With this privacy policy, we inform you about which personal data (hereinafter "data") we process, for what purposes, and to what extent.
This privacy policy applies to all processing of personal data in connection with our online services, especially our website, order processes, contact requests, and newsletters.
Operation, security, and optimization of the website
Direct marketing (e.g., newsletter, only with consent)
4. Applicable Legal Bases
Processing is carried out on the basis of:
Art. 6 para. 1 lit. a GDPR (consent)
Art. 6 para. 1 lit. b GDPR (contract fulfillment)
Art. 6 para. 1 lit. c GDPR (legal obligation)
Art. 6 para. 1 lit. f GDPR (legitimate interests)
5. Security Measures
We take appropriate technical and organizational measures (TOMs) to ensure an adequate level of protection.
SSL/TLS Encryption
Our website uses SSL/TLS encryption (HTTPS).
6. Transfer of Personal Data
Disclosure only occurs if:
it is necessary for contract fulfillment
a legal obligation exists
consent has been given
Recipients include:
Shipping service providers
Payment service providers
Hosting providers
With service providers, data processing agreements are in place, if necessary, in accordance with Art. 28 GDPR.
7. International Data Transfers
Data transfers outside the EU are only carried out in compliance with the GDPR (e.g., standard contractual clauses or the EU-US Data Privacy Framework).
8. Rights of Data Subjects
You have the right to:
Information (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection (Art. 21 GDPR)
Withdrawal of consent (Art. 7 para. 3 GDPR)
There is also a right to lodge a complaint with a data protection supervisory authority.
9. Competent Supervisory Authority
Bavarian State Office for Data Protection Supervision (BayLDA) Promenade 18 91522 Ansbach https://www.lda.bayern.de
10. Hosting and Website Operation (Shopify)
Our website is operated via Shopify:
Shopify International Ltd. Victoria Buildings, 2nd Floor 1-2 Haddington Road Dublin 4, D04 XN32 Ireland
Shopify processes data (e.g., IP address, device information, order information) for providing the website.
11. Orders and E-Commerce
For processing orders, we process:
Name
Address
Payment information
Order data
Legal basis: Art. 6 para. 1 lit. b GDPR
12. Payment Service Providers
To process payments, we offer various payment methods. Personal data is transmitted to the respective providers in this process.
Shopify Payments (Credit Card, Apple Pay, Google Pay)
Shopify International Ltd. Victoria Buildings, 2nd Floor 1-2 Haddington Road Dublin 4, Ireland
PayPal
PayPal (Europe) S.à r.l. et Cie, S.C.A. 22–24 Boulevard Royal L-2449 Luxembourg
