Purpose of processing and legal basis for processing your personal data
We collect, process and use your personal data for the following purposes:
to establish and implement contracts
to distribute our newsletter
for marketing measures, e.g. to organise prize games
for customer service and customer support
to provide telemedia, e.g. for the processing of orders for our online range of goods and services
Processing of your personal data may be based on the following legal regulations:
Art. 6 (1) a) GDPR is the legal basis for data processing operations for which we obtain your consent to the processing of your data for a specific purpose.
Art. 6 (1) b) GDPR is the basis where processing is necessary for the performance of a contract, e.g. when you buy a product. This also applies to processing operations in order to take steps prior to entering into a contract, e.g. to answer enquiries about our products and services.
Art. 6 (1) c) GDPR where processing is necessary for compliance with a legal obligation to which we are subject requiring the processing of personal data, such as, for example, to comply with our tax obligations.
Art. 6 (1) d) GDPR where the processing of personal data is necessary in order to protect your vital interests or those of another natural person.
Art. 6 (1) f) GDPR where processing is necessary for the purposes of our legitimate interests, e.g. when we use service providers such as a shipping service to process orders, or in conducting statistical surveys and analyses and in recording registration procedures. Our interest is focused on deploying a user-friendly, attractive and secure presentation and on optimising our web services both to serve our commercial interests and to meet your expectations.
Length of storage and routine erasure of personal data
We process and save your personal data only for the period necessary to fulfil the purpose for which the data are saved or to the extent that this is envisaged by statute or in regulations. After the purpose has been met or no longer applies, your personal data will be erased or blocked. If the information is blocked, it will be erased as soon as there are no retention periods prescribed by law, our articles of association or contract that would oppose this, there is no reason to assume that erasure would impair your legitimate interests and erasure would not entail a disproportionate effort due to the particular type of storage.
Collecting general data and information, log files
Every time our website is visited, it collects a range of general data and information on the basis of Art. 6 (1) b) GDPR that are temporarily stored in a server’s log files. A log file is created in the course of an automatic record of the processing computer system. The following information can be collected:
access to the website (date, time and frequency), how you came onto the website (previous page, hyperlink etc.), amount of data sent, which browser and which browser version you use, the operating system you use, which internet service provider you use, your IP address allocated to your computer by your internet access provider when a connection to the internet is made
The collection and storage of these data is necessary to operate the internet page, to ensure the functionality of the website and to deliver the contents of our website correctly. The data also enable us to optimise our website and to ensure the security of our IT systems.
Cookies and web analysis services
You may withdraw your consent at any time and delete existing cookies by disabling and removing them via your internet browser. You can find more information on how to remove or disable cookies in your browser’s help texts or on the internet by using search terms such as e.g. “disable cookies” or “delete cookies”.
The legal basis for processing usage data for purposes of analysis is Art. 6 (1) a) GDPR.
To this end we use various cookies and services in order to ensure the functionality of our website and to provide you with a website that is as informative and user-friendly as possible. It is important to us that you are able to surf our website with ease and for this reason we place a high value on the optimisation of our website. This includes e.g. pre-completed fields in forms so that you need not re-enter all data every time and so that settings you have made can be saved. It is also important to us that only the contents of our website that are actually of interest to you are displayed to you so as to facilitate your online experience.
However, we never lose sight of the careful handling of your personal data. Therefore, you will find detailed information about the cookies and services we use on this website in the following sections. Naturally, you have the option of disabling all cookies and services by blocking or deleting cookies via your internet browser or by a separate deactivation through setting the cookie opt-out provided or by following the link provided. Please bear in mind that deactivation will be necessary for each browser you use. If you delete all the cookies in your browser, this also affects the corresponding opt-out cookie.
a) Functional cookies
Cookies are small text files that are placed in your browser through which settings and other changes you have previously made can be reconstructed when you next visit the website.
These functional cookies ensure that our website functions properly. These cookies are saved for a maximum of 2 years – thereafter, they are automatically deleted. The following functions, for example, are possible through the use of these cookies:
the storing of products you have placed in your shopping basket or on your wish list, the storing of data entries you made during check out or while placing an order, so that you do not need to enter these data again, the storing of pre-settings such as language, place, number of search results etc., the storing of settings for the optimal display of videos, e.g. desired buffer size and the resolution data for your screen, the registering of your browser settings so as to optimise the presentation of our website on your screen, the recognition of misuse of our websites and services, e.g. through registering a number of consecutive and failed registration attempts, the even loading of the website so that the website remains accessible and the saving of your log-in data so that you do not need to enter them again every time you visit.
You have the option of blocking these cookies and deleting cookies that have already been placed. Further information on this is available from the manufacturer or in the help function of your internet browser. However, we must point out that certain functions on our website will no longer be available, or will only be available to a limited extent, if you do not permit these functional cookies.
b) Analysis services for statistical purposes
In order to find out which contents of our website interest you the most, we continually measure the number of visitors and the contents that are most frequently viewed. We use these data for statistical purposes, for example
to record the number of visitors to our websites, to record the time at which our website visitors visit the site, to record the order in which various websites are visited, to assess which parts of our website need to be adapted and to optimise the websites.
We use the following services for statistical purposes. You can deactivate them by setting an opt-out cookie or by following a link:
– Use of Google (Universal) Analytics for web analysis
On our website we use Google (Universal) Analytics, a web analysis service of Google Inc. (www.google.de), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google (Universal) Analytics employs methods that make it possible to analyse your use of the website, such as so-called “cookies”, text files that are stored on your computer. The information that is created regarding your use of this website is generally transmitted to a Google server in the USA and stored there. By activating the IP anonymisation on this website, the IP address is abbreviated before the data are transmitted within the member states of the European Union or to other states which are party to the Agreement on the European Economic Area. The complete IP address is only transmitted to a Google server in the USA and abbreviated there in exceptional cases. The anonymised IP address transmitted by your browser in the frame of Google Analytics is not merged with other data held by Google.
You can prevent the data created by the cookie that relates to your use of the website (including your IP address) from being collected by and processed by Google, by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plug-in, you can click on this link to prevent Google Analytics from recording activity on this website in future. If you do so, an opt-out cookie will be placed on your end device. If you delete your cookies, you will have to click on the link again.
The conditions of use and the privacy statements of Google and Google Analytics can be found under http://www.google.com/analytics/terms/de.html or under https://www.google.de/intl/de/policies/ or https://support.google.com/analytics/answer/6004245?hl=de
This website uses the Google Analytics function “demographic characteristics”. Through this, reports can be created containing information on the age, gender and interests of the visitors to the website. These data are drawn from Google’s interest-based advertising and from the visitor data of third party providers. These data cannot be assigned to a specific person. You can disable this function at any time via the ad settings in your Google account, or you can generally prohibit your data from being recorded by Google Analytics, as described above with regard to the topic of “objecting to the collection of data”.
– Google Analytics Remarketing
Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords und Google DoubleClick. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
This function makes it possible to link the advertising target groups developed by Google Analytics Remarketing with the cross-device functions of Google AdWords and Google-DoubleClick. In this way, personalised advertising messages relating to your interests that have been tailored to your previous use and surfing behaviour on one end device (e.g. smartphone) can also be shown on another of your end devices (e.g. tablet or PC).
For this purpose, Google therefore links your web and app browser history to your Google account provided that you have given the corresponding consent. In this way, the same personalised advertising messages can be displayed on all end devices from which you access your Google account.
To support this function, Google Analytics records Google-authenticated user IDs that are temporarily linked to our Google Analytics data in order to define and develop target groups for cross-device advertising.
You can object permanently to cross-device remarketing/targeting by deactivating personalised advertising in your Google account. To do this, follow this link: https://www.google.com/settings/ads/onweb/
Data processing in the frame of Google Analytics Remarketing is based on the grant of consent as set forth in Art. 6 (1) a) GDPR.
Further information and the data protection provisions can be found in Google’s privacy statement under: https://www.google.com/policies/technologies/ads/
Processing of personal data during contact, registration or LiveChat
When you contact us by telephone, email or via a contact form, the data you provide (family name, first or given name, billing address, delivery address, email address, telephone number, date of birth) will be stored by us pursuant to Art. 6 (1) b) GDPR (processing of the enquiry) in order to answer your queries. A record is kept of the contact in order to be able to prove it in accordance with the legal requirements. The contact form requests your consent to the processing of the data and refers to this privacy statement. Information generated in this context is deleted by us when the specific conversation with you is over and the matter in question has been conclusively settled.
Our website offers you the option of registering which requires you to enter personal data. The data are entered in an input mask, transmitted to us and stored. Registration serves the performance of a contract or the taking of steps prior to entering into a contract and thus it is based on Art. 6 (1) b) GDPR.
In order to conclude and process contracts we require contact details. Depending on the specific case, these include name, delivery address, billing address and email address, and information on the form of payment you have selected. We also use your data to maintain our customer data base so that only accurate data are stored in it. To avoid typographical errors and to ensure that the items you order will be delivered to you, we check the completeness and accuracy of your address when you enter the data.
Based on Art. 6 (1) c) and f) GDPR we use and store your personal data and technical information where this is necessary to prevent or prosecute misuse or other unlawful behaviour on our website, e.g. to maintain data security in the case of attacks against our IT systems. This also occurs where we are legally obliged to do so, e.g. by order of a public authority or court of law, and to exercise our rights and claims and for the defence of our rights.
Disclosure of data to third parties
When disclosing your personal data, we pay special attention to an optimal security level. Hence your data will only be forwarded to service providers and partner companies that have previously been carefully selected and bound by contract. In addition, we will only forward your data to entities that have an obligation to observe a corresponding level of protection.
a) Disclosure to product partners and suppliers under Art. 6 (1) b) GDPR
In the frame of the offer on our website we work together with various partner businesses for certain product groups. If you order products from these partners, we forward to them the personal data that you entered when you registered and when making other purchases, if applicable, or that you added under “My Account” (in particular, email address, delivery address and billing address) so that they can conclude and process the contracts.
b) Disclosure to service providers under Art. 6 (1) b) and f) GDPR
In operating and optimising our website and services and processing contracts, a number of service providers are active on our behalf, e.g. for central IT services or hosting our website, for payment and delivery of products or distribution of the newsletter, to whom we forward the data (e.g. name, address) they require to fulfil these functions.
Some of these companies work for us as contracted data processors and they may use the data made available to them only according to our instructions. In this case, we are responsible by law for appropriate data protection arrangements at the companies contracted to us. For this reason, we agree on specific data security measures with these companies and monitor them on a regular basis.
In contrast to contracted data processors, in the following cases we transmit data to third parties to be used at their own responsibility for the implementation of contracts:
when goods are delivered to logistics providers and the postal service provider indicated in the order, on payment of goods to the payment service provider indicated in the order.
On our website we offer the option of payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).
If you select the option of payment via PayPal, the payment data you have entered will be forwarded to PayPal.
Transfer of the data to PayPal is on the basis of Art. 6 (1) b) GDPR (processing for the performance of a contract). You have the option of withdrawing your consent to the data processing at any time. Withdrawal of consent does not affect the validity of data processing operations that occurred in the past.
c) Disclosure to third parties under Art. 6 (1) c) and f) GDPR
Finally, we shall disclose your data to third parties or government agencies within the framework of the existing data protection legislation if we are legally obliged to do so e.g. on the basis of the order of a public authority or a court of law, or if we are entitled to do so, e.g. because it is necessary for the prosecution of criminal acts or to assert and exercise our rights and claims.
d) Your rights
Naturally you have rights respecting the collection of your data, and we are pleased to inform you of these rights here. If you wish to assert one of the following rights, free of charge, simply send us a message. You can use the following contact information; the only costs that arise are the transmission costs at the basic rate:
For your own protection we reserve the right, when we receive a request, to obtain further information required to confirm your identity, and if identification is not possible we shall refuse to process the request.
I. Right of access
You have the right to request information from us on the personal data we have stored about you.
II. Right to rectification
You have the right to request the rectification and / or completion of the personal data concerning you without undue delay.
III. Right to restriction of processing
You have the right to demand restriction of processing of your personal data if the accuracy of the data is contested by you, if the processing is unlawful but you oppose the erasure of the data, if we no longer need the personal data but you require them for the establishment, exercise or defence of legal claims, or if you have objected to processing.
IV. Right to erasure
You have the right to demand the erasure of personal data we have stored unless processing is necessary for exercising the right of freedom of expression and information, or for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
V. Right to notification
If you assert your right to rectification, erasure or restriction of processing, we shall notify all recipients to whom the corresponding personal data concerning you have been disclosed of this rectification or erasure of the data or the restriction of processing unless this should prove to be impossible or would involve disproportionate expense and effort.
VI. Right to data portability
You have the right to have the personal data you have provided to us issued to you or a third party in a structured, commonly used and machine-readable format. If you request direct transmission of the data to another controller this will only be done if it is technically feasible.
VII. Right to object
If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 (1) f) GDPR, you have the right under Art. 21 GDPR to object to processing at any time.
VIII. Right to withdraw consent
You have the right to withdraw your consent to the collection of data at any time with future effect. Data collected until the withdrawal becomes legally binding will not be affected by this. Please be aware that for technical reasons it may take a short while to implement your withdrawal and that in the meantime you may still continue to receive notifications from us.
IX. Right to complain to a supervisory authority
If the processing of your personal data infringes data protection law or if your data protection rights are otherwise violated, you can make a complaint to the competent supervisory authority.
The quickest, simplest and most convenient way for you to assert your rights to rectification and erasure is by logging in to your customer account and directly processing or erasing your data that are stored there. Please note that once you have erased your data the services of our product partners will also no longer be available via our website. This includes inter alia re-download options. Therefore, you should back up your data before asserting a claim to erasure. Data that we are required to store due to retention obligations under law, our articles of association or contract, will be blocked instead of erased in order to prevent their use for other purposes.
Links to internet pages of other businesses
Our website includes links to the internet pages of other businesses. We are not responsible for the data protection arrangements on external websites you can access via these links. Information on the data protection policy of these external websites can be found at these sites.