Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for entering into an agreement. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only where no different information is provided for the processing activities described below.

“Personal data” means any information relating to an identified or identifiable natural person.

Server Log Files

You may visit our website without providing any personal information.

Whenever you access our website, usage data is transmitted by your internet browser to us or to our web hosting or IT service provider and stored in log data known as server log files. This data includes, for example, the name of the page accessed, the date and time of access, the IP address, the volume of data transferred and the requesting provider.

Processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our services.

Contact

Controller

Please feel free to contact us. The controller responsible for data processing is:

Axel Goebel
Bernsweg 32
47445 Moers
Germany
Telephone: (+49) 151 40117913
E-mail: goebel57@gmx.de

Customer-initiated contact by e-mail

If you contact us by e-mail for business purposes, we collect your personal data—name, e-mail address and message content—only to the extent provided by you. The data is processed to handle and respond to your enquiry.

If contact is made in connection with pre-contractual measures, such as advice regarding a potential purchase or preparation of a quotation, or concerns an agreement already concluded between you and us, processing is based on Art. 6(1)(b) GDPR.

If contact is made for other reasons, processing is based on Art. 6(1)(f) GDPR, based on our overriding legitimate interest in handling and responding to your enquiry.

In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR.

We use your e-mail address solely to process your enquiry. Your data will subsequently be deleted in accordance with statutory retention periods unless you have consented to further processing and use.

Collection and processing when using the contact form

When you use the contact form, we collect your personal data—name, e-mail address and message content—only to the extent provided by you. The purpose of processing is to contact you.

If contact is made in connection with pre-contractual measures, such as purchase advice or preparation of a quotation, or concerns an agreement already concluded between you and us, processing is based on Art. 6(1)(b) GDPR.

If contact is made for other reasons, processing is based on Art. 6(1)(f) GDPR, based on our overriding legitimate interest in handling and responding to your enquiry.

In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR.

We use your e-mail address solely to process your enquiry. Your data will subsequently be deleted in accordance with statutory retention periods unless you have consented to further processing and use.

WhatsApp Business

If you contact us for business purposes via WhatsApp, we use WhatsApp Business provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“WhatsApp”). If you are located outside the European Economic Area, the service is provided by WhatsApp Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

The purpose of processing is to handle and respond to your enquiry. For this purpose, we collect and process the mobile telephone number stored in your WhatsApp account, your name if provided, and any other data supplied by you. We use a mobile device for this service whose address book contains only data relating to users who have contacted us via WhatsApp. We therefore do not disclose personal data to WhatsApp unless you have already consented to such disclosure in relation to WhatsApp.

WhatsApp transfers your data to servers operated by Meta Platforms Inc. in the USA. The European Commission has adopted an adequacy decision for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. is certified under the TADPF and has therefore undertaken to comply with European data-protection principles.

If contact is made in connection with pre-contractual measures, such as purchase advice or preparation of a quotation, or concerns an agreement already concluded between you and us, processing is based on Art. 6(1)(b) GDPR.

If contact is made for other reasons, processing is based on Art. 6(1)(f) GDPR, based on our overriding legitimate interest in providing a quick and convenient means of contact and responding to your enquiry.

In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR.

We use your personal data solely to process your enquiry. Your data will subsequently be deleted in accordance with statutory retention periods unless you have consented to further processing and use.

Further information about WhatsApp’s terms of use and privacy policy is available at WhatsApp Terms of Service and WhatsApp Privacy Policy.

Customer Account and Orders

Customer Account

When you open a customer account, we collect your personal data to the extent specified during registration. The purpose of data processing is to improve your shopping experience and simplify order processing.

Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of your consent prior to its withdrawal. Your customer account will subsequently be deleted.

Collection, Processing and Disclosure of Personal Data When Placing Orders

When you place an order, we collect and process your personal data only insofar as this is necessary to fulfil and process your order and respond to your enquiries. Providing the data is necessary to conclude the agreement. Failure to provide it means that no agreement can be concluded.

Processing is based on Art. 6(1)(b) GDPR and is necessary for the performance of an agreement with you.

Your data may be disclosed, for example, to the shipping companies and dropshipping providers selected by you, payment service providers, order-processing service providers and IT service providers. We strictly comply with all statutory requirements. Data transmission is limited to the minimum necessary.

Reviews

Shipping Providers and Inventory Management

Disclosure of Your E-mail Address to Shipping Companies for Delivery-Status Notifications

As part of the performance of the agreement, we disclose your e-mail address to the shipping company if you have expressly consented to this during the ordering process. The purpose of this disclosure is to inform you by e-mail about the status of your shipment.

Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time by notifying us or the shipping company, without affecting the lawfulness of processing carried out prior to withdrawal.

Use of an External Inventory-Management System

We use an inventory-management system as part of commissioned data processing to perform the agreement. The personal data collected during the ordering process is transmitted to:

plentysystems AG
Bürgermeister-Brunner-Straße 15
34117 Kassel
Germany

Payment Service Providers

Use of PayPal Checkout

We use PayPal Checkout, provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (“PayPal”), on our website.

Data processing enables us to offer payment through this service. If you select and use PayPal, a credit card via PayPal, direct debit via PayPal or “Pay Later” via PayPal, the data required to process the payment is transmitted to PayPal so that the agreement can be performed using your chosen payment method.

Processing is based on Art. 6(1)(b) GDPR.

Credit Card via PayPal, Direct Debit via PayPal and “Pay Later” via PayPal

For certain payment methods, PayPal reserves the right to obtain a credit report using credit agencies and mathematical-statistical procedures.

For this purpose, PayPal transmits the personal data required for the credit check to a credit agency. It uses the information received regarding the statistical probability of payment default to make a balanced decision concerning the establishment, performance or termination of the contractual relationship.

The credit report may contain probability values, known as score values, which are calculated using scientifically recognised mathematical-statistical procedures. Address data may also be included in the calculation. Your legitimate interests will be considered in accordance with statutory provisions.

The purpose of processing is to conduct a credit check before entering into an agreement. Processing is based on Art. 6(1)(f) GDPR, based on our overriding legitimate interest in protection against payment default where PayPal makes an advance payment.

You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data based on Art. 6(1)(f) GDPR by notifying PayPal.

Providing the data is necessary to conclude the agreement using your chosen payment method. If you do not provide the data, the agreement cannot be concluded using that payment method.

Third-Party Providers

When you pay using a third-party provider’s payment method, the data required to process the payment is transmitted to PayPal. Processing is based on Art. 6(1)(b) GDPR.

To process the selected payment method, PayPal may subsequently transmit the data to the relevant provider. This processing is also based on Art. 6(1)(b) GDPR.

Local third-party providers may include:

Purchase on Account via PayPal

When payment by invoice is selected, the data required to process the payment is initially transmitted to PayPal. PayPal then transmits the data to Ratepay GmbH, Franklinstraße 28–29, 10587 Berlin (“Ratepay”), so that the agreement can be performed using the selected payment method.

Processing is based on Art. 6(1)(b) GDPR.

Ratepay may conduct a credit check using credit agencies and mathematical-statistical procedures, including probability or score values, as described above.

Processing is intended to assess creditworthiness before entering into an agreement. It is based on Art. 6(1)(f) GDPR, based on our overriding legitimate interest in protection against payment default where Ratepay makes an advance payment.

Further information about data protection and the credit agencies used by Ratepay is available at:

Further information about data processing by PayPal is available in the PayPal Privacy Policy.

Use of the Mollie Payment Service Provider

We use Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands (“Mollie”), to process payments on our website.

The purpose of processing is to offer you various payment methods through Mollie. If you select one of Mollie’s payment options, the data required to process the payment is transmitted to Mollie.

This may include your payment details, such as your bank account or credit card number, your IP address, internet browser and device type and, in some cases, your first and last name, address details and information about the product or service purchased from us.

Processing is based on Art. 6(1)(b) GDPR. Further information is available in the Mollie Privacy Policy.

Cookies

Our website uses cookies. Cookies are small text files stored in or by the internet browser on a user’s computer system.

When a user visits a website, a cookie may be stored on the user’s operating system. It contains a distinctive string that enables the browser to be uniquely identified when the website is visited again.

Cookies are stored on your computer, so you retain full control over their use. By selecting the appropriate browser settings, you can be notified before cookies are placed, decide individually whether to accept them and prevent cookies and the data they contain from being stored or transmitted.

Cookies already stored may be deleted at any time. Please note, however, that you may then be unable to use all functions of this website in full.

Information on managing or disabling cookies in the most commonly used browsers is available here:

Technically Necessary Cookies

Unless otherwise stated in this Privacy Policy, we use only technically necessary cookies to make our services more user-friendly, effective and secure.

Cookies also enable our systems to recognise your browser after you change pages and provide services to you. Certain functions of our website cannot be provided without cookies because they require the browser to be recognised after a page change.

Cookies or comparable technologies are used on the basis of Section 25(2) TTDSG. Your personal data is processed on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in ensuring optimum website functionality and providing a user-friendly and effective service.

You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.

Plug-ins and Other Services

Use of YouTube

We use a function provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“YouTube”), to embed YouTube videos on our website. YouTube is affiliated with Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

This function displays videos hosted on YouTube in an iFrame on our website. “Privacy-enhanced mode” is enabled. As a result, YouTube does not store information about website visitors until they watch a video. Once a video is played, information is transmitted to and stored by YouTube.

Your data may be transferred to the USA. The European Commission has adopted an adequacy decision for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). YouTube is certified under the TADPF and has therefore undertaken to comply with European data-protection principles.

Processing is based on Art. 6(1)(f) GDPR, based on our overriding legitimate interest in designing the website according to users’ needs and in a targeted manner.

You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.

Further information about data collection and use by YouTube and Google, your associated rights and options for protecting your privacy is available in the YouTube Privacy Policy.

Data-Subject Rights and Storage Period

Storage Period

After the agreement has been fully performed, the data is initially stored for the duration of the statutory warranty period. It is subsequently stored in accordance with statutory retention periods, particularly those under tax and commercial law.

The data is deleted after these periods expire unless you have consented to further processing and use.

Rights of the Data Subject

Where the statutory requirements are met, you have the following rights under Arts. 15–20 GDPR:

Under Art. 21(1) GDPR, you also have the right to object to processing based on Art. 6(1)(f) GDPR and to processing for direct-marketing purposes.

Right to Lodge a Complaint with the Supervisory Authority

Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that your personal data is being processed unlawfully.

You may, among others, lodge a complaint with the supervisory authority responsible for us:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Postfach 20 04 44
40102 Düsseldorf
Germany
Telephone: +49 211 384240
Fax: +49 211 38424999
E-mail: poststelle@ldi.nrw.de

Right to Object

Where the processing described here is based on our legitimate interests under Art. 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object to such processing at any time with effect for the future.

Following an objection, processing of the data concerned will cease unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or unless processing is necessary to establish, exercise or defend legal claims.

Last updated: 13 July 2023