Privacy policy

Privacy Policy

1) Introduction and Contact Details of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data includes all data that can be used to personally identify you.

1.2 The data controller responsible for processing personal data on this website, within the meaning of the General Data Protection Regulation (GDPR), is "Ms. Sandra Straßburger, Industriestraße 6, 91126 Schwabach, Tel: 09122 - 98215 25, datenschutz@schmuckzeiteurope.com". The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 The controller has appointed a data protection officer, who can be reached as follows: "Ms. Sandra Straßburger, Industriestraße 6, 91126 Schwabach, Tel: 09122 - 98215 25, datenschutz@schmuckzeiteurope.com"

2) Data Collection When Visiting Our Website

2.1 When you visit our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to the server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

The website visited by us
Date and time of access
Amount of data transmitted in bytes
Source/referral from which you accessed the site
Browser used
Operating system used
IP address used (if applicable: in anonymised form)

The processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not transferred or used in any other way. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or enquiries to the data controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string "https://" and the lock symbol in your browser's address bar.

3) Hosting & Content Delivery Network

3.1 Shopify
We use the system of the following provider for hosting our website and displaying the page content: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")
Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
For data transfers to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

3.2 Cloudflare
We use a content delivery network provided by the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA
This service enables us to deliver large media files, such as graphics, page content, or scripts, more quickly through a network of regionally distributed servers. The processing is carried out to protect our legitimate interest in improving the stability and functionality of our website, in accordance with Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider, ensuring the protection of our website visitors' data and prohibiting unauthorised disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

4) Cookies
To make your visit to our website more attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for a longer period and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can view the storage duration in your browser's cookie settings.

If personal data is processed by individual cookies used by us, the processing is carried out either in accordance with Art. 6(1)(b) GDPR for the performance of a contract, in accordance with Art. 6(1)(a) GDPR in the case of consent given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website as well as a customer-friendly and efficient website visit.

You can set your browser to inform you about the use of cookies and to decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.

Please note that if cookies are not accepted, the functionality of our website may be limited.

5) Contacting Us

When contacting us (e.g., via a contact form or email), personal data is processed exclusively for the purpose of handling and responding to your request and only to the extent necessary for that purpose.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your contact aims at the conclusion of a contract, an additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted when it can be inferred from the circumstances that the relevant matter has been fully resolved, provided that there are no statutory retention obligations to the contrary.

6) Data Processing When Opening a Customer Account

In accordance with Art. 6(1)(b) GDPR, personal data is collected and processed to the extent necessary when you provide it to us upon opening a customer account. The data required for opening an account can be found in the input form on our website.

You can request the deletion of your customer account at any time by sending a message to the aforementioned contact address of the data controller. Once your customer account is deleted, your data will be erased unless all contracts concluded via the account have been fully executed, there are no statutory retention obligations preventing this, and there is no legitimate interest on our part in retaining the data.

7) Use of Customer Data for Direct Advertising

7.1 Subscription to our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. For newsletter distribution, we use the so-called double opt-in procedure to ensure that you only receive newsletters after you have expressly confirmed your consent to receiving the newsletter by clicking on a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. In this context, we store your IP address as registered by the Internet Service Provider (ISP), as well as the date and time of registration, to trace any potential misuse of your email address at a later date. The data collected during the newsletter registration process will be used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the contact details mentioned above. After you have unsubscribed, your email address will be immediately removed from our newsletter distribution list unless you have expressly consented to further use of your data or if we reserve the right to use the data beyond that, which is legally permitted and about which we inform you in this statement.

7.2 MailChimp

The distribution of our email newsletters is carried out by the following provider: The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

On the basis of our legitimate interest in an effective and user-friendly newsletter marketing strategy, we pass on the data provided during the newsletter registration to this provider in accordance with Art. 6(1)(f) GDPR, so that they can carry out the newsletter distribution on our behalf.

Subject to your express consent in accordance with Art. 6(1)(a) GDPR, the provider also performs statistical evaluations of newsletter campaigns using web beacons or tracking pixels embedded in the emails, which can measure open rates and specific interactions with the content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and analyzed, but not merged with other data.

You can revoke your consent to newsletter tracking at any time with effect for the future.
We have entered into a data processing agreement with the provider, which protects the data of our website visitors and prohibits the transfer of data to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

7.3 Cart Reminder Emails

If you abandon your purchase on our website before completing the order, you have the option of receiving a one-time email reminder about the contents of your virtual shopping cart. The only mandatory information required for sending this reminder is your email address. Providing additional data is optional and can be used to address you personally.

For sending the cart reminder email, we use the double opt-in procedure to ensure that you only receive the notification after explicitly confirming your consent by clicking on a verification link sent to your provided email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR for sending a cart reminder. We store the IP address provided by your Internet Service Provider (ISP) as well as the date and time of registration to trace any potential misuse of your email address at a later date. The data collected during the registration for our email notification service is used strictly for the intended purpose.

You can unsubscribe from cart reminders at any time by sending a message to the contact details mentioned above. After unsubscribing, your email address will be immediately removed from our reminder distribution list unless you have expressly consented to further use of your data or if we reserve the right to use the data beyond that, which is legally permitted and about which we inform you in this statement.

8) Data Processing for Order Fulfillment

8.1 As far as it is necessary for the execution of the contract for delivery and payment purposes, the personal data we collect is passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6(1)(b) GDPR.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact details (name, address, email) provided by you when placing the order in order to inform you personally, within the legally required time frame, about upcoming updates via a suitable communication method (such as postal mail or email), as part of our legal information obligations in accordance with Art. 6(1)(c) GDPR. Your contact details are strictly used for communications regarding updates we owe you and are processed by us solely to the extent necessary for each specific update.

For the fulfillment of your order, we also work with the following service provider(s), who assist us wholly or partially in fulfilling contracts. Certain personal data is transmitted to these service providers as described below.

8.2 SendCloud
We use the following provider for order fulfillment:
SendCloud GmbH, Kanalstr. 10, 80538 Munich, Germany
Name, address, and, if applicable, other personal data are transmitted to the provider solely for the purpose of fulfilling the online order in accordance with Art. 6(1)(b) GDPR. The transfer of your data only occurs if it is necessary for order fulfillment.

8.3 Use of Payment Service Providers (Payment Services)

- Apple Pay

If you select the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is carried out via the "Apple Pay" function on your iOS, watchOS, or macOS device by charging a payment card stored in "Apple Pay." Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. Payment authorization requires the entry of a code you previously set, as well as verification through the "Face ID" or "Touch ID" feature on your device.

To process the payment, the information you provided during the order process, along with details about your order, is transmitted to Apple in encrypted form. Apple further encrypts this data with a developer-specific key before transmitting it to the payment service provider of the payment card stored in Apple Pay. Encryption ensures that only the website where the purchase was made can access the payment data. Once the payment is completed, Apple sends a confirmation of the payment success, including your device account number and a transaction-specific, dynamic security code, to the originating website.

If personal data is processed as part of these transmissions, the processing is carried out solely for the purpose of payment processing in accordance with Art. 6(1)(b) GDPR.

Apple stores anonymized transaction data, including the approximate purchase amount, the approximate date and time, and an indication of whether the transaction was successfully completed. The anonymization excludes any personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.

If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made via Safari on your Mac, your Mac and the authorization device communicate via an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that could identify you. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac."

Further information on Apple Pay's privacy practices can be found at the following internet address: https://support.apple.com/en-us/HT203027

- PayPal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

When selecting a payment method from the provider, the payment data you provide during the order process (including name, address, bank and card details, currency, and transaction number), as well as information about your order, will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR. The data transfer occurs solely for the purpose of payment processing and only to the extent necessary.

If you select a payment method that requires advance payment, you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and possibly alternative payment method data) during the ordering process.

To protect our legitimate interest in assessing your payment ability, this data will be forwarded to the provider for a credit check in accordance with Art. 6(1)(f) GDPR. The provider will assess whether the selected payment option can be granted based on the personal data provided, as well as additional data (such as shopping cart contents, invoice amount, order history, and payment experiences).

The credit check may include probability values (so-called score values). If score values are used in the credit check, they are based on a scientifically recognized mathematical-statistical method. Address data is one factor considered in the calculation of score values.

You can object to this data processing at any time by sending a message to us or the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual payment processing.

- Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

If you select a payment method from the provider that requires advance payment (e.g., credit card payment), the payment data you provide during the order process (including name, address, bank and card details, currency, and transaction number), along with information about your order, will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR. The data transfer occurs solely for the purpose of payment processing and only to the extent necessary.

8.4 Electronic Cancellation Option for Ongoing Contracts with Consumers

Consumers who have entered into fee-based ongoing contracts (e.g., subscription contracts) on this website have the option to cancel them via an electronic button, in accordance with applicable cancellation periods.

Clicking the button leads to a confirmation page, where the consumer can provide further details about the cancellation, clearly identify themselves, and then submit the cancellation electronically.

The collection of personal data and its transmission to us is carried out in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for the proper handling of the cancellation. Based on Art. 6(1)(b) GDPR, the personal data provided is also used to confirm receipt of the cancellation notice and the cancellation date electronically in text form. Another legal basis for processing is Art. 6(1)(c) GDPR. We are legally obligated to provide an electronic cancellation option for consumer contracts entered into via electronic commerce if they are fee-based ongoing contracts.

9) Online Marketing

VCHFY GmbH

For our voucher offers, we use the services of the following provider:
VCHFY GmbH, Tornquiststraße 51, 20259 Hamburg, Germany.

The provider operates a voucher network through which participating partner shops can offer vouchers and distribute them to their customers. For this purpose, the data necessary for issuing your voucher is forwarded to the provider by us in encrypted form. The data is only transmitted to the provider if you have completed your purchase and clicked on the voucher banner. The transfer of this data serves solely to prefill the fields for issuing the voucher.

The described data processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in addressing you with advertising from third-party advertisers, from whose discounts you can benefit by redeeming the vouchers.

10) Web Analytics Services

10.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows for the analysis of your use of our website.

Google (Universal) Analytics is used on this website exclusively without the use of cookies, which means that the service does not set cookies on your device at any time.

Instead, the local storage of your browser is utilized to store a unique ID assigned by Google (Universal) Analytics, which enables the analysis of your usage of the website. This ID processes certain user information, including your IP address, which Google truncates by removing the last digits to exclude direct personal identification.

The information is transmitted to Google’s servers and further processed there. Transfers to Google LLC based in the USA are also possible.

All the aforementioned processing activities, including storing information on the device used in the form of the ID, are only carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR.

Without your consent, the use of Google (Universal) Analytics will not take place during your visit to the site. You can withdraw your consent at any time with future effect.

To exercise your right of withdrawal, you can download and install the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Alternatively, instead of using the browser plugin or on mobile device browsers, you can withdraw your consent by clicking on the following link to set an opt-out cookie that will prevent future data collection by Google Analytics on this website (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you will need to click this link again):

Disable Google Analytics

We have entered into a data processing agreement with Google, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
Further legal information on Google (Universal) Analytics can be found at https://policies.google.com/privacy?hl=en&gl=en and https://policies.google.com/technologies/partner-sites.

Demographic Features
Google (Universal) Analytics uses the special feature "demographic characteristics" and can generate statistics that provide information about the age, gender, and interests of website visitors. This is achieved by analyzing advertising and information from third parties. This allows target groups for marketing activities to be identified. However, the collected data cannot be attributed to a specific person and will be deleted after a storage period of two months.

Google Signals
As an extension of Google (Universal) Analytics, Google Signals may be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices with your Google account, Google may analyze your usage behavior across devices, subject to your consent to use Google Analytics in accordance with Art. 6(1)(a) GDPR, and create database models, including those related to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the "Personalized Advertising" feature in your Google account settings. For instructions, please follow this page: https://support.google.com/ads/answer/2662922?hl=en. More information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=en.

UserIDs
As an extension of Google (Universal) Analytics, the "UserIDs" feature may be used on this website. If you have consented to the use of Google (Universal) Analytics in accordance with Art. 6(1)(a) GDPR, set up an account on this website, and log in with this account on different devices, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European data protection level.

10.2 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows for the analysis of your use of our website.

By default, no cookies are used by Google Analytics 4 when you visit the website unless you explicitly consent to cookies. Instead, information about your usage behavior is collected and processed through so-called pings (small data packets sent to the host of a device). This information includes your IP address, which Google truncates by removing the last digits to exclude direct personal identification.

The information is transmitted to Google’s servers and further processed there. Transfers to Google LLC based in the USA are also possible.

Google uses the collected information on our behalf to evaluate your usage of the website, compile reports on website activities for us, and provide additional services related to website usage and internet usage. The truncated IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.

All the aforementioned processing activities, including data transmission via “pings” and the possible setting of Google Analytics cookies, are only carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR.

Without your consent, the use of Google Analytics 4 will not take place during your visit to the site. You can withdraw your consent at any time with future effect. To exercise your right of withdrawal, please disable this service via the "cookie consent tool" provided on the website.

We have entered into a data processing agreement with Google, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://policies.google.com/privacy?hl=en&gl=en and https://policies.google.com/technologies/partner-sites.

Demographic Features
Google Analytics 4 uses the special feature "demographic characteristics" and can generate statistics that provide information about the age, gender, and interests of website visitors. This is achieved by analyzing advertising and information from third parties. This allows target groups for marketing activities to be identified. However, the collected data cannot be attributed to a specific person and will be deleted after a storage period of two months.

Google Signals
As an extension of Google Analytics 4, Google Signals may be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices with your Google account, Google may analyze your usage behavior across devices, subject to your consent to use Google Analytics in accordance with Art. 6(1)(a) GDPR, and create database models, including those related to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the "Personalized Advertising" feature in your Google account settings. For instructions, please follow this page: https://support.google.com/ads/answer/2662922?hl=en. More information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=en.

UserIDs
As an extension of Google Analytics 4, the "UserIDs" feature may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6(1)(a) GDPR, set up an account on this website, and log in with this account on different devices, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European data protection level.

10.3 Google Tag Manager

This website uses the "Google Tag Manager," a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google").

The Google Tag Manager provides a technical basis for consolidating various web applications, including tracking and analytics services, and for calibrating, controlling, and conditionalizing them through a unified user interface. The Google Tag Manager itself does not store any information on user devices or read from them. Additionally, the service does not perform any independent data analyses. However, the Google Tag Manager transmits your IP address to Google upon page views, and it may be stored there. Transfers to Google LLC servers in the USA are also possible.

This processing only occurs if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. Without this consent, the use of Google Tag Manager will not take place during your visit to the site. You can withdraw your consent at any time with future effect. To exercise your right of withdrawal, please disable this service using the "cookie consent tool" provided on the website.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European data protection level.

Further legal information on Google Tag Manager can be found at https://policies.google.com/privacy?hl=en&gl=en.

11) Retargeting/Remarketing and Conversion Tracking

11.1 Meta Pixel with Advanced Data Matching

Within our online offerings, we use the "Meta Pixel" service from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta") in the mode of advanced data matching.

When a user clicks on one of our advertisements on Facebook or Instagram, the URL of our linked page is extended with a parameter using the "Meta Pixel." This URL parameter is then entered into the user's browser after being redirected by a cookie that our linked page itself sets. Additionally, this cookie collects specific customer data, such as the email address we obtain on our linked page associated with the Facebook or Instagram ad during transactions like purchases, account logins, or registrations (advanced data matching). The cookie is then read, allowing the transmission of the data, including the specific customer data, to Meta.

We use "Meta Pixel" with advanced data matching to make our ads on Facebook and/or Instagram more effective and to ensure they align with users' interests or have specific characteristics (e.g., interests in certain topics or products determined by visited web pages), which we transmit to Meta (so-called "Custom Audiences").

Furthermore, we analyze the effectiveness of our ads by tracking whether users were redirected to our website after clicking an advertisement (conversion). Compared to the standard version of "Meta Pixel," the advanced data matching feature helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.

All transmitted data is stored and processed by Meta, allowing for allocation to the respective user profile, and Meta can use the data for its own advertising purposes according to Meta's data usage policies (https://www.facebook.com/about/privacy/). The data may enable Meta and its partners to display ads on and off Facebook.

All the processing described above, particularly the setting of cookies for reading information on the used device, will only take place if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by disabling this service in the "cookie consent tool" provided on the website.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

The information generated by Meta is usually transferred to a server operated by Meta and stored there; in this context, it may also be transferred to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European data protection level.

11.2 Microsoft Advertising Universal Event Tracking

This website uses conversion tracking technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

For the use of Universal Event Tracking, a tag is embedded on each page of our website that interacts with the conversion cookie set by Microsoft. This interaction makes user behavior on our website traceable and sends the information collected to Microsoft. The purpose of this is to statistically capture and evaluate certain predefined goals, such as purchases or leads, to tailor the targeting and content of our offerings to user interests. The tags are never used for the personal identification of users.

All the processing described above, particularly the setting of cookies for reading information on the used device, will only take place if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. Without this consent, the use of retargeting technology will not occur during your visit to the site.

You can revoke your consent at any time with future effect. To exercise your right of revocation, please deactivate this service in the "cookie consent tool" provided on the website.

11.3 Pinterest Tag Conversion Tracking

This website uses conversion tracking technology from the following provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

If you arrived at our website via an advertisement on the provider's domain, the success of the advertisement can be tracked using cookies and/or similar technologies (tracking pixels, web beacons, pings, or HTTP requests).

For this purpose, the tracking technology reads certain device and browser information, which may also include your IP address, in order to capture and evaluate predefined user actions (e.g., completed transactions, leads, searches on the website, views of product pages). This enables the creation of statistics about user behavior on our website after being redirected from an advertisement, which helps us optimize our offerings.

All the processing described above, particularly the setting of cookies for reading information on the used device, will only take place if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

11.4 TikTok Pixel

This website uses conversion tracking technology from the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.

All the processing described above, particularly the setting of cookies for reading information on the used device, will only take place if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

12) Site Functionalities

ShopSync for Shopify

This website uses the Shopify app "ShopSync" from ShopSync LLC, PO Box 252, Jefferson City, TN 37760, USA.

With the help of ShopSync, the newsletter service "Mailchimp" is synchronized with our Shopify account, ensuring that updates in Mailchimp's email lists (such as an opt-out from a newsletter recipient) are automatically reflected in Shopify, and that new contact data generated from contracts on Shopify is automatically transferred to Mailchimp's email lists.

In the first case, data processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in effectively and systematically maintaining the records of marketing recipients and efficiently addressing legally significant status changes.

In the second case, based solely on the explicit consent of the user in accordance with Art. 6(1)(a) GDPR, the first and last name, address, and email address of the user, along with transaction-related information (purchase amount, time, and date of purchase), are transferred from ShopSync to Mailchimp after a contract has been concluded on Shopify to include the user in the Mailchimp list.

Data transferred in this way is not stored or retained by ShopSync after synchronization. All information synchronized between Shopify and Mailchimp is transmitted using SSL technology (Secure Socket Layer), and all transferred information remains encrypted during the synchronization process.

The synchronization process requires the transfer of information over a secure connection to servers hosted by Amazon Web Services in the USA.

Further data protection information regarding ShopSync can be found here: ShopSync Privacy Policy.

13) Rights of the Data Subject

13.1 The applicable data protection law grants you the following rights regarding the processing of your personal data by the controller (information and intervention rights), with reference to the respective conditions for exercising these rights based on the legal basis mentioned:

Right to access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent given pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

13.2 Right to Object
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. FURTHER PROCESSING MAY BE RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE PERSONAL DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) Duration of Storage of Personal Data

The duration of the storage of personal data is determined based on the respective legal basis, the purpose of processing, and, where applicable, the relevant statutory retention periods (e.g., commercial and tax retention periods).

When processing personal data based on explicit consent pursuant to Art. 6(1)(a) GDPR, the affected data will be stored until you revoke your consent.

If there are statutory retention periods for data processed in the context of contractual or contractual-like obligations based on Art. 6(1)(b) GDPR, this data will be routinely deleted after the retention periods have expired, provided it is no longer necessary for the fulfillment of the contract or the initiation of a contract and/or we have no legitimate interest in further storage.

When processing personal data based on Art. 6(1)(f) GDPR, this data will be stored as long as you do not exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

When processing personal data for the purpose of direct marketing based on Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the other information provided in this declaration regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

Your cart is empty

Your cart

Estimated total

Privacy policy

Country/region

Language

Privacy policy