 8, 02763 Zittau, Germany, Tel.: +49 176 59121750, Email: mike@moissanitemode.com.

The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website purely for informational purposes, meaning if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the page server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

The website visited by you
Date and time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

The data will not be disclosed or otherwise used. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption.

You can recognize an encrypted connection by the "https://" string and the padlock symbol in your browser's address bar.

3) Hosting & Content Delivery Network

3.1 Shopify

For the hosting of our website and the display of our website content, we use the system of the following provider:

Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data is also transferred to:

Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

An appropriate level of data protection is ensured for data transfers to Canada through an adequacy decision of the European Commission.

3.2 Shopify

We use a Content Delivery Network provided by the following provider:

Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data may also be transferred to:

Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, page content, or scripts more quickly through a network of regionally distributed servers.

The processing is carried out to protect our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6 para. 1 lit. f GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

An appropriate level of data protection is ensured for data transfers to Canada through an adequacy decision of the European Commission.

For data transfers to the USA, the recipient has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.

4) Cookies

To make visiting our website more attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device.

Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device for a longer period of time and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of your web browser's cookie settings.

If individual cookies used by us also process personal data, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the website visit.

You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or exclude the acceptance of cookies for certain cases or in general.

Please note that rejecting cookies may limit the functionality of our website.

5) Contact

5.1 Judge.me

For review reminders, we use the services of the following provider:

Judge.me Ltd., c/o Buckworths, 2nd Floor, 1–3 Worship Street, London, England, EC2A 2AB, United Kingdom

Solely on the basis of your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, we transmit your email address and, if applicable, additional customer data to the provider so that they can contact you by email with a review reminder.

You may withdraw your consent at any time with effect for the future, either towards us or towards the provider.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the provider's location, an appropriate level of data protection is ensured through an adequacy decision of the European Commission.

5.2 WhatsApp Business

You have the option to contact us via the messaging service WhatsApp provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "Business version" of WhatsApp.

If you contact us via WhatsApp in connection with a specific business transaction (for example, an order you have placed), we store and use the mobile phone number you use with WhatsApp and, if provided, your first and last name in accordance with Art. 6 para. 1 lit. b GDPR for processing and responding to your request.

On the same legal basis, we may ask you via WhatsApp to provide additional data (order number, customer number, address, or email address) in order to assign your request to a specific process.

If you use our WhatsApp contact for general enquiries (such as questions about our range of services, availability, or our website), we store and use the mobile phone number you use with WhatsApp and, if provided, your first and last name in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in providing the requested information efficiently and promptly.

Your data is always used solely to respond to your enquiry via WhatsApp. No data is passed on to third parties.

Please note that WhatsApp Business has access to the contacts stored in the address book of the mobile device used by us for this purpose and automatically transfers phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA.

For the operation of our WhatsApp Business account, we use a mobile device in whose address book only the WhatsApp contact details of users who have contacted us via WhatsApp are stored.

This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, when first using the app on their device by accepting the WhatsApp Terms of Service, to the transfer of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6 para. 1 lit. a GDPR.

The transfer of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

For information on the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your related rights and setting options for protecting your privacy, please refer to WhatsApp's privacy policy:

https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits disclosure to third parties.

As part of the processing activities described above, data may be transferred to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.

5.3 When contacting us (e.g. via contact form or email), personal data is processed solely for the purpose of processing and responding to your enquiry and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your enquiry pursuant to Art. 6 para. 1 lit. f GDPR. If your contact request is aimed at concluding a contract, an additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

Your data will be deleted if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no statutory retention obligations preventing deletion.

6) Data Processing When Opening a Customer Account

Pursuant to Art. 6 para. 1 lit. b GDPR, personal data shall continue to be collected and processed to the extent necessary if you provide us with such data when opening a customer account.

You can find out which data is required for opening an account in the input fields of the corresponding form on our website.

You can delete your customer account at any time by sending a message to the controller's address provided above.

After deletion of your customer account, your data will be deleted provided that all contracts concluded through the account have been fully processed, no statutory retention periods prevent deletion, and we no longer have a legitimate interest in continuing to store the data.

7) Use of Customer Data for Direct Marketing

7.1 Registration for Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address.

Providing additional data is voluntary and is used to address you personally.

For sending newsletters, we use the so-called double opt-in procedure, which ensures that you only receive newsletters after you have expressly confirmed your consent to receive newsletters by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR.

In this process, we store the IP address assigned by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date.

The data collected by us when you register for the newsletter is used strictly for the specified purpose.

You can unsubscribe from the newsletter at any time by using the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named above.

After unsubscribing, your email address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope in a manner permitted by law, about which we inform you in this privacy policy.

7.2 Shopify Email

Our email newsletters are sent using the following provider:

Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transferred to:

Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

Based on our legitimate interest in effective and user-friendly newsletter marketing, we transfer the data you provide when subscribing to the newsletter to this provider pursuant to Art. 6 para. 1 lit. f GDPR, so that the provider can handle the newsletter distribution on our behalf.

Subject to your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the provider also carries out a statistical evaluation of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent. These can measure opening rates and specific interactions with the newsletter content.

In this process, device information (e.g. time of access, IP address, browser type, and operating system) is also collected and evaluated, but it is not combined with other data records.

You can withdraw your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits disclosure to third parties.

For data transfers to Canada, an appropriate level of data protection is ensured through an adequacy decision of the European Commission.

8) Data Processing for Order Fulfilment

8.1

Where necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us shall be transferred pursuant to Art. 6 para. 1 lit. b GDPR to the commissioned transport company and the commissioned financial institution.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact details provided by you when placing your order in order to personally inform you within the scope of our legal information obligations pursuant to Art. 6 para. 1 lit. c GDPR.

Your contact details are used strictly for the purpose of communicating information about updates owed by us and are processed by us only to the extent necessary for the respective notification.

For the processing of your order, we also work with the following service provider(s), who support us in whole or in part in the performance of concluded contracts. Certain personal data will be transferred to these service providers in accordance with the following information.

8.2 Use of Payment Service Providers (Payment Services)

- Apple Pay

If you choose the payment method "Apple Pay" provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is carried out via the "Apple Pay" function of your device running iOS, watchOS, or macOS by charging a payment card stored with "Apple Pay".

Apple Pay uses security features integrated into the hardware and software of your device to protect your transactions.

To authorize a payment, you must therefore enter a code previously set by you and verify the payment using the "Face ID" or "Touch ID" function of your device.

For the purpose of payment processing, the information provided by you during the ordering process, together with information about your order, is transmitted to Apple in encrypted form.

Apple then encrypts this data again using a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay for the purpose of processing the payment.

The encryption ensures that only the website through which the purchase was made can access the payment data.

After the payment has been completed, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the successful payment.

If personal data is processed during the transfers described above, the processing is carried out exclusively for the purpose of payment processing pursuant to Art. 6 para. 1 lit. b GDPR.

Apple stores anonymized transaction data, including the approximate purchase amount, the approximate date and time, and information on whether the transaction was successfully completed. Due to the anonymization, any reference to an identifiable person is completely excluded.

Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.

If you use Apple Pay on your iPhone or Apple Watch to complete a purchase that you initiated via Safari on your Mac, the Mac and the authorization device communicate through an encrypted channel via Apple servers.

Apple does not process or store any of this information in a format that can be used to identify you personally.

You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac".

Further information about data protection with Apple Pay can be found at the following web address:

https://support.apple.com/de-de/HT203027

- Google Pay

If you choose the payment method "Google Pay" provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment processing is carried out via the "Google Pay" application on your mobile device running at least Android 4.4 ("KitKat") and equipped with an NFC function, by charging a payment card stored with Google Pay or another verified payment method stored there (e.g. PayPal).

To authorize a payment via Google Pay in an amount exceeding €25, you must first unlock your mobile device using the verification method configured on the device (such as facial recognition, password, fingerprint, or pattern).

For the purpose of payment processing, the information provided by you during the ordering process, together with information about your order, is transmitted to Google.

Google then transfers your payment information stored in Google Pay to the originating website in the form of a one-time transaction number, which is used to verify that the payment has been completed.

This transaction number does not contain any information about the actual payment details of the payment methods stored in Google Pay. Instead, it is created and transmitted as a one-time valid numerical token.

For all transactions via Google Pay, Google acts solely as an intermediary for processing the payment. The transaction itself takes place exclusively between the user and the originating website by charging the payment method stored in Google Pay.

If personal data is processed during the transfers described above, the processing is carried out exclusively for the purpose of payment processing pursuant to Art. 6 para. 1 lit. b GDPR.

Google reserves the right to collect, store, and evaluate certain transaction-specific information for each transaction made via Google Pay.

This includes the date, time, and amount of the transaction, the merchant location and description, a description of the purchased goods or services provided by the merchant, photos attached to the transaction by you, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction, and, where applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively pursuant to Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest in proper accounting, verification of transaction data, and the optimization and maintenance of the functionality of the Google Pay service.

Google also reserves the right to combine the processed transaction data with additional information collected and stored by Google when using other Google services.

The terms of use for Google Pay can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

Further information about data protection at Google Pay can be found at the following web address:

https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

- Klarna

This website offers one or more online payment methods provided by the following provider:

Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you select a payment method provided by the provider in which you make an advance payment (such as credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be transferred to the provider pursuant to Art. 6 para. 1 lit. b GDPR.

The transfer of your data in this case takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

If you select a payment method in which the provider makes an advance payment (such as invoice purchase, instalment payment, or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, information regarding an alternative payment method).

To protect our legitimate interest in determining the payment ability of our customers, this data is forwarded by us to the provider pursuant to Art. 6 para. 1 lit. f GDPR for the purpose of a credit assessment.

Based on the personal data provided by you as well as additional data (such as shopping cart information, invoice amount, order history, and payment experience), the provider checks whether the selected payment method can be granted with regard to payment default and/or credit risk.

For the decision-making process as part of the application review, in addition to the provider's internal criteria pursuant to Art. 6 para. 1 lit. f GDPR, identity and creditworthiness information from the following credit agencies may also be taken into account:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit assessment may contain probability values (so-called score values). If score values are included in the result of the credit assessment, they are based on a scientifically recognized mathematical-statistical procedure.

The calculation of score values includes, among other things, but not exclusively, address data.

You can object to this processing of your data at any time by sending a message to us or to the provider.

However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.

- PayPal

This website offers one or more online payment methods provided by the following provider:

PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method provided by the provider in which you make an advance payment, your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be transferred to the provider pursuant to Art. 6 para. 1 lit. b GDPR.

The transfer of your data in this case takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

If you select a payment method in which we make an advance payment, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, information regarding an alternative payment method).

To protect our legitimate interest in determining your creditworthiness in such cases, we transfer this data to the provider for the purpose of a credit assessment pursuant to Art. 6 para. 1 lit. f GDPR.

Based on the personal data provided by you, as well as additional information (such as shopping cart details, invoice amount, order history, and payment experience), the provider evaluates whether the payment method you selected can be granted with regard to payment and/or credit default risks.

The credit assessment may include probability values (so-called score values). Where score values are taken into account in the result of the credit assessment, they are based on a scientifically recognized mathematical-statistical method.

The calculation of these score values includes, among other things, but is not limited to, address data.

You may object to this processing of your data at any time by notifying us or the provider.

However, the provider may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

- Shopify Payments

This website offers one or more online payment methods provided by the following provider:

Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland

If you select a payment method provided by the provider in which you make an advance payment (such as a credit card payment), your payment data provided during the ordering process (including your name, address, bank and payment card information, currency, and transaction number), together with information about the contents of your order, will be transferred to the provider pursuant to Art. 6 para. 1 lit. b GDPR.

Your data will be transferred solely for the purpose of processing the payment with the provider and only to the extent necessary for that purpose.

- MobilePay

This website offers the payment method MobilePay, provided by: Vipps MobilePay A/S, Sandakerveien 136, 0484 Oslo, Norway.

If you select this payment method, the payment data you provide during the order process (including your name, phone number, payment amount, and information about the contents of your order) will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR. Your data will only be shared for the purpose of processing your payment and only to the extent necessary for this purpose. For more information on data protection, please visit: https://www.mobilepay.dk/privacy

8.3 Electronic Withdrawal Function for Distance Selling Contracts

Consumers who conclude contracts on this website for which a statutory right of withdrawal exists have the option to exercise their right of withdrawal using an electronic withdrawal function in accordance with the applicable withdrawal provisions.

When using the withdrawal function, in addition to information required to identify the contract to be withdrawn from, certain personal information must be provided or confirmed, including the consumer's first and last name and email address.

The collection of this information and its transmission to us is carried out pursuant to Art. 6 para. 1 lit. b GDPR and only to the extent necessary for the proper processing of the withdrawal.

The personal data provided is also used, on the basis of Art. 6 para. 1 lit. b GDPR, to confirm receipt of the withdrawal declaration by email.

An additional legal basis for the processing is Art. 6 para. 1 lit. c GDPR, as we are legally required to provide an electronic withdrawal function for distance selling contracts concluded with consumers for payment.

9) Web Analytics Services

Shopify Analytics

This website uses the web analytics service provided by the following provider:

Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transferred to:

Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

Using cookies and/or comparable technologies (such as tracking pixels, web beacons, and algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used, such as the IP address and browser information, in order to perform statistical analyses of user behavior on our website and to create pseudonymized user profiles.

Among other things, this makes it possible to analyze movement patterns (so-called heatmaps), which show the duration of page visits as well as interactions with page content (e.g. text entries, scrolling, clicks, and mouse-overs).

Pseudonymization generally prevents direct identification of individuals. The pseudonymized data is not combined with other information that could directly identify you.

All processing activities described above, in particular the reading or storage of information on the device you use, are carried out only if you have given us your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR.

You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on our website.

We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

10) Website Functionalities

10.1 Judge.me

Our website integrates graphical elements provided by the following provider to display external customer reviews and/or an externally awarded trust badge:

Judge.me Ltd., c/o Buckworths, 2nd Floor, 1–3 Worship Street, London, England, EC2A 2AB, United Kingdom

When you visit a page on our website that contains such graphical elements, your browser establishes a direct connection to the provider's servers in order to load these elements correctly.

In this process, certain browser information, including your IP address, is transmitted to the provider.

If personal data is processed in this context, the processing is carried out pursuant to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the optimal marketing of our offerings and the attractive presentation of our website.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

10.2 hCaptcha

This website uses the CAPTCHA service provided by the following provider:

Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA

The service verifies whether an input is made by a natural person or is the result of abusive machine-based or automated processing. It is used to prevent spam, DDoS attacks, and similar automated malicious activities.

To determine whether an action is performed by a human rather than an automated bot, the provider collects the IP address of the device used, identification data of the browser and operating system, as well as the date and duration of the visit, and transmits this information to the provider's servers for evaluation.

The legal basis for this processing is our legitimate interest in ensuring individual accountability on the internet and preventing misuse and spam pursuant to Art. 6 para. 1 lit. f GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the United States, the provider relies on the European Commission's Standard Contractual Clauses (SCCs), which are intended to ensure an adequate level of data protection in accordance with European standards.

10.3 Google Customer Reviews (formerly Google Certified Shops Program)

We participate in the Google Customer Reviews program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

This program allows us to collect customer reviews from users of our website. After you have made a purchase on our website, you will be asked whether you would like to participate in a Google email survey regarding your shopping experience.

If you give your consent pursuant to Art. 6 para. 1 lit. a GDPR, we will transmit your email address to Google.

You will then receive an email from Google Customer Reviews inviting you to rate your shopping experience on our website.

The review you submit will be combined with our other reviews and displayed in our Google Customer Reviews badge and in our Merchant Center dashboard. Your review may also be used for Google Seller Ratings.

As part of the use of Google Customer Reviews, personal data may also be transferred to the servers of Google LLC in the United States.

You may withdraw your consent at any time by notifying the controller responsible for data processing or by contacting Google directly.

For data transfers to the United States, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.

Further information about Google's privacy policy can be found here:

https://business.safety.google/intl/de/privacy/

11) Tools and Miscellaneous

11.1 Lexware Office

For our accounting, we use the cloud-based accounting software service provided by the following provider:

Haufe-Lexware GmbH & Co. KG
Munzinger Straße 9
79111 Freiburg
Germany

The provider processes incoming and outgoing invoices and, where applicable, our company's bank transactions in order to automatically record invoices, match them with transactions, and generate financial accounting records in a partially automated process.

Where personal data is processed in this context, the processing is carried out on the basis of our legitimate interest in the efficient organization and documentation of our business operations pursuant to Art. 6 para. 1 lit. f GDPR.

11.2 Cookie Consent Tool

This website uses a so-called "Cookie Consent Tool" to obtain valid user consent for cookies requiring consent and cookie-based applications.

The "Cookie Consent Tool" is displayed to users when they access the website in the form of an interactive user interface, through which consent can be given for specific cookies and/or cookie-based applications by selecting checkboxes.

By using the tool, all cookies/services that require consent are only loaded if the respective user has provided the corresponding consent by selecting the relevant options. This ensures that such cookies are only stored on the user's device if consent has been granted.

The tool uses technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this process.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or documenting cookie settings, this processing is carried out pursuant to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly cookie consent management and therefore in the legally compliant design of our website.

An additional legal basis for the processing is Art. 6 para. 1 lit. c GDPR. As the controller, we are subject to the legal obligation to make the use of technically non-essential cookies dependent on the respective user's consent.

Where required, we have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further information about the operator and the settings options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

11.3 Judge.me

To verify and publish customer reviews, we use the services of the following provider:

Judge.me Ltd., c/o Buckworths, 2nd Floor, 1–3 Worship Street, London, England, EC2A 2AB, United Kingdom

If you submit a review on our website, your first and last name, email address, order date and order number, as well as the product name and international references (GTIN/ISDNF), will be collected, transmitted to the provider, and evaluated in order to determine the legitimacy of a customer review for a specific order.

These processing activities are carried out pursuant to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in ensuring the authenticity of customer reviews by verifying their connection to actual transactions and preventing review abuse.

After the review verification process has been completed and the review has been approved, the data will be deleted by the provider.

For data transfers to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

12) Rights of the Data Subject

12.1

The applicable data protection law grants you the following rights as a data subject against the controller with regard to the processing of your personal data (rights of access and intervention). The respective legal basis is referred to for the conditions required to exercise these rights:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent pursuant to Art. 7 para. 3 GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

12.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING MAY BE RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

13) Duration of Storage of Personal Data

The duration of storage of personal data is determined based on the respective legal basis, the purpose of processing, and, where applicable, additionally based on the respective statutory retention periods (e.g. commercial and tax-related retention periods).

When processing personal data based on explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the affected data will be stored until you withdraw your consent.

If statutory retention periods exist for data processed in connection with contractual or contract-like obligations pursuant to Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the expiry of the retention periods, provided that it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in continuing to store the data.

When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 para. 2 GDPR.

Unless otherwise stated in the other information contained in this privacy policy regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Last updated: 11 July 2026, 16:29:51