8) Data Processing for Order Fulfillment

8.1 To the extent necessary for contract execution, including delivery and payment processing, the personal data collected by us will be shared with the designated shipping company and the designated financial institution in accordance with Article 6(1)(b) GDPR.

If, based on a corresponding contract, we owe you updates for products with digital elements or for digital products, we will process the contact data you provided during the order (name, address, email address) to inform you personally about upcoming updates within the legally prescribed period. This processing is done pursuant to Article 6(1)(c) GDPR and serves to fulfill our legal information obligations. Your contact data will be used strictly for this purpose and will only be processed to the extent necessary for these notifications.

Additionally, we work with service providers who assist us in whole or in part with the execution of concluded contracts. Certain personal data will be transferred to these service providers as explained below.

8.2 Use of Payment Service Providers (Payment Services)

• Apple Pay
  If you choose the payment method "Apple Pay" offered by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing will be carried out through the "Apple Pay" functionality of your iOS, watchOS, or macOS device by debiting a payment card stored in "Apple Pay." Apple Pay uses security features integrated into your device's hardware and software to protect your transactions. To authorize a payment, it is necessary to enter a previously defined code or use the "Face ID" or "Touch ID" functionality of your device.

For the purpose of payment processing, your information provided during the ordering process, along with order details, is transmitted to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before transmitting the data to the payment service provider of the payment card stored in Apple Pay. This encryption ensures that only the website where the purchase was made can access the payment data. After completing the payment, Apple sends your device account number along with a transaction-specific, dynamic security code to the originating website to confirm the payment's success.

If personal data is processed during these transfers, this processing is carried out solely for payment processing purposes in accordance with Article 6(1)(b) GDPR.

Apple stores anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. This anonymization fully eliminates any personal reference. Apple uses anonymized data to improve "Apple Pay" and other Apple products and services.

Further details on Apple Pay's privacy practices can be found at: https://support.apple.com/en-us/HT203027

• Stripe
  This website offers one or more online payment methods via the following provider: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

If you select a payment method provided by Stripe (e.g., credit card payment), your payment data (including name, address, banking and card information, currency, and transaction number) will be transmitted to Stripe for payment processing pursuant to Article 6(1)(b) GDPR. This data transfer is exclusively for the purpose of payment processing.

If you select a payment method where Stripe provides advance payment (e.g., purchase on account or installment payments), you may also be asked to provide personal data (name, address, date of birth, email address, phone number, and, if applicable, data related to an alternative payment method).

In order to protect our legitimate interest in assessing the payment ability of our customers, we transmit this data to Stripe for the purpose of credit assessment in accordance with Article 6(1)(f) GDPR. Stripe assesses whether the payment method you selected can be offered based on the data provided and other data (e.g., shopping cart, order amount, order history, payment history).

The credit report may include probability values ("score values") calculated based on a scientifically recognized mathematical-statistical method that incorporates, among other things, address data.

You can object to this processing at any time by contacting us or Stripe, but Stripe may still process your data if it is necessary for contract-compliant payment processing.

​

9) Online Marketing

Google AdSense

This website uses Google AdSense, an advertising service provided by:
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google AdSense uses so-called cookies, which are text files stored on your computer that enable an analysis of your use of the website. Additionally, Google AdSense uses web beacons (invisible graphic elements) to collect information. Through these web beacons, simple actions such as visitor traffic on the website can be recorded, collected, and evaluated.

The information generated by the cookies and/or web beacons (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. This may also involve transfers to Google LLC servers in the USA.

Google uses the obtained information to analyze your usage behavior concerning AdSense advertisements. The IP address transmitted by your browser in the context of Google AdSense will not be merged with other data held by Google. The information collected by Google may be disclosed to third parties if required by law and/or if third parties process this data on behalf of Google.

All processing activities described above, including reading information from the user's device via cookies and/or web beacons, will only occur if you have given your explicit consent pursuant to Art. 6(1)(a) GDPR. Without this consent, Google AdSense will not be used during your visit to the website.

You may withdraw your consent at any time with effect for the future by deactivating this service in the Cookie Consent Tool provided on the website.

For data transfers to the USA, the provider adheres to the EU-US Data Privacy Framework, ensuring compliance with the European data protection level based on an adequacy decision by the European Commission.

Further information on Google’s privacy policy can be found here:
https://business.safety.google/intl/en/privacy/
https://www.google.de/policies/privacy/

 

10) Web Analytics Services

10.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by:
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

This service enables the analysis of your usage of our website.

By default, Google Analytics 4 places cookies on your device when you visit the website. These small text files collect certain information, including your IP address, which is, however, truncated by Google to exclude direct personal identification.

This information is transmitted to Google servers for further processing, which may also involve transfers to Google LLC servers in the USA.

On our behalf, Google uses the collected information to analyze your website usage, compile reports on website activity, and provide additional services related to website and internet usage. The truncated IP address transmitted by your browser will not be merged with other Google data. Data collected through Google Analytics 4 is stored for two months and then deleted.

All processing activities described above, including the placement of cookies on your device, only occur if you have given your explicit consent pursuant to Art. 6(1)(a) GDPR. Without this consent, Google Analytics 4 will not be used during your visit to the website.

You may revoke your consent at any time with future effect by deactivating this service in the Cookie Consent Toolprovided on the website.

We have concluded a data processing agreement with Google to ensure the protection of our website visitors' data and to prohibit unauthorized disclosure to third parties.

Further legal information on Google Analytics 4 can be found here:
https://business.safety.google/intl/en/privacy/
https://policies.google.com/privacy?hl=en&gl=en
https://policies.google.com/technologies/partner-sites

Demographic Features

Google Analytics 4 includes the Demographic Features function, allowing the creation of statistics on the age, gender, and interests of website visitors. This data is collected through advertising and third-party information and can be used to identify target audiences for marketing purposes. However, the collected data cannot be assigned to any specific individual and is deleted after two months.

Google Signals

As an extension of Google Analytics 4, this website may use Google Signals to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google — subject to your consent to Google Analytics pursuant to Art. 6(1)(a) GDPR — may analyze your usage behavior across devices and create models, including for cross-device conversions.

We do not receive any personal data from Google, only aggregated statistics.
If you wish to disable cross-device analysis, you can disable the Personalized Ads setting in your Google account. Instructions are available here:
https://support.google.com/ads/answer/2662922?hl=en

Further information on Google Signals can be found here:
https://support.google.com/analytics/answer/7532985?hl=en

User IDs

As an extension of Google Analytics 4, this website may use the User ID function. If you have consented to Google Analytics 4 pursuant to Art. 6(1)(a) GDPR, created an account on this website, and logged in across devices, your activities — including conversions — may be analyzed across devices.

For data transfers to the USA, Google adheres to the EU-US Data Privacy Framework.

10.2 Google Tag Manager

This website uses the Google Tag Manager, provided by:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

The Google Tag Manager serves as a technical platform to centrally manage, configure, and conditionally trigger various web applications, including tracking and analytics services, via a unified user interface.
The Google Tag Manager itself does not store or read any information on user devices, nor does it perform independent data analyses. However, your IP address is transmitted to Google when the tool is loaded and may be stored. Data transfers to Google LLC servers in the USA may occur.

This processing only takes place if you have given your explicit consent pursuant to Art. 6(1)(a) GDPR. Without your consent, Google Tag Manager will not be used during your visit to the website.

You can revoke your consent at any time by deactivating this service in the Cookie Consent Tool provided on the website.

We have concluded a data processing agreement with Google to ensure the protection of our website visitors' data and to prohibit unauthorized disclosure to third parties.

For data transfers to the USA, Google adheres to the EU-US Data Privacy Framework.

Further information on Google Tag Manager’s legal aspects can be found here:
https://business.safety.google/intl/en/privacy/
https://policies.google.com/privacy?hl=en&gl=en

10.3 Polyfill

This website uses the Polyfill service provided by:
The Financial Times Ltd., Bracken House, 1 Friday Street, London, England, EC4M 9BT.

This service implements a script on our website that allows content to display correctly even on older browser versions by providing and transmitting necessary polyfill files based on browser requests. Certain technical information, including browser details and anonymized IP addresses, is automatically transmitted to the provider.

This information is used to determine which polyfills are required for proper rendering of page content.

If personal data is processed in this context, the processing is based on our legitimate interest in optimizing the website’s display and user experience pursuant to Art. 6(1)(f) GDPR.

Data transfers to the provider's location are safeguarded by an adequacy decision by the European Commission, ensuring an appropriate level of data protection.

​​

11) Retargeting/Remarketing and Conversion Tracking

11.1 Meta Pixel

Within our online offering, we use the "Meta Pixel" service provided by:
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta")

When a user clicks on an advertisement we place on Facebook and/or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel". This URL parameter is then entered into the user's browser through a cookie set by our linked page after redirection.

This allows Meta to identify visitors to our online offering as a target audience for displaying advertisements (so-called "ads"). Accordingly, we use the service to display Facebook and/or Instagram ads we place only to users who have shown interest in our online offering or who possess specific characteristics (e.g., interests in particular topics or products, determined based on visited websites) that we transmit to Meta (so-called "Custom Audiences").

Furthermore, "Meta Pixel" can track whether users have been redirected to our website after clicking on an advertisement and what actions they take there (so-called "Conversion Tracking").

The data collected is anonymous to us and does not allow us to identify users. However, Meta stores and processes this data, enabling a connection to the respective user profile and allowing Meta to use the data for its own advertising purposes.

All processing activities described above, including the setting of cookies to read information on the user’s device, only occur if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You can revoke your given consent at any time with future effect by deactivating this service in the "Cookie-Consent-Tool" provided on the website.

We have concluded a data processing agreement with the provider to ensure the protection of the data of our website visitors and to prohibit unauthorized disclosure to third parties.

The information generated by Meta is usually transmitted to a Meta server and stored there; this may also involve transmission to Meta Platforms Inc. servers in the United States.

For data transfers to the USA, the provider has adhered to the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

11.2 Google Ads Remarketing

This website uses retargeting technology provided by:
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

For this purpose, Google places a cookie in the browser of your device, enabling interest-based advertising through a pseudonymous cookie ID based on the pages you visit. Further data processing only occurs if you have agreed to Google linking your web and app browsing history with your Google account and using information from your Google account to personalize ads you view on the web. If you are logged into Google while visiting our website, Google will use your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, your personal data will be temporarily linked by Google with Google Analytics data to form audiences.

As part of Google Ads Remarketing, personal data may also be transmitted to Google LLC servers in the USA.

All processing activities described above, including the setting of cookies to read information on the user’s device, only occur if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. Without this consent, retargeting technology will not be used during your visit to our site.

You can revoke your consent at any time with future effect by deactivating this service via the "Cookie-Consent-Tool" provided on the website.

For data transfers to the USA, the provider adheres to the EU-US Data Privacy Framework, ensuring compliance with the European data protection level based on an adequacy decision by the European Commission.

Details on data processing initiated by Google and how Google handles data from websites can be found here:
https://policies.google.com/technologies/partner-sites
Further information on Google’s privacy policy can be found here:
https://business.safety.google/intl/en/privacy/
https://www.google.de/policies/privacy/

​

12) Website Functionalities

12.1 Embedding Instagram Feed via SnapWidget

We use the services of SnapWidget (Pty) Ltd., Johannesburg, South Africa (www.snapwidget.com) on our website to display preview images from our Instagram profile. Cookies are used for this purpose — small text files stored locally in your browser’s cache.

When visitors access our website, a connection is established to servers of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Instagram"). Instagram thereby receives certain browser information, including your IP address. In some cases, data may also be transmitted to Meta Platforms Inc. servers in the USA.

All processing activities described above, including setting cookies to read information from the user’s device, occur only if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie-Consent-Tool" provided on the website.

For data transfers to the USA, the provider relies on Standard Contractual Clauses issued by the European Commission, ensuring compliance with the European data protection level.

12.2 Facebook Plugins

Our website uses plugins from the social network provided by:
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins enable direct interactions with content on the social network.

To enhance data protection when you visit our website, these plugins are initially deactivated using a "2-click" or "Shariff" solution. This ensures no connection to the provider’s servers is established merely by visiting pages containing such plugins.

Only when you activate the plugins and thus give your consent to data transmission pursuant to Art. 6(1)(a) GDPR, your browser establishes a direct connection to the provider’s servers. Certain device information (including your IP address), browser details, and browsing history may be transmitted to the provider, regardless of whether you are logged into a user profile.

If you are logged into an existing user profile on the social network, interactions performed via the plugins will also be published there and displayed to your contacts.

You can revoke your consent at any time by deactivating the plugin again. Revoking consent does not affect data already transmitted to the provider.

Data may also be transmitted to: Meta Platforms Inc., USA

We have a data processing agreement with the provider to ensure the protection of our visitors' data and prevent unauthorized disclosure to third parties.

For data transfers to the USA, the provider adheres to the EU-US Data Privacy Framework, ensuring compliance with the European data protection level.

​

12.3 Instagram Plugins

Our website uses plugins from the social network operated by:
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins allow direct interactions with content on the social network.

To better protect your data when visiting our website, the plugins are initially deactivated using a “2-click” or “Shariff” solution. This ensures that no connection is established to the provider's servers merely by visiting our website.

Only when you activate the plugins and thereby give your consent to data transmission pursuant to Art. 6(1)(a) GDPR, your browser will establish a direct connection to the provider’s servers. Certain device information (including your IP address), browser details, and browsing history may be transmitted to the provider, regardless of whether you are logged into an existing user profile.

If you are logged into an existing user profile on the social network, your interactions via the plugins will also be published there and displayed to your contacts.

You may revoke your consent at any time by deactivating the plugin again. This revocation does not affect any data already transmitted to the provider.

Data may also be transmitted to: Meta Platforms Inc., USA

We have concluded a data processing agreement with the provider to ensure the protection of our website visitors' data and to prohibit unauthorized disclosure to third parties.

For data transfers to the USA, the provider adheres to the EU-US Data Privacy Framework, ensuring compliance with the European data protection standards.

​

12.4 LinkedIn Plugins

Our website uses plugins from the social network operated by:
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

These plugins allow direct interactions with content on the social network.

To enhance data protection when you visit our website, these plugins are initially deactivated using a “2-click” or “Shariff” solution. This ensures that no connection is established to the provider’s servers upon simply visiting pages containing such plugins.

Only when you activate the plugins and thereby give your consent to data transmission pursuant to Art. 6(1)(a) GDPR, your browser will establish a direct connection to the provider’s servers. Certain device information (including your IP address), browser details, and browsing history may be transmitted to the provider, regardless of whether you are logged into an existing user profile.

If you are logged into an existing user profile, your interactions via the plugins will also be published there and displayed to your contacts.

You can revoke your consent at any time by deactivating the plugin again. This revocation does not affect any data already transmitted to the provider.

Data may also be transmitted to: LinkedIn Inc., USA

We have concluded a data processing agreement with the provider to ensure the protection of our website visitors' data and to prohibit unauthorized disclosure to third parties.

For data transfers to the USA, the provider relies on the Standard Contractual Clauses of the European Commission to ensure compliance with European data protection standards.

​

12.5 Google Maps

This website uses the Google Maps API, a mapping service provided by:
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google")

Google Maps is a web service that displays interactive maps to provide geographical information visually. By using this service, our location is displayed, and potential navigation is facilitated.

When you access pages featuring Google Maps, information about your use of the website (such as your IP address) is transmitted to Google servers and stored there. This may involve transfers to Google LLC servers in the USA. This occurs whether or not you have a Google account and are logged in.

If you are logged into Google, the data will be directly linked to your Google account. If you do not wish this, you must log out before activating the map.

Even for users not logged into Google, data is collected, stored, and evaluated. This data processing is based on Art. 6(1)(f) GDPR, representing Google's legitimate interest in personalized advertising, market research, and optimized design of Google services.

You have the right to object to this profiling by contacting Google.

If you do not agree to future data transfers to Google as part of Google Maps use, you may disable the service entirely by turning off JavaScript in your browser, which will disable the map function.

Where required by law, we obtain your consent pursuant to Art. 6(1)(a) GDPR. This consent can be revoked at any time with future effect.

For data transfers to the USA, the provider adheres to the EU-US Data Privacy Framework.

Further information on Google’s privacy policies:
https://business.safety.google/intl/en/privacy/

​

12.6 Google Web Fonts

This website uses web fonts provided by:
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When a page is accessed, your browser loads the required fonts into its cache to display text and fonts correctly. To do so, your browser connects directly to the provider's servers, transmitting certain information (including your IP address).

Data may also be transmitted to: Google LLC, USA

This processing of personal data only takes place if you have given us your consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time using the Cookie-Consent-Tool on our website. If your browser does not support web fonts, a standard font will be used.

For data transfers to the USA, the provider adheres to the EU-US Data Privacy Framework.

Further information on Google’s privacy policies:
https://business.safety.google/intl/en/privacy/

​

12.7 - 12.11 (Zapier, Microsoft Teams, Zoom, Google Forms, Zoho Forms)

These sections describe the use of services such as Zapier Inc., Microsoft Teams, Zoom Video Communications Inc., Google Forms, and Zoho Forms, including details about:

• Data collected (usernames, email addresses, IP addresses, device information, session data, survey responses, etc.).

• Legal basis for processing (Art. 6(1)(a), Art. 6(1)(b), and Art. 6(1)(f) GDPR).

• User rights to withdraw consent at any time.

• Data transfers to the USA, with adherence to the EU-US Data Privacy Framework.

• Concluded data processing agreements ensuring data protection and preventing unauthorized data sharing.

​​

13) Tools and Miscellaneous

13.1 Cookie Consent Tool

This website uses a Cookie-Consent-Tool to obtain valid user consent for cookies and cookie-based applications requiring consent. Upon first access, users are presented with an interface to provide consent by selecting desired cookie categories. Consent-based cookies/services are only activated if the user consents.

The tool sets technically necessary cookies to store cookie preferences. Personal data is typically not processed.

Where data (such as IP address) is processed for the purpose of consent management, this is done based on Art. 6(1)(f) GDPR (legitimate interest in legally compliant cookie management) and Art. 6(1)(c) GDPR (legal obligation to require consent).

Further details can be found in the Cookie-Consent-Tool interface.

​

14) Data Subject Rights

14.1 Rights under GDPR

You are entitled to the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to notification (Art. 19 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to withdraw consent (Art. 7(3) GDPR)

• Right to lodge a complaint (Art. 77 GDPR)​

14.2 Right to Object

If your personal data is processed based on our legitimate interest (Art. 6(1)(f) GDPR), you have the right to object at any time for reasons arising from your particular situation.

If you object, we will cease processing your data unless compelling legitimate grounds outweigh your interests or the processing serves legal claims.

If your data is processed for direct marketing purposes, you can object at any time, after which we will cease processing for that purpose.

​

15) Data Retention Period

Retention depends on legal obligations, processing purposes, and consent withdrawal. Further details are outlined in the corresponding sections.