Privacy policy
1) Introduction and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data is any data by which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is LPS Goods GmbH, Wilhelm-Busch-Str. 22a, 32758 Detmold, Germany, Tel.: 01714758105, Email: info@lps-goods.de. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
2) Data collection when visiting our website
2.1 When you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the page server (so-called “server log files”). When you access our website, we collect the following data that is technically necessary for us to display the website to you:
- The website visited
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (where applicable: in anonymised form)
Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or otherwise used. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the lock symbol in your browser bar.
3) Hosting & content delivery network
Shopify
For hosting our website and displaying page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)
Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
All data collected on our website is processed on the provider’s servers. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when the browser is closed (so-called “session cookies”), while some remain on your device for longer and enable page settings to be stored (so-called “persistent cookies”). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser.
Where personal data is also processed by individual cookies used by us, processing is carried out in accordance with Art. 6(1)(b) GDPR either for the performance of the contract, in accordance with Art. 6(1)(a) GDPR where consent has been given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the website visit.
You can configure your browser so that you are informed about the setting of cookies and decide individually whether to accept them, or exclude the acceptance of cookies in certain cases or generally.
Please note that if cookies are not accepted, the functionality of our website may be limited.
5) Contacting us
5.1 Loox
For review reminders, we use the services of the following provider: Loox Online Ltd., Rehov Har Sinai 2, 6581602 Tel Aviv-Yafo, Israel
Exclusively on the basis of your express consent pursuant to Art. 6(1)(a) GDPR, we transmit your email address and, where applicable, further customer data to the provider so that it can contact you by email with a review reminder.
You may withdraw your consent at any time with effect for the future, either towards us or the provider.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
For data transfers to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
5.2 When contacting us (e.g. via contact form or email), personal data is processed exclusively for the purpose of handling and responding to your request and only to the extent necessary for this purpose.
The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted when the circumstances indicate that the matter concerned has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
6) Data processing when opening a customer account
In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. The data required to open an account can be found in the input form of the corresponding form on our website.
Your customer account may be deleted at any time by sending a message to the controller at the above-mentioned address. After deletion of your customer account, your data will be deleted provided that all contracts concluded via it have been fully processed, there are no statutory retention periods to the contrary and we have no legitimate interest in continued storage.
7) Use of customer data for direct advertising
7.1 Registration for our email newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing further data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for newsletter distribution, which ensures that you only receive newsletters once you have expressly confirmed your consent to receive the newsletter by clicking a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. We store the IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your email address at a later date. The data collected by us when you register for the newsletter is used strictly for the intended purpose.
You can unsubscribe from the newsletter at any time using the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be deleted immediately from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use data beyond this where permitted by law and about which we inform you in this statement.
7.2 Shopping cart reminders by email
If you abandon your purchase with us before completing the order, you have the option of receiving a one-time email reminder of the contents of your virtual shopping cart.
The only mandatory information for sending this reminder is your email address. Providing further data is voluntary and may be used to address you personally. For sending the email, we use the so-called double opt-in procedure, which ensures that you only receive a notification once you have expressly confirmed your consent in this regard by clicking a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR for sending a shopping cart reminder. We store the IP address entered by your Internet service provider (ISP), as well as the date and time of registration, in order to be able to trace possible misuse of your email address at a later date. The data collected by us when you register for our email notification service is used strictly for the intended purpose.
You can unsubscribe from shopping cart reminders at any time by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be deleted immediately from our distribution list set up for this purpose unless you have expressly consented to further use of your data or we reserve the right to use data beyond this where permitted by law and about which we inform you in this statement.
8) Data processing for order handling
8.1 To the extent necessary for contract processing for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned financial institution in accordance with Art. 6(1)(b) GDPR.
If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided when ordering in order to inform you personally as part of our statutory information obligations pursuant to Art. 6(1)(c) GDPR. Your contact details are used strictly for the purpose of notifications about updates owed by us and are processed by us only to the extent necessary for the respective information.
8.2 Amazon Fulfillment (FBA)
For order processing, we use the following provider: Amazon EU S.a. r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg
Name, address and, where applicable, further personal data are transmitted to the provider exclusively for the purpose of processing the online order pursuant to Art. 6(1)(b) GDPR. Your data is only transferred to the extent actually necessary for processing the order.
8.3 Use of payment service providers (payment services)
- PayPal
One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you select a payment method of the provider for which you make payment in advance, the payment data you provide during the ordering process (including name, address, bank and payment card information, currency and transaction number), as well as information about the contents of your order, will be transmitted to the provider pursuant to Art. 6(1)(b) GDPR. In this case, your data is transferred exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
If you select a payment method for which we make an advance performance, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postcode, town/city, date of birth, email address, telephone number and, where applicable, details of an alternative means of payment).
In order to safeguard our legitimate interest in determining your ability to pay in such cases, we forward this data to the provider for the purpose of a credit check pursuant to Art. 6(1)(f) GDPR. Based on the personal data you provide and other data (such as shopping cart, invoice amount, order history and payment experience), the provider checks whether the payment option you selected can be granted with regard to payment and/or default risks.
The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, among other things but not exclusively, address data.
You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain entitled to process your personal data insofar as this is necessary for contractual payment processing.
- Shopify Payments
One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
If you select a payment method of the provider for which you make payment in advance (e.g. credit card payment), the payment data you provide during the ordering process (including name, address, bank and payment card information, currency and transaction number), as well as information about the contents of your order, will be transmitted to the provider pursuant to Art. 6(1)(b) GDPR. In this case, your data is transferred exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
8.4 Electronic cancellation option for continuing obligations with consumers
Consumers who have entered into contracts on this website for paid continuing obligations (such as subscription contracts) have the option of terminating these via an electronic button in accordance with the applicable notice periods.
Activating the button leads to a confirmation page on which the consumer can provide further details regarding the termination, clearly identify themselves and then electronically submit the termination.
The collection of personal data and its transmission to us is carried out pursuant to Art. 6(1)(b) GDPR and only to the extent necessary for the proper processing of the termination. Also on the basis of Art. 6(1)(b) GDPR, the personal data provided is used to confirm receipt of the termination declaration and the time of termination electronically in text form. A further legal basis for processing is Art. 6(1)(c) GDPR. We are legally obliged to provide an electronic cancellation option for consumer contracts for paid continuing obligations concluded by means of electronic commerce.
8.5 Electronic withdrawal function for distance contracts
Consumers who conclude contracts on this website for which a statutory right of withdrawal exists have the option of declaring withdrawal via an electronic withdrawal function in accordance with the applicable withdrawal provisions.
When using the withdrawal function, in addition to information identifying the contract to be withdrawn, further personal information such as the consumer’s first and last name and email address must also be provided or confirmed.
The collection of this information and its transmission to us is carried out pursuant to Art. 6(1)(b) GDPR and only to the extent necessary for the proper processing of the withdrawal. Also on the basis of Art. 6(1)(b) GDPR, the personal data provided is used to confirm receipt of the withdrawal declaration by email. A further legal basis for processing is Art. 6(1)(c) GDPR. We are legally obliged to provide an electronic withdrawal function for paid consumer distance contracts.
9) Online marketing
Google AdSense
This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses so-called cookies, i.e. text files stored on your computer that enable an analysis of your use of the website. In addition, Google AdSense also uses so-called “web beacons” (small invisible graphics) to collect information, through which simple actions such as visitor traffic on the website can be recorded, collected and evaluated. The information generated by the cookie and/or web beacon about your use of this website (including your IP address) is generally transmitted to a Google server and stored there. This may also involve transmission to servers of Google LLC in the USA.
Google uses the information obtained in this way to evaluate your usage behaviour with regard to AdSense advertisements. The IP address transmitted by your browser as part of Google AdSense is not merged with other Google data. The information collected by Google may be transmitted to third parties where required by law and/or where third parties process this data on behalf of Google.
All processing described above, in particular reading information on the device used via cookies and/or web beacons, is carried out only if you have given us your express consent to do so in accordance with Art. 6(1)(a) GDPR. Without such consent, Google AdSense will not be used during your visit to the website.
You can withdraw consent you have given at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further information on Google’s privacy provisions can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/
10) Web analytics services
10.1 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your use of our website.
By default, when you visit the website Google Analytics 4 sets cookies, which are small text components stored on your device and collect certain information. This information also includes your IP address, which, however, is shortened by Google by the final digits in order to rule out direct personal identification.
The information is transmitted to Google servers and further processed there. Transfers to Google LLC, based in the USA, are also possible.
Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activities for us and provide other services related to website and internet usage. The shortened IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. Data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.
All processing described above, in particular the setting of cookies on the device used, is carried out only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the website. You can withdraw consent you have given at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with Google that ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites
Demographic characteristics
Google Analytics 4 uses the special “demographic characteristics” function and can use it to generate statistics that make statements about the age, gender and interests of website visitors. This is done by analysing advertising and information from third-party providers. This enables target groups for marketing activities to be identified. However, the collected data cannot be attributed to a specific person and is deleted after being stored for a period of two months.
Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to enable cross-device reporting. If you have activated personalised ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR, analyse your usage behaviour across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the “Personalised advertising” function in your Google account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de
User IDs
As an extension to Google Analytics 4, the “User IDs” function may be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6(1)(a) GDPR, created an account on this website and log in to this account on different devices, your activities, including conversions, can be analysed across devices.
Collection of user-provided data
To improve analysis results for users whose contact details we have received in the context of business or business-like relationships, we use the “collection of user-provided data” function.
Subject to your express consent pursuant to Art. 6(1)(a) GDPR, as part of this function we electronically transmit one or more files containing customer data aggregated about you (primarily email address and telephone number) to Google. Google does not gain access to plain-text data, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to assign it to existing Google accounts set up by the data subjects.
The processing serves to increase the precision of measurement data, improve cross-device user traceability and enable the integration of analysis results into advertising personalisation and conversion tracking functions of Google Ads.
You can withdraw your consent at any time with effect for the future. Further information on Google’s data protection measures with regard to the transmission of customer data can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
10.2 Google Optimize
This website uses “Google Optimize”, a service provided by: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Based on “Google Analytics”, the service enables a statistical evaluation of the use of new functions and content on the website by displaying test variants to specific user groups. This makes it possible, in the interest of improving the attractiveness of our website, to determine which variants are preferred by users.
Google Optimize uses cookies, i.e. small text files stored on your device, which enable an analysis of your use of a website. The information collected by cookies about your use of the website is generally transmitted to a Google server and stored and processed there. This may also involve the transmission of information to servers of Google LLC based in the USA and further processing of the information there.
All processing described above, in particular the setting of cookies for storing and reading information on the device you use to access the website, is carried out only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without your consent, Google Optimize will not be used while you use the website. You can withdraw consent you have given at any time with effect for the future. To exercise your withdrawal, please deactivate this service via the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further information on Google’s privacy provisions can be found here: https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de
10.3 Google Tag Manager
This website uses “Google Tag Manager”, a service provided by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analytics services, and calibrating, controlling and making them conditional via a uniform user interface. Google Tag Manager itself does not store information on user devices or read it. Nor does the service perform any independent data analysis. However, when a page is accessed, Google Tag Manager transmits your IP address to Google, where it may be stored. Transmission to servers of Google LLC in the USA is also possible.
This processing is carried out only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without such consent, Google Tag Manager will not be used during your visit to the website. You can withdraw consent you have given at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further legal information on Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de
11) Retargeting/remarketing and conversion tracking
11.1 Google Ads conversion tracking
This website uses the online advertising programme “Google Ads” and, as part of Google Ads, conversion tracking by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
We use Google Ads to draw attention to our offers on external websites with the help of advertising material (so-called Google AdWords). We can use the advertising campaign data to determine how successful the individual advertising measures are. In doing so, we pursue the aim of showing you advertising that is of interest to you, making our website more interesting for you and achieving fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an Ads advertisement placed by Google. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the advertisement and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie, which also includes your IP address, is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their advertisement and were redirected to a page containing a conversion tracking tag. However, they do not receive information that can be used to personally identify users.
When Google Ads is used, personal data may also be transmitted to the servers of Google LLC in the USA.
Details of the processing initiated by Google Ads conversion tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of cookies for reading information on the device used, is carried out only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You can withdraw consent you have given at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.
You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de
In order to address users whose data we have received in the course of business or business-like relationships with advertising that is even more tailored to their interests, we use a customer matching function as part of Google Ads. For this purpose, we electronically transmit one or more files containing aggregated customer data (primarily email addresses and telephone numbers) to Google. Google does not gain access to plain-text data, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to assign it to existing Google accounts set up by the data subjects. This enables personalised advertising to be displayed across all Google services linked to the respective Google account.
Customer data is transmitted to Google exclusively if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You can withdraw this consent at any time with effect for the future. Further information on Google’s data protection measures in relation to the customer matching function can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Google’s privacy provisions can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
11.2 Google Ads conversion tracking
This website uses the online advertising programme “Google Ads” and, as part of Google Ads, conversion tracking by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising material (so-called Google AdWords). We can use the advertising campaign data to determine how successful the individual advertising measures are. In doing so, we pursue the aim of showing you advertising that is of interest to you, making our website more interesting for you and achieving fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an Ads advertisement placed by Google. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the advertisement and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie, which also includes your IP address, is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their advertisement and were redirected to a page containing a conversion tracking tag. However, they do not receive information that can be used to personally identify users. When Google Ads is used, personal data may also be transmitted to the servers of Google LLC in the USA.
Details of the processing initiated by Google Ads conversion tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of cookies for reading information on the device used, is carried out only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You can withdraw consent you have given at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.
You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de
Please note that certain functions of this website may not be available or may be available only to a limited extent if you have disabled the use of cookies.
Google’s privacy provisions can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
11.3 Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“GMP”).
GMP uses cookies to display advertisements relevant to users, improve campaign performance reports or prevent a user from seeing the same advertisements multiple times. Using a cookie ID, Google records which advertisements are displayed in which browser and can thus prevent them from being displayed repeatedly. In addition, GMP can use cookie IDs to record so-called conversions related to advertising requests. This is the case, for example, if a user sees a GMP advertisement and later, using the same browser, visits the advertiser’s website and makes a purchase through that website. According to Google, GMP cookies do not contain personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server.
We have no influence over the scope and further use of the data collected by Google through the use of this tool and therefore inform you as follows according to our level of knowledge: By integrating GMP, Google receives the information that you have accessed the relevant part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or are not logged in, it is possible that the provider will obtain and store your IP address. When GMP is used, personal data may also be transmitted to the servers of Google LLC in the USA.
All processing described above, in particular the setting of cookies for reading information on the device used, is carried out only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You can withdraw consent you have given at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
GMP by Google’s privacy provisions can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/
12) Website functionality
12.1 Loox Widget
Graphic elements from the following provider are integrated into our website to display external customer reviews: Loox Online Ltd., Rehov Har Sinai 2, 6581602 Tel Aviv-Yafo, Israel
When you access a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider’s servers in order to load the elements properly. In this process, certain browser information, including your IP address, is transmitted to the provider.
Where personal data is also processed in this context, processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in optimally marketing our offer and presenting our website attractively.
For data transfers to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
12.2 Google Maps API
To enable real-time checking of certain entries in the address form of the ordering process in our online shop for input errors, we use the services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA
The provider validates the address entered, verifies the spelling and, where applicable, adds missing data. If addresses are ambiguous, correct alternative suggestions are displayed. For this purpose, the address data you enter is transmitted to the provider, stored there and evaluated.
This processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in properly recording correct customer address data for the conscientious fulfilment of our contractual delivery obligations and in preventing problems with contract performance.
The provider processes the data concerned separately and does not merge it with other data sets, and deletes it as soon as its status or correctness has been confirmed, but no later than after 30 days.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further information on Google’s privacy provisions can be found here: https://business.safety.google/intl/de/privacy/
12.3 Google Web Fonts
This site uses so-called web fonts from the following provider for the uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
When a page is accessed, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly and establishes a direct connection to the provider’s servers. In this process, certain browser information, including your IP address, is transmitted to the provider.
Data may also be transmitted to: Google LLC, USA
The processing of personal data in the course of connecting to the font provider is carried out only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You can withdraw consent you have given at any time with effect for the future by deactivating this service via the “cookie consent tool” provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further information on Google’s privacy provisions can be found here: https://business.safety.google/intl/de/privacy/
12.4 Google Translate
This website uses the “Google Translate” translation service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) via an API integration. In order for the translation into a national language of your choice to be displayed automatically, the browser you use connects to Google’s servers. In this process, certain browser information, including your IP address, is transmitted to Google.
Google may use so-called “cookies”, i.e. small text files stored on your device, to save language settings. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transmitted to a Google server and stored there.
The processing described above may also involve transmission to the servers of Google LLC in the USA.
If cookies are also set when Google Translate is used, the processing described above is carried out only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You can withdraw consent you have given at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.
If no cookies are set, processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in optimally marketing our offer and designing our website to achieve a broad reach.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further information on Google’s privacy provisions can be found here: https://business.safety.google/intl/de/privacy/
12.5 Google Customer Reviews (formerly Google Certified Shops programme)
We work with Google as part of the “Google Customer Reviews” programme. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This programme gives us the opportunity to obtain customer reviews from users of our website. After using our services, you will be asked on our website whether you would like to participate in an email survey by Google.
If you give your consent pursuant to Art. 6(1)(a) GDPR, we transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchase experience on our website. The rating you submit is then aggregated with our other ratings and displayed in our Google Customer Reviews badge and in our Merchant Center dashboard. Your rating will also be used for Google Seller Ratings. When Google Customer Reviews is used, personal data may also be transmitted to the servers of Google LLC in the USA.
You can withdraw your consent at any time by sending a message to the controller responsible for data processing or to Google.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further information on Google’s privacy provisions can be found here: https://business.safety.google/intl/de/privacy/
13) Tools and miscellaneous
Billbee
For accounting purposes, we use the cloud-based accounting software service of the following provider: Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany
The provider processes incoming and outgoing invoices and, where applicable, our company’s bank transactions in order to automatically record invoices, match them to transactions and use this to prepare financial accounting in a partially automated process.
Where personal data is also processed in this context, processing is carried out on the basis of our legitimate interest in the efficient organisation and documentation of our business transactions pursuant to Art. 6(1)(f) GDPR.
14) Rights of the data subject
14.1 Applicable data protection law grants you the following rights of data subjects (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis specified for the respective requirements for exercising those rights:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent granted pursuant to Art. 7(3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
14.2 RIGHT TO OBJECT
IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
15) Duration of storage of personal data
The duration of storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and, where relevant, additionally on the basis of the respective statutory retention period (e.g. commercial and tax retention periods).
Where personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.
If statutory retention periods exist for data processed within the framework of legal transaction or similar obligations on the basis of Art. 6(1)(b) GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in continued storage.
Where personal data is processed on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Where personal data is processed for the purpose of direct marketing on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object under Art. 21(2) GDPR.
Unless otherwise stated in the other information contained in this statement concerning specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
