1. General information

1.1 What is personal data?
Personal data is information that discloses or may disclose the identity of the user. We adhere to the principle of data avoidance. As far as possible, we refrain from collecting personal data.

1.2 Handling of personal data
Personal data is used exclusively for the establishment of the contract, content design, execution or processing of the contractual relationship (Art. 6 I p. 1 b GDPR).

In addition, personal data will only be processed if we have received your consent to do so (Art. 6 I p. 1 a GDPR) or if the processing of the data is necessary for our legitimate interests and if the balancing of interests shows that there are no overriding interests, fundamental rights or freedoms on your part to the contrary (Art. 6 I p. 1 f GDPR).

We may use processors to process your personal data, with whom we have concluded a contract for order processing where necessary, but will not pass on the personal data to third parties beyond this.

The data will only be passed on to the shipping company commissioned with the delivery for the fulfillment of the contract, insofar as this is necessary for the delivery of ordered goods. For the processing of payments, the payment data required for this purpose will be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider.

Your personal data will be processed in the EU and in countries classified by the EU as safe or appropriate. If personal data is processed in the USA, care is taken to ensure that the services we use are certified under the “Data Privacy Framework”.

1.3 Usage data
General technical information is collected when you visit the website. This includes the IP address used, time, duration of the visit, browser type and, if applicable, the originating page. For technical reasons, this usage data is registered in a log file and can be used and stored for the purpose of statistical analysis of this website. This usage data is not linked to your other personal data.

1.4 Duration of storage
We only store your personal data after the end of the purpose for which the data was collected for as long as this is required by law (in particular tax law).

2. Your rights

2.1 Information
You can request information from us as to whether we process your personal data and, if this is the case, you have a right to information about this personal data and to the further information specified in Art. 15 GDPR.

2.2 Right to rectification
You have the right to rectification of inaccurate personal data concerning you and may request the completion of incomplete personal data in accordance with Art. 16 GDPR.

2.3 Right to erasure
You have the right to obtain from us the erasure of personal data concerning you without undue delay. We are obliged to delete it immediately, in particular if one of the following reasons applies:

• Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
• You withdraw your consent on which the processing of your data was based and there is no other legal basis for the processing.
• Your data has been processed unlawfully.

The right to erasure does not apply if your personal data is required to assert, exercise or defend our legal claims.

2.4 Right to restriction of processing
You have the right to demand that we restrict the processing of your personal data if

• you contest the accuracy of the data and we therefore verify its accuracy
• the processing is unlawful and you oppose the erasure of the data and request the restriction of its use instead
• we no longer need the data, but you need it for the establishment, exercise or defense of legal claims
• you have objected to the processing of your data and it is not yet certain whether our legitimate reasons outweigh your reasons.

2.5 Right to data portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent or on a contract and the processing is carried out by automated means.

2.6 Right of revocation and objection
If the processing of your personal data is based on consent (Art. 6 I p. 1 a GDPR), you have the right to withdraw this consent at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

Insofar as the processing of your personal data is based on Art. 6 I p. 1 e GDPR or Art. 6 I p. 1 f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation in accordance with Art. 21 GDPR. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Translated with www.DeepL.com/Translator (free version)

2.7 General and right to lodge a complaint
The exercise of your aforementioned rights is generally free of charge for you. In the event of complaints, you have the right to contact the supervisory authority responsible for us, the state data protection officer.

3. Data security

3.1 Data security
All data on our website is protected by technical and organizational measures against loss, destruction, access, modification and dissemination.

3.2 Sessions and cookies
To operate the website, we use cookies or server-side sessions in which data can be stored. We only use cookies or server-side sessions that are technically necessary for the operation of this website (e.g. spam protection for the contact form, shopping cart function) and for which the consideration shows that there are no overriding interests on your part (Art. 6 I p. 1 f GDPR).